TZubiri

38 ms·

781.
by TZubiri 7mo ago
This is a succint explanation of a phenomenon that looks a bit cut-throat. In your personal life if you stop paying stuff until it gets cutoff it's because you are having financial trouble, but maybe if your life had incentives for bu
782.
by TZubiri 7mo ago
But the attack relied on the target using the browser version
783.
by TZubiri 7mo ago
It wasnt one thing, gnu is a case of cathedrals. Corps are usually more cathedrally than bazaary because of their hierarchical top down structure, but ymmv, an elon musk or steve jobs company will be more cathedral than a conglomerate like
784.
by TZubiri 7mo ago
But then it wouldn't be untold
785.
by TZubiri 7mo ago
If you care about security, I recommend investing into a separate computer for developing hardware and software and another for downloading games on. You can setup your security any way you like, but nothing beats an air gap in terms of sec
786.
by TZubiri 7mo ago
The way I've been doing that is with Shamir Secret Sharing and encrypting keys until glass-breaking is necessary.
787.
by TZubiri 7mo ago
I'm critical of OpenClaw and even the author to some extent, but I prefer to have nuanced and compartmentalized conversations, on a thread about a specific vulnerability, it's much more productive to talk about the specific vulner
788.
by TZubiri 7mo ago
It's pretty reasonable though, a lot of OpenClaw instances are hosted on a VPS, this is not unsafe. My interpretation is that 135k instances are vulnerable, but of those there's more conditions that need to be met, specifically: T
789.
by TZubiri 7mo ago
Might actually be a positive instead of a negative. Gaming use-cases should have not any effect on security policies, these should be as separate as possible, different auth mechanisms for your gaming stuff and your professional stuff ensur
790.
by TZubiri 7mo ago
The capacity to grant access as a specific remote user is present without certs as well right? The typical authorized_keys file lives under a user directory and grants access only to that user.
791.
by TZubiri 7mo ago
>then I don’t need to type the target user’s password; instead I enter the key’s passphrase, a hopefully much more complicated combination of words, to unlock the private key. This sentence is a bit of a red flag, it looks like the autho
792.
by TZubiri 7mo ago
Interestingly it's just for processors, I would have been down to read about at least a product that 'assures' the supply chain of a broader part of the stack, at least the hardware. It's just not enough to make me care,
793.
by TZubiri 7mo ago
Some ideas. 1- That's roughly around lunch break, including central time and to a lesser extent ET. 2- Lots of people put podcasts in the background, while coding, running, cooking, eating. Especially with airpod-like products. 3- Lo
794.
by TZubiri 7mo ago
So, like litellm?
795.
by TZubiri 7mo ago
Building can just as well be a distraction, building and shipping isn't a goal. If there's a product which works fine, don't touch it, don't break it, monitoring and talking about the product is harmless and has less ris
796.
by TZubiri 7mo ago
What I do is I have a catch all, and based on the emails I get, I know which emails are made public, and I scout what the threat actors are doing. For a similar reason I dislike ip2ban, my objective is not to block all attack attempts, I pr
797.
by TZubiri 7mo ago
Because "scanning your computer" technically could include scanning plugins, but it could also include scanning your files, your network or your operating system. While "scanning your browser" would be more accurate and
798.
by TZubiri 7mo ago
lgtm (didn't read)
799.
by TZubiri 7mo ago
>maybe the community could chip in to buy the authors a couple of YubiHSM There's no community, the users of axios are devs that looked at stackoverflow for "how to download a file in javascript", they barely know or care
800.
by TZubiri 7mo ago
>(I never understood why). Because axios existed before the builtin fetch, and so there's a lot of stackoverflow answers explaining how to use fetch, and the llm models are trained on that, so they will write axios requests instead
801.
by TZubiri 7mo ago
But javascript is batteries included in this case, you can use xmlhttprequest or fetch
802.
by TZubiri 7mo ago
I've been saying for ages, use xmlhttprequest, or hell, even fetch(). Stop downloading code from the internet unless it's a major strategic decision.
803.
by TZubiri 7mo ago
There's this naïve approach to security that obsesses with building walls, because walls are secure and nothing gets through. Apparently a lot of people get nerd sniped into building impenetrable 10meter thick steel walls instead of th
804.
by TZubiri 7mo ago
I thought this was going to be about a car being uncomfortable to have sex in. Such a car would make for a great product to sell to parents of teenagers, so you can lend them the car but at least make it difficult to fornicate without conse
805.
by TZubiri 7mo ago
tbf, that's claude's workspace do not share a workspace with the llm, or with anybody for that matter. How would the llm even distinguish what was wrote by them and what was written by you ?
806.
by TZubiri 7mo ago
Some feedback, in order from most to least important: > 1- installing with irm https://raw.githubusercontent.com/alonsovm44/glupe/master/in... | iex That is high risk, don't ask people to do that, esp
807.
by TZubiri 7mo ago
While running Doom on X is typically a show of personal hacking skills, and a display of the turing completeness/power of X, I think that running Doom on X can also be a criticism of X, certainly the opposite of the intention in some c
808.
by TZubiri 7mo ago
https://www.merriam-webster.com/dictionary/professional adj sense 1c >characterized by or conforming to the technical or ethical standards of a profession >"did a competent, professional job" >exhibi
809.
by TZubiri 7mo ago
I really get that, and I value these otherwise pointless hack articles as much as the next guy. But I think I was specifically getting at the fact that these might actually turn into an economically useful skill just by finding a sweetspot
810.
by TZubiri 7mo ago
I think the sense of the word professional here is not as a boolean professional/amateur, but the sense of professionalism, the characteristic of taking business seriously, not letting personal matters intervene, and in this case, inve

More ›