kseifried

8 ms·

1.
by kseifried 2y ago
Twitter doesn't work anymore unless you are logged in. https://unrollnow.com/status/1861079762506252723
2.
by kseifried 2y ago
For additional context the PyPi package: https://pypi.org/project/mcp/ And the GitHub repo: https://github.com/modelcontextprotocol
3.
by kseifried 2y ago
Stock splits. https://www.intc.com/stock-info/stock-splits They basically keep doubling the number of shares which halves the price.
4.
by kseifried 2y ago
The EMBAG law stipulates that all public bodies must disclose the source code of software developed by or for them, unless precluded by third-party rights or security concerns. "unless precluded by third-party rights" Oh. Well the
5.
by kseifried 2y ago
Turns out F5 and Intel were just clearing out old reservations, but the other data is correct.
6.
by kseifried 2y ago
Turns out F5 and Intel were just clearing out old reservations, but the other data is correct.
7.
by kseifried 2y ago
k so I'm writing a blog post on the whole #Linux Kernel #CVE/#CNA thing. And I actually looked at the data. For those of you complaining about the Linux Kernel issuing improper CVEs my response is "cool. If they're not s
8.
by kseifried 2y ago
k so I'm writing a blog post on the whole #Linux Kernel #CVE/#CNA thing. And I actually looked at the data. For those of you complaining about the Linux Kernel issuing improper CVEs my response is "cool. If they're not s
9.
by kseifried 2y ago
Entrust has BIMI certs which use a different root (CN = Entrust Verified Mark Root Certification Authority - VMCR1) and for which your choices of a BIMI certificate are: Entrust or Digicert. I doubt it makes as much money as their web certs
10.
by kseifried 2y ago
Entrust has BIMI certs which use a different root (CN = Entrust Verified Mark Root Certification Authority - VMCR1) and for which your choices of a BIMI certificate are: Entrust or Digicert. I doubt it makes as much money as their web certs
11.
by kseifried 2y ago
You can also listen to Greg KH explain it: Episode 417 – Linux Kernel security with Greg K-H https://opensourcesecurity.io/2024/02/25/episode-417-linux-k...
12.
by kseifried 2y ago
So in my experience, even if you get the LLM to output JSON, it might do things like: * Helpfully include "json ```" at the start or text like "here's the JSON output you asked for" * Use a smart quote randomly inst
13.
by kseifried 2y ago
Watching a video of a chimpanzee eating a banana at the zoo a few years ago and I realized I was peeling bananas wrong my whole life. Would you have them open with a knife or a key on the stem side. It turns out there’s a better method. You
14.
by kseifried 2y ago
#!/bin/bash SHA512="485fe3502978ad95e99f865756fd64c729820d15884fc735039b76de1b5459d32f8fadd050b66daf80d929d1082ad8729620925fb434bb09455304a639c9bc87" # This line and everything later gets SHA512'ed an
15.
by kseifried 2y ago
#osspodcast: Who are the experts - https://opensourcesecurity.io/2020/04/07/who-are-the-experts... Experts from a world that no longer exists - https://opensourcesecurity.io/2021/11/
16.
by kseifried 3y ago
https://opensourcesecurity.io/2022/10/16/episode-345-cheap-h... Josh and Kurt talk about ineffective security from the past we still use today. There has been a great deal of progress in the last few decades
17.
by kseifried 3y ago
Aroma and smell training kits exist for people into wine, beer and so on: https://aromaster.com/
18.
by kseifried 3y ago
I love the hardware and the feel but the software is terrible and the difficulty of putting templates on the device (you hack around and use ssh to copy a file in) really limits the usefulness. The subscription model is also pushed heavy wi
19.
by kseifried 3y ago
So there's a high degree of complexity and subtlety to Passkeys. I wrote a paper about this, some key things: ● Passkeys improve security significantly, and while they make some trade-offs concerning security versus usability, they do
20.
by kseifried 3y ago
We covered this on the open source podcast last week. https://opensourcesecurity.io/2024/01/21/episode-412-blame-t... TLDR there is a LOT 23andme could’ve done to prevent this. Around the same time BrickLink
21.
by kseifried 3y ago
Fail2ban could be potentially useful in an era of passwords, especially when systems allowed anyone to login remotely, and you only had the one server because servers were very expensive. However, the moment the industry went to SSH Keys en
22.
by kseifried 3y ago
We covered this back then on the #osspodcast: Episode 269 – Do not experiment on the Linux Kernel https://opensourcesecurity.io/2021/05/02/episode-269-do-not-... Josh and Kurt talk about the University of Min
23.
by kseifried 3y ago
From many years ago on the #osspodcast Episode 184 – It’s DNS. It’s always DNS https://opensourcesecurity.io/2020/02/24/episode-184-its-dns... If you look at a lot of outages and incidents, DNS is a common pr
24.
by kseifried 3y ago
Oh wow, so CSIdentity Corporation was combined with Experian in 2016: https://www.experian.com/blogs/news/2016/04/18/csid/ so this email appears to be legitimate: Original Message Message ID &l
25.
by kseifried 3y ago
csid.com redirects to Experian to make it look more legitimate but... what's that go to do with okta? Seems to be a scam.
26.
by kseifried 3y ago
It’s a perfect plex client box. And you can pair controllers to it and play games. The voice recognition works. It does FaceTime now with your phone and using the TV as the output.
27.
by kseifried 3y ago
I listen to the #osspodcast Open Source Security Podcast. It cured my baldness and also is a great additive to soups and milkshakes. https://opensourcesecuritypodcast.com/ I was not paid to post this message. This is a tota
28.
by kseifried 3y ago
The problem with that is people don't have fire safes. Or homes in some cases (e.g. many unhoused people have smartphones now). Also people need to travel and do recovery without having to fly home to their safe. The idea that printing
29.
by kseifried 3y ago
Updated my paper: https://news.ycombinator.com/item?id=37833390 Scenarios dealing with the loss of Passkeys: The scenarios for dealing with the loss of Passkeys are effectively the same as dealing with the loss of your Pass
30.
by kseifried 3y ago
I might regret this but I have an (almost finished) draft of a paper on Passkeys, it is available, with comments enabled (which will be turned off if vandalism becomes a problem) at: https://docs.google.com/document/d&#

More ›