wepple

33 ms·

421.
by wepple 3y ago
Maybe NitroKey are surfacing something useful and potentially concerning, but they way they do it is so cheap that it completely turns me off their brand. It’s a bunch of negativity-hype with a “so buy our phone” tacked on. If you handed a
422.
by wepple 3y ago
This is based on the interpreter-in-go book by thorsten ball, right? Might want to give a little credit there
423.
by wepple 3y ago
Do you have any suggested resources? It deeply fascinated me but books seem either highly specific or academic
424.
by wepple 3y ago
It makes me unreasonably happy to see someone call it trilateration. Then again, you appear to know what you’re talking about.
425.
by wepple 3y ago
The article cites someone who purchased a kei truck instead of a side-by-side, so it doesn’t imply that rural folks are moving away from trucks. If anything, the urban folks are buying bigger cars/trucks and rural folks are buying bigg
426.
by wepple 4y ago
Technically they could have been logging your traffic, which is “customer data” even if it doesn’t identify you by name
427.
by wepple 4y ago
Well obviously you can’t just rewrite the particular components used in this exploit chain, as attackers will hit something else next time. So you’re rewriting practically an entire OS stack from scratch, in a different language (one that i
428.
by wepple 4y ago
You act like it’s trivial to fix. They’ve already sandboxed the parsers (which this exploit appears to bypass, crashing MessagesBlastDoorService) which massively drives the effort up. They also had to bypass pointer authentication. Whilst,
429.
by wepple 4y ago
https://archive.is/nVs90
430.
by wepple 4y ago
“Stability” over status: the article goes on to say that people are choosing (amongst other things) to freelance. It then goes on to talk about people moving to startups? I’m not sure the author had a real point here. I’d love some hard dat
431.
by wepple 4y ago
It’s literally on the front page of https://get.dev that the whole TLD is preloaded, I’m not sure why it comes as such a surprise. I get that ergomake has to bend to the whim of their customers, but TLS certs are free so enginee
432.
by wepple 4y ago
> Could they please implement an option to view the raw HTTP request in the alert window, This would be very, very hard to do well. First, for anything that doesn’t use standard libraries for TLS it’s simply not possible. And for things
433.
by wepple 4y ago
Wow, just wow. I had no idea this existed, that’s awesome. Thank you!
434.
by wepple 4y ago
Time for jail breaking cars to become a real and popular thing!
435.
by wepple 4y ago
Have you got a source on that? Edit: Just occurred to me this is probably a theoretic future state
436.
by wepple 4y ago
I realized after posting that this is a personal blog, not a corporate one - so I do regret and apologize for being rather blunt. (I think the .io and me misreading as “etherway” made me think it was company-published and for right or wrong
437.
by wepple 4y ago
I experimented with their TTGO LoRa boards and gave up out of frustration. That said, folks (including less technical) seem to have success with them for things like the meshtastic project, so they can’t be terrible. YMMV
438.
by wepple 4y ago
This is a better overview of the hardware: https://gist.github.com/sekcompsci/2bf39e715d5fe47579fa184fa...
439.
by wepple 4y ago
“ESP32-S2 Old version of the ESP32-S3. ESP32-S3 Low power. Dual-core. Wi-Fi and Bluetooth LE. 45 GPIOs. Camera Support. AI Support.” That’s weird phrasing to say that the S2 is the older version, rather than the S3 is newer. Also, the AI li
440.
by wepple 4y ago
Ah, wow, that’s quite an accomplishment while working. I guess it can’t be that then.
441.
by wepple 4y ago
+1 that we don’t have much to go off of. Mid-twenties with 7-8 years professional experience suggests you’re self-taught. IMO that’s a highlight, but could it be that in this tech hiring freeze economy, companies are filtering on undergradu
442.
by wepple 4y ago
Because it’s buried a few links deep: T-Mobile detected the breach January 5 and shut it down “within a day” But It started approximately November 25th, so the attackers were there for at least a month and a half, pulling 37,000,000 records
443.
by wepple 4y ago
The FTC filing says they first got popped in November 2022, so it’s still an annual tradition. Also, they only report the breaches they actually know about. From my understanding of T-mobile, they probably only find a breach when someone co
444.
by wepple 4y ago
I agree that VPNs are generally over-hyped, but they absolutely offer an increase in protection here. ISPs have historically done slimey things like hijacking DNS, and HTTPS leaks tons of metadata like what sites you’re browsing and for how
445.
by wepple 4y ago
Fireproof safe, and living in an area where the fire department would be able to get the fire under control fast enough that I would hopefully not need 1/10th of the capability of that safe. Edit: also, if your house burns down, won’t
446.
by wepple 4y ago
What do you mean “discovering new stuff”? New vulnerabilities? New attack vectors against new technology? New defensive ideas?
447.
by wepple 4y ago
> It is completely unreasonable as a blanket statement. I personally find your position unreasonable: that you should be entitled to use property that is not yours how you see fit, because it’s more convenient to you. In reality, any san
448.
by wepple 4y ago
Big +1 on that. I assume a model where my work laptop screen is being directly mirrored into a room with 100 people watching it 24x7, basically. Entirely impossible, but every organization has some level of monitoring between zero and my
449.
by wepple 4y ago
I disagree. A vanilla MacBook might be a bit like a pen, but if that MacBook is loaded with a bunch of proprietary or licensed software, I can see why an organization wouldn’t want it being used for financial gain outside of the organizatio
450.
by wepple 4y ago
I believe the claim that execs would make is that natural attrition isn’t fast enough, especially during economic slowdowns where opportunities to jump ship are at an all time low. Further, there’s a good chance that the execs have taken it

More ›