News for hackers. Stuff that matters.

Titan2189

Clev-who?
You forgot to say "Asking for a friend"
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @12:45AM (#50176174)
Any details why not?
Re:Upcoming Critical PHP Security Release on Wednesday October 21, 2026 @12:08AM (#50175979)
We're all busy turning off uploads on our servers
Re:7 out of 9 Planetary Boundaries are breached on Monday September 21, 2026 @08:20PM (#49795233)
Quick, someone stand up planetaryhealthcheckhealthcheck.org
Re:Compressing a Flag to 11 Bits on Monday September 14, 2026 @11:23PM (#49707335)
Thanks, that fixes it in Chrome for me. Firefox was already displaying the flags correctly from the beginning.
Re:How Bluesky draws its logo on screenshots on Monday August 17, 2026 @09:26PM (#49339990)
I appreciate the Game Changer reference
Some New Zealand Government / Business sites have a Javascript-based pop-up available called Shielded Site https://shielded.co.nz/

> If you are experiencing family violence, don't worry, the information within this pop-up won't appear in your browser's history.

Pages like Banks or Council websites have it in their footer, so people can lookup information without it appearing in their history

Re:OpenPrinter on Sunday July 05, 2026 @07:18PM (#48798932)
*no one
Whenever the article mentions 'pause', it means 'parse', right?!
It's a pretty great documentary, currently still ongoing story.

I've really enjoyed watching it - quite captivating :)

Re:CVE-2026-31431: Copy Fail vs. rootless containers on Tuesday May 05, 2026 @12:57AM (#48018219)
> [...] that root was just my unprivileged podman user on the host

Couldn't you then simply re-run the exploit again as unprivileged podman user and gain root on the host?

Re:Talking to 35 Strangers at the Gym on Monday May 04, 2026 @10:33PM (#48017462)
I've only heard of the Red Pill in reference to the Matrix. Does it have that idea from "The Prince"?
Re:I learned Unity the wrong way on Monday April 20, 2026 @09:43PM (#47843555)
Same. I thought 'Conputer' was quite a smart title in today's AI world
Re:The first airplane fatality on Monday March 09, 2026 @09:16PM (#47318019)
It's like JetLag the Game, but without ever leaving your house!
Re:Modernizing Linux swapping: introducing the swap table on Thursday February 05, 2026 @04:28AM (#46897651)
We use it in production. Workloads with unpredictable memory usage (32Mb to 4Gb per process), but we also want to start enough processes to saturate the CPU. Before we configured & enabled swap we were either sitting at low CPU utilisation or OOM
Re:What Is Starlink Mesh? – Starlink Help Center on Sunday January 25, 2026 @02:29PM (#46757339)
What's interesting about it? Wifi Mesh networks have been around for ... more than a decade?
Re:ARIN Public Incident Report – 4.10 Misissuance Error on Sunday December 21, 2025 @01:35PM (#46347028)
The original report says

> The incorrect state persisted for approximately seven days before detection

However you're saying you've reached out "within a few minutes" ?

Re:Americans Mess Up Their Taxes. A New Law Will Help on Sunday December 07, 2025 @07:53PM (#46187093)
> Those other countries have much simpler tax codes than we do

All German readers spew out their drink in disbelief - Pardon what?

Re:XKeyscore on Sunday December 07, 2025 @06:07PM (#46186312)
Probably just forgot the /s at the end
Re:Cloudflare is down on Friday December 05, 2025 @04:15AM (#46158702)
They're back online it seems
Re:Archive or Delete? on Wednesday November 12, 2025 @03:15PM (#45905833)
Then there's the 3rd option: Neither

Just keep everything in your inbox, find recent things by scrolling down, and anything beyond that is basically inaccessible, since the search is so bad

(I'm in camp archive everything, delete nothing; but see the Neither camp frequently in colleagues)

If you check the manual you might find that you can hook the single inlet pipe up to the hot water tap.
Re:GRC Tool Vanta Forces Insecure CAA Configuration on Wednesday October 29, 2025 @07:25AM (#45745368)
To configure the Vanta Trust Center (a publicly available page listing a client's Certifications and Controls, usually hosted at trust.client.tld), Vanta requires customers to compromise on their DNS CAA configuration.

As their screenshots show, they ask you setup a CNAME from e.g. trust.customer.com to their abc123.cname.vantatrust.com.

However, if you are using CAA [1] on your root domain (to limit which Certificate Authorities are allowed to issue certificates for your domain), they _require_ you to add 4 (FOUR) new CAA records to your root domain. (shown at the bottom of the linked page)

The correct solution would be to simply publish CAA records at the destination that the CNAME is pointing to (abc123.cname.vantatrust.com)

I've brought this up with their support multiple times; but they're refusing to even acknowledge that this is a problem. They're claiming I am the first customer to ever bring this up; and that I should just add the records on my root domain - completely missing that fact that thereby I'm basically undermining what CAA is for.

I would understand it, if this was some random tool, but this specifically is a GRC Tool.

If you are another Vanta customer or have any other idea what I can do to approach this, please let me know. I want to use their tool. It's a good system and helping us out - I'm just refusing to actively downgrade our Security - for our SECURITY TOOL!

1) https://en.wikipedia.org/wiki/DNS_Certification_Authority_Au...

Re:Major AWS Outage Happening on Monday October 20, 2025 @04:31AM (#45641293)
Yup

> We have identified the underlying issue with one of our cloud service providers.

Re:ADS-B Exposed on Tuesday October 14, 2025 @04:43PM (#45584592)
Say whaaaaat?
I don't get it. Can you please explain the reference?

Older »