dotty-

7 ms·

1.
Trivy Compromised a Second Time – v0.69.4 binaries, setup-trivy, trivy-action(stepsecurity.io)
9 points by dotty- 6mo ago|1 comments
2.
by dotty- 7mo ago
At first glance, this feels like just an internal testing prompt at their company for some sort of sales pipeline. Feels more like an accident. None of the referenced files are actually in the repository. If the prompts had more of a "
3.
by dotty- 8mo ago
I saw this too and immediately thought: well, they published this on GitHub which surely has a clause that grants it a license to use the code for training Copilot for Microsoft at a minimum, sooo should've published on another Git pla
4.
by dotty- 8mo ago
You joke, but that's a very real approach that AI pentesting companies do take: an agent that creates reports, and an agent that 'validates' reports with 'fresh context' and a different system prompt that attempts t
5.
by dotty- 11mo ago
Big fan of https://github.com/synzen/MonitoRSS , not mentioned in the article. I self host at home and it sends feed updates to my own Discord server. I appreciate the customization for how the feed notification appear
6.
Hacking Apple MDMs Using Rogue Device Enrollments [video](youtube.com)
2 points by dotty- 1y ago|0 comments
7.
by dotty- 1y ago
that's cool, do you support an RSS feed?
8.
Justice Department Arrests Prolific Chinese State-Sponsored Contract Hacker(justice.gov)
4 points by dotty- 1y ago|1 comments
9.
by dotty- 1y ago
There are multiple 'National Archives' across the country: https://www.archives.gov/locations Looks like this only affects the one in College Park, MD.
10.
by dotty- 1y ago
Really wish people didn't continue to misunderstand the concept of wealth & having cash. First sentence of the article: > Back when Elon Musk had a bank account with merely one billion dollars in it he had to borrow money from t
11.
Denuvo Technical Analysis(connorjaydunn.github.io)
3 points by dotty- 1y ago|0 comments
12.
by dotty- 1y ago
> The Verizon Call Filter app uses the endpoint hxxps://clr-aqx.cequintvzwecid.com/clr/callLogRetrieval to lookup call history for the authenticated user and display it in the app. Have you ever seen a more internal-l
13.
by dotty- 2y ago
Meanwhile: "Genshin Impact tops $5 billion in revenue in China alone, on track to hit $10 billion globally in 2025" https://gameworldobserver.com/2024/10/11/genshin-impact-reve... This is a drop in
14.
by dotty- 2y ago
I don't get that at all. I understand this to point to an attempt at scrubbing information that could lead back to him personally -- but done poorly as Krebs pointed out that other personal photos continued to exist on the Facebook acc
15.
by dotty- 2y ago
lol, well, the companies who have already started a migration away from Bench are probably not going to stop their migration. Ouch.
16.
by dotty- 2y ago
I starred this on GitHub a few weeks ago! https://github.com/Freika/dawarich Have not played with it, but maybe could fit your needs!
17.
by dotty- 2y ago
I don't think creating a separate tier of enhanced OS upgrades would benefit Ubuntu. Ubuntu isn't connected to a multi-billion dollar corporation. Canonical has no resources to offer a free AI-powered Notepad editor. Microsoft is
18.
by dotty- 2y ago
I just wish Microsoft had a simpler mindset for their OS. Simple, privacy-first, consumer-first defaults and optional upgrades to more enhanced tools via their App Store. Imagine if instead of Windows Recall being installed and available au
19.
by dotty- 2y ago
The pricing is very interesting. The company I work for pays $20k for Jira & Confluence and $20k for Slack every year. And this platform claims I can replace both of them for $3600/year? and it's open source? The marketing l
20.
by dotty- 2y ago
I was one of the people Garry blocked on Twitter and after this article was published, I was unblocked. So to be fair, it does seem like Garry has taken steps to reverse that.
21.
by dotty- 2y ago
No, because Continue actually added value on top of VS Code. PearAI has not added value on top of Continue -- yet.
22.
by dotty- 2y ago
The beauty of forking/open source is the ability to contribute back to the original project or take over an abandoned project. In this case, the original project Continue.dev isn't abandoned and actually has more traction/com
23.
by dotty- 2y ago
To be fair, there is a "For Talents" and "For Recruiters" selector at the top of the page. For talents, it is a free platform.
24.
by dotty- 2y ago
I hope SAP does a hard retrospective on why Wiz's research was not disrupted before they got full cluster admin. Like, I want to know from SAP's side whether they received any alerts for any of this activity and whether they inves
25.
Push Notification Fatigue Leads to LA County Health Department Data Breach(securityweek.com)
19 points by dotty- 2y ago|21 comments
26.
by dotty- 2y ago
This has been happening for years. My theory is the actors running the bots are instructing their bots to use old popular threads as a blueprint to get a bunch of upvotes across all of their accounts at once. The idea being that clearly Red
27.
by dotty- 2y ago
When you make a transaction on the Bitcoin network (and really every other cryptocurrency), you tack on a fee to the amount of coin you want to send. Miners prioritize higher fee transactions when deciding which transactions to include in t
28.
by dotty- 2y ago
The contribution to C++ is just a simple markdown change: https://github.com/MicrosoftDocs/cpp-docs/pull/4716 C++ is fine.
29.
SSL interception on Hetzner/Linode targeting largest .ru XMPP service (Nov 2023)(notes.valdikss.org.ru)
2 points by dotty- 2y ago|2 comments
30.
AT&T says leaked data of 70M people is not from its systems(bleepingcomputer.com)
2 points by dotty- 3y ago|1 comments

More ›