Stack Exchange
log in

Bruno

 Discussion on answer by KMJ: Can I in…

Imported from a comment discussion on diy.stackexchange.com/qu...
Bruno
Nov 22, 2023 15:37
@JackB If I'm not mistaken, fuses in UK plugs have to do with protection related to usage in ring circuits. The same appliance in other European countries with type E/F plugs won't have that fuse, since they're not using ring mains. There might be other considerations in the USA, but I'd assume they're not using ring mains either
 

 Discussion on question by Eldacar Hya…

Imported from a comment discussion on academia.stackexchange.c...
Bruno
Jun 28, 2021 17:47
A character like 十 is likely to cause some confusion in mathematical writing.
 

 Discussion on question by Ulkoma: How…

Imported from a comment discussion on security.stackexchange.c...
Bruno
Jun 17, 2015 09:10
@WoJ Your bank account number might not be strictly confidential because you're in Europe. I'm not sure, but it would seem that in the US, knowledge of the account number is sufficient to make payments out of it. This is generally not sufficient in Europe.
 

 Discussion on answer by Steffen Ullri…

Imported from a comment discussion on security.stackexchange.c...
Bruno
Feb 19, 2015 13:52
@Ajedi32 MITM is a risk indeed, but you'd have to put this into context with how likely such an attack is and the risk incurred. Someone likely to click on malware from freecatpictures.com might also be likely to go and check otherfreecatpictures.com, with a proper cert but with site-endorsed malware. In addition, freecatpictures.com could itself be hacked or serve 3rd-party ads that include malware. (Somehow ad providers don't really seem to check what they server: last time I saw a machine infected, the malware came from an ad served by Skype...)
 

 The Comms Room

ServerFault's lobby
3
Bruno
Oct 1, 2012 17:05
@voretaq7, RFC 2817 could have been used for this in principle, but it never caught on. It also has a number of problems, in particular because it's up to the client to determine whether it should interpret the URI has requiring secure access or not.
Bruno
Oct 1, 2012 17:03
@Zypher, the problem is that there's a complete better answer just underneath already. Changing the entire meaning of an incorrect answer seems a bit odd, especially when it's not done by its author.
Bruno
Oct 1, 2012 16:58
@voretaq7, fixing it only requires deleting everything after the first 3 lines: all the stuff about RFC 2817 and the un-related curl trace. It's just never used (only for IPP). RFC 2817 has absolutely nothing to do with https:// (which the question is about, since it's about SSL on port 443).
Bruno
Oct 1, 2012 16:53
Oops, just realised my previous message came at a bad point in the conversation. Apologies for that. I hope Chopper3 gets better too.
Bruno
Oct 1, 2012 16:52
@voretaq7... Hum... and this 90% incorrect answer has just been upvoted again :-(
Bruno
Oct 1, 2012 16:30
@voretaq7, sorry to insist, I'm not quite sure how to handle this in the context of the meta question. Do you at least realise that everything in that answer was completely wrong (even in 2010) until the last edit (which only adds 3 lines of correct answer)? Your last comment on that answer was still talking about "TLS upgrading".
Bruno
Oct 1, 2012 15:46
@voretaq7, ah OK, I just wasn't sure whether you had realised it was wrong, since in response to some comments I made, you were still talking about "TLS upgrade". I'd suggest deleting that answer is probably the right way to go, just to prevent new-comers from confusing SNI with RFC-2817.
Bruno
Oct 1, 2012 15:43
@voretaq7, the problem is that I think it's a good fit for an answer that's 90% wrong (and was completely wrong) and that's been accepted. There already is a better answer (following ChrisS's bounty if I remember correctly).
Bruno
Oct 1, 2012 15:40
Hi @voretaq7, just wondering what you meant by "It was as right as I could be the day I wrote it" in your comment meta.serverfault.com/a/3659/47187
Bruno
Mar 28, 2012 22:23
I guess so. I guess he was focussed on the part that says LDAPS is deprecated in favour of StartTLS. It's surprising because he seem to want the latter explicitly instead of the former, so he must have understood the difference somehow.
Bruno
Mar 28, 2012 22:16
@MarkHenderson. No worries. To be fair, the OpenLDAP FAQ entry he links to explains the difference too.
Bruno
Mar 28, 2012 22:05
I left a comment for the OP, just in case.
Bruno
Mar 28, 2012 22:02
@pauska Hi, it seems you've rejected my edit on serverfault.com/q/372925/47187 a few minutes ago. Not sure you got what my edit was about.
 

 The DMZ

A serious place where infosec is discussed PS we don't do hard...
3
Bruno
May 7, 2012 13:14
@ScottPack This one is probably closer to a Hallmark Holiday: direct.gov.uk/en/Nl1/Newsroom/Features/DG_WP200687
Bruno
May 7, 2012 10:56
I suppose there's a link indeed...
Bruno
May 7, 2012 10:46
Probably a mix between an ancient pagan tradition and international workers' day...
Bruno
May 7, 2012 10:44
It's May Day, but all of these days are moved to the closest Monday to make a longer week-end.
Bruno
May 7, 2012 10:41
It's the way public holidays are called in the UK.
Bruno
May 7, 2012 10:09
@Avid, you probably meant "Bank holiday" (as it is today in the UK).
Bruno
May 6, 2012 12:38
6
Q: Merging SSL/TLS and related tags

BrunoI would like to suggest merging the ssl and tls tags on StackOverflow. I made that suggestion a while back on the synonyms page, but there are probably there have been no votes on the topic (possibly, because to few users check this). (For those who don't know, TLS is the IETF standard name for w...

discussion support stackoverflow retag-request
Bruno
May 6, 2012 12:38
@Gilles, did you just retag a few x.509 questions yesterday on SO? I hadn't noticed that the tag existed (with a dot, as it should be of course). Any comments on this question on meta?
Bruno
May 4, 2012 14:59
Although you would always take split the power first and reduce the voltage, before re-powering via USB.
Bruno
May 4, 2012 14:58
PoE tends to be 24V or 48V, isn't it? That wouldn't work too well with a USB port, I think.
Bruno
May 4, 2012 14:43
@RoryAlsop something like what flaw in your PRNG dice throws will allow your enemy to predict your moves?
Bruno
May 4, 2012 14:41
Having been on SO for a while, it seems that the "value" of reputation varies.
Bruno
May 4, 2012 14:38
Yes, I agree, I'm not sure this is the case on other SE sites.
Bruno
May 4, 2012 14:36
Ah, this would make sense.
Bruno
May 4, 2012 14:34
I'm not sure I'd see the point of private questions. Who would answer them? If they're only visible to the moderators, I'm not sure they'd also necessarily be the best people to answer or make a judgement as to whether this is about an actual vulnerability.
Bruno
May 2, 2012 01:06
@Avid, I think adding a given cert to the trust store isn't that bad actually, although I prefer to do it to a specific truststore for a given connection, if necessary. The risk is mitigated if you leave host name verification on. It's also quite similar to what a lot of people do when using SSH: remembering the key the first time (assuming it was right) and monitoring for change.
Bruno
May 2, 2012 00:35
26
Q: How to handle invalid SSL certificates with Apache HttpClient?

rauchI know, there are many different questions and so many answers about this problem... But I can't understand... I have: ubuntu-9.10-desktop-amd64 + NetBeans6.7.1 installed "as is" from off. rep. I need connecting to some site over the HTTPS. For this I use Apache's HttpClient. From tutorial I re...

java ssl https httpclient
Bruno
May 2, 2012 00:35
I can't believe how many people just copy and paste code that disables certificate verification in SSL on SO, just to avoid the warnings. These answers get high scores too.
Bruno
May 1, 2012 23:19
There are a number of problems with HTTP Digest: no protection of the request/response entities, hard to distinguish from HTTP Basic from a UI point of view, downgradable to HTTP Basic, and also doesn't really help proving the identity of the site.
Bruno
May 1, 2012 20:41
You can turn off the heating in that room with all those CRT screens (and towers).
Bruno
May 1, 2012 20:21
@AviD, to be honest, I know very little about the .Net platform in general, so I wouldn't be able to comment on Razor. Sounds good, though.
Bruno
May 1, 2012 20:20
I think I prefer Genshi (as a template framework).
Bruno
May 1, 2012 20:04
That's true, but I'd prefer a framework that sanitises the output rather than blocking those inputs.
Bruno
May 1, 2012 20:02
The problem with this sort of systematic approach (like asp.net) is that they can make developers who assume it's there think that it's enough.
Bruno
May 1, 2012 19:59
@Avid, agreed. Here is another example of "validate all input" gone wrong (instead of validate the output): stackoverflow.com/questions/8858733/…
Bruno
May 1, 2012 19:51
Someone's just edited an old answer about iframe security on SO, more or less suggesting to allow mixed content if necessary (although it's about the other way around)... Hum... Not such a good idea. stackoverflow.com/a/2389719/372643
Bruno
May 1, 2012 19:47
@AviD, oh yes, of course, I'm not disputing that at all. Just saying that in a course about suid, that should be an important point, more than input validation.
Bruno
May 1, 2012 19:35
Setuid isn't my domain of expertise either, but a quick Google search for "setuid coding guidelines" points quickly to the notion of acquiring and release privileges as early as possible.
Bruno
May 1, 2012 11:55
Maybe it's because it's a tag (foobar).
Bruno
May 1, 2012 11:54
@Gilles, I'm getting an edit from you although it says "These edits were suggested by users who have not yet earned full edit privileges". This is odd.
 

 Server Fault: Improve or Close

Links to questions that may be improved or closed . Please not...
Bruno
Dec 19, 2011 14:19
I'd suggest re-opening serverfault.com/questions/342246/… It's actually not a duplicate of the question marked as a duplicate. (I would actually add an answer to the original question.)