mmsc

6 ms·

61.
by mmsc 7mo ago
`dom.text_fragments.enabled` to remove "Copy link to highlight" on right-click. Yes, it can be useful, but I never use it and the very rare occasion of needing to use it when opening a page, I can just search it myself. `privacy
62.
by mmsc 8mo ago
In addition to completely disabling AI, I found the following setting extremely convinent to disable in about:config. They clutter up my right-click on a link or on text selection. browser.translations.select.enable dom.text_fragments
63.
by mmsc 8mo ago
Spaghetti code was always a thing though
64.
by mmsc 8mo ago
This argument doesn't hold because paid cryptography libraries aren't any better and equally provide their code as-is.
65.
by mmsc 8mo ago
Instagram blocks me from sending Facebook.com in DMs to people. No idea why and support doesn't help.
66.
by mmsc 8mo ago
Orwell's Down and Out in Paris and London documented some of the swear words of his time [0]. It's interesting reading them as a native speaker, as there's so few that I could even begin to guess what they mean. [0]: https:&
67.
by mmsc 8mo ago
No. HTTPS certificates are being abused for non-https purposes. CAs want to sell certificates for everything under the sun, and want to force those in the ecosystem to support their business, even though https certificates are not designed
68.
by mmsc 8mo ago
Suing for negligence and friends is how car companies -- when it is found out they've built something highly unsafe/dangerously broken -- happens. I don't see the difference.
69.
by mmsc 8mo ago
Yes. These companies should be shut down in the name of national security, seriously.
70.
by mmsc 8mo ago
Every single Ivanti product (including their SSL-VPN) should be considered a critical threat. The fact that this company is allowed to continue to sell their malware dressed-up as "security solutions" is a disaster. How they haven
71.
by mmsc 8mo ago
https://interactives.lowyinstitute.org/features/one-china-co...
72.
by mmsc 8mo ago
No it's not and if you do believe that, you are taking an overly reductionist viewpoint. 99% countries, as they say, "acknowledge China's viewpoint".
73.
by mmsc 8mo ago
If the political messages said "gas the Jews", "exterminate the Ukrainians and give Ukraine to Russia", and "Taiwan has and always will be a province of china", you probably wouldn't use notepad++.
74.
AISLE’s autonomous analyzer found all CVEs in the January OpenSSL release(aisle.com)
197 points by mmsc 8mo ago|130 comments
75.
by mmsc 8mo ago
mocp is all you need
76.
The end of the curl bug-bounty(daniel.haxx.se)
17 points by mmsc 8mo ago|0 comments
77.
by mmsc 9mo ago
https://en.wikipedia.org/wiki/EBay_stalking_scandal
78.
by mmsc 9mo ago
Nothing? Don't forget when their security team sent pigs heads to people and terrorized them:)
79.
by mmsc 9mo ago
The article was clearly written by an LLM. It would make no sense to use https for a challenge like that, indeed.
80.
Investigating shared dictionaries and ChatGPT breakage in Firefox(joshua.hu)
3 points by mmsc 9mo ago|1 comments
81.
Gixy-Next: Nginx Configuration Security and Hardening Scanner(gixy.io)
3 points by mmsc 9mo ago|0 comments
82.
Iranian Censorship, Bypasses, Browser Extensions, and Proxies(joshua.hu)
3 points by mmsc 9mo ago|0 comments
83.
by mmsc 9mo ago
(2024). There are other vulnerabilities in that library too. I reported some (with some PRs) https://github.com/indutny/elliptic/pull/338 , https://github.com/indutny/elliptic/pull&#x
84.
by mmsc 9mo ago
fwiw, the tool is `gixy`, now called `gixy-next`: https://github.com/megamansec/gixy-next
85.
by mmsc 9mo ago
Metropolis becoming public domain in 2026 couldn't be more perfect, since the film is set in 2026. It is eerily similar to our times, too, unfortunately.
86.
by mmsc 9mo ago
This AI usage is like a turbo-charger for the Dunning–Kruger effect, and we will see these policies crop up more and more, as technical people become more and more harassed and burnt out by AI slop. I also recently wrote a similar policy[0]
87.
by mmsc 9mo ago
>Memory exfiltration, potentially containing passwords and secrets and potentially not, too. totally overhyped
88.
by mmsc 9mo ago
It wasn't an RCE.
89.
by mmsc 9mo ago
Does anybody know what the situation is like in China these days? What's the most commonly used tool for proxying now? Does basically all network leaving China still get ratelimited at a few megabytes per second?
90.
by mmsc 10mo ago
>one for tourists (requires a local SIM card only available in a specific hotel in Pyongyang). I do not think that exists. I imagine the diplomats and other foreigners living there will have this, though. When I was there two times (in

More ›