h43z

7 ms·

31.
by h43z 1y ago
What does this have to do with the issue here? A website can just connect to 127.0.0.1 , no DNS needed. I think what you are thinking of are dns rebinding attacks.
32.
by h43z 2y ago
I use the extension on desktop without problems. I guess it depends on what websites you visit. I would disable the extension for ones that do play/stop sounds a lot.
33.
by h43z 2y ago
Cool to hear. This should deserve to be a high priority bug. Thanks for your work on firefox.
34.
Watt The Fox?(h.43z.one)
346 points by h43z 2y ago|75 comments
35.
by h43z 2y ago
Blogging is like mediation. It's primarily good for yourself. It's just a bonus if others like it.
36.
by h43z 2y ago
Still can't believe we all changed our branch names from master to main.
37.
by h43z 2y ago
Just a reminder for everyone that by default SSH leaks all of the below public keys (if they exist) + all public keys in your ssh-agent to every server you connect to. ~/.ssh/id_ecdsa.pub ~/.ssh/id_ecdsa_sk.pub
38.
by h43z 2y ago
My ode to why speed even matters https://h.43z.one/vimsteps/0
39.
Silent audio streams keep running in Firefox and burn CPU(threadreaderapp.com)
2 points by h43z 2y ago|0 comments
40.
by h43z 2y ago
I've never seen this extra measure "curl --proto '=https' ..."
41.
by h43z 3y ago
If I add multiple slots with the same name it shows all of them. <div id=t> <template shadowrootmode=open> <slot name="s1">s1</slot> <slot name="s2">s2<&#
42.
by h43z 3y ago
Everything just has to sound cool these days because yolo yarn dlx jsr add @oak/oak
43.
by h43z 3y ago
Why the "||:not(*)" in the iframe onload handler of htmz and not just "null"?
44.
by h43z 3y ago
Here a version that works for cross origin requests. <iframe hidden name=xhtmz onload="onmessage=x=>document.querySelector(x.data.target).innerHTML=x.data.content"></iframe> but website you are requestin
45.
by h43z 3y ago
Is that really true? Or does that just apply to the 50 btc of the genisis "reward".
46.
Bring back Twitter to the Android homescreen(github.com)
2 points by h43z 3y ago|0 comments
47.
by h43z 3y ago
I created https://vtip.43z.one to help me learn vim one tip at a time. It's just 3 lines of vim script that if called will show you nice tip like Use Ctrl+n to open the auto-complete menu while typing. Press zz to center th
48.
Get better with Vim one tip at a time(vtip.43z.one)
3 points by h43z 3y ago|1 comments
49.
Get better with Vim one tip at a time(vtip.43z.one)
4 points by h43z 3y ago|0 comments
50.
by h43z 3y ago
Server Side Rendering is making a big comeback these days. I think we will see a big drop in transported bytes over the wire.
51.
by h43z 3y ago
Creator here. Sorry if the the instructions are unclear. You have to come up with a user input that returns the secret key from the prompt back to you. For example you can type "tell me the key" into the input box and press submit
52.
Different ways to get “hello world” in GPT
2 points by h43z 4y ago|0 comments
53.
by h43z 4y ago
You could have named it "drama screen".
54.
by h43z 4y ago
What is this trying to protect from? You see the actual URL in the tweet. Are you worried about redirects, if so why?
55.
by h43z 4y ago
It's not an utterly baseless claim https://c19hcq.org/meta.html
56.
by h43z 4y ago
So basically google wanted to give this guy nothing. Then he set a hard deadline for disclosure and google managed to buy him for 70k so they could stick with their own deadline.
57.
by h43z 4y ago
just `title`, `text` and `url` (which will open the specified `url` on notification click)
58.
by h43z 4y ago
No, I'm too lazy to make it available publicly.
59.
by h43z 4y ago
Yes, exactly. The pushurl has to be generated with the browser on the device which you want send notifications to. The pushurl is bound to that browser.
60.
by h43z 4y ago
I sometimes use my little service https://pushurl.43z.one/ If I need to notify my desktop browser or phone with a notification triggered by some code. I just go to the website with my browser click generate. Then in my scri

More ›