gnyman

6 ms·

1.
by gnyman 13d ago
The fact that agents can solve these is telling and the Infosec Capture The Flag community is trying to figure out how to approach. I recently solved a (in)famously hard challenge (disobey conference hacker ticket) more or less by accident.
2.
by gnyman 17d ago
My 13 mini is getting similar results, no lockdown. Something else is going on.
3.
by gnyman 1mo ago
I recently vibed a little linked-in AI detector which looks for AI things like rule of three and scores it. It scored it 97% AI polished. My gut feeling agrees. The rule of three is one of the stronger signals, can't stamp that out of
4.
by gnyman 2mo ago
If someone is interested in open hardware running openwrt, also check out Turris. https://www.turris.com/en/ I have been using them for years and I'm really happy. I recently bought the WiFi 6 upgrade kit for both
5.
by gnyman 4mo ago
If it turns out to be a good change or not is to be seen. The half-full view is that the models are so good at finding vulns that if you plug them into your build-pipeline then the amount of new vulns introduced will go down towards zero. T
6.
by gnyman 4mo ago
as exemplified by the recent .de outage https://www.theregister.com/networks/2026/05/06/denic-sorry-...
7.
by gnyman 4mo ago
You can also do something like this with static pages using https://pagefind.app/ I built a ChatGPT/claude history search tool and it works surprisingly well. There are other tools also. Not to detract from this tool
8.
by gnyman 8mo ago
Please be aware that when you use tailscale funnel you announce to the whole world that your service exists (through certificate transparency), and you will get scanned immediately. If you don't believe me just put up a simple http ser
9.
by gnyman 8mo ago
It caught my eye also but the article was interesting so I'll forgive OP :-) On the topic of tamagotchi, if you happen to have a flipper zero there is emulator for it :-) my kid enjoyed it for while and it saved me a few bucks from hav
10.
by gnyman 9mo ago
This is a bit of sidetrack, but in case someone is interested in reading their history more easily. My conversations.html export file was ~200 MiB and I wanted something easier to work with, so I've been working on a project to index a
11.
by gnyman 9mo ago
hmm, I tried it on firefox and it works for me, and for me .leaflet-top already has a high z-index: 1000; although I run 140.6.0esr so maybe newer ones need a even higher one? the code is on GH now https://github.com/gnyman&
12.
by gnyman 9mo ago
I think I know what you mean, thanks for the report, if you modify the # part on a webpage it's not the same as reloading it, and I doubt I watch for that part changing
13.
by gnyman 9mo ago
I put a copy of the source on GH in case in case someone wants to improve things https://github.com/gnyman/mapdraw
14.
by gnyman 9mo ago
yeah, isn't it impressive how fast modern computers can be if you make a bit of effort, in this case I think I told it to just use plain javascript and make sure it's fast :-)
15.
by gnyman 9mo ago
it's a static webpage, the source is available with right-click view source, I added a BSD2 licence header to it to make clear it's fine to take and do mostly whatever with
16.
by gnyman 9mo ago
thanks for the info, I'll see if I can get a agent to fix it it's a static webpage, the source is available with right-click view source, I added a BSD2 licence header to it to make clear it's fine to take and do mostly whate
17.
by gnyman 9mo ago
this is not something I came up with, Simon wrote it and I liked the differentiation between "vibe coding" where there is less effort for this case project I think I would actually go back and say it's vibe coded, but I didn&
18.
by gnyman 9mo ago
Funny how I made almost exactly the same but for maps. I needed a way to share a link to a map, with drawings and the ability for the receiver to see their own location on the map. Annotated screenshots solves the first but not the second.
19.
by gnyman 10mo ago
This is nice and for those who's asking, it's different from ngrok and the others in that you don't need a separate client, (almost) everyone has ssh installed. To the author, I wish you best of luck with this but be aware (i
20.
by gnyman 11mo ago
Neal Krawetz of fotoforensics (and others probably) disagree that C2PA "is a well thought out solution" https://www.hackerfactor.com/blog/index.php?%2Farchives%2F10... (search his blog if you want more of his
21.
by gnyman 11mo ago
Even if none of these extensions were malicious, they might have some vulnerability that would allow and attacker to get your cookie? Or the developers of those might have unknowingly been phished like what happened last December. Sorry for
22.
by gnyman 1y ago
tld's mean nothing anymore, but they still signal something, and to me .xyz is not a trust-inspiring tld According to this Krebs article https://krebsonsecurity.com/2024/12/why-phishers-love-new-tl... 13% of
23.
by gnyman 1y ago
Note though that if you don't have swap now, and enable it, you introduce the risk of thrashing [1] If you have swap already it doesn't matter, but I've encountered enough thrashing that I now disable swap on almost all serve
24.
by gnyman 1y ago
Looks nice. I would add a link to the gitlab to the page also, clicking the LICENCE brings me to the source code but other than that there did not seem to be a link . Out of curiosity, did you use LLM's to code this? My gut feeling tel
25.
by gnyman 1y ago
Tom's had a good article on this problem recently. https://www.tomshardware.com/pc-components/hdds/seagate-spin... (the title is also ~p~fun)
26.
by gnyman 1y ago
I'm confused by this one. It says it's a joke but it still submits the key to a server. These joke pages have been around since http://ismycreditcardstolen.com/ And I even made my own version https://ha
27.
by gnyman 1y ago
In case you want or need security fixes for older windows machines, there is a company/product called https://0patch.com/ which provides "micropatches" all the way back to Windows 7 and Windows Server 2008 R2
28.
by gnyman 2y ago
Fantastic. Thanks for making this. I would immediately recommend this to our local hospital, but they have PlayStations (five or four don’t remember). Do you know of anything similar is possible for PS?
29.
by gnyman 2y ago
This looks great, every now and then I look for something like this. I’ve gone through a few different tools, usually end up importing it into a real database but for these one of things it’s felt a bit clunky. Saving it for next time.
30.
by gnyman 2y ago
When did Chrome go from the most secure browser to there is a exploit-chain giving RCE by visiting a malicious website every second month? (Last one I recall was CVE-2024-4761 and -4671).. Or maybe it was never really secure and it was just

More ›