quasigod
@quasigod.xyz
hacker, security researcher cool things I enjoy - nix - deadlock - mcsr - coffee
i got the root flag for last weeks htb s11 box but i was literally 30 seconds too slow to get points :( nimbus was such a tough machine but it was a really fun one
ngl i'm surprised its this cheap and even more surprised that people thought itd be cheaper not saying its a good price. all hardware is a horrible value right now. there was just no reality where it would be cheaper or equal to the steam deck imo this is just the cost of pc gaming atm sadly
Steam Machine is here, and you can sign up now: Steam Machine 512GB Steam Machine 2TB Plus bundled versions with Steam Controller. Learn more and sign up here: store.steampowered.com/hardware/ste...
a little writeup on a recent bug bounty submission stealing user logins by hijacking a vulnerable webview implementation in a mobile app
Android app WebView hijacking via MITM - quasigod.xyz
quasigod.xyz
facts some packages have really useful ones, discord's let you enable client mods really easily. it would be neat if they were exposed somehow so you could see them on the package search page instead of having to check the source.
yk nixpkgs <pkg>.override is basically just gentoo use flags. it doesnt see nearly as much use since overrideAttrs is strictly more powerful than override and also a lot of packages dont bother defining additional stuff for override to use. its basically use flags when theyre defined tho
the only reason I want an edit button is to shut up the people who are constantly demanding it and shitting on any other new features
ok, deep breath… we're discussing *potentially* adding post editing to Bluesky this year.
man i wish nix worked on ublue distros. i just do not fuck with using containers for development
Listening to infosec people freak out over Mythos is so tiring. Like, bro, your local water treatment plant runs Windows XP, your mobile provider's hardware is older than you are, and the protocol that routes internet traffic is secured by everyone just agreeing that hijacking it would be uncool.
in case anybody else using emacs on android wanted to keep it always running in the background quasigod.xyz/notes/keep-e...
Keep Emacs running in the background on Android - quasigod.xyz
quasigod.xyz
nixos docs added to tranquil 4 hours before i start setting it up lfg
It's an account for Atmosphere apps. It's not a "handle" for the whole "internet". It's not a "Bluesky" account, a lot of us don't host our account there, and hopefully less will over time. Atmosphere came from the community, we build as a community. Don't overcomplicate it. Atmosphere Account.
It's Atmosphere Account btw
a truly decentralized DNS replacement
IPv6 addresses are too hard to memorize. That ends today, with the launch of my new, free service: sentence2IPv6 ❌ 0788:7b06:edcb:24f1:a2ff:08f0:6525:be66 ✅ The lazy chickens explode awkwardly beneath the mad toilet while ugly dogs eat the imaginary bacon. https://is.gd/gyxSQG
hackerones report assistant could be cool if it was letting me upload attachments. those are pretty important for a lot of reports!
a blocklist of anyone agreeing with this post would make using this site way better
I tend to get dogpiled every time I say this but: as someone *who likes bluesky and benefits from being here* we have a problem. The network is shrinking, not growing. It's shrinking a lot: only about 1.1m people a day even like a post. This time last year it was 1.6m.
Every three months some jerk gets on here and complains that the website should be more popular instead of being niche to the website whose user base is 90% people with strong feelings on the translation of various Fire Emblem games
Finding XSS via indirect prompt injection A short writeup of how I found a stored XSS vulnerability in an AI-powered writing app
Finding XSS via indirect prompt injection
A short writeup of how I found a stored XSS vulnerability in an AI-powered writing app
quasigod.xyz
i really want to selfhost tranquil pds, but i only have one server and its uptime is like 85%
trying to do a time-based blind sqli attack on wifi is not fun. my sleep delay is up to 13 seconds
🔲 Can't yell at republicans, they're not on here 🔲 Can't yell at transphobes, they don't care ☑️ Can yell at allies that are unable to solve systemic problems on their own
the future of software is emacs
Cat points out a real problem. Rather than “everyone builds their own custom app” with all the overhead that entails, my working hypothesis is that we’ll see an explosion of what @inkandswitch.com calls malleable software www.inkandswitch.com/essay/mallea... A solid core + ability to extend
what if app.bsky.actor.profile records had a preferredFrontend value? then sites like aturi.to could have the top option be the users preference or even support automatically redirecting them and frontends could have a simple "set as default" option in the settings
HTB Writeup - Interpreter A medium rated Linux machine running Healthcare software https://quasigod.xyz/blog/htb-writeup-interpreter
HTB Writeup - Interpreter
A medium rated Linux machine running Healthcare software
quasigod.xyz