noride @ noride @lemm.ee

Posts

0

Comments

276

Joined

2 yr. ago

A lot of negativity around Ubiquity in here, which is surprising to me, honestly. I had their USG for years and loved it, recently swapped it out for the Dream Machine and love it. Really don't understand the complaints about linking it to the cloud. I just didn't bother, everything works fine. Additionally, I managed to get a Debian container running on it and installed ntopng, it's been awesome for getting realtime visibility into my network traffic.

E. I should add I have 6 of their switches and 3 access points, one of which is at least 7 years old and still receiving updates.

You have to open with "Chugga Chugga Choo Choo, we're all gonna run a train on you!" Or it's just a plain ole gangbang.

Seems like Twisted Metal meets Mario Kart.

We were very *very *close to replacing our ~700 office Cisco SD-Wan environment with VeloCloud, which is owned by VMware. The Broadcom merger put the brakes on the project completely, they missed out on a few million dollars on that effort alone. The Velo guys were totally in the dark on what was coming down the pipe for them, Broadcom forced them to change hardware vendors on day one, for example.

His mom said he has a prior engagement and can't attend. No, seriously.

Full tunnel would not mitigate this attack because smaller routes are preferred over larger ones. So, sure, 0.0.0.0/0 is routed over the tunnel, but a route for 8.8.8.8/32 pointing to somewhere layer2 adjacent, pushed via DHCP option 121, would supercede that due to being more specific.

The Killswitch only checks that VPN is up, not whether traffic is correctly routed over it.

You aren't wrong, per se, I think you just don't fully grasp the attack vector. This is related to DHCP option 121, which allows routes to be fed to the client when issuing the ip address required for VPN connectivity. Using this option, they can send you a preferred default route as part of the DHCP response that causes the client to route traffic out of the tunnel without them knowing.

E. It would likely only be select traffic routing out of the tunnel. I could, for example, send you routes so that all traffic destined for Chase Bank ip addresses comes back to me instead of traversing the tunnel. Much harder to detect.

Also used to track ransom notes, etc.

When was the last time you heard someone say 'me boys' who wasn't Scottish or a 16th century pirate?

This is going to be a fantastic place to poop

I am excited to see how the Hexbear folks spin this as positive for their movement. Oh shucks, I'll take a shot myself!

"They don't mean gay people! They mean the terrible LGBTQ movement co-opted by the evil imperialist west to repress true freedoms for all peoples!!"

How'd I do? 😁

I don't believe in God, but I hate Jared Kushner enough that I still pray every night that he gets eaten by a bear.

Engineering is engineering. You design it, you build it, you test it. Engineering. We shouldn't gatekeep words.

With that said, I recognize that certain engineering disciplines have overlap with public safety, and should come with some qualifications to back it up.

Riding a duck? Damn autocorrect!

They generally use fiber for cables like this due to the bandwidth requirements.

You're either a really bad troll or a really good moron.

Don't forget about my homie Ryujinx! Better performance in same games, too!

No sign, no jets. simple as. He'll sign.

Is that how you spell their name?? With the weird characters, I honestly thought that particular propagandist was called "Yugioh."