Viewing profile — ebfe1

A friend passed away last year from cancer and I wanted to make a simple app to help delivering her message to love ones but work and responsibilities got in the way before I could…

I will look into that, thanks for the recommendation!

TIL! Thank you!

While we try our best to lock down our laptop, close open ports, run littlesnitch, ufw but it is always an unease to connect them directly to an public wifi, worrying about some 0d…

Anyone know if there is a public events feed/firehouse for npm ecosystem system? Similar to GitHub public events feed? We, at ClickHouse, love big data and it would be super cool d…

I found there are many links from stepsecuritiy, socket.dev but aikido seems to have the most up to date information about this ongoing npm hack.

Is it just me who think this could have been prevented if npm admins put in some sort of cool off period to only allow new versions or packages to be downloaded after being publish…

I don't see mentioning of e2e encryption, that would be nice but I love the webrtc usage here! Shameless plug: I built small file sharing tool with encryption in browser and added …

Honest question: So who gets this $1.38B? The user? Some company? The government/treasury?

Yea hence it prompts for you to check the first time but once you verify the hash for particular version of action, it would automatically apply the hash to that same version of ac…

Yeap - that is exactly what it does ;) Example: uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 #v1.16.0 And for anything that previously had @master, it bec…

oh damn - that is a great point! thanks matey!

After tj-actions hack, I put together a little tool to go through all of github actions in repository to replace them with commit hash of the version https://github.com/santrancisc…

Ok ....where is the form so as an ex-whatsapp user, I can get a piece of that 167M pie? Oh... there isnt one... :)

And this is how Chinese model will win in long term, perhaps... They will be trained on everything and anything without consequences and we will all use it because these models are…

Like any tech nerds, I went through "camera phase" and carried canon 350d, 50d then 6d everywhere i go with my 50mm and 135mm ... but they were indeed bulky, it was a hassle to get…

Not exactly related but on the topic of finding target's location, A few years ago i used to run a little demo of capturing probe wifi ssid network on prefered network list of near…

100% this... the authn/authz should be gated at the server that store sensitive data... whatever token/user that MCP uses must have its access scope down to what needed. I guess th…

Last friday i went through a bunch of our workflows and started pinning their hashes... it got annoying so i created a little app to assist, it is quite simple, you can add a list …

Love the use of chdb for this!

Let’s hear it… As developers and engineers, I think we should all adopt the “assume breach” mentality. Do you have your own personal tricks to stay safe? I’ll start: I like to drop…

I wonder if they forked it to "experiment" with the workflow coinbase has and doesn't actually make any pull request toward them, perhaps to validate their hypothesis/attack. with …

It seems i forgot to cater for the quota applied to free "play" user in ClickHouse in my previous query... In fact, the threat actor did a lot more... this should give a better lis…