Viewing profile — awirth

I have a 60L fish tank in my Tokyo apartment on around the 10th floor. It's sitting on stand that is not bolted to the wall. I have several friends with similar setups. In the last…

It's been a year. Has it been disclosed what tool had this misconfiguration?

I also got a lot of value out of wanikani even without completing it. I tried and failed several times to get started with Anki before having success with Wanikani. The key diffent…

These tokens never expire , and there is no way for organization administrators to get them to expire (or revoke them, only the user can do that), and they are also excluded from s…

What you're describing is a specific case of a confused deputy problem: https://en.wikipedia.org/wiki/Confused_deputy_problem This is captured in the OWASP LLM Top 10 "LLM02:2025 S…

Now, I've done it by email! (although still using the convenience store for print/scan) Unfortunately, https://www.sec.state.ma.us/ is geo-blocked for all of Japan (and several oth…

That's interesting, I've always reveled in the absurdity, but perhaps I'll re-read it with an eye to take each chapter in as a discrete unit. Thanks!

Cat's Cradle is one of my favorite books, but to be honest, I've never found it that funny - at least not in the sense that it makes me laugh much. What do you find so funny about …

If you can access the classloader that's pretty bad, it's likely people will find other gadgets. It's insane to me though that class.* isn't completely disallowed. What is the legi…

I've been able to vote abroad in state/presidential elections from my last address in the US. I do it by email. My only major hiccup is that the MA secretary of state's website www…

Now that I live in Japan, I've come to learn that for Japanese Windows users, seeing the ¥ symbol as a path separator is normal , it isn't a quirk or a bug. In fact, IIRC the copy …

I live in Japan and have the same problem with the Massachusetts department of state website (which contains voting information). I contacted my state representative (who does repr…

Years ago helped handle a support request from a man named "fread" who had a similar issue.

Yes. This is why running without `env_reset` is considered inherently insecure and the typo fix wasn't considered a security fix by the sudo maintainers. The list is still relevant…

See also the sudo bad environment variable list[1], which I recently found a 15 year old typo in.[2] [1]: https://github.com/sudo-project/sudo/blob/master/plugins/sud... [2]: https…

Too late to edit, but out of curiosity I re-implemented this to use the PCRE JIT (in PHP) to see what kind of speedup it would provide: https://gist.github.com/allanlw/69df50951933…

Is there a BEP to make this work for native torrents too? Also I don't understand the name "Web3torrent", is it intended to indicate a new version?

Interesting, I wasn't aware of the history. Personally I make the distinction, but I've noticed many many people do not, hence the question.

This reduction is really cool. I love reductions like this. Is there a general consensus to use "regular expression" to refer to the actual regular ones and "regex" to refer to the…

Thanks! That's interesting!

Note, this is about https://en.wikipedia.org/wiki/Lattice_(order) as in partially ordered sets, not https://en.wikipedia.org/wiki/Lattice_(group) as in geometry (and used by lattic…

I assume you probably can't share the client, but can you share the general domain of the software?

Depends on the type of security researcher -- some profit from it!