mmsc

26 ms·

1. 331.▲
   by mmsc 2y ago

   I’m a fan but this is such a turnoff: That worked too, albeit not quite as we expected. We got a nightly build, rather than the latest release 124, and it pulled in some unexpected dependencies such as Python 3 and Wayland – although Ne
2. 332.▲
   by mmsc 3y ago

   Since Palo Alto are receiving all of this telemetry with GCP, couldn’t someone just send them terabytes of data to effectively DoS their bank account?
3. 333.▲
   Fixing typos and breaching Microsoft's perimeter(johnstawinski.com)

   5 points by mmsc 3y ago|0 comments
4. 334.▲
   by mmsc 3y ago

   In general I agree about it not providing security benefit, but they can reduce the exposure of eavesdropping like DNS leaking browsing patterns, and so on. Sure, you’re now leaking your DNS traffic to the VPN server, but in my opinion it’s
5. 335.▲
   by mmsc 3y ago

   What code review?
6. 336.▲
   by mmsc 3y ago

   So he published a book using his own private email. It doesn’t seem like he was really trying to keep it a real secret.
7. 337.▲
   by mmsc 3y ago

   You’re right. They wouldn’t ask any questions at all, and just send the money.
8. 338.▲
   by mmsc 3y ago

   Maybe not the right place to ask, but what’s the tech scene like in Taiwan? Other than TSMC, are there any interesting things going on? I’m in Kaohsiung but haven’t investigated the scene.
9. 339.▲
   by mmsc 3y ago

   I was shadow banned for some time when using Opera’s proxy once. Was quite annoying since I didn’t know for awhile, but when I contacted them they removed the ban immediately.
10. 340.▲
    by mmsc 3y ago

    Are the comments just bots, or do they really believe that the EU said “Google can’t put a clickable link on the Google search result!” like that? Google chose to do it this way.
11. 341.▲
    by mmsc 3y ago

    Does sshd normally run with any LANG env set when it’s run as a daemon?
12. 342.▲
    by mmsc 3y ago

    So DPRK, Russia, or China, right? The USA and any country affiliated with it can just seize servers.
13. 343.▲
    by mmsc 3y ago

    The irony of it all is that those middleware solutions end up being ridden with vulnerabilities. Can’t wait until some Fortune 500s get popped and all their encrypted traffic is trawled through.
14. 344.▲
    Brendanwall.jpg(brendangregg.com)

    4 points by mmsc 3y ago|0 comments
15. 345.▲
    by mmsc 3y ago

    Cool stuff, reminds me of “a Canadian payroll dependency chart” https://news.ycombinator.com/item?id=38843388
16. 346.▲
    by mmsc 3y ago

    If there is evidence that AT&T’s DirecTV was breached in 2021, what could the repercussions for them be?
17. 347.▲
    by mmsc 3y ago

    Indeed. Although, it wouldn’t be abnormal for a security team to have free time, and dedicate it to researching an emerging technology whether it directly contributes to the business goals or not. Of course I’m not talking about a security
18. 348.▲
    by mmsc 3y ago

    Unlike other departments, security teams often don’t have anything to do so this research is a good use of free time.
19. 349.▲
    by mmsc 3y ago

    That’s one way, but they would have had to have used multiple solutions depending on the browser.
20. 350.▲
    by mmsc 3y ago

    Slightly unrelated but when opening this in private browsing mode, the page displays a warning “you have opened this page in incognito mode …” This is the first time I’ve ever seen a page fingerprint me using private mode and tell me about
21. 351.▲
    by mmsc 3y ago

    Yes, you can run Firefox as its own user. I wrote about this about a decade ago; https://www.openwall.com/lists/oss-security/2023/10/24/2
22. 352.▲
    by mmsc 3y ago

    Subjective Cognitive Decline (SCD) is the self-reported experience of worsening or more frequent confusion or memory loss. Lower odds is seemingly a good thing (if you’re somebody that enjoys retaining memory)
23. 353.▲
    by mmsc 3y ago

    I used crtsh to discover certificates which were created in my previous company but I found about 20% of the time it returns some type of error (which is recoverable with a simple retry). Not sure if they fixed that, but I wouldn’t be surpr
24. 354.▲
    by mmsc 3y ago

    It doesn’t require that much water. This is how family homes in the balkans and southern Europe have been cooled for decades. But now it seems at least the balkans is just one big air conditioner
25. 355.▲
    by mmsc 3y ago

    Grab a hose and cover the concrete with water in the morning, get a fan and face it outwards to blow hot air out of the house. Having a sprinkler with a timer which can release just enough water to cover your roof helps too.
26. 356.▲
    by mmsc 3y ago

    http://boards.4chan.org/wg/
27. 357.▲
    by mmsc 3y ago

    I made a tool to track ldap like that [0]. LDAP is a treasure chest of info and great for stalking. for some reason i find it fascinating to see people leaving, and if possible, see how long they worked there for. seeing friends get fired v
28. 358.▲
    by mmsc 3y ago

    Stepping aside for a moment, I chuckled at the ideas of "The Registry", as if it's some Government body in a dystopian world. Thank you for your comment.
29. 359.▲
    by mmsc 3y ago

    Cool bug. Google did not like me setting up a chess.com subdomain, and a couple of weeks later, my domain got flagged for "phishing." - I had to contact them to explain and manually remove it as it affected my whole domain.
30. 360.▲
    by mmsc 3y ago

    I also like to use sudo chattr +a .sh_history to ensure that my shell history file isn’t deleted. Being append-only, it also ensures that some type of timing issue in my shell which means my HISTFILESIZE or the equivalent isn’t set t