Viewing profile — mr_mitm

From the article: > “I had the projector set up outside and was waiting for the sun to set,” wrote one Facebook user in Colorado Springs, “but to my surprise I was simply living in…

Next up: "I didn't do a statistical analysis but the sample size seems small"

And here I thought using open source client software is the only way I, the user, can guarantee E2EE of my data.

> NONE of my agents have broken away from their tasks and then started to communicate to try to hack something. With all due respect, you also aren't evaluating brand new models th…

Go creates `~/go` by default. It's not even hidden. Unfortunately, saying it's not really used that much doesn't help with this.

Surely e-mail is even more widely used?

My impression is that it's the NodeJS, Go and Rust communities that don't care about XDG. This 11 year old, open issue is very symptomatic of this IMHO: https://github.com/rust-lan…

True, I guess you might as well evaluate each vulnerability yourself without the CVSS base score.

> - Firstly, you quickly realise how irrelevant CVSS scores are Even if you factor in the environmental score? I realize it's a lot more work, but it basically allows you to tune t…

Here is a recent example. Currently unpatched in Debian stable. https://www.cve.org/CVERecord?id=CVE-2026-60002 As I understood this, a malicious server can change its host key som…

Have you ever tested this on a real corporate network?

Yes

Just FYI, it says "lack", not "luck"

I, a German, went to Switzerland for vacation once. I talked to a Swiss guy about how I like Switzerland and all that. I told him how impressed I was with how organized everything …

The way I read the article was that cancer is caused by deficiencies in the body's repair mechanism. It appears as if some have a more robust mechanism than others, depending on ge…

It's a zero day in some caching proxy who may not have had that threat model in mind. I guess its primary purpose is caching packages, not restricting internet access. That's a far…

I hate the BOM so much. It causes so many subtle issues and I don't even understand why it's needed.

Is teens ordering wine a big issue in the US? Bigger than social media?

I wish my team would at least use the rebase merge strategy by default to avoid branch graphs looking like the London tube network. Not in 10 years did I have an issue with that (o…

I had a gig for a contractor of some banks once. One of the banks was using 5.0.0.0/8 internally. I asked the guy if it doesn't lead to issues. All the time, he said. When they fir…

I take it you aren't programming business CRUD apps? I almost never have to do any math. It would be a delight if I did.

Is pangram using knowledge about specific models? Could you throw it off by having several models generate a paragraph each or so?

It is also built on the assumption that filenames never contain newlines, which is wrong in general. It's baffling to me that POSIX allows non-printable characters in file names, b…

The next known black hole is tens of thousands of light years away. Also, the universe does not seem to be inside a black hole.

Note that you can't use these lasers to slow down the probe, which will dramatically limit the things the probe can do at the destination. I'm not even sure what kind of interestin…