News for hackers. Stuff that matters.

phonethrowaway

I'm so excited for this: https://www.kickstarter.com/projects/bigme/bigme-worlds-firs...

Basic color support for syntax highlighting is what I've been waiting for...

it doesn't say meta, duh
flask-security is a trivial addon.
they don't even address shell escape injection which is definitely possible...
The farm bill made all hemp derived products legal federally at long as they contain only trace amounts of Delta 9 THC. Delta 8 and THC-O/acetate are legal. Not as strong, slightly different, but it gets the job done... kinda. Check it out... if you can. Check your state laws.
Old isn't janky... hmm... to me janky means duct tape and bubble gum.
Re:Show HN: Play Zork with your friends via SSH on Friday December 10, 2021 @12:22AM (#29506695)
shell escapes are real attack vector too...
Re:Log4j RCE Found on Friday December 10, 2021 @12:08AM (#29506624)
the point is it's a feature, not an exploit. control and escape codes are a thing for a reason.

it's worse with web stuff though... and it's a real vector.

https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=terminal+es...

https://packetstormsecurity.com/files/162518/AWS-CloudShell-...

https://nvd.nist.gov/vuln/detail/CVE-2017-0899

https://github.com/InfosecMatter/terminal-escape-injections

The NSA doesn't need to illegally spy on Americans when an ally can do it for them and then share the data legally.

https://www.nationalarchives.gov.uk/ukusa/

https://en.wikipedia.org/wiki/Five_Eyes

Re:Missouri website that leaked SSN on Friday October 15, 2021 @03:10PM (#28881821)
ASSESSEE NAME AND ADDRESS ARE NOT AVAILABLE ONLINE PER CA GOV CODE §6254.21
Re:Create and share images of your source code on Friday October 15, 2021 @03:10AM (#28875184)
name it carbon lol
Re:The pitfalls of using SSH-agent, or how to use an agent safely on Saturday September 18, 2021 @11:48AM (#28577123)
I've seen PAM modules for otp/totp, but that really only adds security if authenticating against a remote machine, if you validate the second factor locally doesn't that still open you to mitm or other exploits? Can you trust your own environment?
humanure is a thing
most companies have perverse incentives not to clean up fake profiles... just like SoundCloud.
Re:Reclaim Windows10 on Tuesday June 01, 2021 @10:45AM (#27355189)
this is still a problem (irq conflicts) especially with thunderbolt enclosures...
> At either side of the twin juncture, the molecular networks abruptly transformed their handedness.

this seems rather intuitive to me, and unsurprising.

for every action there is an opposite and equal reaction.

a spinning cue ball changes directions when it bounces off a rail.

it's the same reason circular polarizers let you see through reflections in glass.

Re:Ask HN: Data Diodes? on Tuesday May 11, 2021 @10:56PM (#27126095)
Only if you can guarantee delivery without an ack.
Bigger size means more latency. L1 needs to be fast due to frequent access. Is that what you mean by expensive?
L1 cache is optimized for speed. You can't make a large L1 cache... the access is too frequent meaning more bandwidth is needed. L1 has many parallel pipelines vs L2 or 3 which are larger caches, respectively, with less pipelining, respectively.
SRAM?

What do you mean by expensive?

Size vs speed?

Re:4chan founder Chris Poole has left Google on Friday April 23, 2021 @01:19PM (#26916940)
human capital management
Re:M1 dev setup with a virtual Linux box on Sunday April 11, 2021 @09:37AM (#26770275)
High end Chromebooks have i7 and 16 gb RAM fwiw, and run Linux VMs just fine.
Selfless plug: https://gist.github.com/gordol/d3f66e5fa0a53a9ccef30b7788504...

UDP hole punching is pretty straight forward.

This does it securely using SSH.

hasn't this been done to death over and over?
Re:Ultrasound has potential to damage coronaviruses on Tuesday March 16, 2021 @09:51PM (#26485580)
radio frequencies, too, work with the same principle... or lasers.

this stuff isn't new, either, by any means.

https://en.m.wikipedia.org/wiki/Royal_Rife

good luck getting past the quackery though.

https://www.livescience.com/7472-kill-viruses-shake-death.ht...

Re:NASA's Perseverance rover sends stunning images on Tuesday March 02, 2021 @11:53PM (#26324911)
speculation, but it's probably compressed before transmission to earth... for obvious reasons.
Re:Vim Creep (2011) on Saturday December 12, 2020 @01:10PM (#25400191)
endorphin tickles
Adcraft IND-WOK208V

You need 208v from three phase per or a 240v buck transformer though...

I use a 208v Adcraft induction cooktop for beer brewing and it's strong. Boils 6 gallons of liquid easily. Just using a 240 to 208v transformer.

Re:U.S. Hits Record Daily Death Toll, with Worse Likely to Come on Thursday December 03, 2020 @11:28AM (#25290577)
Maybe because you need to learn basic statistics... You need to compare the number of tests to results, not the total population where nobody is getting tested. C'mon man...

I don't disagree with the spirit of self directed data exploration, but you need to be careful.

Older »