tatersolid

8 ms·

91.
Against the Protection of Stocking Frames(ethanmarcotte.com)
1 points by tatersolid 1y ago|0 comments
92.
Subverting code integrity checks to locally backdoor Signal, 1Password, Slack(blog.trailofbits.com)
9 points by tatersolid 1y ago|0 comments
93.
by tatersolid 1y ago
Commercial SQL databases have been doing predicate push-down (even on joins) since the 1990s at least. It’s a table-stakes feature.
94.
Weaponizing image scaling against production AI systems(blog.trailofbits.com)
494 points by tatersolid 1y ago|131 comments
95.
by tatersolid 1y ago
How would you handle “company name” or other common phrases in search? Log 1M documents every time that phrase appeared in a copilot response for any user?
96.
by tatersolid 1y ago
The overwhelming majority of large assets (images, audio, video) will receive near-zero benefit from using the rsync algorithm. The formats generally have massive byte-level differences even after small “tweaks” to a file.
97.
by tatersolid 1y ago
All the large cloud-hosted infra I’ve encountered in my career were written in JIT or AOT compiled languages (C#, Java, Golang, etc.) This is basically necessary at any sort of scale.
98.
by tatersolid 1y ago
Basically all other identity providers are also vulnerable to phishers which strip out webautn calls in the payload when acting as a proxy to the real IdP. Basically you must disable all other phishable forms of MFA fallback if you want p
99.
Cross-Site Request Forgery(words.filippo.io)
156 points by tatersolid 1y ago|30 comments
100.
by tatersolid 1y ago
Unusable on an iPhone. Can’t scroll
101.
by tatersolid 1y ago
> On the other hand, I’m not sure any direct confrontation with a near-peer military would last long enough for that to matter. Hasn’t Ukraine shown us the opposite? Drones of all typees covering the battlefield have reset military doctr
102.
by tatersolid 1y ago
Beer brewing.
103.
by tatersolid 1y ago
We have drilled many oil wells deeper than 7km. We will just need a wider bore to fit that chubby nuke down the hole.
104.
Windows SPNEGO Nightmare: Critical RCE Vulnerability(zeropath.com)
2 points by tatersolid 1y ago|1 comments
105.
by tatersolid 1y ago
Looks to be reachable through many service ports, including http/https in at least some circumstances. I have not seen reliable information if default configurations of IIS are exploitable.
106.
by tatersolid 1y ago
> unless an explicit policy grants permission Three months later, all devs have “Allow *” in their tool-name.conf
107.
by tatersolid 1y ago
>Which is exactly why it is blowing my mind that anyone would connect user-generated data to their LLM that also touches their production databases. So many product managers are demanding this of their engineers right now. Across most
108.
by tatersolid 1y ago
In IPv4 if your NAT or your ISPs CGNAT stops mapping everything breaks. Having a stateful mapping device inline in the network sucks for reliability in general. Native IPv6 removes the requirement.
109.
by tatersolid 1y ago
Confusing UX in my opinion… I like the general idea but a series of questions presented sequentially would be more useful.
110.
SVG Optimization and Accessibility Basics(dbushell.com)
3 points by tatersolid 1y ago|0 comments
111.
by tatersolid 1y ago
Wasn’t it really only the Chicago Public Schools that were closed for so long? As I recall most everything else sort of opened in some capacity within a year, even sporting events and concerts.
112.
by tatersolid 1y ago
Wildfires, hurricanes, tornadoes, blizzards and ice storms, earthquakes… many regional disasters are temporary but it can take very long to bring everything back online. AWS can also always lose a whole region for an extended period due to
113.
by tatersolid 1y ago
A passkey never exposes a secret to the website, so neither malicious scripts (e.g. via ad networks or analytics “partners”) nor malicious browser extensions can scrape the password. Plus passkeys are inherently phishing resistant, and don’
114.
Meta AI model can reproduce almost half of Harry Potter book(arstechnica.com)
3 points by tatersolid 1y ago|0 comments
115.
Apple Created a Custom iPhone Camera for F1(wired.com)
7 points by tatersolid 1y ago|0 comments
116.
by tatersolid 1y ago
Anecdotally there seems to be a bit more air traffic in around Chicago versus 2019, but perhaps I just notice flights overhead more now as I commute downtown far less. This site shows current ORD volume at roughly 2019 levels: https:&#x2
117.
by tatersolid 1y ago
To prevent random shutdowns. Apple absolutely effed up by not communicating the specifics well, but that’s corporate policy. Apple docs have always been targeted at the non-technical user and therefore inadequate for others.
118.
by tatersolid 1y ago
My old man was a doctor and the local phone company at the time (GTE) automatically made our home number unlisted. Presumably this was done for other “critical” professions who might receive many home calls that should be directed at their
119.
by tatersolid 1y ago
“Safari can’t open the page because it couldn’t establish a secure connection to the server.” Irony or satire?
120.
Bootstrapping HTTP/1.1, HTTP/2, and HTTP/3(netmeister.org)
5 points by tatersolid 1y ago|1 comments

More ›