bugmen0t

36 ms·

91.
by bugmen0t 5y ago
It would be if an (advertisement) iframe did, no?
92.
by bugmen0t 6y ago
Is there a guide for switching from gpg on the cli to sq? Specifically, I'm not sure how to move keys from my gpg keyring to sq.
93.
by bugmen0t 6y ago
Nice work! A colleague of mine did a similar thing in 2014 but it bitrotted terribly. Code is at https://github.com/tOkeshu/bananaphone . Great to see some alternatives popping up! He presented it at a mini conference
94.
by bugmen0t 6y ago
Most notable change: new privacy protections! https://blog.mozilla.org/security/2021/01/26/supercookie-pro...
95.
by bugmen0t 6y ago
You need defaults, and that default is an allow-list of sane HTML. If you want, you can initialize DOMPurify with your own allow-list, that might just be the bold, italics, underline, strikethrough. The fact that their list is not namespace
96.
by bugmen0t 6y ago
Any kind of sanitizer that returns a string, yeah.
97.
by bugmen0t 6y ago
> Now, we will start the VSCode server in the background at port 9000 without any authentication using the following command. Great.
98.
by bugmen0t 6y ago
Don't let the domain name misdirect you. It works really fine in Firefox ;)
99.
German-made FinSpy spyware found in Egypt, and Mac and Linux versions revealed(amnesty.org)
4 points by bugmen0t 6y ago|0 comments
100.
by bugmen0t 6y ago
If Range doesn't require PardialOrd, I'm not sure I know what Range is at all...
101.
by bugmen0t 6y ago
FWIW, if you're using libreoffice write you can save your file as a flat odt file (.fodt), which gives you a version-controllable format
102.
by bugmen0t 6y ago
How: File an issue at https://github.com/publicsuffix/ Why: It's fun. Also, web Security testing gets easier when you have can make pages for all likely and unlikely scenarios (cross-site/domain/origin).
103.
by bugmen0t 6y ago
An invaluable resource IMHO: https://w3c.github.io/webappsec-cors-for-developers/
104.
by bugmen0t 6y ago
If you go search regularly, there are some cheap two-dot-two you’ll find that are ascii. Bit longer in string length but shorter on the wire. I own 0e.vc, which is on GitHub as a general purpose xss domain if you need it. Iirc it does eval(
105.
by bugmen0t 6y ago
Yes. localhost is considered a Secure Context via https://w3c.github.io/webappsec-secure-contexts/#potentially... - This is intentional to testing APIs which require a Secure Context easier to use during development. E
106.
by bugmen0t 6y ago
Names of people, events, trends…
107.
by bugmen0t 6y ago
> ASCII only because it works everywhere cries in his native language
108.
I was able to buil all of Gecko (Firefox rendering engine) on iOS(mobile.twitter.com)
2 points by bugmen0t 6y ago|0 comments
109.
by bugmen0t 6y ago
> Some browsers, including Chrome but not Firefox, have the ability to check the amount of Javascript memory used. So the solution to test if an object is there, is to make it sufficiently large so that it has a noticeable impact on memo
110.
by bugmen0t 6y ago
Feature set is obviously very different.
111.
by bugmen0t 6y ago
Pickle is a stack machine ( https://en.wikipedia.org/wiki/Stack_machine ). It is Turing complete. See source code and documentation at https://github.com/python/cpython/blob/master/Lib
112.
by bugmen0t 6y ago
If you want to find out yourself, I can highly suggest using the Firefox Profiler on https://profiler.firefox.com/ - amazing tool!
113.
by bugmen0t 7y ago
Given they are based on a fork of Mozilla's Gecko engine I think the real reason behind this post is that their inability to cherry-pick Web Components from Gecko. It's likely the compatibility cost is making the browser unusable
114.
by bugmen0t 7y ago
jitsi
115.
by bugmen0t 7y ago
Any kind of delay will turn into an annoyance. If it doesn't, then the randomness will make it a dopamine hit / that somehow makes your brain feel rewarded. Which will lead to more terminal clearing. Not sure if that's the th
116.
by bugmen0t 7y ago
To think about recursion, you first have to think about recursion.
117.
by bugmen0t 7y ago
This is in Nightly. I know people often times do _not_ expect breakage, because Nightly has been pretty stable for a long time. But that's not a guarantee. Most people will be concerned about lacking Web Extensions support. It's i
118.
by bugmen0t 7y ago
Yes. This is fixed in all branches. Developer Edition is Firefox beta with a different skin. The commits at https://hg.mozilla.org/releases/mozilla-beta/ will show you that 73.0b2 has the same commit as mention el
119.
by bugmen0t 7y ago
So this is a closed-source webkit fork? Nothing to see here, moving on then :) Webkit a comparably easy target to strip down and embed elsewhere. See Apple watch.
120.
by bugmen0t 7y ago
That was just the first step. Firefox first had to disallow XUL/legacy extensions before they could remove APIs that others used to depend on.

More ›