@fedora
Cocoa04.04.2018
15:29:19
15:29:19
because they have not invaild ocsp and crl
i think GPKIRootCA1 is worst Goverment CA except China
Korea already break Symantec, and they breaking own CA now
Why no difference than past..
GoogleFernando04.04.2018
15:33:43
15:33:43
anyone here using KDE with Intel graphic drivers?
Nick04.04.2018
15:35:04
15:35:04
"So, in general, it is impossible to give an accurate estimate of the amount of free space on any btrfs filesystem. Yes, this sucks." (Emphasis as on the wiki)
terrible product, terrible documentation...Cocoa04.04.2018
15:36:34
15:36:34
*.co.kr certificate can MITM google.co.kr(Google Korea)
fucking korea
Allanitomwesh04.04.2018
15:40:08
15:40:08
Lol
Nick04.04.2018
15:40:39
15:40:39
I think microsoft dont even care about CA. If I will send them my own self issued one they will most probably accept it XD
And more problem... miss-issued certificates cannot be revoked
but..
recently some chinese CA lost its trust
and it was revoked..Cocoa04.04.2018
15:45:27
15:45:27
certificates that issued by GPKIRootCA1 or child CA they cannot be revoked by CA
if certificate leaked, CA cannot do anything
Google
Tobias?04.04.2018
15:47:06
15:47:06
certificates that issued by GPKIRootCA1 or child CA they cannot be revoked by CA
The Majority share of browsers doesnt do ocsp checks at all.While ocsp stapling is becoming a thing though, yes.
Nick04.04.2018
15:47:36
15:47:36
Tobias?04.04.2018
15:48:10
15:48:10
Only OCSP Stapling checks are done by everyone and preferred as the real way to move forward.
ocsp clientside checks are already moving to deprecated.
Nick04.04.2018
15:48:57
15:48:57
Such compromise is killing me
Daniel Andrei04.04.2018
15:49:02
15:49:02
hi
Tobias?04.04.2018
15:49:05
15:49:05
You get 100% of the safety, optional self-checking and ontop privacy for visitors.
Daniel Andrei04.04.2018
15:49:27
15:49:27
I'm new here. How do you put the foo in the bar?
Tobias?04.04.2018
15:49:45
15:49:45
Daniel Andrei04.04.2018
15:50:20
15:50:20
Tobias?04.04.2018
15:51:25
15:51:25
even CRL?
They should run OCSP servers, yes. But not for users, only for other providers and services to check.Nick04.04.2018
15:53:14
15:53:14
funny story about that brand new dns addresses
Tobias?04.04.2018
15:53:49
15:53:49
GoogleNick04.04.2018
15:53:50
15:53:50
some developers used to use 1.1.1.1 as mock
Daniel Andrei04.04.2018
15:54:25
15:54:25
Nick04.04.2018
15:54:50
15:54:50
Tobias?04.04.2018
15:55:01
15:55:01
Daniel Andrei04.04.2018
15:55:30
15:55:30
ah ok
Tobias?04.04.2018
15:56:02
15:56:02
some developers used to use 1.1.1.1 as mock
Their own damn fault, example.com is reserved for a reason.
Nick04.04.2018
15:57:01
15:57:01
Whether dnsmasq is needed in cache or I messed all up on my server XD
Tobias?04.04.2018
15:57:12
15:57:12
Daniel Andrei04.04.2018
15:57:22
15:57:22
Tobias?04.04.2018
15:57:26
15:57:26
I run the full unbound that then asks the rootservers to resolve.
Nick04.04.2018
15:58:03
15:58:03
I did my own adv filter with dnsmasq so it's a bit more complicated
Ended up using Pi-Hole
Tobias?04.04.2018
15:59:02
15:59:02
DROP china;
GoogleTobias?04.04.2018
16:00:44
16:00:44
Trough OPNsense because that makes it a shitton easier.
베이직04.04.2018
16:03:25
16:03:25
I think microsoft dont even care about CA. If I will send them my own self issued one they will most probably accept it XD
And this is one of many reasons for moving to GNU/LinuxDaniel Andrei04.04.2018
16:05:19
16:05:19
well I've changed the DNS from router to 1.0.0.1 and dns lookup took me 17ms, compared to the previous one 40ms, works like a charm
AdminERROR: S client not available
Cocoa04.04.2018
16:06:12
16:06:12
Nick04.04.2018
16:06:58
16:06:58
Interesting... Whether number of users impact on name resolution... And what actually has an impact
Daniel Andrei04.04.2018
16:07:22
16:07:22
it has DNSSEC
Nick04.04.2018
16:08:15
16:08:15
All the performance depends on caches on multiple levels of servers if I got it right
Daniel Andrei04.04.2018
16:13:00
16:13:00
베이직04.04.2018
16:13:32
16:13:32
All the performance depends on caches on multiple levels of servers if I got it right
Yep. 1.1.1.1 supports it as I know.Daniel Andrei04.04.2018
16:14:26
16:14:26
I'm not amazed since it's at Layer 4 in the TCP/IP stack
anyway, the DoH standard is still a draft
Nick04.04.2018
16:15:17
16:15:17
But what if
Millions of people will switch to 1.1.1.1 or/and 1.0.0.1... it wouldn't be that fast
perhaps
Daniel Andrei04.04.2018
16:15:40
16:15:40
But what if
Millions of people will switch to 1.1.1.1 or/and 1.0.0.1... it wouldn't be that fast
it's the same manthey're pointing to the same addr
GoogleNick04.04.2018
16:18:39
16:18:39
It would be a shame if one day brand new dns will break down
Daniel Andrei04.04.2018
16:25:04
16:25:04
it's cloudflare man
those are the guys that route DDoS traffic from attacked victims
Uranio-23504.04.2018
16:28:51
16:28:51
hi there, is posible to enable nautilus samba share in fedora?
Armin04.04.2018
16:33:53
16:33:53
hi there, is posible to enable nautilus samba share in fedora?
Ja aber @Wolfshappen has now better option ?Tobias?04.04.2018
16:54:46
16:54:46
Daniel Andrei04.04.2018
16:54:56
16:54:56
my first code contribution to Ansible got merged
https://github.com/ansible/ansible/pull/38268
Tobias?04.04.2018
16:55:04
16:55:04
how is? I just need to share something with a windows network
Oh, nautilus only does the other way, getting files off a wincrap networkTo quickly share files with others simply go into the gnome settings > sharing > File sharing and access it from windows trough davs.
Setting up smb as server will be the most painful thing you'll ever had to configure so far in your life.
Uranio-23504.04.2018
16:56:11
16:56:11
can windows acccess to a dav server??
Uranio-23504.04.2018
16:56:29
16:56:29
Setting up smb as server will be the most painful thing you'll ever had to configure so far in your life.
na.. I consider the easy way, but must be some better wayI guest is dav
Tobias?04.04.2018
16:56:40
16:56:40
na.. I consider the easy way, but must be some better way
https://www2.le.ac.uk/offices/itservices/ithelp/my-computer/files-and-security/work-off-campus/webdav/webdav-on-windows-10(Change the url to the pc you want)
Открыть в Telegram