chha

10 ms·

91.
by chha 2y ago
> If you're a security practitioner, teaching yourself how to hack is also part of the "Hacking is Cool" dumb idea. Think about it for a couple of minutes: teaching yourself a bunch of exploits and how to use them means yo
92.
OWASP Top Proactive Controls Project(owasp.org)
1 points by chha 2y ago|0 comments
93.
by chha 2y ago
I was about to ask for the same thing. All best practices within the security domain point towards multiple layers of security, simply to have some fallback if one mechanism is compromised.
94.
by chha 2y ago
One of the first things you need to think about is the inclusion criteria. Wikipedia bases all its content on the following: "A topic is presumed to be suitable for a stand-alone article or list when it has received significant coverag
95.
Putting Atlantis at Risk(waynehale.wordpress.com)
1 points by chha 2y ago|0 comments
96.
by chha 3y ago
We tend to avoid using github repos, but go for published packages from the usual sites; Nuget, Pypi, Npm etc, using Repository and Firewall from Sonatype to act as a proxy between us and the package repos. All packages are analyzed and tag
97.
Pangeos the itinerant floating city – The Terayacht project(pangeosyacht.com)
3 points by chha 3y ago|0 comments
98.
by chha 3y ago
Just discovered this amazing work inspired by old classics such as Total Annihilation. tl;dr: Open source modern 3D RTS. Source appears to be located at [1]. [1] - https://github.com/beyond-all-reason/Beyond-All-Reason
99.
Beyond All Reason – Development(beyondallreason.info)
1 points by chha 3y ago|1 comments
100.
Microsoft Cybersecurity Reference Architectures(learn.microsoft.com)
1 points by chha 3y ago|0 comments
101.
by chha 3y ago
Impressive for sure, but I have to admit that the first thing I thought it would be was the launch of the Apollo 17 lunar module: https://youtu.be/9HQfauGJaTs?si=2smTf9G3tomXPpot Filmed using the rover camera remote control
102.
by chha 3y ago
Not sure about jfrog, but Sonatype does something similar. They basically hash all components/packages from a bunch of different repositories, and then tag the hash with various metadata you can use to create policies. I started using
103.
The Apollo Flight Journal – Ejectable Camera Pods(history.nasa.gov)
1 points by chha 3y ago|0 comments
104.
Notation Must Die: The Battle for How We Read Music [video](youtube.com)
1 points by chha 3y ago|0 comments
105.
by chha 3y ago
Wikipedia to the rescue: https://en.m.wikipedia.org/wiki/List_of_aircraft_flown_by_Er...
106.
by chha 3y ago
VAT on EVs isn’t the only mechanism, there is also a one-time toll related to vehicle weight in the works.
107.
by chha 3y ago
First thing I thought of was food commercials, where the goal isn't to replicate the actual looks of the food on offer, but rather what people would like the food to look like. [1] Nice video though, I'm only used to shops having
108.
by chha 3y ago
Also reminded me of European Air War and Total Air War. Loved how you could affect the campaigns, at least to a certain extent.
109.
Code Kept Secret for Years Reveals Its Flaw–A Backdoor(wired.com)
3 points by chha 3y ago|0 comments
110.
Twitter unveils X logo to replace blue bird(bbc.com)
83 points by chha 3y ago|162 comments
111.
Weirdly, a NASA official says fixed-price contracts do the agency “no good”(arstechnica.com)
3 points by chha 3y ago|2 comments
112.
Malicious VSCode extensions with more than 45k installs(blog.checkpoint.com)
317 points by chha 3y ago|186 comments
113.
by chha 3y ago
Absolutely, but I fear such a solution would lead to a lot of people signing just to be compliant, not beacause they did a thourough job reviewing. If we could connect it to a reputation somehow, it might have something going for it
114.
by chha 3y ago
Yeah, that could work, at least for larger orgs. Not so sure the majority of users would comply with such sn extension, or even have the knowledge to review for eg. security issues. Having a working PKI solution that could work regardless o
115.
by chha 3y ago
Norway here, but I didn’t get it. First guess was that foehn meant foot/feet, but I was way off according to the other comments
116.
by chha 3y ago
This is a universal problem in most of package repositories regardless of language. PKI is difficult, and for it to work the users have to do some homework and place trust somewhere.
117.
by chha 3y ago
> I am unsure whether a jet liner can descend to a breathable altitude (say, 10000 feet) and feed "fresh", or ambient, air into the plane. That seems like a nice redundancy to have and I wonder how realistic it would be to impl
118.
by chha 3y ago
Even 100.000.000 isnt all songs. There is still loads of music missing, with changes hppening every now and then as labels pulls specific band lineups not covered by their agreements with Spotify. There is nothing by eg The Blues Brothers o
119.
Is MuseHub Malware?(old.reddit.com)
2 points by chha 3y ago|0 comments
120.
RFC for 700 HTTP Status Codes(github.com)
4 points by chha 4y ago|1 comments

More ›