zaltekk

11 ms·

61.
by zaltekk 6y ago
Otherwise known as Promotion Based Architecture. You’ve got to make the problem difficult enough and the solution complex enough to demonstrate you can “operate at the next level.”
62.
How to unlock LUKS using Dropbear SSH keys remotely in Linux(cyberciti.biz)
3 points by zaltekk 6y ago|0 comments
63.
by zaltekk 6y ago
Previous discussion from 3 months ago: https://news.ycombinator.com/item?id=24696939 Does anyone know how this compares to Chicken scheme? It looks like they both are able to transpile to C and have good FFI support.
64.
by zaltekk 6y ago
Does anyone know how to completely delete the Ubiquity account? I can't find an option anywhere on the website. For now I've renamed the username and put in a fake email address (sadly the username `deletemyaccount` was taken).
65.
by zaltekk 6y ago
Because a proprietary or binary format would be easier to recover over time? It’s usually pretty easy to figure out the right encoding for text files, especially when you know their origin (which I expect you would for accounting documents)
66.
by zaltekk 6y ago
> Verification codes are currently delayed across several providers because so many new people are trying to join Signal right now (we can barely register our excitement). We are working with carriers to resolve this as quickly as possib
67.
by zaltekk 6y ago
> if an attacker appends a PathInfo parameter of WebResource.adx, ScriptResource.adx, i18n.ashx, or Skipi18n to a request to a SolarWinds Orion server, SolarWinds may set the SkipAuthorization flag, which may allow the API request to be
68.
SolarWinds Orion API Auth Bypass(kb.cert.org)
1 points by zaltekk 6y ago|1 comments
69.
by zaltekk 6y ago
More details on the original bug: https://securelist.com/operation-powerfall-cve-2020-0986-and...
70.
by zaltekk 6y ago
> In May, Kaspersky (@oct0xor) discovered CVE-2020-0986 in Windows splwow64 was exploited itw as a 0day. Microsoft released a patch in June, but that patch didnt fix the vuln. After reporting that bad fix in Sept under a 90day deadline,
71.
Windows 0day privilege escalation still not fixed(bugs.chromium.org)
410 points by zaltekk 6y ago|192 comments
72.
by zaltekk 6y ago
Facebook and Google both have multiple offices around Seattle. I wouldn’t be surprised if Apple or Netflix were interested in hiring in Seattle either.
73.
by zaltekk 6y ago
Very much this. They don’t speak in a way that makes me think they have any internal knowledge of the areas they are speaking about.
74.
by zaltekk 6y ago
> This (was!) an article about "advanced techniques" Cellebrite uses to decode a Signal message db... on an unlocked Android device! They could have also just opened the app to look at the messages. > The whole article rea
75.
by zaltekk 6y ago
They're actually a bit different. AWS's Cloud9[1] is like GCPs' CloudShell[2]. AWS's CloudShell[3] is /just/ a shell. [1] https://aws.amazon.com/cloud9 [2] https://cloud.google.com&#
76.
by zaltekk 6y ago
Oof. Doesn't redirect to HTTPS. If you load the link (www. prefixed) with HTTPS, you'll get a certificate only for the bare domain. This is probably over-indexing, but I don't think I'd trust a software company with all
77.
by zaltekk 6y ago
I have strict notification settings on my iPhone. 1. All banner notifications are turned off (this might change if you can swipe up to temporarily hide them like on Android). 1. Only a couple of important messaging apps (SMS, Signal) give m
78.
by zaltekk 6y ago
I was an avid user of Pentadactyl[1], but the project died when the Firefox plugin changes[2] happened. From what I could tell at the time, all of the similar plugins like Vimium[3] suffered from severe limitations. For example, if your foc
79.
by zaltekk 6y ago
It’s much more common nowadays to have SpotBugs/Checkstyle treat everything as non-null by default. Then you use Optional where necessary (or maybe @Nullable).
80.
by zaltekk 6y ago
This link seems to be working. You can at least read about the updates. https://docs.micronaut.io/2.0.0/guide/index.html#whatsNew
81.
by zaltekk 6y ago
This[1] article helped me get a good understanding of the actual tests that the courts are applying: 1. The court considers whether police used excessive force in violation of the Fourth Amendment to the U.S. Constitution. If yes, the court
82.
by zaltekk 7y ago
The Amazon listing has an Azure instance type and links to Azure docs. A quick search shows that you can get at least 24TiB from AWS: https://aws.amazon.com/ec2/instance-types/high-memory