blincoln

22 ms·

151.
by blincoln 3y ago
A downloaded file loading remote resources automatically (without prompting) can be a big problem, which is why nearly every other piece of productivity software has prompted before doing so for many years. E.g. if someone built an API that
152.
by blincoln 3y ago
Thank you for sharing that. Not only is it an interesting aircraft, but the page answered my main question about this type of control system design, which was "is it using the Coandă effect?" Years ago, when I read about the origi
153.
by blincoln 3y ago
This is a pretty clever combination of feature misuse, although I think I'd rate the overall security impact fairly low, because the best-case scenario is that you cause the recipient to open a link in their browser. That can be useful
154.
by blincoln 3y ago
The article doesn't make it 100% unambiguous, IMO, but the debugger screenshot looks like a desktop browser's debugger. You could also potentially do the same thing in the mobile app using Frida.
155.
by blincoln 3y ago
I don't know of a non-Kubernetes situation off the top of my head where this would be an issue, but I definitely learned some new things about DNS resolution on Linux by reading the article, and so I'll think to look for similar s
156.
by blincoln 3y ago
All of the decent WiFi-only IoT devices I've seen bootstrap the process by acting as an access point of their own until they're configured. There are some opportunities for securing that initial connection better, like ensuring th
157.
by blincoln 3y ago
I skimmed over your blog post, and I think you should give The Rings of Power a look despite your feelings about Jackson's films. It's a polarizing series, and you might end up not liking it, but it's very different from th
158.
GWT: Unpatched, Unauthenticated Java Deserialization(bishopfox.com)
1 points by blincoln 3y ago|0 comments
159.
by blincoln 3y ago
Wow, that's super interesting. As you say, it's a contrived CTF example, but I'm pretty shocked that it's possible to read and write arbitrary process memory without importing any packages (especially unsafe, of course).
160.
by blincoln 3y ago
I was assuming there was a way to configure a button that would toggle the stick between left and right, since most games I've played don't require using both at once.[1] I don't see a conclusive answer in their online docs,
161.
by blincoln 3y ago
I would assume that this is completely PS5-specific. I've really liked the overall PlayStation experience ever since the PS2, but I think part of the reason everything works so smoothly is that every generation is a pretty strict walle
162.
by blincoln 3y ago
I would think in a typical AD domain that was built using reasonably good practices (maybe even the default settings) in the last 5 (maybe even 10) years, DNS changes alone wouldn't be able to directly result in the compromise of any M
163.
by blincoln 3y ago
Are you thinking of a different solo developer, or a different game, or something else? Eclipse was the working title for the demo in the article. It was eventually reworked into a game released as X in Japan, and would have been titled Lun
164.
by blincoln 3y ago
It's hard to know with any kind of accuracy how often it comes up in real breaches, but we exploit it all the time to great effect in pen testing. A few examples I've seen repeatedly: * An AWS-hosted container/artifact/C
165.
by blincoln 3y ago
I'm not finding a great ELI5 of the electrocaloric or magnetocaloric effects. Specifically, the IEEE article doesn't explain how shuffling the generated heat away from the electrocaloric material results in a net cooling effect. I
166.
by blincoln 3y ago
That second link is a gold mine. Thank you so much for sharing. I've known how to do the basic BTV/VTO for many years, but it wasn't quite enough for me to equalize pressure while diving (without descending very slowly, I s
167.
by blincoln 3y ago
If it helps, I'm reasonably sure it's the soft palate muscles. To cause the effect you're describing, I visualize tensing a muscle that runs directly from one ear to the other, through the middle of my skull. It's one of
168.
by blincoln 3y ago
This is a neat project. With such a low resolution, am I wrong in thinking that the flame simulation could be done in real time on-chip using a cellular automata algorithm? It would still be nice to support pre-rendered video for other purp
169.
by blincoln 3y ago
LEDs connected directly by rigid wires (no PCB at all), then encased in resin might be worth considering too.
170.
by blincoln 3y ago
I can only find very high-level descriptions of the pellet-beam approach. What's the advantage of accelerating the pellets after launch via laser ablation versus using a more powerful mass driver to launch the pellets and omitting the
171.
by blincoln 3y ago
I'm in my mid-40s, and I've been looking at screens for many hours on most days for about 38 years. I've preferred a "light mode" colour scheme, with the brightness cranked up ever since I first saw one (an original
172.
by blincoln 3y ago
You never know where such things will lead, either. I did reverse-engineering as a hobby for years because it was a personal interest, then eventually switched careers to information security partly because of that background. No one is eve
173.
by blincoln 3y ago
Agreed. I studied electroacoustic music at Simon Fraser in the late 90s, and even though I decided not to go into music as a career, the classes and the school's collection of rare recordings were a treasure trove.
174.
by blincoln 3y ago
I have some titanium crafting wire. Should be easy to find on Amazon or similar. It's a little surreal - looks similar to a roll of steel wire, but feels as lightweight as PLA. Basically the real-world version of mithril.
175.
by blincoln 3y ago
It's a fair question. I originally assumed that the White House might have much older plumbing, but it was completely gutted and renovated about 10 years before LBJ took office, and I have to imagine the plumbing was designed to commer
176.
by blincoln 3y ago
VMware Workstation has much better USB support (especially USB NIC support) than VirtualBox. It's also licensable individually. If you want to use the VirtualBox Extension Pack in a business environment, you need to buy a per-user lice
177.
by blincoln 3y ago
Wow. I actually always assumed that the "resort fee" was to cover a hotel-specific tax, but I see that you're right.[1] Seems like a textbook case of manipulative business practices to me. I already felt like the anti-junk-fe
178.
by blincoln 3y ago
Most people seem not to tip baristas at all. I make my own coffee 99% of the time, so on the few days per year when I buy it, I tip around 20% because it's a luxury, and if everyone who could easily afford the extra few dollars did so,
179.
by blincoln 3y ago
Am I correct that the datetime.datetime.now(datetime.timezone.utc) syntax is backwards-compatible all the way to Python 3.2?[1] If so, this seems like a good move. The edge cases like compatibility with data sources that don't indicate
180.
by blincoln 3y ago
> Nobody is going to be checking the opening hours of a Home Depot in another timezone and expect to get the date in their local timezone. You've never wanted to call a business in another timezone before making the trip out there?

More ›