mmsc

34 ms·

391.
by mmsc 3y ago
I don't really understand how Apple can say they still support these older devices when there are known vulnerabilities which they don't patch. I just wrote something similar: https://joshua.hu/apple-ios-patched-un
392.
by mmsc 3y ago
The problem with "${arr[@]}" only exists on bash 3 and before, since bash 4 4.4 fixed it: $ bash --version GNU bash, version 4.3.48(1)-release (x86_64-pc-linux-gnu) $ declare -A arr $ set -u $ "${arr[@]}&q
393.
by mmsc 3y ago
Shellcheck is great. Unfortunately, its checks pale at the idiosyncrasies of per-version bashism. For example: set u ignored_users=() for i in "${ignored_users[@]}"; do echo "$i" done passes shellcheck&#
394.
The End of Innocence: What Happened After Apple Fired Steve Jobs(wired.com)
2 points by mmsc 3y ago|0 comments
395.
Cosmo, the Hacker 'God' Who Fell to Earth(wired.com)
3 points by mmsc 3y ago|0 comments
396.
by mmsc 3y ago
FB Purity is a dedicated extension for that: https://www.fbpurity.com/
397.
Ask HN: Is there ever a reason to expose an SQL Server to the internet?
4 points by mmsc 3y ago|4 comments
398.
by mmsc 3y ago
Setting up shell companies with fake employees, addresses, and so on is generally considered fraud: https://www.justice.gov/usao-sc/pr/charleston-man-and-busine...
399.
by mmsc 3y ago
It's ok to be wrong; it's not ok to change your original writeup and continue to insist that you have been right all along I removed the section about the bash restriction (which was not particularly important), but the content
400.
by mmsc 3y ago
If you only look at the esoteric issues, then yes, it would seem that they're unlikely to be leveraged. However, from the top 5: Chunked Encoding Stack Overflow X-Forwarded-For Stack Overflow Cache Poisoning by Large Stored Res
401.
by mmsc 3y ago
They're understaffed.
402.
by mmsc 3y ago
Technical tl;dr: The DS record was cached for 24 hours but the DNSKEY record was cached for 1 hour. The DS and DNSKEY records were rotated due to an annual rotation of the signing key. The (cached) old DS record referenced the old DNSKEY.
403.
by mmsc 3y ago
you are just exploiting bash's argument expansion /etc/sudoers does not use "bash's argument expansion". to feed some additional shell stuff to bash /after/ the logrotate command Wrong.
404.
by mmsc 3y ago
I heard the same thing from Andrew Davie of BEAM Software (Melbourne House), who developed Super Glove Ball. Since Nintendo refused to provide the company with any meaningful documentation, they had to come up with various hacks for framera
405.
by mmsc 3y ago
With the following test.sh: #!/bin/bash case "$SSH_ORIGINAL_COMMAND" in *) sudo $SSH_ORIGINAL_COMMAND ;; esac and the ssh-based restriction: command="/tmp/test.sh&q
406.
by mmsc 3y ago
OP here: I never said it's something wrong with logrotate, ubuntu, ssh, or sudo. It's a thought challenge with a guide, and could be a stage in a CTF challenge to get root. It's "something wrong" with the configurat
407.
by mmsc 3y ago
Written Loyd Blankenship of Legion of Doom.
408.
by mmsc 3y ago
I would argue that it has flown under the radar because it has only been contextualized with respect to Chrome and iOS. The issue has and continues to affect many other critical places, including server-side image processing services.
409.
by mmsc 3y ago
It's occuring on the web application ( https://messenger.com/ and https://facebook.com/ )
410.
by mmsc 3y ago
I've updated OP.
411.
Facebook Messenger now limits WebP file attachments
13 points by mmsc 3y ago|8 comments
412.
by mmsc 3y ago
Thank you for the response! I read "allow the rest" to mean "the rest of everything", rather than "the rest of the protocols". Based on your explanation, does that mean if the restriction was block in quick
413.
by mmsc 3y ago
The final rule: pass in quick on $ATTACKER_IF inet6 label "Allow the rest of IPv6" should probably be pass in quick on $VICTIM_IF inet6 label "Allow the rest of IPv6" right?
414.
Are the BSDs dying? Some security researchers think so (2018)(csoonline.com)
2 points by mmsc 3y ago|2 comments
415.
Speeding up NMAP service scanning 16x(joshua.hu)
2 points by mmsc 3y ago|0 comments
416.
by mmsc 3y ago
I like the changing of the default umask, although it probably shouldn't be 077. Is acl needed over, say, chown?
417.
How I Hacked Hacker News (2009)(news.ycombinator.com)
2 points by mmsc 3y ago|0 comments
418.
Everything that uses configurations should report the values they are using(joshua.hu)
3 points by mmsc 3y ago|0 comments
419.
Harbian-audit: Hardened Debian GNU/Linux distro auditing(github.com)
4 points by mmsc 3y ago|0 comments
420.
by mmsc 3y ago
This is called a canary and can be used in so many places: https://blog.thinkst.com/2022/09/sensitive-command-token-so-...

More ›