Jump to content

me4175

Member
  • Posts

    175
  • Joined

  • Last visited

Posts posted by me4175

  1. 47 minutes ago, Smokey and the Bandit said:

    You beat me to it. If the dog, any dog, is trained and looked after properly they are fine. unfortunately its when the owner doesn't look after the dog or there is no owner, ie soi dogs!

    "If the gun, any gun, is properly secured, they are fine. Unfortunately it's when the owner doesn't look after the gun, accidents happen."

     

    Pitbull = gun, IMO.

    • Like 1
    • Thanks 1
  2. 19 hours ago, Carrbhoy said:

    Thanks for sharing this info. Had you just completed ASQ in Bangkok or just an internal trip to CM for business / leisure?

     

    I will ensure I'm registered in CM-CHANA prior to ASQ check-out as required.

     

     

    Had to renew my visa in BKK and returned to Chiang Mai for business.

    • Like 1
  3. image.png.a119d57f89fd3c87ecdeb804e956d07d.png

     

    I just arrived in CM by train from Bangkok. Registered in CM-CHANA prior to departure.

    Upon arrival everyone was asked to register in CM-CHANA and was funneled to a desk for identity checks. Most people were told to undergo a COVID swab test and wait 20 minutes for the result.

    When it was my turn, the official asked for my mobile number, checked a list, found the number, put a pink sticker on me and told me that I can leave. I was very confused why I wasn't subjected to the test. I have no clue why, but I was somehow already in the system. But I was never tested before. I'm officially registered in BKK, but I provided an address of a private residence (no hotel) in CM.

  4. 4 hours ago, webfact said:

    1 Frontline medical staff in state and private sector

    2 Thais working in Covid prevention areas

    3 Those with underlying health conditions

    4 Those aged 60+

    5 People in risky jobs such as teacher, public transport drivers and advisors travelling abroad

    6 Embassy staff members and their families

    7 Thais in the universal healthcare scheme

    8 Foreign nationals and migrant workers

     

    Where was this ranking published?

  5. On 5/14/2021 at 5:00 PM, Neeranam said:

    I do everything using a Crypto.com card, including paying telephone bills, petrol, internet, school fees, Makro, Bic C, etc. I get 4% cashback every time I use it. Also get free Spotify and Netflix from it and free 1st class airport lounges.

     

    This card looks very interesting, thanks for the mention.

    • Like 1
  6. On 3/1/2021 at 8:09 AM, jesimps said:

    Not one of the choices, but I think that resident foreigners who haven't left the country since pre-covid shouldn't, but all arriving foreigners should. Saying that, I haven't left the country since 2012, but I'll be getting the vaccine at the first opportunity as long as it isn't the Chinese or Russian version.

    Why not the Russian vaccine? It's one of the most effective ones. They did a good job, really.

    • Like 1
  7. On 2/8/2021 at 10:03 PM, fdsa said:

    these certificates come already preinstalled in your operating system, and also a separate copy in the browser.

    for Firefox: open Edit - Preferences - Advanced - View Certificates - Authorities, and be amazed that your browser will trust an certificate for google.com domain issued by "Chunghwa Telecom Co., Ltd" or Hongkong Post or incredible "ACCVRAIZ1" certification authority.

    The list of root CAs do not include the CAs integrated into DPI appliances. The cert for that would need to be distributed separately, which, again, can easily be done in a corporate environment but not on private computers.

    So even though some of the Trusted Root CAs in the OS and browsers may seem sketchy, I'm sure that if any of them would issue a fake certificate for google.com, they would be out of business pretty quickly. Happened before to DigiNotar for example.

    So while the CA trust model is not perfect (what is?), it is pretty effective so far.

  8. 4 hours ago, fdsa said:

    There are companies selling "SSL inspection" hardware with embedded certificate authority inside, which generate a valid certificate for every HTTP request in real time, allowing a completely transparent interception of SSL/TLS traffic at the ISP level.

    One example is an abovementioned Blue Coat:

     

    http://web.archive.org/web/20161107050520/https://www.bluecoat.com/company/press-releases/blue-coat-acquires-netronome-ssl-technology-extend-leadership-enterprise

     

    - their hardware allowed to intercept 10 gbit/s of SSL traffic already in 2013, so I assume terabits per second is possible now with the current hardware performance level.

     

    More read:

    https://media.defense.gov/2019/Dec/16/2002225460/-1/-1/0/INFO SHEET MANAGING RISK FROM TRANSPORT LAYER SECURITY INSPECTION.PDF

     

    https://www.niap-ccevs.org/MMO/PP/MOD_STIP_V1.0.pdf

     

    in short: SSL/TLS is a global hoax.

    SSL/TLS is not a hoax. The embedded CA can still only issue certificates which are different from the target system's actual cert. So while the cert may be trusted (as long as the cert of the DPI device's CA is in the trusted root CA store of the client), it's different and that can easily be verified.

     

    And for non-enterprise clients there's no way the CA cert of the DPI device would end up in the trusted root CA store of the client, if not by some form of malware.

  9. 15 hours ago, fdsa said:

    Decrypting and manipulating network packets take much less resources than you think.

    google:// blue coat dpi

    their servers have similar CPU power & amount of RAM as your smartphone.

    That is not entirely correct. DPI of TLS traffic only works when the certificate of the target system can be switched to the certificate of the DPI appliance. The appliance then opens another connection to the target system and acts as a man in the middle. It's not trying to brute force encrypted packets. So of course you don't need massive processing power for that.

    DPI of TLS traffic is feasible in an enterprise environment, but not with ISPs because this activity would need to happen transparently, which is not possible as it by design breaks the end to end encryption. You can easily see that your encrypted connection is to another system than the website you want to reach.

  10. 4 hours ago, scorecard said:

    So anybody can get the virus and get sick/very sick completely regardless of whether they've had the vaccination or not.

     

    So what's the benefit of having the vaccination?

     

    What she wanted to convey is that even once people are vaccinated, they can still aquire and pass the virus onto others who are not yet vaccinated.

    But there are encouraging reports that some vaccines may also prevent further transmission.

     

    https://www.telegraph.co.uk/news/2021/01/19/pfizer-vaccine-may-prevent-transmission-coronavirus-others-israeli/

    • Like 1
  11. I humped all I could get a hold of in my younger days here: married, single, young or old, especially when I was fresh off the boat. It was like a drug addiction. My girlfriend and later wife always suspected, but never had the drive to dig deeper. Now I am living with someone else and I am completely clean since two years. My younger self would have laughed at my own words, but it actually feels good to be faithful. 

×
×
  • Create New...