Viewing profile — rainforest

Are the headers not connected to that same filter net anyway?

Note that the smart feed "feature" is Taboola-provided adware[0] so it's par for the course. It's beyond comprehension Lenovo would trash the brand by shipping it on flagships. [0]…

I'm quite surprised to see the need to debug a live server here. I'm of the belief that the need to repro a problem locally and using a debugger lead to better understanding. SSHin…

Does it worry you at all that meat is ultimately made of whatever food the animal eats and processed into a litany of chemicals? I feel the UPF "debate" is just an appeal to nature…

I had similar with my energy provider in the UK (Octopus). For one reason or another a regular payment bounced which automatically puts you on a "call daily until the debt is repai…

I think Cloudflare WAF is a good product compared to other WAFs - by definition a WAF is intended to layer on validation that properly built applications should be doing, so it's s…

Thanks, for the benefit of others the risk is that the devtools port has no Auth so is vulnerable to XSS. I would surmise that this will stop being a problem if you switch to using…

Could you go into a bit more detail about this? Why is exposing devtools to the agent a problem? What's the attack vector? That the agent might do something malicious to exfil save…

For a while the /join page was blocked by cloudflare WAF yesterday - I wonder if this is why.

The NHS does this calculus routinely using Quality Adjusted Life Years. Treatments that get more are favoured which is also how NICE decides what drugs the NHS should offer. There'…

I would offer a counterpoint: most software in existence was written by not-software-professionals in Excel (most likely poorly). Within reason I think there is a rational basis fo…

Yes, if the key isn't in the TPM then it can't be sniffed. Secure boot would need to be enabled to protect against the threat model bitlocker is only good for here. Alternatively u…

A cow is in a sense a factory producing various proteins, fats, and carbs from grass. Does putting it into something "natural" reset it? I would imagine that red meat isn't a UPF b…

IIRC some of the Snowden leaks alleged that (at least at the time) domestic traffic couldn't be surveilled (but this was solved by mutual assistance across the Atlantic - the Briti…

Most Kickstarter campaigns I get shown on FB are from third party services that just upload the Kickstarter breach list (my email is in it). Could that have happened to you?

The web extension honor system "security" model is broken because that extension that prints Hello at the top of the page might later be modified by a malicious actor to do somethi…

Perhaps you don't have a change in the number of crackpots, but you have a decent chance the crackpots are now all saying the same thing. Misled voters in a democracy seems like a …

Sure Audio makes an ADAU1701 set of boards that looks similar. Parts Express seems to carry Dayton Audio branded versions. Can't say how well they work but a stack of IF board, DSP…

Is there any potential for extending that limit? I work on a product that uses Fargate Spot as a kind-of lambda substitute to run longer-duration tasks consumed from SQS and being …

> I don't understand why an entire elementary statistics pseudo-textbook is bolted on at the end, forming the entire back half of the text It's quite difficult to talk about empiri…

The permissions system seems to be granular with respect to whatever was selected - if you select a directory you have full access to everything in it. Theoretically the permission…

It appears I could use this to ask a victim to "select your downloads folder" to save files to and then steal or overwrite any file in it.

Slack does this too. Slackbot sends you "getting started" tips by default, which led to me receiving an email to ensure I enable notifications. That email was sent out of office ho…

Yes, if there was a library that eval'd unsanitised input the damage potential is the same. The practical difference is that it's a lot harder to assure code written in unsafe lang…

The exploit is against a vulnerable library (the actual input file is here: https://github.com/sola-st/wasm-binary-security/blob/master/... ) If you have a wasm application with vu…