TZubiri

40 ms·

661.
by TZubiri 6mo ago
Yes. I find a similar pattern to Meta's scammer ads. Huge publicly traded companies benefitting from the illegal actions of their clients, turning a blind eye, or conveniently delaying their takedowns. Big companies need to absorb the
662.
by TZubiri 6mo ago
How is this better than just LE with certbot?
663.
by TZubiri 6mo ago
Copy fail and dirty frag killed containers, pivot out of shared kernels now
664.
by TZubiri 6mo ago
I built something in this space. Do i understand correctly that the product is a white label app for public transport providers that riders can download to get arrival data? Do you think people will download an app for each bus/train?
665.
by TZubiri 6mo ago
Ironically, the other top article on HN right now is CVE-2024-YIKES. You can't have the cake and eat it too. Maybe we need to close some doors, especially if the barrier for publication is literally just a couple of prompts and uploadi
666.
by TZubiri 6mo ago
This would have been completely avoided if you were using bun dependency vector locking in Nix.
667.
by TZubiri 6mo ago
Try 1866 and 1867 Html is relevant historically as that syntax comes from forms. It was historically a sort of API between the browser client and the server, so yeah. But it's pretty well defined since 1995
668.
by TZubiri 6mo ago
But if it was written with an LLM, then it's not really written in assembly. Would we have considered writing a server in C writing it in assembly? No.
669.
by TZubiri 6mo ago
You misunderstood the scope and severity of the bug entirely. Yes, if you are a single tenant, this diminishes defense in depth, so an attacker that gets access with a user like www-data can escalate to root, sure. But more importantly, on
670.
by TZubiri 6mo ago
I get that multiple human users on a same machine is rare nowadays, and that per-app users were never a thing. But windows still has a root and a lower privilege user. You typically need to click on "run as admin" to elevate privi
671.
by TZubiri 6mo ago
Whatwg is for html, try the IEEE http rfcs
672.
by TZubiri 6mo ago
The ROI has just increased by like 10x or 100x this week.
673.
by TZubiri 6mo ago
Go on...
674.
by TZubiri 6mo ago
>Distro maintainers blacklisting specific functionality because they believe YAGNI is a pretty big ask We have forgotten what a distro is, and its modern corruption of the concept is now taken as the definition. Distributions weren'
675.
by TZubiri 6mo ago
> Please consult me when you encounter any ambiguous edge cases Why not check the logprobs of the output and take action when the prob of the first and second most likely token is too similar? (or below a certain threshold?
676.
by TZubiri 6mo ago
I love this nuance! But I think it's covered by your immediate parent comment > Whether it is worth investing your defensive effort in that vs on more actual security is a different matter. So the base64 introduces a marginal securi
677.
by TZubiri 6mo ago
The acquired concept is new to me, is this an established term?
678.
by TZubiri 6mo ago
>Obscurity can be fine but it's not security You literally just read how Obscurity protected OP in a cybersecurity incident. Now you are just playing word games, which are a waste of time.
679.
by TZubiri 6mo ago
>For example, wp_users becomes wp_8df7b8_users. This is often dismissed as "worthless" because it is security through obscurity. >My website was vulnerable. However, I was not impacted by any attacks, and I updated the plugi
680.
by TZubiri 6mo ago
The source of this bias is voyeurism. It's always someone outside your org telling you that obscurity is bad, and that you should definitely publish all your source code to let them see. It's self serving outside judgment to get y
681.
by TZubiri 6mo ago
"Just gimme thething, I don't care where from" is a great way to get supply chain vulns
682.
by TZubiri 6mo ago
>Most often the business hires a security contractor to take care of it, and signs the contract without understanding the terms. The bulk of the responsibility here would lie on whoever signed I think. It's one thing to click "
683.
by TZubiri 6mo ago
School shootings?
684.
by TZubiri 6mo ago
It's just not very concerning. The buyer presumably cares about safety and their risk model are guns. Having a vendor show a couple of seconds of live footage to a potential buyer probably doesn't rank high in their threat model.
685.
by TZubiri 6mo ago
High tech shit
686.
by TZubiri 6mo ago
Fuck mosquitoes, go get em
687.
by TZubiri 6mo ago
But it's not the same thing every time, for example if you had written 'your own' http request you wouldn't habe been hit by the axios vuln. If you rolled your own crypto and didn't install AF_ALG, you would have av
688.
by TZubiri 6mo ago
I see this with devs all the time, devs that want to pitch their startup and use a subdomain like .vercel.app that gets blocked after 2 weeks
689.
by TZubiri 6mo ago
What would be an example of such software
690.
by TZubiri 6mo ago
Stephen king once wrote and published a novel under a pseudonym to find out whether he would still be popular even if he didn't use his name. He kept it very secret, but somehow people deduced from the writing style that this new autho

More ›