mqus

6 ms·

1.
CVE-2026-18963 – Keycloak Reset-Credentials Bypass → Account Takeover(github.com)
6 points by mqus 22d ago|0 comments
2.
by mqus 1mo ago
not only inconsistent over time, but also inconsistently distributed over people. rich people got richer (at least lately) and the less rich didn't get much richer (if at all)
3.
by mqus 2mo ago
yeah, to me this also pretty much sounds like the approach we started with, we bring our data (as a file) into the application and it stores it back if we want to.
4.
by mqus 2mo ago
Is : the same as `true` ?
5.
by mqus 2mo ago
But... that software (reaction) is not written by the FSF? They just use it
6.
by mqus 2mo ago
> I guess it depends on what you expect. If you expect the train to be on time .. yes, India is much better than Germany. ~80% trains delayed 15 min or less vs Germany 36% trains delayed 15 min or less. I won't defend DB too much he
7.
by mqus 2mo ago
People hate patronizing systems in their cars already, not sure this would help
8.
by mqus 3mo ago
they may low-density, but low-tech?
9.
by mqus 3mo ago
they did not "just announce" that, it was a rather technical decision several layers down, made a while ago. Sure, some things are not easily created without US companies but the overall tendency is pretty clear and it is: reduce
10.
by mqus 3mo ago
It's probably only funny because the commenting germans are aware that there is a much simpler "UG" (without the &co KG), which is pretty much a LLC, which you can open on your own, a bit faster, much cheaper. But apparen
11.
by mqus 3mo ago
Jetbrains gives away for free infinity years of a $180+ per year subscription (its more expensive in the first year or for orgs)[1] for open source authors, students, and more. Sure, the per-month price tag is not as high but after year 4 y
12.
by mqus 3mo ago
This sounds like your update process is quite involved then. Or do you just not do it?
13.
by mqus 3mo ago
Tbh Arch itself is the most explicit about this compared to the derivatives. Manjaro etc allow installing AUR stuff directly from their main package manager
14.
by mqus 4mo ago
As someone who tried rerere and didn't see the point: How? Usually I rebase the same branch multiple times onto different, but successive commits of the master branch. But after I solved a bunch of conflicts of the first rebase, I shou
15.
by mqus 5mo ago
Bug =! Vulnerability
16.
Etel-Tuning(etel-tuning.com)
2 points by mqus 6mo ago|0 comments
17.
by mqus 6mo ago
Why can't stores take over the "verification" process (like they do already)? Why do app developers have to be verified themselves, why does the verification have to be done by google? There are so many options, why choose go
18.
by mqus 6mo ago
At what point will you draw the line between "the user wants to do this because of his/her free will" and "the user wants to do this because someone else told them to"? Where will you stop? All of this is just a ban
19.
by mqus 7mo ago
I only trust this once they have finally detailed how they will allow "easy sideloading" (See one of the last fdroid news on this, currently google is on track to basically ban sideloading as it exists) and what exactly means &quo
20.
by mqus 7mo ago
Re your last paragraphs: I think RMS really meant just the Linux kernel when he wrote that(the topic is drivers, after all), not GNU/Linux, the OS or GNU/Linux, "the system". So it can be argued that he isn't really
21.
by mqus 7mo ago
Ok, then I don't pay you for advertising. On an entirely unrelated note, could I buy a spot on your website(e.g. at the top) to put a piece of my own website on it? You have a news website, right? And I also have some news to share.
22.
by mqus 7mo ago
But what if I rent a space on your website that I can fill however I want? And then, coincidentally, I praise my products on that rented space. How is that different from... other hosting offers?
23.
by mqus 7mo ago
In fact, I did not have any significant traffic coming from AWS, Azure, GCP, or any of the other big cloud providers. Its only the chinese ones.
24.
by mqus 7mo ago
I "solved" this by adding a fail2ban rule for everyone accessing specific commits (no one does that 3 times in a row) and then blocking the following ASs completely (just too many IPs coming from those, feel free to look them up y
25.
by mqus 7mo ago
As the article states, its usually 2:1 women to men so there is also a kind of shortage of basses, its just not as severe.
26.
by mqus 7mo ago
I just counted the list of supported formats and landed at 35. This is still impressive, but if even this simple fact is wrong in the project description("40+ formats!!!"), I have no faith at all that any of this actually works.
27.
by mqus 8mo ago
> using mostly unpaid volunteer developers. I'm not even sure this is true. Isn't there some company (or more) like Collabora behind most of the dev work right now?
28.
by mqus 8mo ago
Its not "building a new package management system", "alpm" is literally the foundation of the pacman ecosystem. They are improving this so they _can_ catch up on packaging tasks. I'm the same as the sibling commente
29.
by mqus 8mo ago
But this _is_ improving the pacman ecosystem? Afaict its aiming to be a drop-in replacement of existing tools, but with proper libraries so systems like buildbtw can be built around it.
30.
by mqus 9mo ago
Integrity. TLS does prevent man-in-the-middle attacks. For a personal blog, that may not be important but you _do_ get a benefit, even if the encryption is not necessary.

More ›