nneonneo

38 ms·

511.
by nneonneo 3y ago
I wanted to write some proper feedback on the GitHub repo, but they've closed issues and PRs. Until they open it back up again, here are my thoughts on the spec: - Mozilla is already publicly and officially opposed ( https://
512.
by nneonneo 3y ago
> The Clipper project allows you to easily debug HTTPS traffic of unmodified native applications, completely unprivileged (on Linux), without introducing any application-level tampering. It allows you to attach Chrome Dev Tools to most a
513.
Clipper: TLS key interception for native debugging(github.com)
5 points by nneonneo 3y ago|1 comments
514.
by nneonneo 3y ago
You’re hoping .io is safer than most. It’s not exactly operated by a big or stable country. Ownership could change and the new owners could be arbitrarily capricious.
515.
by nneonneo 3y ago
Worth pointing out that we recently discovered an RCE in RestrictedPython that affects Redash: https://github.com/zopefoundation/RestrictedPython/security/... This should further emphasize the need to isolate
516.
by nneonneo 3y ago
I spent my high school years with chntpw ( http://www.chntpw.com/download/ ) on a bootable floppy in my backpack (later, a bootable USB), for those times when a certain machine needed to be "liberated" from res
517.
by nneonneo 3y ago
Leaks also happen accidentally, e.g. by employees copy-pasting sensitive data or code into ChatGPT or using Copilot. Although that may not result in a breach, it certainly opens up legal and IP concerns for Google.
518.
by nneonneo 3y ago
Also see Unicorn ( https://www.unicorn-engine.org/ ), a QEMU-based emulator-as-a-library that handles a wide range of processors (ARM, AArch64, x86, x64, PowerPC, MIPS, SPARC, …) and comes with bindings for many popular langu
519.
by nneonneo 3y ago
Yes, that’s the intent: using single quotes at both levels will prevent either your shell or the remote shell from expanding the name, so you can interact with a file name containing a literal $.
520.
by nneonneo 3y ago
If you do need single quotes in the inner command, you can use the "'" trick: ssh host -- ls "'"'folder$name'"'"
521.
by nneonneo 3y ago
Rather than choosing at random, I like to pick names that have some relation to the device in question, e.g. "Pichu" for a tiny mobile device, "Snorlax" for the big slow machine, "Articuno/Zapdos/Moltres&q
522.
by nneonneo 3y ago
Lots of data. Police departments in San Francisco, New York and London saw pronounced drops in iPhone theft rates shortly after Activation Lock was introduced. https://archive.nytimes.com/bits.blogs.nytimes.com/2014&#x2
523.
by nneonneo 3y ago
Yes, many studies were already done on this topic. For example, in the six months after Activation Lock was introduced on iPhones, thefts in San Francisco dropped 38%, compared to the 6 months prior. https://archive.nytimes.com&
524.
by nneonneo 3y ago
They definitely were at the time I found the bug, since I could track some Canadian numbers. However, I don’t know if that’s still the case.
525.
by nneonneo 3y ago
My entry point into this whole fiasco was finding a bug that let anyone track anybody with just a cellphone number: https://arstechnica.com/information-technology/2018/05/servi... In this case, the site was s
526.
by nneonneo 3y ago
> Q. Yeah. What kind of phone do you have? > A. An iPhone. > Q. Good. Good. That’s the best kind of phone. So when you’re on your - - I have an iPhone as well. What a funny exchange of pleasantries in cross examination…
527.
by nneonneo 3y ago
Technically, you should update the offset to the central directory in the Zip footer, along with the offsets to each file header in each central directory entry. If you don’t, the zip file reader has to apply some heuristics to locate the c
528.
by nneonneo 3y ago
There’s already a real achievement called YOLO: “Merged own pull request without code review”. Full list of real achievements here: https://github.com/Schweinepriester/github-profile-achieveme...
529.
by nneonneo 3y ago
If you click the question mark, you get the help page which clarifies the data used: > ~500,000 geo-tagged images from Wikimedia Commons. Each day, a random location is generated, along with five photos within five miles. In a remote are
530.
by nneonneo 3y ago
Unfortunately, given current trends, you're going to get glasses that put ads on top of cute animals instead.
531.
by nneonneo 3y ago
So why do fountain drinks also cost $1.50? Fountain drinks are shipped as concentrated syrup in boxes, costing much less to store and ship.
532.
by nneonneo 3y ago
I answered a question on SO over a decade ago on this topic, back in the Python 2.7 era: https://stackoverflow.com/a/14545364/1204143 One of these days it would be nice to make an unofficial Python reference book
533.
by nneonneo 3y ago
I've literally started using Word and Excel less often because of just how long it takes them to start up. Like, I just want to write a quick document or edit my CV, why do I have to sit here and wait for 10-20 seconds?? Electron apps
534.
by nneonneo 3y ago
On the flip side, I recently visited a local tourist attraction, where a visitor asked me to take a photo for him - and then promptly had to spend 2 minutes deleting files on his phone because he’d literally run out of storage space and his
535.
by nneonneo 3y ago
Well, that and you’re optimizing for a small number of console models vs. a large number of PC configurations. Further, the piracy situation on PC is much worse (from the developer’s POV) than on consoles. These factors might explain why de
536.
by nneonneo 3y ago
I think you have to use `pbfilter vipe`, as the argument to pbfilter is inserted into the middle of the pipe.
537.
by nneonneo 3y ago
Per the article, Postgres has many, many global variables, many of which track per-session state; much session state is “freed” via process exit rather than being explicitly cleaned up. Switching to CLONE_VM requires these problems to all b
538.
by nneonneo 3y ago
Try out the "classic" player for a cooler UI: https://cable.ayra.ch/modplayer/
539.
by nneonneo 3y ago
Interesting, the poster was named "Smudge" when I first opened the link a few minutes ago, but is now named "Blank". Perhaps they read HN? (I'm not giving anything away that isn't already public, by virtue of t
540.
by nneonneo 3y ago
Come to think of it, package registries are sort of “superglobal” in many languages. It’s not entirely far-fetched to imagine a language in which variables themselves can be super-global. Heck, MUMPS global variables are immediately persist

More ›