Sephr

87 ms·

451.
by Sephr 8y ago
This isn't as highly upvoted because it's old news from two months ago. I remember this being very well received when it was first published on Twitter.
452.
by Sephr 8y ago
It was only fixed in the webapp . As you can see with the PoC demo link, this is still unfixed in the Inbox app for Android.
453.
by Sephr 8y ago
You think that's bad? There's a Google Inbox and Gmail spoofing vulnerability which has been disclosed for over a year, and it's still not fixed. Vulnerability details: https://eligrey.com/blog/google-inb
454.
by Sephr 8y ago
Does it support HDR on PC? I haven't been able to figure this out anywhere online.
455.
by Sephr 8y ago
This is required for any apps that offer user-configurable reddit integration.
456.
by Sephr 8y ago
I use this effect in my Android live wallpaper app, Rainpaper. It supports weather synchronization, reddit integration, custom backgrounds (including video), and muzei extensions. You can see the app at https://rainpaper.com
457.
by Sephr 8y ago
I made exactly what you're asking for: https://rainpaper.com
458.
by Sephr 8y ago
There are no bus-powered TB3 M.2 PCIe enclosures, and there never will be any[1]. This means you will have to buy a huge bulky externally-powered TB3 PCIe dock costing hundreds of dollars to accomplish this. 1. https://twitter.co
459.
by Sephr 8y ago
Actually PCIe specifically. NVMe improves performance slightly, but it's mostly all due to PCIe. I have a non-NVMe Samsung AHCI M.2 SSD from 2014 that gives me ~2.3GB/s sequential reads and ~1.2GB/s sequential writes, no NVMe
460.
by Sephr 8y ago
As you can see from the product in the second link, most skirts should work fine: https://sc01.alicdn.com/kf/HTB11XeAgwaTBuNjSszfq6xgfpXaD/new... (temporary CDN link may expire) If a pencil skirt is too constricti
461.
by Sephr 8y ago
These are much safer than small-wheeled scooters as their larger wheels allows them to more gracefully handle bumps in the road. Also, unlike most ebikes I can actually sit stationary on these without falling over. I'm very short and m
462.
by Sephr 8y ago
Am I the only one who wants to see more seated scooter innovation? I would much prefer riding one of these self-balancing scooters/microcycles to the standing scooters that everyone is using. 1. http://rynomotors.com (lau
463.
by Sephr 8y ago
You can fit exactly zero of these in the MacBook Pro until Intel ships chips that actually support LPDDR4X (aside from the Cannonlake paper launch).
464.
by Sephr 8y ago
I'm getting access denied on that link. Do you have a mirror?
465.
by Sephr 8y ago
Fortunately for privacy; unfortunately for the performance of heavy webapps that may need an accurate hardware.navigatorConcurrency value for CPU scaling.
466.
by Sephr 8y ago
I'd be concerned about physical security of the hardware. Most of these cell towers are only secured by a chain-link fence and a padlock. As far as data security, it should be easy to auto-wipe your server when intruders are detected,
467.
by Sephr 8y ago
There's also navigator.hardwareConcurrency which can tell you the number of CPU threads available to a device. Unfortunately, it looks like Apple caps this value to 2 on iOS for anti-fingerprinting purposes.
468.
by Sephr 8y ago
Chrome team members have said that preventing modern web browsers from leaking enough entropy to uniquely identify users across sessions (fingerprinting) is impractical with all of the features that the modern web provides. This sentiment h
469.
by Sephr 8y ago
I hope WebAssembly threads are only enabled in contexts where site isolation is active, lest we have another Spectre.
470.
by Sephr 8y ago
Newer LCD displays will forgo the diffuser for mini-LED FALD backlights.
471.
by Sephr 8y ago
At first I suspected this as well, but apparently it was a link to itracking[.]services and Bing pre-resolved the redirect chain. You can spoof any domain you want in Bing Ads without needing an open redirect.
472.
by Sephr 8y ago
> All Ms has to do is flag ads whose displayed URL do not match the final URL for manual review. Or simply ban it. The ad did match the final URL, it just selectively redirected to the legitimate or malicious page based on user agent.
473.
by Sephr 8y ago
Explanation for the spoofed domain name: https://twitter.com/sephr/status/1055751684146655232 Bing can easily fix this domain spoofing vulnerability. I've reported this vulnerability to MSRC previously but re
474.
by Sephr 8y ago
I never told him that I would keep his correspondence private, nor did he ask me to do so. Here is the entire email chain between myself and mchannon: https://go.eligrey.com/t/mchannon-email
475.
by Sephr 8y ago
Details I received from emailing mchannon: > Thanks for reaching out. Mine uses a deliquescent salt, which requires no energy to absorb water from the air. It's pretty messy, but does the job. Getting the water back out is where
476.
by Sephr 8y ago
With FEL lithography and enormous budgets most of the Bloomberg claims seem quite possible.
477.
by Sephr 8y ago
By "more modern manufacturing node", I mean anything more energy-efficient than the 28nm process node used to build the SoC in this device.
478.
by Sephr 8y ago
A 28nm SoC in a severely battery-limited wearable including video output and speech-to-text screams "poor battery life with moderate to heavy use". I'm going to wait for the next-gen device built on a more modern manufacturin
479.
by Sephr 8y ago
"vigorously knocked down" is quite disingenuous when there is only one denial from the accused party.
480.
by Sephr 8y ago
[comment deleted]

More ›