Hacker News: BehindTheMath

New comment by BehindTheMath in "The internet is no longer a safe haven"

BehindTheMath — Sun, 16 Nov 2025 20:00:32 +0000

You don't need mTLS for that. Just block all IPs beside for Cloudflare's ranges.

New comment by BehindTheMath in "A story about bypassing air Canada's in-flight network restrictions"

BehindTheMath — Fri, 10 Oct 2025 11:30:36 +0000

I haven't used iodine, but this seems simpler. Iodine wraps requests with actual DNS requests. In this case that wasn't needed, because port 53 wasn't filtered at all. So all they needed was a simple proxy on port 53.

New comment by BehindTheMath in "Scammed out of $130K via fake Google call, spoofed Google email and auth sync"

BehindTheMath — Wed, 17 Sep 2025 00:57:28 +0000

https://xkcd.com/538/

New comment by BehindTheMath in "OpenIPC: Open IP Camera Firmware"

BehindTheMath — Mon, 04 Aug 2025 18:06:50 +0000

What's wrong with Amcrest IP cameras?

New comment by BehindTheMath in "I use zip bombs to protect my server"

BehindTheMath — Wed, 30 Apr 2025 18:04:13 +0000

aria-hidden="true" should take care of that.

New comment by BehindTheMath in "I use zip bombs to protect my server"

BehindTheMath — Wed, 30 Apr 2025 12:54:10 +0000

Check out Modsecurity WAF and CoreRuleSet.

New comment by BehindTheMath in "Show HN: XPipe, a shell connection hub for SSH, Docker, K8s, VMs, and more"

BehindTheMath — Wed, 12 Mar 2025 13:59:31 +0000

Doesn't that mean that you're charging extra from those that don't care about updates to subsidize them for those that do?

New comment by BehindTheMath in "Ask HN: Why buy domains and 301 redirect them to me?"

BehindTheMath — Sun, 26 Jan 2025 22:35:01 +0000

Can't you check the Referer?

New comment by BehindTheMath in "1 bug, $50k in bounties, a Zendesk backdoor"

BehindTheMath — Sun, 13 Oct 2024 01:10:31 +0000

It's linked in the post.

New comment by BehindTheMath in "It is hard to recommend Google Cloud"

BehindTheMath — Sun, 22 Sep 2024 12:03:49 +0000

Why not Cloud Domains?

New comment by BehindTheMath in "The Origins of Yiddish (2014)"

BehindTheMath — Fri, 28 Jun 2024 22:52:23 +0000

Nearly all Israeli Haredi Jews speak Hebrew. For most, it's their primary language. Most do not speak Yiddish.

New comment by BehindTheMath in "British Library has been offline for three weeks"

BehindTheMath — Tue, 21 Nov 2023 02:26:51 +0000

Isn't the point of salting to prevent dictionary attacks? That's still auth 101.

New comment by BehindTheMath in "Ask HN: Looking for an Alternative to Stripe"

BehindTheMath — Wed, 06 Sep 2023 05:16:52 +0000

The BIN is not covered by PCI. There's no reason they can't provide the BIN for every card.

New comment by BehindTheMath in "Alphabet selling Google Domains assets to Squarespace"

BehindTheMath — Fri, 16 Jun 2023 02:01:20 +0000

GCP has Cloud Domains. It's unclear to me what the future of that is.

New comment by BehindTheMath in "I gave commit rights to someone I didn't know (2016)"

BehindTheMath — Tue, 30 May 2023 05:37:24 +0000

I maintained the pjax library at one point. This is what the author posted at the time:

https://twitter.com/MoOx/status/955903710617620482?t=BvPIWQ-...

New comment by BehindTheMath in "Nginx 1.25.0: experimental HTTP/3 support"

BehindTheMath — Wed, 24 May 2023 04:59:44 +0000

https://www.nginx.com/about/the-nginx-name/