alp1n3_eth

6 ms·

31.
by alp1n3_eth 2y ago
Curl is nice but its syntax leaves a lot to be desired. It's also hard to distribute to others a "collection" of them, as you're going to end up with troubleshooting questions from less-technical users, especially when i
32.
by alp1n3_eth 2y ago
Idk if they have it yet, but last time I used the VS Code REST extension it still didn't support pre/post request scripting (which is already insanely fragmented syntactically across Postman/Insomnia/Bruno). For any long
33.
by alp1n3_eth 2y ago
Obligatory "Substack has a Nazi Problem" article: https://archive.is/uyugO Obsidian Publish, Micro.Blog, Ghost, BearBlog, HackMD, etc. are all great places to start, with less "baggage" associated with t
34.
by alp1n3_eth 2y ago
With Paragraph.xyz I'm pretty sure you can sign-up with just a crypto wallet.
35.
by alp1n3_eth 2y ago
Garmin's smartwatch line and SOS communicators now have a massive target on their back. Now that the satellite availability issues are going to be solved, they just need to push battery life further for the watches and they'll be
36.
by alp1n3_eth 2y ago
My assumption is it's for reducing the number of things they need to configure, and therefore troubleshoot. It's easy to say "The newest Kali release is the distro the org will use" instead of "Use whatever Linux fl
37.
by alp1n3_eth 2y ago
How intermittent of an issue is it? I don't think collecting client side HAR files from real customers is the way to go, even if they're willing. What happens when the next weird error shows up? More HAR files? Echoing some other
38.
by alp1n3_eth 2y ago
I just did the same switch for the same reasons, except I was a newbie to Neovim. The Vim keybindings and way it "handles things" is amazing, but the Neovim-powered bridge to getting it to be a full IDE with bulletproof config and
39.
by alp1n3_eth 2y ago
I understand the want for these new social networks to be less-controlled and more distributed, but I think there is a line in general for dopamine dependence and algorithmic targeting. TikTok, Reels, YT Shorts, all are a net-drain when it
40.
by alp1n3_eth 2y ago
I'm glad I was introduced to NeoVim, because it led me to using Vim bindings in Zed. As a new user to NeoVim, I was okay with investing some time, but man it feels like each update to NeoVim itself, or even the popular plugins, breaks
41.
by alp1n3_eth 2y ago
In the U.S. the opposite is encouraged as we lack a lot of safe harbor laws surrounding responsible disclosure. Something as simple as seeing individual's social security numbers hardcoded into HTML could get you dragged through the mu
42.
by alp1n3_eth 2y ago
Haha thank you for doing the math! I was lazy and just added the populations and a plus at the end.
43.
by alp1n3_eth 2y ago
From what I know* (heavy on the asterisk there), they are. I'm guessing at their setup at this point, but it sounds like the "large" data is probably being stored (while encrypted) in a different way / separately than th
44.
by alp1n3_eth 2y ago
Signal's default setup is more usability focused while supporting E2E, and less about tinfoil hat threat models about being present on a continent you're a citizen of. The items you mentioned can essentially be configured, for tho
45.
by alp1n3_eth 2y ago
Blaming the user is sometimes what it boils down to. Security includes a balancing act that involves usability, and Signal is firstly targeting the masses, but includes settings that can be configured for high-risk scenarios. This "vul
46.
by alp1n3_eth 2y ago
Not really. Anyone who wants to conceal what continent they're on will also be using a VPN 24/7, or will have the proxy setup in Signal (AKA running 24/7), which defeats this.
47.
by alp1n3_eth 2y ago
> you would be surprised how quickly this adds up Yes, but if social engineering is involved and tracing back through user conversations across a platform, it's hardly a vulnerability, let alone one deserving of a bounty. The way th
48.
by alp1n3_eth 2y ago
Thank you! That's what I get for quick scrolling through the settings. I for sure thought it would have been under Privacy (for this concern), but that makes sense too.
49.
by alp1n3_eth 2y ago
Just like the days of DoSing an IP from a COD Lobby
50.
by alp1n3_eth 2y ago
Cool writeup with some interesting techniques and approaches! I'll echo the other comments and say "deanonymization" is stretching the definition of the word, along with "grab the user's location", as it isn&#x
51.
by alp1n3_eth 2y ago
I think I understand the situation correctly, but please correct me if I'm wrong. You're essentially asking "How does realBank.com stop fakeBank.com from sending requests on behalf of the user to realBank.com"? The malic
52.
by alp1n3_eth 2y ago
It has been under heavy scrutiny by the security community for years, it would have already been found had it existed.
53.
by alp1n3_eth 2y ago
With the different flavors of Linux, the varying configs, and uses, etc. it would be a less-likely target because it's overall much easier just to infect one of the numerous Windows computers or servers in a corp, then pivot to the oth
54.
Victims of PowerSchool's data breach helped each other investigate hack(techcrunch.com)
2 points by alp1n3_eth 2y ago|0 comments
55.
by alp1n3_eth 2y ago
I feel like this relies more on social engineering itself than anything else. I think confirmations / captchas should be in use for any critical functionality any way, but watching the exploit vid makes it seem like I can submit a bug
56.
by alp1n3_eth 2y ago
Looking at a lot of user's feeds, its algo doesn't feel as "rage-baity" as the ones from YT or Insta. Even normal platforms, like FB and Twitter push rage bait to the top. TikTok seems to avoid those pitfalls in a lot of
57.
by alp1n3_eth 2y ago
A forced sale would essentially gut them of their proprietary algo, which is leagues ahead of anything YT or Insta has. This algo and the associated TikTok assets can still be used a billion different ways around the world and in other apps
58.
by alp1n3_eth 2y ago
The backdoor named "backdoor", the l33t h4ck3rs strike again.
59.
by alp1n3_eth 2y ago
I write mainly for myself, but it has other benefits as well. The act of blogging forces me to actually follow through with pieces, as I'm putting them out there. If I'm just "taking notes", it won't be as well laid
60.
by alp1n3_eth 2y ago
Totally agree with this. It's nice to have something to point at for writing samples, to show some experience in a field, and to get ahold of you. I have a link aggregator (Bento.me) that points to my blog, GitHub, cool projects to get

More ›