theamk

17 ms·

331.
by theamk 9mo ago
This is just some random raw socket code which mentions scary words (EXPLOITS!!!) but actually does not contain any working exploits. And you still haven't answered my question - that vulnerabile code that you plan to exploit, does it
332.
by theamk 9mo ago
That's a lot of words for a pretty basic explanation of how to exploit kernel that has a very specific kind of bug: "option length" parser error in TCP frames that leads to user-controlled stack overwrite. Which kernel is it
333.
by theamk 9mo ago
Mac address is absolutely safe in IPv4 world - the only info it gives is the network card manufacturer. And people don't usually share "curl ipinfo.io" output unless they plan to share their external IP (unlike "ifconfig
334.
by theamk 9mo ago
Author mixes up various layers in this blogpost: language-specific stdlib vs OS behaviour. Some of their goals (like "Replace int fd with opaque handles (strong typing)", "Replace errno with result objects", "Make I
335.
by theamk 9mo ago
sniping bots keep people on ebay.com
336.
by theamk 9mo ago
> Or if you had a script that did that and put the public v4 address in your taskbar. do people still do that? Dynamic DNS is offered by so many providers now...
337.
by theamk 9mo ago
People post their ifconfig data all the time, example: https://forums.linuxmint.com/viewtopic.php?t=402315
338.
by theamk 9mo ago
Only in IPv6 world... in IPv4, it's all safe
339.
by theamk 9mo ago
No, that's the whole point. Imagine I've shared output of "ifconfig" on my machine, or "netstat" output, or logs for some network service which listed local addresses. For IPv4, this will is totally fine and le
340.
by theamk 9mo ago
I was not sure if they are serious or not until I read the FAQ: > Q: Is this legal? > A: We operate in a legal gray area that our lawyers describe as "innovative." Our terms of service are 847 pages long for a reason. > Q
341.
by theamk 9mo ago
What if your computer, which runs your password manager, is compromised? If the malware has system access, it can often export all the passwords. Depending on level of protection and OS, this could require kernel access, root access, a regu
342.
by theamk 9mo ago
Input data rate: 1e6 * 48 / (24*60*60) = ~560 TPS Working data size (1 day): (8B meter id + 8B timestamp + 8B value) * 48 * 1e6 = 1.1 gigabyte Archival: 1.1GB/day * 15 month = 482 GB .. but looks like mostly write-only data? That
343.
by theamk 9mo ago
bad link - (1) it's to NoScript page (2) there is no bill number in it, so it is impossible to recover
344.
by theamk 9mo ago
You mean "coexistance with hungry ghost trapped in a jar"?
345.
by theamk 9mo ago
You mean Cloudflare should implement the system that lets Italian government block any website in 30 minutes, with no judicial review of any kind? The very same system that has been known to have false positives? I'll just have to disa
346.
by theamk 9mo ago
This only works if the company does not collapse or suddenly decide to change the conditions... And Wordpress's CEO is Matt Mullenweg...
347.
by theamk 9mo ago
Protip: if what's shown in README is your "Traditional workflow" # Traditional workflow: decompress, grep, wait, clean up zstd -d huge_logs.zst && grep "error" huge_logs && rm huge_logs
348.
by theamk 9mo ago
> San Francisco Taxi Worker Alliance Board Member Mark Gruberg has been a taxi driver since 1983 > Gruberg also said taxi workers can provide a more positive and comfortable experience than others form of transit. riight... not for me
349.
by theamk 10mo ago
> Revoke Access > To remove a team member: > memevault access remove bob > This immediately re-encrypts the vault with the remaining keys, locking Bob out. Unless you rewrite the git history, force-push every branch, then do
350.
by theamk 10mo ago
yep. It's hard enough to audit 200 packages, imagine there were 10000 of them!
351.
by theamk 10mo ago
"GitHub should charge every org..."? As in, large open source projects and commercial plans only? The commercial plans are already paying quite a lot, so it would be mostly open source projects seeing this extra charge... But the
352.
by theamk 10mo ago
By "voltage spread", did you mean "difference in voltage between each battery"? Can you clarify how did you calculate this? I looked at the report but could not find the details nor raw data. (It is easy to calculate in
353.
by theamk 10mo ago
it's always nice to see new work in the OS space, especially capability-based on! One thing in documentation that caught my eye: > All capabilities can be destroyed but the last reference to a capability which is in-use cannot alway
354.
by theamk 10mo ago
HN is pretty famous for not deleting posts/accounts (unless there are personal information involved). While the "dead" accounts are removed from search results, their postings are still available via direct links, example: h
355.
Physical pentester story: Bypassing Bank Security (Part 1)(artificesecurity.com)
3 points by theamk 10mo ago|0 comments
356.
by theamk 10mo ago
Sounds like a take-home challenge, but with a twist that you actually expect people to use AI, so that AI is not "cheating"? Are you worried about the usual take-home challenge problem of user getting outside help? Either friends
357.
by theamk 10mo ago
Well yeah, 7400 needs clean power, so you need to have a good power supply. And if you are in a steel mill, you probably add an extra input capacitor or ten, few chokes, and even shield the whole thing. This is somewhat complex, but not imp
358.
by theamk 10mo ago
Author had bad experience with TTL (the integrated circuit logic family introduced in 1965) - their company was trying to design industrial equipment using TTL-based controllers, and apparently none of their engineers managed to properly pr
359.
by theamk 10mo ago
Libreoffice will likely download the whole file. But many others clients won't. In particular, any video player will _not_ download entire file before accessing it. And for images, many viewers start showing image before whole thing is
360.
by theamk 10mo ago
"Most people on Earth" can't write HTML. And if one doesn't know what the word "syntax" means, they are not going to have much success writing HTML - after all, ignoring the errors does not make them go away. I

More ›