Viewing profile — ff7c11

A fork of a private repo is private. When you make the original repo public, the fork is still a private repo, but the commits can now be accessed by hash.

Is it hard to brute force? If so, it is still something that can be sniffed, though you can't unlock the car without first recording a genuine button press.

If cash disappears, will we return to a barter economy? People will still trade amongst themselves.

Easylist should serve the Indian browser (based on user-agent) with a giant file (expensive), a corrupt file, or some response which causes the app the crash. If the browser crashe…

I don't believe the kids behind this Twitter account. I don't know why they're doing it exactly, probably some form of clout or to scam buyers on darknet marketplaces, but I know t…

Trying to think how to anonymise datetimes hurts my head. You might want to randomise the date of an event. But you also need this random date to be consistent with respect to both…

Signature_example.pdf 8====> :)

Also, if you don't have a public access block in place, a private bucket can contain public files! Even if you can't list the files in the bucket, there are tools which try to gues…

By temporarily defacing the Sega website and modifying files I think they have crossed the line. Enumerating what access they have, rooting through S3 and reporting it is OK, but b…

So if they didn't create a new user account and IAM account what would you see? If they just used the remote shell and the installed aws cli e.g. `aws s3 ls` would you be able to d…

${jndi:ldap://AWS Down}?

Don't do this. People live in Taiwan. It's not fair to use them as pawns. Keep the status quo rather than provoke war and chaos.

I had a personal project that I got bored with so I let the domain expire. Then I got emails from former users saying that the domain was now hosting malware. So yeah I would like …

Probably just publish a few videos to Youtube and ask future subscribers to follow your non-Youtube channel instead.

What is a good way to communicate audio information. Listening to audio doesn't necessarily explain how the sound was made (well it does kind of), whereas seeing a word in IPA make…

I think they're identical.

French speakers often struggle with beach/bitch :)

The UK is also "literally an island", though 4 times as big as Taiwan. Taiwan banned flights from China early on, and now only allows entry to residents and those on business. The …

Swiss tech companies find that there isn't enough talent within Switzerland unless they are focusing purely on the Swiss market. Cost of living is higher than London in somewhere l…

Yeah looks like the book publishers conned the BBC into writing a news piece to advertise it.

Have you tried knockd https://linux.die.net/man/1/knockd ? You send a special sequence of "knocks" to the server (packets to different ports) and it executes a command such as allo…

So do I just need to fill my computer with porn? Or use stenography to put all my files inside porn.

Thanks that's really interesting, as I see from your reports you could call /json/list with rebinding to get the guid. For the past 2 years it now validates the Host header.

Node debug mode runs a websocket, but the address is something like ws://0.0.0.0:9229/1cda98c5-9ae8-4f9a-805a-f36d0a8cdbe8 - without the correct guid at the end, you can't open the…

You can only make a websockets request. The javascript call will fail if either the port is closed, or the port is open but doesn't act like a websockets server. So you can tell if…