aleksejs

5 ms·

1.
by aleksejs 13d ago
Is your heat sink entirely unmodified? Opening up the fins should make it a lot easier to cool.
2.
by aleksejs 16d ago
Meta glasses do have a recording indicator.
3.
by aleksejs 27d ago
You will surely not have a good time enforcing the terms of a legal document that explicitly spells out that it is intentionally obfuscated from the party it intends to bind.
4.
by aleksejs 28d ago
I think the actor they were monitoring was not tracking real launches but rather simulating where a hypothetical balloon launched from their territory would land.
5.
by aleksejs 28d ago
This is an official USPS service available to anyone willing to attach their address and "a statement guaranteeing payment of postage due on delivery" to their keys! Which is neat but kind of awkward if that's also the addres
6.
by aleksejs 1mo ago
I'm not sure I understand the intended message here. The author seems to describe their own project as "cover[ed] ... with invasive advertising" while saying that new technology accomplishes the same outcomes "faster, ch
7.
by aleksejs 1mo ago
> If you go looking for the public record of what Mythos actually found you land on roughly 40 CVEs, and 28 of those are Firefox and 9 of them are wolfSSL. A browser and a cryptography library. There’s no PHP in that list, no CMS, nothin
8.
by aleksejs 2mo ago
I just added CEC to mine today by soldering some wires to my DP-to-HDMI adapter and having Claude write some firmware to run on a Pi Pico to inject the CEC messages at the right time. It's not the most elegant solution but felt in the
9.
by aleksejs 2mo ago
That limitation can be bypassed through the Accessibility API on Android. KineStop supports this, but for some reason does not advertise it particularly widely. You want KineStop → Settings → Fix blocked buttons.
10.
by aleksejs 2mo ago
That sounds fun too!
11.
by aleksejs 2mo ago
Buried at the bottom of the article, my favorite thing about modern Lego kits: > One of the most intriguing features is unlocked when you press the ‘build together’ button on select sets in the app. This allows consumers to build a LEGO
12.
by aleksejs 3mo ago
The camera (even the regular model) does not have its own GPS receiver at all. It relies on a smartphone to transmit GPS coordinates over Bluetooth. This is pretty common in modern cameras, presumably because most photographers expect to be
13.
by aleksejs 3mo ago
You can install a custom operating system on (a non-carrier-locked model of) every phone Google has ever made.
14.
by aleksejs 4mo ago
> This is imperfect, as CAA record validation is not mandatory yet. But by March 2027 all the CAs a supposed to have support. Is that true? My read of Section 1.2.1 in [1] suggests CAA checking has been mandatory since 2017‐09‐08. [1] h
15.
by aleksejs 4mo ago
The jabber.ru post referenced here presents clear evidence (in the section titled "Network") that the malicious actor was able to reroute traffic going to the legitimate jabber.ru server. An attacker in this position does not need
16.
by aleksejs 4mo ago
The leasing company leases these cars to Uber drivers in NYC, who presumably did not get cut off.
17.
by aleksejs 4mo ago
> It doesn't provide a useful security feature, but it does lock out competition very well. This seems to presuppose that service providers using reCAPTCHA are either clueless idiots or actively expending resources and lowering thei
18.
by aleksejs 4mo ago
TFA is authored by the developers of an alternative operating system that can be freely installed on every Google phone since Pixel 6.
19.
by aleksejs 4mo ago
It argues no such thing. Of the 20 instances of the word "interest", 19 are obviously referring to the interest that the IRS will charge you on your balance if you don't pay your taxes by the due date. The one remaining one i
20.
by aleksejs 8mo ago
It's a cultural difference thing: https://russian.stackexchange.com/questions/13142/what-do-or...
21.
by aleksejs 8mo ago
How do you even begin to define what correctness means for the transformations if you have no formalized model of the thing you're transforming into?
22.
by aleksejs 8mo ago
The linked website and repository do not refer to the outputs as "verified C++". The use of that term in the submission title here seems misleading, and the Design Principles [1] document clarifies it is only the source (Rocq) pro
23.
RCE in ImunifyAV, a common malware scanner for shared web hosting(blog.popovs.lv)
1 points by aleksejs 8mo ago|0 comments
24.
Exploiting deobfuscation in ImunifyAV for code execution (CVE-2025-65530)(blog.popovs.lv)
1 points by aleksejs 8mo ago|0 comments
25.
by aleksejs 9mo ago
I'm not sure why you take me for a JSON/JWT fan (I'm happy to agree they've had their own share of implementation bugs), or what that has to do with signature wrapping bugs in XML-DSig, which is what I've been talki
26.
by aleksejs 9mo ago
I am comfortable saying that, when designing a signature scheme, people should not want features that are known to consistently lead to catastrophic vulnerabilities.
27.
by aleksejs 9mo ago
That is not, in fact, the question. The whole point of storing signatures separately from the serialized bytes they sign is not having to rely on any properties of the serialization scheme. It does not matter whether your serialization is c
28.
by aleksejs 9mo ago
Most of these attack vectors have been known for 10 years, and yet researchers keep finding bugs in major implementations to this day. Here's one from last week: https://portswigger.net/research/the-fragile-lock &
29.
by aleksejs 10mo ago
> God forbid you have an accident and you end up at the wrong hospital when the one down the road is in-network but the one they took you to is out-of-network and you wake up owing thousands of dollars. If you examine the statement of be
30.
by aleksejs 11mo ago
> The focus on maps and gemini is hilarious. The first is literally the anti-use case, It reminded me of the Wii U Street View app and the interview with its developers (at https://iwataasks.nintendo.com/interviews/w

More ›