progval

6 ms·

61.
by progval 3mo ago
A Mastodon instance used it: https://www.theverge.com/2024/2/12/24071036/queer-af-mastodo...
62.
by progval 3mo ago
What does it mean for a DNS resolver to be "integrated with CDNs"? And why does that affect streaming speed negatively?
63.
by progval 4mo ago
https://www.scientificamerican.com/article/google-engineer-c... it was before ChatGPT
64.
by progval 4mo ago
There is some recent progress on https://github.com/rust-lang/crates.io/issues/326
65.
by progval 4mo ago
It also means Diffusion in the context of images and videos.
66.
by progval 4mo ago
> The IRCv3 WG was convened near the end of 2016, so 9 or so. SASL support in IRC predates IRCv3.
67.
by progval 4mo ago
> Replacing the server-to-server protocol sounds a lot like it's not really IRC protocol any more There hasn't been a standard server-to-server protocol in like three decades. Even RFC 2813 only specifies one of the protocols i
68.
by progval 4mo ago
This is Pyodide, not Python.
69.
by progval 4mo ago
> Netsplits It's not inherent to the protocol. https://ergo.chat/ does not have netsplits (from having a single server) and https://github.com/Libera-Chat/sable replaces the server-to-server pr
70.
by progval 4mo ago
Fun, but there is a mistake in https://docs.rs/misfortunate/latest/misfortunate/struct.Maxw... which claims: "yet violates the social contract of these two combined. A Maxwell is not equal to anything (e
71.
The Infosec Phrasebook(nesbitt.io)
45 points by progval 4mo ago|6 comments
72.
by progval 4mo ago
The paper ( https://hannesweissteiner.com/pdfs/frost.pdf ) cites two earlier papers (from 2014 and 2017) that did the same for HDDs.
73.
by progval 4mo ago
The random times don't have to be uniformly distributed. Though it's enough for attackers to know the distribution to de-noisify it.
74.
by progval 4mo ago
Nothing in the article says the cameras are inside.
75.
by progval 4mo ago
Didn't work last time https://www.theguardian.com/uk-news/2020/nov/06/companies-ho...
76.
by progval 4mo ago
These? https://nitter.net/VictorTaelin/status/2043810543035920672 / https://nitter.net/VictorTaelin/status/2059327831679578511
77.
by progval 4mo ago
Are there estimates of their failure rate?
78.
by progval 5mo ago
According to https://bugzilla.mozilla.org/show_bug.cgi?id=1950764#c23 , it is not getting fixed.
79.
by progval 5mo ago
Microsoft has you covered: https://notes.zachmanson.com/copilot-edited-an-ad-into-my-pr... / https://news.ycombinator.com/item?id=47570269
80.
by progval 5mo ago
It even includes email providers with a spam filter.
81.
by progval 5mo ago
They don't have to publish a working exploit as soon as the embargo is broken, though.
82.
by progval 5mo ago
"sudo" in "sudo echo 3 > /prox/sys/vm/drop_caches" does not do anything because only runs echo, not the write. And if a machine is already exploited, it's too late to do just that. You need to
83.
by progval 5mo ago
There is no evidence it is actually coming from Meta. The Reddit researcher the article cites generated their entire "analysis" in three days using Claude: https://news.ycombinator.com/item?id=47659552 Their websi
84.
by progval 5mo ago
Common enough that Mozilla has full-time engineers working on triaging compatibility issues, so they can either be fixed in Firefox or reported to webmasters. Here are the reports they get: https://webcompat.com/issues
85.
by progval 5mo ago
Some of them will be paid by subscription and have ads
86.
by progval 5mo ago
> pause OSS contribution and usage What do you mean by that? They can't possibly stop using Linux/Kubernetes/Chrome (including Edge)/almost all programming languages/nginx/...
87.
by progval 5mo ago
Ah indeed, it can be used to overwrite the page cache for files on read-only volumes.
88.
by progval 5mo ago
Yes. Alpine in rootless Podman doesn't work (after replacing "/usr/bin/su" with "/bin/su" in the .py, running the .py just doesn't do anything) while it does in Debian in rootless Podma
89.
by progval 5mo ago
So this replaces a SUID binary, in order to run as PID 0. The website claims it can escape "Kubernetes / container clusters" and "CI runners & build farms" but I don't see anything supporting the claim it c
90.
by progval 5mo ago
The binary "zip" isn't the exploit, it's the shellcode. The exploit is the rest, which changes the code of a SUID executable (su).

More ›