0x0

25 ms·

271.
by 0x0 6y ago
Interesting comment near the end, "2. The 4, 5, and 6 byte sequences are only there for political reasons. I would prefer to delete these." If that had happened, I guess emojis as we know them today might never have happened, sinc
272.
by 0x0 6y ago
Gitlab has a great graph view
273.
by 0x0 6y ago
Debian patch is out: https://security-tracker.debian.org/tracker/DSA-4875-1
274.
by 0x0 6y ago
It's quite annoying when the https:// prefix is hidden but then appears in copy-paste. Quite often I'd like to run things like "host -t mx <paste>" or "whois <paste>" and then it also co
275.
by 0x0 6y ago
Or you know, people could just disable cookies IN THE BROWSER SETTINGS if they don't like them. Which is the only place technical measures against cookies can be enforced anyways. And stop bothering the rest of us with these pointless
276.
by 0x0 6y ago
Weird that the first time I hear about this is on HN. Namecheap is pretty good at regularly emailing "offers" and other meh things, but this.. I haven't seen mentioned yet :-/ Also. What exactly is it with this new servi
277.
by 0x0 6y ago
Any html/js web frontend project that runs in a browser?
278.
by 0x0 6y ago
Are you saying anyone can disable anyone else's appleid by just hammering https://appleid.apple.com with their email address and bogus password?
279.
by 0x0 6y ago
That would be interesting to know more about. What's the point of paying the speed hit of spectre (and meltdown?) mitigations if they are ineffective?
280.
by 0x0 6y ago
So are the Linux kernel spectre mitigations broken or useless? I thought this was mostly patched away with a combination of microcode updates and kernel workarounds?
281.
by 0x0 6y ago
Windows 10 still runs .com files. At least the 32bit builds. I wouldn't be surprised if the 64bit builds would accept at least com-renamed PE .exe files too, despite the lack of NTVDM
282.
by 0x0 6y ago
Well there is already a TLD with a well known executable file extension: .com
283.
by 0x0 6y ago
Even iOS can do delta updates, sometimes in the size of only a dozen megabytes to download, and I had the impression they've been using sealed system volumes for much longer. Hopefully Apple can get macOS up to par soon...?
284.
by 0x0 6y ago
I thought sqlite was very resilient and have a hard time understanding how an sqlite file can be corrupted. Are they manipulating the sqlite file outside of sqlite APIs? Are they mixing up file descriptors and writing garbage into an sqlite
285.
by 0x0 6y ago
Modern (all?) Teslas do not have a physical key hole at all, you need to use a key card or key fob or the app (which works over bluetooth)
286.
by 0x0 6y ago
Facebook literally had a box on their web site asking for your email address and email account password , so they could log in to your webmail and scrape your contacts.
287.
by 0x0 6y ago
C also has trigraphs, in case your keyboard does not have a \ you can type ??/ instead. https://en.wikibooks.org/wiki/C_Programming/C_trigraph
288.
by 0x0 6y ago
Pretty crazy how the code had to "out-run" itself setting word marks on every instruction, "spending" word marks in the process.
289.
by 0x0 6y ago
It just relays the packet payload (i.e the actual data bytes inside the TCP stream are read out from the source, then sent along to the destination inside a different TCP stream. TCP/IP headers aren't included or replayed).
290.
by 0x0 6y ago
I bet it's fun being responsible for developing and deploying on those sites. Works in CI and dev, but deploying to production makes the browser behave differently! Nice surprise!
291.
by 0x0 6y ago
I distinctly remember helping out a friend many many years ago, whose Windows box would simply lock up as soon as it had booted into the GUI. Probably around Windows 98. Some random program had dumped temp files in the "Desktop" f
292.
Screen crash remotely triggerable through irssi(openwall.com)
1 points by 0x0 6y ago|0 comments
293.
by 0x0 6y ago
Stunnel and ssh tunnels don't put TCP inside TCP so it shouldn't risk any TCP-in-TCP congestion issues?
294.
by 0x0 6y ago
So I guess you should click "Allow" in the first facebook-designed prompt, to trigger the second Apple iOS level system prompt, and click "Don't allow" there, to actually register the do-not-track request to be enfo
295.
by 0x0 6y ago
Maybe you could find a cluster of TLDs delegating to each other in a loop. Combined with huge TTLs you might be able to bootstrap a full takeover of a subset of all DNS?
296.
by 0x0 6y ago
Could this be leveraged to hijack additional TLDs? If any other TLD uses a ".cd" NS, like .cd used a ".com" NS...? (Are there any?)
297.
by 0x0 6y ago
They're talking about the same bug. The article even embeds the tweet starting the twitter thread. The stuff about icons is just using a filetype to trigger the bug quickly by forcing windows to look up the path embedded in the icon.
298.
by 0x0 6y ago
Does this affect windows-based web/file servers too? If a client can request an URL or similar with the pattern triggering a folder lookup on the server's NTFS volume?
299.
by 0x0 6y ago
CrossOver seems to have support for 32bit on Catalina through some sort of major effort. Not sure if this will trickle over to open source wine anytime soon? https://www.codeweavers.com/blog/jwhite/2019/12&#x2
300.
by 0x0 6y ago
Seems to require a custom kernel instead of an "unmodified Ubuntu" kernel, still pretty neat!

More ›