Viewing profile — infotogivenm

source integrity is probably the more applicable feature for gp’s concerns

> Nah I don’t get it then… Do you never end up having to privesc in your pentests on linux systems? No doubt it depends on customer profile but I would guess personally on at least…

Think “illegitimate” access to www-data. It’s very common on linux pentests to need to privesc from some lower-privileged foothold (like a command injection in an httpd cgi script)…

Fidelity, who remains a stakeholder in the private company and gets insight to internal financials, has cut the valuation of their holding by 75% so far [1]. While twitter might no…

Em, that seems an extremely generous comparison, where did you come up with that? Last I checked for example systemd relies on polkit for policies, which drags in a javascript inte…

I’m surprised no one has written a tool (probably would involve disabling SIP) to import/export passkeys on macOS. They’re in memory, right?

https://newsletterhunt.com/emails/48880

Came here to mention this. I used this exact setup (used a laptop battery bank off of amazon as a UPS for my home modem), and came home months later to find the bank had caught fir…

It is fairly common to have noexec on /dev/shm; filesystem configurations are always up to the admin so they could feasibly set anything.

One good example is bringing up equipment that comes out-the-box with a default password. This is common on BMCs for example, and you have to initially provision things somehow.

It’s covered under footnote #1: > First, some vendors make it difficult to associate an SSH key with a user. Then, many vendors do not support certificate-based authentication, mak…

I’ve noticed the code reader is worthless on even slightly out of date browsers now, and even on newer browsers it tends to choke and stutter on large files. Sad :( it used to be t…

If you have metadata for a couple of messages it is no longer a needle. Not sure what your point about APNS tokens is - I agree, once they hone in on who received the messages Appl…

Ah good point, radar/ultrasonics were what I was thinking of, not lidar. Looks like they’re still gone.

I mean, the current requirement for human attentiveness and intervention probably has something to do with avoiding disaster scenarios.

I can imagine it could be useful, e.g. if you already have metadata on “dates when user A messaged user B”, and are trying to de-anonymize user B.

Are they still all-in on “pure vision” self-driving? I thought they had pivoted back to lidar but can’t seem to find any sources for that.

Correct. Worst rental car experience of my life.

The point of killing third party cookies is to prevent a tracking identifier cookie that uniquely identifies your browser from being reused across different sites. So you can of co…

I believe third-party cookies have been blocked on Safari and FF by default for many years

Can you elaborate? I have not kept up with the eSNI/ECH stuff... How will filtering still be possible?

What part of the world do you live in? Just curious, I travel very often but have yet to see any convenient way to spend bitcoin everyday.

the biden laptop story was temporarily banned for less than 24hrs as it violated various twitter rules for hacked content and nudity. The “Twitter Files” ( cue x-files theme ) show…

Nice. A similar project, but more license-constrained, is fuse-t for macos: https://github.com/macos-fuse-t/fuse-t