Viewing profile — catkitcourt

Pulsar

A Linux distribution is free to define its own security policy, which serves as a common understanding between developers and users. And not all packages require auditing. The prim…

Nobody suggests anyone adding a repo. It has already been stated very clearly in the article: > 5) How to Continue Using Deepin on openSUSE > Given ..., we don’t recommend to use t…

Maybe consider prevent Intel and RST. They are nightmare out of factory.

What’s the difference between fail2ban? Though I feel neither of those two works now.

Actually this already is the SOTA of cracking. My honeypot can see several different IP is brute forcing concurrently, and they seems irrelevant. But once you let one of them login…

Unless the payment is performed by foreign entity (which means a US employer is hiring a Chinese hacker), it's not a wise choice to do currency exchange when measuring salary, beca…

Interesting product. I'm curious about the output of example flow (phishing mail scan).

Seems requiring IO of debugged device is directly connected to scan registers, like a FPGA.

Only 3 NVMe SSDs and no room for HDD, so do they have dedicated storage cluster via iSCSI-like things, or they don't need HDD? Also I noticed the SSDs must be changed by open top l…

I had wrote some shell software (~5k loc without comment i think?) and agree. I was using shell because the project want to maintain compatibility between different distros (includ…

This raise one more issue about Chinese providers. The site using this exploit, HiCA is run by xiaohuilam on Github. He/She is also the founder of two famous SSL certificate provid…

The real problem here is you are typing those "sensitive password or key" into termianl. Instead of type it directly, Use `read password` and `mysql -p$password` is the right way. …

oh this coward simply locked the discussion to prevent more criticism. why not telemetry on people's response in that thread? you can opt-out the discussion by filtering them in yo…

I recommend quote their "anti-censorship community". I'm anti-censorship, but I'm not a member of them. Their behavior insults me. I'm not represented by them.

Quick answer: Find the right one to blame, please. If you think that, just by making authorities know your phone number is registered on Signal is dangerous enough for you to be ar…

As they've claimed, this is a security vulnerability, instead of a software bug. If they really think this is a vulnerability, send to Signal's email: https://support.signal.org/hc…

Here is how we do things, we responsible security researchers. Do things by following steps: 1. Is this a security vulnerability, or simply a bug? If just a bug, send to Github Iss…

Buy a new phone. Use Project Fi. Throw or sell your phone to other people at US or China after your trip finished.

like jailbreaked nintendo switch?

Especially if you have a old (or modern) game, only supporting multiplayer over LAN. This tool can help your game console connected over WAN.