Viewing profile — piccirello

This excerpt from the article describes the risk well. > In Firefox Private Browsing mode, the identifier can also persist after all private windows are closed, as long as the Fire…

I've been using SSH for ~15 years and never knew about these escape sequences. I'm eagerly awaiting my next hung session so that I can test `~.`. It's much nicer than my current ap…

https://xcancel.com/rebane2001/status/2031037389347406054

`setHTML` is meant as a replacement for `innerHTML`. In the use case you describe, you would have never wanted `innerHTML` anyway. You'd want `innerText` or `textContent`.

In Apple's case, starting with macOS Tahoe, Filevault saves your recovery key to your iCloud Keychain [0]. iCloud Keychain is end-to-end encrypted, and so Apple doesn't have access…

> We’re gradually transitioning the AWS European Sovereign Cloud to be operated exclusively by EU citizens located in the EU. During this transition period, we will continue to wor…

The docs explicitly describe this cloud's independence from the US. > The AWS European Sovereign Cloud will be capable of operation without dependency on global AWS systems so that…

Here's the PR[0] that resolved the SSRF issue. This fix was shipped within 24 hours of receiving the initial report. It's worth noting that at the time of this report, this only af…

I work on security at PostHog. We resolved these SSRF findings back in October 2024 when this report was responsibly disclosed to us. I'm currently gathering the relevant PRs so th…

This is bullshit. What real harm can the defendant(s) claim over these features being delayed? Someone is trying to make a quick buck.

I utilized SSE when building automatic restart functionality[0] into Doppler's CLI. Our api server would send down an event whenever an application's secrets changed. The CLI would…

> The Secure Enclave randomizes the data volume’s encryption keys on every reboot and does not persist these random keys, ensuring that data written to the data volume cannot be re…

I wonder what impact this will have on Mozilla's OpenSSH configuration guide[0], which currently specifies `chacha20-poly1305@openssh.com` as its primary cipher. Should that be dro…

I'm the CTO of a popular Secrets Management platform. It's fair to say that I personally have a lot of experience with secrets and requirements around them, based on conversations …