News for hackers. Stuff that matters.

bashonly

Re:Ask HN: Am I safe regarding xz? on Friday April 05, 2024 @08:05PM (#39948754)
based on what is currently known, arch was never vulnerable to the backdoor that was discovered. arch doesn't patch sshd so that it links systemd like how debuntu/fedora do, which was a requirement for the backdoor.

ofc this doesn't rule out any as-of-yet unknown vulnerabilities in xz/liblzma.

thank you!
Re:Ask HN: What's happening with Gmail spam filtering? on Wednesday September 21, 2022 @10:22AM (#32925546)
i used to have a custom domain email forwarded to gmail that would receive github notification emails and the same thing happened to me with those a couple months ago
also noteworthy is that grep -P will now use PCRE2 instead of PCRE, which is potentially a breaking change for anyone using grep -P in their shell scripts
scorched earth is the only one of these i've played

i also loved worms, which felt like scorched earth with lemmings

for all of the requests to their api, it constructs a very long query string that is a basic fingerprint of your browser/os. then the query needs to be signed (or else the api returns a captcha), which is done by a blob of encrypted/obfuscated-beyond-recovery JS that uses a more comprehensive browser fingerprint to validate the query string and generate a token that is appended to the query. there's another required query param which involves an xhr to phone home so that presumably the fingerprints can be checked server-side. finally all of your fingerprint data is sent to their api where it lives happily ever after and you get some 15 second videos to watch
Re:Ask HN: Can I see your scripts? on Monday August 15, 2022 @10:20AM (#32469998)
shellcheck is so good it's even worth installing the 100+ required haskell libraries
Re:Will Bun JavaScript Take Node's Crown on Sunday August 14, 2022 @10:42AM (#32459645)
i think element (matrix) could work for you. it can't do email notifications, but if you have the mobile client on your phone you can get push notifications.
Re:How to write idempotent Bash scripts (2019) on Thursday December 09, 2021 @07:29AM (#29496601)
agreed w/ your general points, but passing arguments to bash functions does not work like this:

    errorHandler("ignore")
it should just be:

    errorHandler "ignore"
Re:Anthem Blue Cross breach notification [pdf] on Thursday December 02, 2021 @08:12PM (#29425415)
i used to work in health care, and the website for a certain medical board stores all of its licensees' passwords in plaintext. i am no longer licensed with that board, but i can't remove any of my data. a breach seems inevitable.
Re:Google Chromium, sans integration with Google on Monday November 29, 2021 @05:03PM (#29385864)
https://github.com/arkenfox/user.js

plus

    rm /usr/lib/firefox/browser/features/*.xpi
takes care of pretty much all of the firefox bloat for me
x-files only seems clichéd because every crime procedural and every paranormal genre show since have ripped it off in one way or another. still rules.
> Very few drugs doctors prescribe for depression, or anxiety, get you high.

except for that whole class of drugs called benzodiazepines

ClearChannel got out of the television game years ago (and has since changed its name to the even-more-awful IHeartCommunications).

And Sinclair really doesn't hold a candle to Nexstar and Gray Television, who have managed to buy up the vast majority of local affiliates over the past several years.