jviide
Popular nx packages compromised on NPM
Addressing Source Code Leaks Across the Ecosystem – A Retrospective
Docker Desktop 4.40 with Model Runner to run LLMs locally
Zero-Click Calendar invite – Critical zero-click vulnerability chain in macOS
Speeding Up the JavaScript Ecosystem – Server Side JSX
Systemd Rolling Out "run0" As sudo Alternative
LLM4Shell: Exploiting RCE Vulnerabilities in LLM-Integrated Frameworks and Apps
JSR Is Not Another Package Manager
"The issue was detected by our new AI-powered vulnerability scanner"
Kagi Sidekick (alpha)
Trigger.dev v3: Durable Serverless functions. No timeouts
Escaping from isolated networks using Broadcast DNS
Speeding up the JavaScript ecosystem – Tailwind CSS
Bidirectional Escape Testing
Speeding up the JavaScript ecosystem – Polyfills gone rogue
Apollo Back end just made public
Alias file to rule them all – One click code execution with alias file in macOS
Re:Bitwarden: Free, open-source password manager
on Wednesday January 19, 2022 @06:56AM (#29992527)
1Password has a pretty good white paper explaining their security design (PDF behind the link): https://1passwordstatic.com/files/security/1password-white-p.... The parts "How Vault Items Are Secured" and "How Vaults Are Securely Shared" go into sharing passwords in a vault.
For the record, Bitwarden's white paper is a good read as well. Available at https://bitwarden.com/help/article/bitwarden-security-white-....
(edit: fixed typos)
Confluence vulnerability, a tale of catching active exploitation in the wild
Zero click vulnerability in Apple’s macOS Mail
WMR – Tiny all-in-one development tool for modern web apps
Look Ma, No Data Structures
Scanning for Covid-19 Exposure Notifications
We Turned 5G into 5k
My application ran away and called home from Redmond
Preact 10.0.0-beta.2 adds basic support for Suspense and lazy()
Team Whack Episode #2: Identity Theft (Finnish Hacking Show, English Subtitles)
Re:Web page service workers bypass ad-blockers after Chrome 72 upgrade?
on Sunday February 17, 2019 @01:48PM (#19186062)
(Original tweeter here.) It seems that this is already fixed in Chrome 73 beta: https://twitter.com/jviide/status/1097199686849581057
Also setting "Enable network service" to disabled in chrome://flags appears to fix it: https://twitter.com/jviide/status/1097202611806261248