h43z

6 ms·

1.
by h43z 2mo ago
It's just something everyone should be aware of. It's up to you to decide if it's okay that you send a server provider (in this case late.sh) a bunch of your public keys which he could for example use to probe other servers t
2.
by h43z 2mo ago
OpenSSH server is designed not to reveal whether a username exists.
3.
by h43z 2mo ago
If I have your public key I could probe a server to see if it recognizes that public key. Which would tell me information you might not want to be leaked.
4.
by h43z 2mo ago
By default SSH leaks all of the below public keys (if they exist) + all public keys in your ssh-agent to a server you connect to. ~/.ssh/id_ecdsa.pub ~/.ssh/id_ecdsa_sk.pub ~/.ssh/id_ed25519.pub ~&#x2
5.
by h43z 2mo ago
Reminder to be cautious about leaking public keys. Once you leak your public key it could be used to check if another server recognizes that leaked public key.
6.
by h43z 3mo ago
Today frontier models became Groypers.
7.
ImageMagick: From Arbitrary File Read to File Write in Every Policy(pwn.ai)
1 points by h43z 5mo ago|0 comments
8.
by h43z 9mo ago
Right click, view source?
9.
Show HN: Localhorst – Websites Hosted in the Browser(localhorst.43z.one)
3 points by h43z 9mo ago|2 comments
10.
by h43z 9mo ago
Firefox is really in a sad state. The politics, ideology is getting worse and the tech is still bad. Kind of crazy that they waste everyones battery and cpu https://b.43z.one/2025-02-12/ Am I the one who is crazy and n
11.
by h43z 9mo ago
Did I understand that correctly that I will be able to get a certificate for an IP?
12.
by h43z 1y ago
I recently wanted to find out which company crawls the deepest. The openAI bot was the most thorough one, it followed 405 links [1]. [1] https://deep.43z.one
13.
A Replacement for the Mouse in Linux(github.com)
5 points by h43z 1y ago|0 comments
14.
by h43z 1y ago
Doesn't feel like much of an explanation to me. # UMASK is the default umask value for pam_umask and is used by # useradd and newusers to set the mode of the new home directories. # 022 is the "historical" value in De
15.
by h43z 1y ago
Can someone explain why we are still using a umask of 022 in ubuntu and debian? Would it really be so hard to make that switch to a more privacy focused umask?
16.
by h43z 1y ago
The span one is the important one though as most of the modern web does not use <button> anymore.
17.
by h43z 1y ago
I don't see it working on firefox for buttons but on chrome. Both don't work on other html elements (div,span,..).
18.
by h43z 1y ago
I used to use vimium (and tried similar extensions) but it always scared me how big the codebase was for most of the popular extensions. In the end I came up with a tiny extension for just the things I need https://github.com&#x2
19.
by h43z 1y ago
This works on links and buttons in chrome. In firefox just on links. In both it doesn't work for other html elements.
20.
by h43z 1y ago
The links yes, but what about buttons or other html elements?
21.
A small change to improve browsers for keyboard navigation(b.43z.one)
207 points by h43z 1y ago|68 comments
22.
Ask HN: Are SSH keys with passphrases considered 2FA?
3 points by h43z 1y ago|1 comments
23.
by h43z 1y ago
Do I understand this correctly that the server here is only needed to make sure the secret it's only read once?
24.
How to Fix Firefox's Find-in-Page for Keyboard Navigation(h.43z.one)
1 points by h43z 1y ago|0 comments
25.
How Deep Will Bots Crawl?(deep.43z.one)
2 points by h43z 1y ago|0 comments
26.
Enhancing Firefox's Find-in-Page for Keyboard Navigation(h.43z.one)
3 points by h43z 1y ago|0 comments
27.
by h43z 1y ago
If you want to navigate websites more with your keyboard I created a dead simple extension. All it injects is this tiny snippet into each site. addEventListener('keydown', event => { if(event.key !== 'Enter&#x2
28.
by h43z 1y ago
Oh it's like any other. Then just add another one!
29.
by h43z 1y ago
Do I understand that correctly that in order for logs to rotate you have to reboot?
30.
by h43z 1y ago
The only obstacle here appears to be the psychological issues of the maintainers themselves. I know it maybe hard to say "fuck off" but they will have to learn to say that to stop being exploited.

More ›