lillesvin

31 ms·

1.
by lillesvin 21d ago
Don't they keep a local copy like Bitwarden does?
2.
by lillesvin 21d ago
Last thing I saw before my Proton Mail stopped responding was the "how are we doing?" survey modal, which I dismissed because I just wanted to get to my email. Hope it's nothing too bad.
3.
by lillesvin 2mo ago
I had a throwaway Reddit account get banned from a local subreddit because I used an em-dash when asking: "Do you have an alternative to Facebook — e.g. a mailing list?" The mods' full response when I asked about it was: &quo
4.
by lillesvin 2mo ago
I just meant the SQLi (which is the basis of the chain), not the full chain.
5.
by lillesvin 2mo ago
I feel like I've seen plenty of non-AI, pre-2020 SAST tools catch SQLis like the one mentioned here, and if nothing else, then a code review ought to catch it. Is WordPress not using code reviews and/or SAST?
6.
by lillesvin 3mo ago
As much as I like cross-platform stuff, I also really like native UIs that follow native UX patterns, etc.
7.
by lillesvin 3mo ago
That's the claim, yes. Has any proof been made available yet? (Genuinely asking here because I haven't been paying that close attention.)
8.
by lillesvin 3mo ago
There have been millions of trivially exploitable vulnerabilities out there for decades — many of which could be easily discovered by using simple scanning tools or manual probing. This is hardly a new situation and LLMs really aren't
9.
by lillesvin 3mo ago
> [...] for everyday use, it wastes precious seconds [...] You should probably try the Ian Knot then: https://www.fieggen.com/shoelace/ianknot.htm (good video demo here: https://youtu.be/6cBtqhq5P28
10.
by lillesvin 4mo ago
> Anyone know of a password manager that can encrypte and live in say Google drive? Can't most of the many KeePass variants do that?
11.
by lillesvin 5mo ago
I didn't mean to detract from your tool. Sorry if it came off like that. More options is more better. :)
12.
by lillesvin 5mo ago
If you're not afraid of working in a CLI, ImageMagick is also a very solid tool for editing lots and lots of images in bulk as long as you know what you want done to them.
13.
by lillesvin 6mo ago
Indeed it was. > [...] users forked Songbird and created a Windows, Mac, and Linux compatible derivative under the name Nightingale. [Source: https://en.wikipedia.org/wiki/Songbird_(software) ]
14.
by lillesvin 6mo ago
Even your fancy guitar is not exempt from harmonics math. TFA has nothing to do with the quality of a guitar and everything to do with 12-Tone Equal Temperament.
15.
by lillesvin 7mo ago
> The difficult part of language is the fact we can build entirely novel meanings out of a relatively small finite set of words. So are you saying that we've got e.g. neurolinguistics, psycholinguistics, language acquisition and typ
16.
by lillesvin 7mo ago
I obviously don't know your background but out of the linguists that I know and have met while doing my degrees in linguistics, I don't know of anyone who would say that the kiki-bouba effect is not important — anything, in fact,
17.
by lillesvin 7mo ago
> But no serious linguist thinks that kiki-bouba is that important to language. Do you have a source on that? Because I would expect anyone studying sound symbolism to find the bouba-kiki effect extremely important which is probably why
18.
by lillesvin 7mo ago
> Firefox is not an alternative; audio does not work for me. I could recompile it but compiling firefox is a pain in the ... Obviously I don't have any data backing me up here, but I'm going to guess that that isn't the ma
19.
by lillesvin 8mo ago
Aristophanes was such a troll. I can only recommend reading some of his plays, like The Assemblywomen (where this word is from), The Wasps, and The Clouds. They're almost 2500 years old but they've aged incredibly well both thanks
20.
by lillesvin 8mo ago
Searchable snapshots in Elasticsearch can be backed by S3 and they perform very well. No need to store the data on hot nodes any longer than it takes for the index to do a rollover, and from then it's all S3.
21.
by lillesvin 8mo ago
What kind of storage do you have backing your Elasticsearch? And how have you configured sharding and phase rollover in your indices? I work with a cluster that holds 500+ TB logs (where most are stored for a year and some for 5 years becau
22.
by lillesvin 8mo ago
Do I read it right, that ARTEMIS required a not insignificant amount of hints in order to identify the same vulnerabilities that the human testers found? (P. 7 of the PDF.)
23.
by lillesvin 9mo ago
Just to mention an alternative option, ZAP (aka. Zed Attack Proxy) covers much of the same ground as Burp and is entirely free and Open Source.
24.
by lillesvin 9mo ago
Come on, just stop. "They" have been used to refer to singular antecedents since the 14th century. (Source: https://www.oed.com/discover/a-brief-history-of-singular-the... )
25.
by lillesvin 10mo ago
But neither does the actual server. HMAC only verifies that the message is from whoever it claims to be from and that it is intact. It won't know what you intended the body of the request to look like.
26.
by lillesvin 10mo ago
Ah, my bad. Sorry. But couldn't you then just make the call to an echo service (like HTTPbin) or simply dump the request when you send it?
27.
by lillesvin 10mo ago
But the returned signed string will be an HMAC-SHA256 hash, won't it? Then there's not going to be any '\n' or '\\n's in there. Only thing you'll be able to tell is if it matches your hash or not, in which
28.
by lillesvin 10mo ago
Given that you can't infer the error from simply looking at the signature string, I don't see how having the expected string rather than a simple "OK" or "mismatched signature" (as you get now) would make a dif
29.
by lillesvin 10mo ago
I know it's kinda besides the point and I don't know what language this was being done in, but I don't personally know any language where String signature = "POST" + "\n" + "/api/v1&#x
30.
by lillesvin 10mo ago
I use screen sharing from the official web client in Firefox on both Debian and Fedora without any issues. What issue(s) do you encounter?

More ›