xx_ns

6 ms·

31.
by xx_ns 1y ago
I pentest network devices (amongst other things) for a living, and the way these usually work is that they have dnsmasq running in the background and to accept user config values, templating is used to generate dnsmasq-specific configuratio
32.
by xx_ns 1y ago
Not that I know of. We're a pretty tech-forward country, so it's hard to imagine anyone making physical carbon copies these days.
33.
by xx_ns 1y ago
I'm in Estonia, and my bank issues debit and credit cards that are definitely embossed.
34.
by xx_ns 1y ago
It acted as a proxy for the real npm site, which was the one to send the request, intercepting the code when the user inserted it.
35.
by xx_ns 1y ago
And we get back to the original point of the article (sort of). Opening a magic link should authenticate the user who opened the magic link, not the attacker who made the application send the magic link.
36.
by xx_ns 1y ago
bcrypt, one of the more popular password hashing algorithms out there, allows the password to be up to 72 characters in length. Any characters beyond that 72 limit are ignored and the password is silently truncated (!!!). It's actually
37.
by xx_ns 1y ago
Works over here.
38.
by xx_ns 1y ago
Yes. I'm a security researcher - no quotes. I write detailed, highly technical write-ups for all of the issues I discover, including reproduction steps, root cause analysis and suggestions for fixes. I follow all responsible disclosure
39.
by xx_ns 2y ago
Thanks! The slow startup times have usually been an xdg-desktop-portal issue for me in the past, might be worth looking into.
40.
by xx_ns 2y ago
How have your experiences with this setup been so far? Any major pain points?
41.
by xx_ns 2y ago
I'm not sure if I miss IRC, or the simpler times that were when I was actively on IRC. Maybe it's a bit of both. But there's definitely some niceties in modern messaging applications that you can't get in IRC.
42.
When parameterization fails: SQL injection in Nim using parameterized queries(blog.nns.ee)
20 points by xx_ns 2y ago|4 comments
43.
by xx_ns 2y ago
I was curious about the same thing, and found the following from Dave: > I had to deal with that analogy a lot in high school, and I got used to it. It is, indeed, a rather popular food in schools. My problem with people using TAYT is th
44.
Retrospective on hosting my blog inside an LTE modem, 4 years later(blog.nns.ee)
3 points by xx_ns 2y ago|0 comments
45.
by xx_ns 2y ago
I don't see how the two projects are related, so there shouldn't be any confusion. The project you linked isn't even called chibi, it's called chibi-scheme. If you suggest that we should not use common words in our proje
46.
by xx_ns 2y ago
Out of curiosity, what is the answer? From your comment, it seems like the more obvious choice is the incorrect one. EDIT: By the more obvious one, I mean letting it cool and then adding milk. As the temperature difference between the coffe
47.
by xx_ns 2y ago
> if it doesn't do what he wants him to do, it sucks Well... yeah? The computer is a tool. If my tool doesn't do what I want it to do, or, by extension, it does things I didn't ask for or need, then it does suck. If my too
48.
by xx_ns 2y ago
I mean... yeah? If you do work using cars daily (delivery driver, cab driver, etc), you should know how to use one. Or am I misunderstanding what you're saying?
49.
by xx_ns 2y ago
Pumpkin is already on that list.
50.
C is not Turing-complete (2018)(memo.barrucadu.co.uk)
10 points by xx_ns 2y ago|20 comments
51.
by xx_ns 2y ago
This seems to go against GitHub's own ToS[1]: > By setting your repositories to be viewed publicly, you agree to allow others to view and "fork" your repositories (this means that others may make their own copies of Conten
52.
by xx_ns 2y ago
The initial handshake request is still over regular HTTP, though, which is where I'd assume you'd want to agree upon which content type you'll be sending anyways.
53.
by xx_ns 2y ago
Modern serialization libraries make supporting multiple serialization formats pretty transparent - of course, I'm not sure what the current situation is in Elixir land, which Discord seem to be using, but Go and Rust (as trivial exampl
54.
by xx_ns 2y ago
To be fair, this is exactly what the Accept and Content-Type standard HTTP headers are for. Clients can tell the API "OK, send me application/json data instead of binary data" or vice versa. You can have the majority of your
55.
by xx_ns 2y ago
I'm using this project (have for a long while) and nested menus open when hovered over in the menu that opens when right clicking on the page. Nested menus in the burger menu (top right) still need to be clicked on.
56.
by xx_ns 3y ago
This is an XSS vulnerability that is being actively exploited in the wild. A (not-yet-merged) fix was submitted here: https://github.com/LemmyNet/lemmy-ui/pull/1897
57.
by xx_ns 3y ago
I'm in exactly 0 groups, never been in one, and I got the same email.
58.
by xx_ns 3y ago
Any examples?
59.
by xx_ns 3y ago
In a similar vein, two years ago I set up my blog to run on a GPS/LTE modem inside a phone. https://nns.ee/modem-blog
60.
by xx_ns 3y ago
Well, the downside to this is that you have to compile your own kernel. Totally speculative, but I think most people (who update their kernel frequently) don't do that.

More ›