• 2 Posts
  • 631 Comments
Joined 2 years ago
cake
Cake day: June 23rd, 2023

help-circle






  • Spoofing is a whole hell of a lot easier said than done. Content delivery networks like Akamai, Cloudflare, etc. all know exactly how different versions of different browsers present themselves, and will catch the tiniest mistake.

    When a browser requests a web page it sends a series of headers, which identify both itself and the request it’s making. But virtually every browser sends a slightly different set of headers, and in different orders. So Akamai, for example can tell that you are using Chrome solely by what headers are in the request and the order they are in, even if you spoof your User-Agent string to look like Firefox.

    So to successfully spoof a connection you need to decide how you want to present yourself (do I really want them to think I’m using Opera when I’m using Firefox, or do I just want to randomize things to keep them guessing). In the first case you need to be very careful to ensure your browser sends requests that exactly matches how Opera sends them. One header, or even one character out of place can be enough for these companies to recognize you’re spoofing your connection.







  • I had a few AC Pros in a 110+ year old house where other AP’s had issues with all the plaster & lathe walls. They worked great. I also have a couple of them installed at a non-profit org I volunteer with and everybody is very happy with how they work there as well.

    After moving from that first house to a new one with a bigger footprint I upgraded to a pair of their U6 mesh AP’s, one at each end of the house. Never had any issues with them.





  • My employer uses WP Engine for a lot of varied content. I’m not directly involved with it, but it appears to be well designed for corporate use. We masquerade various WP sites behind different domains & paths on our site. For example, www.example.com/about/ is one WP environment, www.example.com/blog/ is another, and www.example.com/business/ is yet another. Only certain people in our organization can edit /about/ and /business/, but we hire external authors to provide content under /blog/ so they have access to that.

    We also apparently have the ability to modify pages on a dev/test domain then migrate them to our production domain very easily. So changes can be tested & verified before going live.

    All that being managed by WP Engine means we don’t have to worry about manually setting up WP, managing our users, making sure everything is properly backed up, etc.