_jomo

6 ms·

1.
by _jomo 9mo ago
I made https://fahrplan.cc where you can filter the [not] recorded sessions, categories, and titles. I've mostly made it for myself to skip the recorded sessions when on-site and to see what's coming up at the current
2.
HomeAssistant Supervisor Authentication Bypass(home-assistant.io)
2 points by _jomo 4y ago|0 comments
3.
by _jomo 4y ago
This seems to affect users from the EU, but not from the US.
4.
by _jomo 5y ago
> reproducible build available at F-Droid It's not available at F-Droid. They have an F-Droid compatible repository that you can manually add to your F-Droid client where they ship binaries. I also can't find any mention of rep
5.
Dovecot Mailbox Encryption(doc.dovecot.org)
1 points by _jomo 6y ago|0 comments
6.
by _jomo 7y ago
Any service that claims to be "free" and doesn't have a very obvious business model gets me very suspicious. I usually start reading the service's privacy policy. This website's "Privacy Policy" states: &g
7.
by _jomo 7y ago
This is a "feature", not a bug. Twitter keeps asking for phone numbers all the time and then suggests you also allow others to discover your account via phone number. So this guy merely enumerated a lot of phone numbers and found
8.
Infinite Multiplayer Minesweeper(sweeper.unobtanium.de)
37 points by _jomo 7y ago|14 comments
9.
by _jomo 7y ago
I'd like to point out that GDPR compliant sites don't need to ask permission for strictly necessary cookies. I also recommend using Cookie AutoDelete for Chrome [0] or Firefox [1]. You can define a whitelist of websites where you
10.
by _jomo 7y ago
Also, in my experience address locations on Google Maps are often very inaccurate, so it's not even a good source.
11.
by _jomo 7y ago
I keep wondering why people who seemingly care about their privacy continue to use Google products/services, doing all their online activity while logged in to their Google account.
12.
by _jomo 7y ago
Useful website, but years out of date and unmaintained. The actively maintained community fork can be found at https://justdeleteme.xyz . Repo: https://github.com/jdm-contrib/jdm
13.
by _jomo 7y ago
Please don't rely on the Referer being present (ever). It's an optional header to send in a request and you can configure your browser — at least Firefox — to not send it for privacy reasons. Logout (or anything else that triggers
14.
by _jomo 7y ago
Comcast has even published an informational RFC describing how to inject crap into HTTP requests: https://tools.ietf.org/html/rfc6108
15.
by _jomo 7y ago
I think most VPNs use NAT, so many users share the same IP address. Otherwise the VPN would be mostly pointless.
16.
Scroll Anchoring in Firefox 66(hacks.mozilla.org)
13 points by _jomo 7y ago|2 comments
17.
by _jomo 7y ago
You seem to ignore that this constrains abusers as much as it does legitimate users. Collective punishment in order to mitigate abuse by a few is the wrong way to go.
18.
by _jomo 7y ago
They have been doing this for any account registered from a VPN or Tor. However, you can simply appeal the block and tell them you haven't tweeted and not broken any rules. They will send you an automated mail, offering to validate you
19.
The role of mastodon.social in the Mastodon ecosystem(blog.joinmastodon.org)
24 points by _jomo 8y ago|2 comments
20.
by _jomo 8y ago
You can get most of this by analyzing server logs with IP addresses. No cookies required. You might need some JavaScript tracking for more detailed analytics, but there is absolutely no need for external tracking by Google or the likes. Exa
21.
Making the Building of Firefox Faster for You with Clever-Commit from Ubisoft(blog.mozilla.org)
2 points by _jomo 8y ago|0 comments
22.
Maintaining Different Git Identities(dev.to)
15 points by _jomo 8y ago|0 comments
23.
Domain Validation and Padlocks(paypal.gift)
2 points by _jomo 8y ago|1 comments
24.
About Domain Validation and Padlocks(paypal.gift)
2 points by _jomo 8y ago|0 comments
25.
by _jomo 8y ago
I rarely type in duckduckgo.com. I just enter the search keyword into the URL bar and it takes me to DDG.
26.
by _jomo 8y ago
Containers are a feature built into Firefox. There are extensions that let you use them more generally with any given website. It's also quite useful to log into websites with multiple accounts at the same time. However, to prevent tra
27.
by _jomo 8y ago
Interesting, but the commit that introduced the malicious changes wouldn't be signed by the alleged author's key. Also I'd trust anyone who denies adding a backdoor like this. Why would anyone do this with their name attached
28.
by _jomo 8y ago
From RFC8483 [0] "Yeti DNS Testbed", which was published a few hours ago: > Yeti DNS is an experimental, non-production root server testbed that provides an environment where technical and operational experiments can safely be
29.
Yeti DNS Project(yeti-dns.org)
94 points by _jomo 8y ago|60 comments
30.
Exposure of Confidential Issues on Public Projects through the Events API(about.gitlab.com)
3 points by _jomo 8y ago|0 comments

More ›