0x0

42 ms·

391.
by 0x0 6y ago
Doesn't mitigate the fact that this type of scheme turns the hashed password into the equivalent of THE cleartext password. It's usually compromised/dumped server databases you want to protect against.
392.
by 0x0 6y ago
A weird error happens if I try to run the embedded javascript dosbox emulator on iOS Mobile Safari. It launches the PKSFX INSTALL.EXE but most (but not all) files fail to extract with a CRC error. Emulation bug or a flaw in Mobile Safari&#x
393.
by 0x0 6y ago
Ah, but your catch block doesn't look for exceptions in console, log, or toString().
394.
by 0x0 6y ago
If it is true the bug was present in iOS 11 and fixed in iOS 12 before being reintroduced in iOS 13, that might align with macOS 10.14 (≈ iOS 12) being unaffected.
395.
Return of the iOS sandbox escape: lightspeed's back in the race(synacktiv.com)
1 points by 0x0 6y ago|0 comments
396.
by 0x0 6y ago
Sign in with facebook also lets the user choose whether or not to share their email address.
397.
by 0x0 6y ago
Are we going to experience the same bug next year for all LetsEncrypt certificates when the DST Root CA X3 expires? I guess modern devices could deal with LetsEncrypt issuing directly from their own modern ISRG Root X1, but would that leave
398.
by 0x0 6y ago
Sounds like a good test case for exercising those otherwise useless "million dollar insurances" that some certificate vendors flash in their sales materials?
399.
by 0x0 6y ago
Because it slows down anyone looking to crack/reverse the passwords? The only thing protecting your high entropy password is the cost of the hash. If you could run infinite attempts in 2 seconds then even your high entropy password wou
400.
by 0x0 6y ago
Secure checksums should have high performance. Password hashing should have low performance (ie high cost).
401.
by 0x0 6y ago
x86 has a lot of "useless bloat" with legacy high-level instructions. Modern compilers avoid those and newer cpus aren't engineered with performance in mind for those instructions since nobody sane uses them anymore.
402.
by 0x0 6y ago
If I get spam mails on lists I never signed up for, I either hunt down the X-Abuse header and report there (if they use a reputable bulk mailing service), otherwise I just paste the entire email on members.spamcop.net
403.
by 0x0 6y ago
The workflow I described goes for mobile and tablets just as much as desktop; for the cases where a keyboard is not connected please mentally replace "cmd-l cmd-c" with "tap in address bar to select, tap copy". Also, oth
404.
by 0x0 6y ago
That's really quite useless. I rarely share links by clicking weird "share link" buttons. I usually have half a message already composed in mail/messages/slack, and I just want to cmd-L cmd-C in the browser and cmd-
405.
by 0x0 6y ago
This is incredibly telling about the state of affairs in the macOS development group. The bug was reported early for a beta (burning a technical incident ticket, even) but still shipped in the final release. At this point it feels like Darw
406.
by 0x0 6y ago
> You'll only ever retrieve Google AMP cache results from the Google search page Uh, I keep seeing Google AMP URLs shared on social media, emails, etc etc. Which is quite annoying :(
407.
by 0x0 6y ago
Just as predicted :)
408.
by 0x0 6y ago
Maybe, the notes will probably be published when macOS 10.15.5 drops (this week? But who knows if the new 0day in the unc0ver jailbreak will shake up things)
409.
by 0x0 6y ago
Does anyone have any technical information about the (0day?) exploits used by this new jailbreak? The source code on github seems to be very out of date. Will Apple delay the release of macOS 10.15.5, which is expected this week? (Curious t
410.
by 0x0 6y ago
The review process on Google Play is worse than iOS these days, both in regards to waiting time and in dealing with clarifications
411.
by 0x0 6y ago
But the quarantine xattr has nothing to do with checking notarization?
412.
by 0x0 6y ago
I wonder what "Developer Tools" grants in practice. Clicking the (?) for viewing built-in help does not mention this particular setting, it skips right over it going from "Automation" above it to "Advertising"
413.
by 0x0 6y ago
Imagine a world wide web where Microsoft buys Mozilla because of a programming language they happened to develop.
414.
Gitlab removes support for Windows batch files in Gitlab-CI(gitlab.com)
2 points by 0x0 6y ago|0 comments
415.
by 0x0 6y ago
Sounds like an arbitrary SDK to me.
416.
by 0x0 6y ago
An open source SDK can at least be audited and locked to a particular version, with no hidden shenanigans.
417.
by 0x0 6y ago
Setting up a wildcard search for your domains with crt.sh's rss feeds into slack is a great way to stay alerted on certificates issued on your domains.
418.
by 0x0 6y ago
I'm shocked but perhaps not surprised at many of the comments in that thread. These people are app developers who voluntarily link in huge multimegabyte binary-only third party sdks, and then act surprised that the code they are linkin
419.
by 0x0 6y ago
Is this going to be another silverlight? Is WPF deprecated? Is win32 gdi going away?
420.
by 0x0 6y ago
Both this and the ghost cms updates seem to hint that the only reason this was discovered was the fact that loud crypto miners were exhausting resources. What are the chances a more quiet attacker hasn't thoroughly ploughed through the

More ›