miduil

8 ms·

91.
by miduil 3y ago
I can't find it anymore, but I remember seeing some article or infographic about how many 10 thousand people are loosing sleep whenever one person is driving with a loud pipe through an urban area at night. I get why you love your pipe
92.
by miduil 3y ago
Lasse's account was restored
93.
by miduil 3y ago
> is that now that we have a POC, we need a way to check for vulnerable servers. You misunderstand me, the "need to check for vulnerable servers" has nothing to do with the PoC in itself. You want to know whether you're vu
94.
by miduil 3y ago
*host key fingerprint, but I assume what you've meant. It's practically a good backdoor then, crypto graphically protected and safe against "re-play" attacks.
95.
by miduil 3y ago
> It doesn't matter. To understand the exact behavior and extend of the backdoor, this does matter. An end to end proof of how it works is exactly what was needed. > A way to check if servers are vulnerable is probably by queryin
96.
by miduil 3y ago
It's a POC nevertheless, it's a complete implementation of the RCE minus obviously the private key.
97.
by miduil 3y ago
Super impressed how quickly the community and in particular amlweems were able to implement and document a POC. If the cryptographic or payload loading functionality has no further vulnerabilities, this would have been also at least not int
98.
by miduil 3y ago
Computers with internet access can be remote controlled. Usually computers are like houses, only if you have the right key or are invited you are allowed to enter. The remote controller uses apps that combines other apps to allow remote con
99.
by miduil 3y ago
no
100.
by miduil 3y ago
Gotta love that they're now suggesting to downgrade to 5.4.6 with a link to the now defunct (and under control of the same authors) repository. They should have probably released hash and version of a not affected source tarball.
101.
by miduil 3y ago
Ah, thanks for correcting me there - really weird that this isn't visible from the profile itself. Not even from the organization. The following page for each other show both accounts suspended indeed. https://github.com&#x2
102.
by miduil 3y ago
Not true, the original author wasn't suspended: https://github.com/Larhzu https://github.com/JiaT75 was suspended for a moment, but isn't anymore?
103.
by miduil 3y ago
This is getting addressed here: https://github.com/google/oss-fuzz/issues/11760
104.
by miduil 3y ago
It's a bit of a different scale/topic, but I found the discourse here quite insightful. It talks about the method "Restorative Justice" by going through a concrete example where this was lacking. Really heartwarming to l
105.
by miduil 3y ago
That's an interesting write-up, I wonder how this would look for other big Discourse communities such as NixOS.
106.
by miduil 3y ago
I can't believe how it is working in such a big structure with just GitHub alone. GitLab with groups/subgroups and also integrated sourcegraph seems such more practical at this scale.
107.
by miduil 3y ago
Source?
108.
by miduil 3y ago
Software Company HashiCorp Is Weighing a Potential Sale (bloomberg.com) 65 points by MajimasEyepatch 1 day ago | 49 comments https://news.ycombinator.com/item?id=39721381
109.
Amazon Proposes Pkernfs for Better Handling Hypervisor Live Updates(phoronix.com)
1 points by miduil 3y ago|0 comments
110.
by miduil 3y ago
The way I've set this up for our macos devs at work was a script that runs nix builds inside docker-for-desktop using the official nixos upstream docker image (and some tricks to get ssh forwarding, filesystem mounts, ...) working. Wor
111.
by miduil 3y ago
Thank you Skyhook Holdings, Inc.
112.
by miduil 3y ago
If you just put `set -o errexit -o pipefail -o nounset` in the first line after the shebang your script will have proper error-handling as well. Currently if any fails, notify-send will still be triggered.
113.
by miduil 3y ago
Hm, need to give this* a try with NixOS cross compilation for macos. If I could pre-build nix packages for macOS developers on linux build hosts that'd be awesome. *the building blocks
114.
by miduil 3y ago
Wow, this is great news. I really hope that the community will find ways to sustainable fund this project, being suddenly run a lot of innovative CUDA based projects on AMD GPUs is a big game-changer, especially because you don't have
115.
3D Printing Failure Detection with GPT4 Vision(github.com)
1 points by miduil 3y ago|0 comments
116.
by miduil 3y ago
Totally, some practical use of that here as well: https://dpc.pw/posts/nix-users-you-can-start-using-rust-scri...
117.
POC of Gitlab Account-Take-Over CVE-2023-7028(twitter.com)
2 points by miduil 3y ago|0 comments
118.
It Was John Glenn Who Popularized the Word "Glitch" (2019)(smithsonianmag.com)
3 points by miduil 3y ago|0 comments
119.
by miduil 3y ago
tried this out last year at the computer game museum and it is definitively very much fun to play, even if you're worse at pong than your enemy you might win if the enemy receives the pain by surprise. i also received some minor skin d
120.
by miduil 3y ago
I know there is always the balance between fault tolerance, which is a highly valued good for a car, and complying with specs and how things "should be". Certainly, requesting DHCP and re-authenticating with a Wi-Fi router is noth

More ›