error404

u/error404



r/Tailscale•

Considering deploying tailscale as replacement for traditional client VPN, and the fact that it seems to burn all of 100.64.0.0/10 is a problem. We are already using large blocks of this space (internally for k8s, for example), and can't afford to burn an entire /10 of precious IPv4 for a max of a few thousand clients anyway. It's less of a 'problem' for IPv6, but it would also be nice to use our own address space for v6 clients, which also doesn't seem possible.

Is it possible to configure the prefix that Tailscale assigns addresses from? I guess not many customers are at a scale where this is a problem, but it seems weird to me that such a thing is apparently so rigidly baked in.

11

r/iphonehelp•

Hey folks, does anyone know what this actually means? The text itself is demonstrably untrue (I can run both DoH and DoT queries just fine from the network), and I can't find any reasonable documentation from Apple (or anyone else) on what they expect from the network to clear this warning, other than a vague 'settings recommendations' page that doesn't say anything about DNS at all.

Note I am not looking for instructions to 'fix' it, I am looking for a technical explanation of what the warning actually means, since its actual meaning does not match the literal meaning of the words Apple has chosen.

51

r/NixOS•

I can't for the life of me figure out why/how it is happening, but despite being fully upgraded to 20.09, my system is insisting that I need (insecure) openssl-1.0.2 to be pulled in, and I'm trying to remove that requirement.

It appears to be getting pulled in by ipsec-tools:

# nix why-depends /run/current-system /nix/store/*openssl-1.0.2*/
/nix/store/j3gqncl6wfszsx3s6nm0wa1d1rwrh93p-nixos-system-ucpe-test-20.09.3765.d6f63659a70
╚═══activate: …rapped..WRAPPER_PATH=/nix/store/xzkpy3sifyx32cb88lipxc2ni9fvzvhn-system-path/bin:/nix/store/xzkp…
    => /nix/store/xzkpy3sifyx32cb88lipxc2ni9fvzvhn-system-path
    ╚═══bin/plainrsa-gen -> /nix/store/blvym4rqj8b1fwfcvicz6d
12

r/networking•

Have a good Friday guys :\

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181019-libssh

Trimmed report below. Cisco has not confirmed yet which devices are vulnerable.

Summary

A vulnerability in libssh could allow an unauthenticated, remote attacker to bypass authentication on a targeted system.

The vulnerability is due to improper authentication operations by the server-side state machine of the affected software. An attacker could exploit this vulnerability by presenting a SSH2_MSG_USERAUTH_SUCCESS message to a targeted system. A successful exploit could allow the attacker to bypass authentication and gain unauthorized access to a

15976

r/personalfinance•

I have some holding in a US total equity ETF that is not hedged (VUN). My understanding of hedged vs. unhedged is that as the holdings of the ETF are US equities, and the fund has no hedging, that its value in CAD as I have purchased it should be tied pretty closely to the USD-CAD exchange rate. This doesn't appear to be a component, as the VUN chart doesn't seem to encapsulate the USD-CAD chart at all.

What am I missing?

12

You've reached the end of this feed.