mmsc

17 ms·

241.
by mmsc 2y ago
From what I can tell, the vulnerability wasn't even fixed: they just.. changed their spam filter? Whatever that means. So for this to work still, you need to bypass a spam filter. They should just force DMARC and SPF like Google has do
242.
by mmsc 2y ago
It's a common thing: https://www.google.com/search?q=slack+google+saml+vulnerabil...
243.
by mmsc 2y ago
It was supposed to be 1 bug, 50k: I don't know why the "1" got dropped.
244.
by mmsc 2y ago
Some people use tiny Linux VMs to interact with some devices, and then relay whatever they need back to the FreeBSD host. For example wifibox or https://joshua.hu/facetimehd-webcam-linux-vm-macbook-freebsd...
245.
by mmsc 2y ago
One of the problems with suspend/resume is simply: nobody is looking at it or trying to improve it. There is no progress because nobody has tried. The current recommendation is "if suspend/resume doesn't work, disable al
246.
1 bug, $50k in bounties, a Zendesk backdoor(gist.github.com)
1637 points by mmsc 2y ago|417 comments
247.
by mmsc 2y ago
>Are you arguing that 1:5 is good, but 1:4 is bad? No, I'm saying that 1:4 is something to brag about, and 1:5 is even better.
248.
by mmsc 2y ago
Sorry that was a brain zap. Indeed 2023:(
249.
by mmsc 2y ago
>Physicians were initially unaware or dismissive of brain zaps due to limited information and a focus on downplaying the addictive nature of antidepressants. I don't know why. It's a pretty well-known effect of fucking with you
250.
by mmsc 2y ago
(2013)
251.
by mmsc 2y ago
>This is less than the US (though it's very regional within the US), but you don't get to brag about a 1-in-4 obesity rate. Are you sure? >In 2023, over 35 percent of adults in the Netherlands were classed as overweight, mea
252.
by mmsc 2y ago
When the majority of the population is so far gone from being in a healthy weight, promoting healthy food for the masses is not going to help that majority. Yes, walkable cities and so on would be great, and promotion of healthy food and ha
253.
Webcam support on a MacBook running FreeBSD using PCI passthrough(joshua.hu)
1 points by mmsc 2y ago|0 comments
254.
by mmsc 2y ago
Hmm, no but similar. This was about full-scale personal computers.
255.
by mmsc 2y ago
Not only is it a fun exploit, this is also a cool mini-introduction to how caching works for CPUs. I remember a year ago or so there was a submission here which detailed how computers work and are build starting at the tiniest part: startin
256.
by mmsc 2y ago
>He said the average age of anyone arrested for a crime in the U.S. is 37, while the average age of someone arrested for cybercrime is 19. Indeed. So why is it that these billion-valued-companies can so easily be hacked by teenagers? Who
257.
FreeBSD on MacBook Pro Retina 2014(joshua.hu)
2 points by mmsc 2y ago|0 comments
258.
by mmsc 2y ago
> I checked on my laptop what other tables were ordering to get a quick vibe check of the place. I could've just looked around, but it felt cooler to do it on the laptop. I think it would be great if you could go to a restaurant and
259.
by mmsc 2y ago
In general, I would wager that HN prefers intellectual curiosity over overviews. Submission guidelines infer that by stating "Please submit the original source. If a post reports on something found on another site, submit the latter.&q
260.
by mmsc 2y ago
Can the OP's link be changed to the original source, not the advertisement it currently links to? The exploit is documented https://blog.coffinsec.com/0day/2024/08/30/exploiting-CVE-20...
261.
by mmsc 2y ago
I've also never booked a flight through one of the 3rd parties where I couldn't access the booking on the airline's website. Some time again (as discussed in this thread), Ryanair had some spat with resellers. So I had to upl
262.
by mmsc 2y ago
I've never understood the comments on all of the posts like this advising people to never book via a third party. Is it an American thing? I've probably been on around 250 flights in the past 7 years in Europe and I can't rem
263.
by mmsc 2y ago
Your blog 404s when an iPhone user uses lockdown mode. In fact your whole website fails to load.
264.
by mmsc 2y ago
This is a bit meta for me. A year ago a website was posted on here HN which allowed you to visit a random website with an /ideas page. For some reason it would always land me on the same website, which outlined something close to this.
265.
by mmsc 2y ago
Awk is something that I think every programmer and especially every sysadmin should learn. 8 like the comparison at the end and have never heard of nnawk or bbawk before. I recently made a dashboard to compare four versions of awk output to
266.
by mmsc 2y ago
Bitwarden can be used with groups, or even Google Sheets or something with proper access control (both are just kv after all... both should require 2fa, and both include auditing) There's no good solution imo for what I think you'
267.
by mmsc 2y ago
Add it to the list: https://github.com/disclose/research-threats
268.
by mmsc 2y ago
This article talks about using squid. I wouldn't recommend Squid for this, as they're understaffed and took years to fix critical vulnerabilities I found[0]. Using ssh-over-https with ssh -R works wonders everywhere though. You co
269.
Show HN: Awk Version Comparison Dashboard(megamansec.github.io)
4 points by mmsc 2y ago|0 comments
270.
by mmsc 2y ago
Another one from Australia from over a decade ago: https://amp.smh.com.au/technology/super-bad-first-state-set-...

More ›