Aussie living in the San Francisco Bay Area.
Coding since 1998.
.NET Foundation member. C# fan
https://d.sb/
Mastodon: @[email protected]

  • 0 Posts
  • 35 Comments
Joined 3 years ago
cake
Cake day: June 14th, 2023

help-circle
  • If you do buy refurbished drives, ideally get manufacturer refurbished ones that come with a manufacturer warranty. If you’re in the USA, ServerPartDeals is a great store for it.

    Manufacturer refurbished drives tend to be pretty reliable because they’ve been tested to meet the manufacturer’s specs, usually including a deep stress test, and come with a warranty from the manufacturer.

    The thing that sucks at the moment is that refurbished drives cost more than the new ones used to cost.









  • tl;dr it’s a relatively sophisticated approach to make it look real. The fake site reverse proxies the real online ordering site so that it looks and behaves exactly like the real one, blocks some scripts like trackers or anything that’d redirect back to the real site, and swaps out the payment form for a fake one.

    The payment details entered into the fake form go to a live operator that immediately tries to use the credit card elsewhere online. They get through 3-D Secure (where the bank requires verification of suspicious-looking online transactions) by asking the user to confirm the transaction, e.g. by providing an SMS confirmation code or confirming the transaction in their bank app.

    If you didn’t see the incorrect domain name, I think this would be very hard to notice, since the site functions normally. Very different to a regular phishing page where the site looks out of place and is often full of broken links (since they don’t want you navigating away from the fake login page)








  • Wireguard and apps based on it (like Tailscale) don’t respond at all unless the data is signed with the key of a configured peer (or with Tailscale, a system on your tailnet that passes the ACL). It’s literally impossible for an outsider/attacker to detect with a port scan since it just ignores unauthenticated packets.

    The Wireguard codebase is also extremely small. The core Wireguard implementation (the version in the Linux kernel) is around 5,000 lines long, so an experienced developer can read through all the code if they dedicate a day or two to it, and understand how it works.

    For comparison, OpenVPN is around 70,000 lines of code and OpenSSH is around 150,000 lines of code. There’s a huge number of features in SSH!


  • It’s a bigger issue in the US than other countries though. Not all countries value companies based on ridiculous amounts of speculation.

    It’s estimated that Anthropic’s IPO will value them around $1.5 to 2 trillion even though their S-1 has 93 pages of risk factors, including that 20% of their revenue comes from their top 2 customers (and I guarantee that both would be looking into moving AI inference in-house), and they literally say that they may never be profitable:

    We have a history of net losses and may not generate sufficient revenue to achieve or sustain profitability in the future

    They also don’t own any infrastructure like servers or racks - it’s all rented.

    Yet they’re still going to have a large amount of people purchasing stock, based purely on vibes rather than actual data.

    At least the S&P 500 still has some sense. Companies can only be added to the index if they’ve been trading for at least a year, and if they’re profitable. They refused to change the rules for SpaceX, unlike Nasdaq-100 and Russell 1000.

    Don’t even get me started on Nvidia. There’s no reason that a company that makes GPUs should be the most valuable company in the whole world. Actually they don’t even make the GPUs - TSMC does.