ryan-c

7 ms·

61.
by ryan-c 2y ago
They probably can if you ask, but most people don't use wired networks at home.
62.
by ryan-c 2y ago
Mine definitely supports Ethernet and WiFi with password, both what it connects to and the SSID it broadcast, though I had to change some settings on my AP (running OpenWRT) to get it to work.
63.
by ryan-c 2y ago
I'm not aware of anything that needs 512 bit RSA for compatibility. At minimum generating the keys should go away.
64.
by ryan-c 2y ago
The link had been to an unofficial upload. I guess the uploader took it down after EMF's official version was posted.
65.
by ryan-c 2y ago
I've fixed the link.
66.
by ryan-c 2y ago
The Ars Technica article may also be of interest - it has a statement from the company. https://arstechnica.com/security/2024/08/home-energy-system-...
67.
by ryan-c 2y ago
Yeah, this is pretty much what I did, except the demo account had an employee's email address in the details so I knew the format.
68.
by ryan-c 2y ago
They do have a vulnerability policy page, but that was harder to find than figuring out an email address. I did suggest they implement security.txt, as it would have made things easier.
69.
by ryan-c 2y ago
Oh, yeah, I'd forgotten about the NDAs, those are a big NOPE for me.
70.
by ryan-c 2y ago
In the footnotes: > Someone once asked me, as commentary on my ability to figure out email addresses, “Are you a Hacker or in sales?” Just a bit of OSINT and educated guessing.
71.
by ryan-c 2y ago
I think very few customers had ever generated API keys, and as best I can tell they made an allowlist for them. One of my suggestions to them was to switch to elliptic curve, but I imagine RSA 4096 "just worked". I suspect they&#x
72.
by ryan-c 2y ago
I'm not male and I use gender neutral pronouns. The bugs I find are usually just ones I stumble across, I don't go looking for them. Bug bounty programs generally aren't worth the trouble for me anyway - I have to file taxes
73.
by ryan-c 2y ago
chinese remainder theorem implementations fail if there are duplicate factors
74.
by ryan-c 2y ago
These get styled such that they're black-on-black until you click on them. detail/summary doesn't work like that. Maybe with wild css hacks?
75.
by ryan-c 2y ago
Convenience? I have a "spoiler" role for rST, for example, which works like this: # state class to contain the counter class _spoiler: count = defaultdict(lambda: 0) def id(src): _spoiler
76.
by ryan-c 2y ago
ROFL. Good find. I'd forgotten I left it running that long, I thought it was probably just overnight. Nowadays when I want to brute force something like that, I just rent a couple hundred cores for an hour. (and pray to the gods I don&
77.
by ryan-c 2y ago
Imagine my surprise at opening the comments and seeing a reference to some obscure art I made a dozen years ago.
78.
by ryan-c 2y ago
The code that checked for DRM support set the "distinctiveIdentifier" config option to "not-allowed" specifically to avoid being useful for tracking. Most of the stuff that people think is "fingerprinting" is j
79.
by ryan-c 2y ago
If I recall correctly, I downloaded all of them, then pruned any that appeared to have non-deterministic behaviour (for example, using random), then used the offline testing script[0] helpfully provided by the site. It was the first piece o
80.
by ryan-c 2y ago
> LGBTQ+ rights? Think of the children. A lot of people prefer dead kids to queer kids, unfortunately.
81.
by ryan-c 2y ago
or... they could hash the images and use an error correcting code to allow recovery of some lost files?
82.
by ryan-c 2y ago
I expect this bullshit still works: https://rya.nc/files/librejs-poc.html <script id="harmlessNullScript" type="text/javascript"></script> <skript id="derp&qu
83.
Unishox2: Compression for Unicode Short Strings(github.com)
2 points by ryan-c 2y ago|0 comments
84.
by ryan-c 2y ago
QR codes use a series of (mode, length, characters) segments - a given code can switch between modes. I think for QR codes the length encoding is mode-specific.
85.
by ryan-c 2y ago
Crude static Huffman example, that could definitely be improved: 5 bits 0 0000-1111 acde fghi lmno rstu 7 bits 10 00000-11111 bjkp qvwx yzAB CDEF GHIK LMNO PRST UVWY 7 bits 110 0000-1111 JQXZ 0123 4567 89/.
86.
by ryan-c 2y ago
You don't need to. You compute a static huffman tree over fixed probabilities you've estimated or generated from a corpus.
87.
by ryan-c 2y ago
I'm confused about the wheelchair thing - is she expecting them to automatically provide a wheelchair for her due to age, or is she requesting one explicitly?
88.
by ryan-c 2y ago
I've been surgically modified such that my body doesn't produce sex hormones in any significant quantity on its own. As a substitute, I use separate transdermal gels containing testosterone and estrogen, which have relatively shor
89.
by ryan-c 3y ago
I got business cards made that politely explain why my appearance may not match their expectations based on my name, and that has been quite effective at diffusing such problems.
90.
by ryan-c 3y ago
Nobody seems to care that I leave my middle name off my tickets and book with a sex doesn't match my ID, even internationally.

More ›