Wicher

9 ms·

1.
by Wicher 4d ago
> sent from a legitimate government agency email domain, DMARC-verified-sent from a legitimate [...] domain? -> Someone pwned a mailbox at an agency? I'm sure they would've spun the story into "the government was hacked
2.
Knit – Messaging Without the Network(getknit.app)
1 points by Wicher 15d ago|0 comments
3.
by Wicher 2mo ago
It'd be hard to detect from structure. Episode descriptions can and do legitimately have links. And if/when it comes to deep inspection, instead of a dummy audio file one could use a TTS-ed audio version of the post, there's
4.
by Wicher 2mo ago
RSS is great for informing readers of new content. Sadly only a few actually use it, except (unknowingly, for a large part of the population) for... Podcasts. So, thinking out loud: you could offer people to subscribe to your website by pub
5.
by Wicher 2mo ago
Turning shoes into carpet padding is probably "downcycling". I think recycling would mean most of the shoe would be used for new shoes or something of similar complexity, retaining the grade and value of the input materials. Downc
6.
by Wicher 3mo ago
This is kind of already the case on Android. If you've installed RealActualBankApp (with the ID of real.actual.bank.app) once (from whatever source!) then there cannot be another app installed with that same id but signed with a differ
7.
by Wicher 3mo ago
Wear on the chain is greatly increased though on a 1x12 versus a 2x10, because of alignment. Tolerances on a 1x setup are also much tighter, not ideal for long distance cycletrekking adventures. Also, with a front derailer, dropping the cha
8.
by Wicher 3mo ago
Hmmmmm, a visor? I suppose it'll get steamed up pretty easily when hillclimbing on a cold damp morning.
9.
by Wicher 4mo ago
> "The victim" of using a certain operating system? Please. Perhaps "victim" in the sense of not having much choice/agency? Neither in the choice of operating system (due to sparsely restrained anticompetitive be
10.
Living with Class(philosophersmag.com)
2 points by Wicher 4mo ago|0 comments
11.
by Wicher 4mo ago
Thanks, I wrote them. I'm curious as to what will come of it.
12.
by Wicher 5mo ago
Or rather – one of the downsides of many hosted Postgres installs, notably AWS RDS, is that you're not able to use the extensions you want.
13.
by Wicher 5mo ago
Yeah, so, it's not injecting? To inject something into X, X needs to exist. X does not exist yet when execve is set up. I'm not being pedantic. I just want to read about injection when I'm promised injection :-) because that&
14.
by Wicher 5mo ago
I couldn't find the technique used above the fold (or a short way below). Is this something more (and something more interesting) than just standard spawned process inheriting the parent process environment? IOW is this actually injec
15.
by Wicher 6mo ago
Totally. Ideally it'd go like this: Offer services for free (eg cross-subsidized by another business arm) in order to carve out a gigantic kingdom with millions of users, smothering any competition (only few use an indie email provider
16.
by Wicher 7mo ago
From memory from working with these a couple of years ago: Firefox extension asset URLs are random and long (there's a UUID in there iirc). The extension itself can discover its randomized base so that it can output its asset URLs, but
17.
by Wicher 10mo ago
Use fans. They don't like flying around in wind and they don't know where to fly to anymore because the fan disperses the CO2 you produce so quickly that there's no gradient for them to follow to the source (you).
18.
by Wicher 11mo ago
There's GeckoView which one'd use for embedding Firefox in an Android app. Can't use that on Sailfish OS of course, but it'd help in figuring out what of core Firefox to bind to to make a similar layer.
19.
by Wicher 11mo ago
As for the permissions, using ACLs would work better here. Then you don't need a separate group for every grouping.
20.
by Wicher 1y ago
try: sed 's:SSH/HTTP/3:SSH over HTTP/3:g' At least with GNU sed, you can use different separators so dodge the need for exscaping. | works as well.
21.
Docker Considered Harmful (2025)(quantum5.ca)
19 points by Wicher 1y ago|10 comments
22.
by Wicher 1y ago
Totally. Furthermore one can input that (now broken) URL into the Internet Archive to see if they might have snapshotted that red stapler page.
23.
by Wicher 1y ago
For SSH specifically (ssh user@host "command with args") I've written this workaround pseudoshell that makes it easy to pass your argument vector to execve unmolested. https://crates.io/crates/arghsh
24.
by Wicher 2y ago
Great, but I would've been happier if I'd had some dead simple dependency tracking 10 years ago. Just enough to create metabug functionality with. Like Bugzilla, Trac, Mantis etc have sported for at least two deades. I've alw
25.
by Wicher 2y ago
I'm running LineageOS, rooted, with MicroG' Safetynet emulation (of sorts?). So a build signed with userdebug keys. Some banking apps just work - two with warning on first launch, and one just doesn't care at all. Two refuse
26.
by Wicher 2y ago
https://en.wikipedia.org/wiki/IBM_and_the_Holocaust
27.
by Wicher 2y ago
Even if you enforce SSL-only on inbound mail, you're still vulnerable to the downgrade attack (or rather: the "prevent upgrade to TLS attack") - someone can MITM, and the sender will be speaking non-SSL to the MITMer, who&#x2
28.
by Wicher 2y ago
I think the use case is ad-hoc, as described on the page. I think the author may know about syslog, but this ad-hoc approach is useful when something such as syslog is not set up correctly and you can't fix it right there and then. Thi
29.
by Wicher 2y ago
One can resolve "localhost" (even via an upstream resolver) to an arbitrary IP address. At least on my Linux system "localhost" only seems to be specially treated by systemd-resolved (with a cursory attempt I didn't
30.
by Wicher 3y ago
From the first three lines of the linked-to paragraph: > Hurl can run HTTP requests but can also be used to test HTTP responses. > Different types of queries and predicates are supported, from XPath and JSONPath on body response, to

More ›