moloch

7 ms·

1.
Trump Will End Government Use of Anthropic's AI Models(wsj.com)
10 points by moloch 7mo ago|1 comments
2.
by moloch 2y ago
Say they introduce a bug, that deletes every file on your machine.
3.
by moloch 4y ago
No, they don't have access to the Wireguard keys and everything is point-to-point. They'd have to push a backdoored software update to gain access (and this is a threat with any vendor product).
4.
Static Linking of Cgo Programs(ragoragino.github.io)
1 points by moloch 4y ago|0 comments
5.
by moloch 4y ago
Yeap, I think the Xbox 360 was the first (or one of the first) to implement this protection back in 2005 - https://www.youtube.com/watch?v=uxjpmc8ZIxM
6.
by moloch 5y ago
No, unless combined with WebUSB trickery, and such an attack has been possible in the past. However, browsers currently implement blocklists of HIDs and other USB types from working with WebUSB.
7.
by moloch 6y ago
Python has had named arguments for a long time (since v1.4), which is arguably more widespread than PHP or Swift.
8.
by moloch 6y ago
None of your cited examples are "secure," they're the very definition of "security by obscurity," which is to say insecure. https://en.wikipedia.org/wiki/Kerckhoffs%27s_principle
9.
by moloch 7y ago
If anyone is interested in Electron application security, I wrote a guide that explains the methodology behind some of the choices the author here has taken and even goes a bit further in a variety of areas: https://know.bishopfo
10.
by moloch 7y ago
I've used nsshell to great effect on multiple projects, highly recommend it (but an encrypted option would be great rook). I've also written a more heavy handed asymmetrically encrypted DNS C2 https://github.com/Bi
11.
by moloch 7y ago
Always hack with a safety shell!
12.
by moloch 7y ago
The conference did _not_ accept the talk, they paid the conference so that they could give the talk.
13.
Russia's Intelligence Agency Hacked: 'Largest Data Breach in Its History'(forbes.com)
2 points by moloch 7y ago|0 comments
14.
by moloch 7y ago
Using 2Mb with MSVC instead of 1Kb with MASM. Such a wasteful world.
15.
by moloch 7y ago
I think their main mistake was requiring a user to change their password to upgrade the hash instead of upgrading the hash on the next user login.
16.
by moloch 9y ago
Steam VR/Vive has "AAA" non-exclusive titles.
17.
Today's CPU vulnerability: what you need to know(security.googleblog.com)
39 points by moloch 9y ago|4 comments
18.
by moloch 9y ago
Is that enabled by default in 4? I use and identical AOT build process with 2.4 and 4 (ng-cli) and there's no problems building with 2.4
19.
by moloch 9y ago
Lol, if only the real world were that simple. I have an Angular 2.4 project that when updated to 4.0.0 produces about 300+ build time errors (guess you can't access `private` members from templates anymore, it'll be fuuuuuun updat
20.
Hacking Guatemala’s DNS(thehackerblog.com)
2 points by moloch 10y ago|0 comments
21.
by moloch 10y ago
This is bad but not horrible, especially in the example given leaking the reset token to Cloudfront. The application is loading JavaScript from the Cloudfront origin, so that origin by definition could already read the tokens by modifying t
22.
by moloch 10y ago
SVG should only be executing in a null origin if it is not blocked by the CSP.
23.
by moloch 10y ago
Well TypeScript is sort of "optionally typed" (variables can have a type of `any`) it's also superset of JavaScript so any valid js is valid ts.
24.
by moloch 10y ago
Ubuntu also has LTS releases for this exact reason.
25.
by moloch 10y ago
I really want the GPU performance, my mid-2014 MBP can only output to a 4k monitor @30hz
26.
by moloch 10y ago
There are a huge number of contextual corner cases, this cheat sheet lists just a few: https://www.owasp.org/index.php/XSS_Filter_Evasion_Cheat_She...
27.
by moloch 10y ago
> Yes, blacklisting is insufficient in general. But it covers many cases, including the one here. Contextual encoding must be done each and every place you emit user input into HTML, and it's easy to screw this up. Blacklists are on
28.
by moloch 10y ago
This is insufficient to prevent XSS, or DMI -the de facto anti-XSS is contextual (generally HTML) encoding, and it is the only proper mitigation. Blacklisting specific characters such as angle brackets is not safe, and will end in tears.
29.
Smash Bros. AI that plays Melee inside the Dolphin emulator(github.com)
2 points by moloch 10y ago|0 comments
30.
by moloch 10y ago
The actual quote was: “First of all, VR displays are a little too cumbersome. It has to be much more elegant, being connected by a wire has to be solved. The resolution has to be a lot higher. The physical worlds do not behave according to

More ›