What an absolute trash “feature”, Gmail. I’d hoped they’d rein this in by now but noooo… why don’t we all get spammed with his nonsense. An email per emoji, replied-all.
xan || roguesys
@hackd.net
offensive security attaché rogue systems enthusiast former 0x90 optimization expert (https://hackd.net && https://xan.quest)
A fun thing eMudhra could do on their way out is to publish all their other CA private keys. I mean, I know they’re supposed to be in an HSM, but like… y’know. They can show us those other numbers are much, much better!
Phreak: "Alright, what are the three most commonly used private keys?" Joey: "156, 115, 55. But not in that order, necessarily, right?" Cereal: "Yeah but don't forget 4. System operators love to use 4. It's that whole male ego thing."
If you are interested in poking at traffic generated by IoT devices, today would be a good day to ensure that automatic firmware updates are turned off
You Can See Everything, just like the device can test for everything.
Trying to book Shinkansen tickets via official site/app and it’s been the most exquisite technological experience I’ve had in a long while: * only one browser/app can be logged in * log out faster than I can type * 3-D Secure enforced on payments but pretty much all fail without any helpful messages
I can’t believe this was in 2018. Mickens is truly a prophet youtu.be/ajGX7odA87k?...
USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
YouTube video by USENIX
youtu.be
@mjg59.eicar-test-file.zip this seems eminently at the intersection of your skills, passions, angry outbursts at computers etc.
Ryan Bateman@boat.horse · 2mo agoIf you haven't been following what people are doing with the first full simulation of a (fruit fly) brain, you are missing out on a speed-run of the realisation of some of humanity's darker sci-fi.
The Mac is even enjoyable… butters smoothers all the systems. (from the macOS 27 release notes which were most carefully crafted, like the rest of it)
> Progress isn't a rule, it's contested terrain, fought for daily by millions of people who refuse to give in to despair. Good things are happening out there, every day. Fix the News has been my favorite source of positive stories for a long while. fixthenews.com
The world’s leading source of good news.
Weekly solutions journalism from Fix The News. Real progress on health, climate, rights, conservation and science, read in 195 countries.
fixthenews.com
"LLM-generated patches did not resolve the vulnerability, added a new vulnerability, or both, an average 53.9% of the time." 👁️👄👁️ 1password.com/blog/why-ai-...
![Drop down menu from a LinkedIn post offering the following options
Save
Copy link to post
Embed this post
Unfollow [person]
Not interested
Seems like AI slop
Report post](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:yvbszlkc7d75ixkid5g2zmw7/bafkreig2m5jumwszgmrdm2l76jcdnnja3nr5pvaos4x4l4avb2rl5rzh2q)
@gruber.foo appreciate the Rogue Amoeba update notifications are now so subtle. FWIW I think Ghostty did this first in November with a very similar implementation mitchellh.com/writing/non-... Agreed it should be the (Sparkle) norm!
Vibing a Non-Trivial Ghostty Feature
mitchellh.com
I feel like I haven’t hyped Jujutsu as a version control system in a minute. It’s great! Joy to use after a quick learning curve, way more user-friendly. Collocates with git so no need to switch the entire team at once. https://docs.jj-vcs.dev/latest/testimonials/
Ouch, Spotify only thinks there are two (really just one?) competing services I could be leaving to 🫡
Wrote some notes on self-hosting an Atuin sync server and getting to it via Tailscale hackd.net/posts/atuin-...
We're really cooked when Klarna starts partnering with One Medical and your local healthcare providers.
Is TurboTax getting a kickback from all these CAPTCHAs we gotta solve? 🤔 Like damn seems like there's one every other click.
There's a kind of cutthroat efficiency that's often applied to various kinds of systems which in turn makes them eminently exposed to black swan risk. Absent significant skin in the game, the cost of failure is an externality not borne by the system designers/owners. (See: Incerto, Infinite games)
The Internet Archive has to date downloaded 500 terabytes of US government websites, which it crawls at the end of every presidential term. The whole archive is fully searchable. This effort's housed by a donation-funded nonprofit, not a branch of the US government. blog.archive.org/2024/05/08/e...
End of Term Web Archive – Preserving the Transition of a Nation | Internet Archive Blogs
blog.archive.org
