Slashdot Mirror


User: Coniptor

Coniptor's activity in the archive.

Stories
0
Comments
176
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 176

  1. Re:archive vs compressor on Zip Slip Vulnerability Affects Thousands of Projects (theregister.co.uk) · · Score: 0

    RPM

  2. Re:Did they wipe the servers? on Facebook Retracted Zuckerberg's Messages From Recipients' Inboxes (techcrunch.com) · · Score: 0

    What are you talking about?
    For which state?

  3. Re:Worst idea ever. on All Major Browsers Now Support WebAssembly (bleepingcomputer.com) · · Score: 0

    Should be modded 5. FULL STOP.

  4. Re: Let's address the elephant in the room on Internet Explorer Bug Leaks Whatever You Type In the Address Bar (arstechnica.com) · · Score: 0

    From what version forward if you know?

  5. Re: Let's address the elephant in the room on Internet Explorer Bug Leaks Whatever You Type In the Address Bar (arstechnica.com) · · Score: 0

    That's what Stylish is for!

  6. Paying for privacy is an oxymoron.

  7. Re:NPAPI has started acting strange under FireFox. on Firefox 49 For Linux Will Ship With Plug-in Free Netflix, Amazon Prime Video Support (mozilla.org) · · Score: 0

    Are you using any kind of HOSTS block?
    If so search on:
    Windows HOSTS "DNS Client"

    All sorts of things start timing out for extended periods when your HOSTS file becomes to large for the "DNS Client" of Win7 forward not sure about Vista.

    Are you running antivirus? Could also be DLL hooks "helpfullY" inspecting your traffic.

  8. You will, of course, lead by example by posting your own, right?

    Thought, so.

  9. Re:Could this be why people seem to be getting dum on At Least 33 US Cities Used Water Testing 'Cheats' Over Lead Concerns (theguardian.com) · · Score: 0

    Could be a combination of things.
    Never seen any discussion here on aspartame.

  10. Re:There is a battery movement that auto sets DST on Ask Slashdot: Alternatives To "Atomic" Clocks? · · Score: 0

    Not sure about the backup battery because my two alarm models don't have one but I can recommend Sangean.
    They work okay with blackouts and brownouts without loosing my programmed alarms so I'm guessing it has backup of some sort but there is no battery compartment.

  11. They are both very important but I don't believe that is true.
    I found an xpi extension on bugzilla before the first leadership change that I can't fucking find anymore.
    It blocks silent cross-site Authentication Header cookies that you CANNOT normally block. They are SuperCookies. The site can silently "authenticate" without your knowledge creating a basic auth authentication "Supercookie" that is remembered and retained until browser exit (Or possibly remembered by your Session saver extension if so configured) and can be used to bypass the normal cookies that Mozilla has been making "easier" to disable, ha, har har, har.
    The extension is called authtest.xpi.
    Another that to my knowledge hasn't been ported to Firefox yet is WindowNameEraser which conditionaly clears window.name between transitioning sites. Please check out ip-check.info to see the authtest/Authentication Header and Window Name in action as a proof of concept. Also if not already known panopticlick.eff.org, and browserspy.dk. There are others but I don't have the exhaustive list handy.
    Then there is geo location/positioning, canvas, webrtc, visited links (Still not fucking fixed and known about since Phoenix/Gecko/Firefox 1 ), cache. Still firefox aside from Torbrowser or Jondo is the most *secureable* browser out there. What ever security "gains" you get with Chrome OR Chromium fly out the window wrt ip-check.info.
    What is a good site to share an extension on and forget about?

  12. Re:Leave then on Gen Con Threatens To Leave Indianapolis Over Religious Freedom Bill · · Score: 0

    One word.
    Amway

  13. Re:Including Slashdot? on Google Proposes To Warn People About Non-SSL Web Sites · · Score: 0

    It isn't documented any where and I can't recall where I first learned of it because it was years ago but you can get TLS on Slashdot.
    Subscribe.
    Once subscribed and logged in it should transition you to TLS, at least it does for me.
    If it does not you can force the matter with Noscript.

    Off hand has anyone noticed Noscript unblocking Google analytics and other domains and certain other analytics domains with each new update?

    I also use the Calomel TLS grading extension for Firefox.
    Slashdot has been graded Red for years. Dice just upgraded the cert a couple of days ago and it is now graded Blue with PFS. Not Green but at least it's not Red anymore.

  14. Re:Telegram on WhatsApp To Offer End-to-End Encryption · · Score: 0

    Please google OSI and look into "Open Source" that's a capital O and a capital S!
    Please also google FSF and look into "Free Software".
    Again a capital F and a capital S.
    The capitals !@#$@!# matter!
    Public Domain does not == Open Source, There is no such thing as open source.
    Or are you just trolling!?

    Public Domain is public domain. Copyright has expired or been forfeit in order to put it, what ever it is, into the public domain.
    With Free Software and Open Source software someone holds the attribution to the rights of the work.

  15. Re:HTTPS Everywhere on Verizon Injects Unique IDs Into HTTP Traffic · · Score: 0

    You are correct that they do not come right out and say that in the faq. I'm not sure if they did in the past.
    However in the FAQ at:
    https://slashdot.org/faq
    At section Subscriptions with question:
    Why subscribe to Slashdot? Can't I read for free?
    You find the link:
    https://slashdot.org/faq#subsc...
    That takes you further down the page with more details where as you said it does not mention this.
    *It is an unmentioned plum.*

    While you are logged into your account observe on the upper right where I expect you have your Slashbox.
    If you don't then go enable it.
    With that enabled you have the default content that goes in your Slashbox and it lists your current Karma.
    Mine has been Bad since I think about 2007. Haven't seen a mod point sense.
    Below Karma you have three links:
    Journal Subscription Account

    Subscription is this link:
    https://slashdot.org/subscribe...

    Where in you read:
    Absolutely nothing about this!?
    Hrm. I could have sworn I read about this and didn't just figure it out on my own.

    Okay they either covered this before and removed it. Not sure and don't know why they would do that.
    Or I read this in a post several years ago and just assumed everyone I've been reading complain about this just didn't want to subscribe.
    I subscribed a few years ago and wanted encryption and also had trouble with this feature due to redirects.
    I resolved this by putting
    *slashdot.org*
    in my forced HTTPS NoScript settings and then added
    slashdot.org/my/login
    into the whitelist for the never force https list.
    Anytime my session/cookie expires I put in slashdot.org/my/login and then get redirected to a https slashdot url.
    Hope that helps you and many others and that they don't degrade this for some reason!?

  16. Re:HTTPS Everywhere on Verizon Injects Unique IDs Into HTTP Traffic · · Score: 0

    They want you to pay to use https.
    If you subscribe and login you can browse with https urls for as long as your session cookie is remembered/hasn't expired.

  17. Re:Server Name Indication on Google Will Give a Search Edge To Websites That Use Encryption · · Score: 0

    Not standardized from what I can see but work has been done to allow this:
    https://encrypted.google.com/#...

  18. Re:Server Name Indication on Google Will Give a Search Edge To Websites That Use Encryption · · Score: 0

    Not positive this would resolve the issue but maybe a iframe with sandbox parameters as applicable. I think I've read you can do this. Not sure though.

  19. Re:EFF's Privacy Badger on 5 Years Later, 'Do Not Track' System Ineffective · · Score: 0

    Bad side effects: Forces DNT:1 header regardless of firefox preferences set.
    Examine ip-check.info to know why this would matter.

  20. Re:True on 5 Years Later, 'Do Not Track' System Ineffective · · Score: 0

    window.name

    Window Name Eraser for chrome.
    Nothing for Firefox as yet.

  21. Re:Mozilla have sold out? on Mozilla Backtracks On Third-Party Cookie Blocking · · Score: 0

    Tracking can be done via more than 3rd party cookies.
    Whether you use TOR or not please check out:
    http://ip-check.info/

  22. Re:John McAfee Media Whoring again on John McAfee's Latest Project: Shielding Against Surveillance · · Score: 0

    Certificate Watch

  23. Re:30 years for a non violent crime. on Reuters' Matthew Keys Accused of Anonymous Conspiracy · · Score: 0

    Two feet tall.

  24. Re:Localization? on Google Offers Encrypted Web Search Option · · Score: 0

    I was using their http://www.google.com/ncr for the I believe national character recognition and just changed it to https://www.google.com/ncr which was leaving the https secure site and going to their regular unencrypted site with the "Go to {_nation} Google".
    I found it only works when I don't use /ncr and use only https://www.google.com/
    Modifying Firefox's search function works as well. Just don't use /ncr and possible the /intl/kbcode/ strings.

  25. Re:Ma Bell (the original) on Google Street View Logs Wi-Fi Networks, MAC Addresses · · Score: 0

    *UNLISTED*
    HEARD OF IT?
    KNOW OF IT?
    YEAH?
    JUST BEING PETULANT!?
    YOU SHOULD HAVE YOUR TEETH KICKED IN

    NOT *everyone* knows how to hide their SSID, configure WPA2 AES, setup RADIUS, with TLS and or *radius* mac filtering, and setup a hotspot to guarantee AAA.
    Configuring even *ONE* of these is a direct indication that those who didn't setup and **OWN** the hardware HAVE NO FUCKING BUSINESS interacting with the device PERIOD!

    An open front door IS NOT INVITATION TO TRESPASS!!!