rurcliped

6 ms·

1.
by rurcliped 19d ago
Love this! Think you haven't pushed CONTRIBUTING.md yet? Anyways, is there data around what met the bar for patterns.py? Like, five instances in different projects got a patterns.py rule, anything less than that usually dropped?
2.
by rurcliped 3mo ago
With more advance notice, someone could have found resources to fork curl with different vulnerability management expectations, e.g., "will not accept or otherwise handle any vulnerability reports during the month beginning 21 December
3.
by rurcliped 5mo ago
For many events, the demographics lean toward age groups where people have jobs with work schedules that aren't known more than a few weeks in advance. The initially planned friend group (e.g., four people) can have little overlap with
4.
by rurcliped 1y ago
feature request: AI-based risk analysis, with a model of which types of commercial vehicles at that location are likely to be controlled by organized crime
5.
by rurcliped 2y ago
To disambiguate, the person on the plane could learn to use hand signals (e.g., Cued Speech) and the AI model can be trained on that.
6.
by rurcliped 2y ago
"use, display, and perform Your Content through the GitHub Service" might allow a wide range of uses on GitHub Pages websites, even if https://example.github.io is monetized (monetization is permitted by https:/&
7.
by rurcliped 3y ago
It is discuused here: https://lists.mindrot.org/pipermail/openssh-unix-dev/2023-De... - the HPN-SSH maintainer says "I do have an issue with [the OpenSSH 9.6] release in that it breaks interaction with HPN-SS
8.
by rurcliped 3y ago
for "Thats exactly what we will be doing initially! Our tablets taste much better than Bite!" I might go with the brand "habitablets" and the tagline "where self-care meets planet-care" the idea is that "h
9.
by rurcliped 3y ago
Suppose you have office space in the jail, and give him (or anyone else) the opportunity to apply for remote jobs at anyplace willing to hire him - with the caveat that he loses office access unless he demonstrates that he's maximizing
10.
by rurcliped 3y ago
a recent audit claims the author "doesn't have enough resources to address" security issues: https://www.openwall.com/lists/oss-security/2023/09/08/2 https://github.com&#x2
11.
by rurcliped 3y ago
What data is stored about an employee's justification for viewing a customer account? Is there an enumerated set of justifications such as "direct customer inquiry" versus "to be used for upselling other banking products
12.
by rurcliped 3y ago
Years ago, many decisions to hide error details were a cargo cult reaction to CVE-2012-4929. To review, CVE-2012-4929 works like this: 1. the attacker can see (but not decrypt) the victim's TLS traffic to example.com 2. an attacker-con
13.
by rurcliped 3y ago
Possibly because the firmware could be modified, and not print the required yellow dots or other tracking data: https://www.eff.org/pages/list-printers-which-do-or-do-not-d... "Some of the documents that we previo
14.
by rurcliped 4y ago
If I were evaluating this, my top four concerns would be: 1. "NoSQL document database with MongoDB-like queries ... powered by the open source database engine RocksDB" doesn't give me enough confidence that my application wil
15.
by rurcliped 4y ago
At least one other person reported Hive Social vulnerabilities recently: https://twitter.com/zhuowei/status/1597739467645030400
16.
by rurcliped 4y ago
https://blog.miki.it/2014/7/8/abusing-jsonp-with-rosetta-fla... (this was somewhat more exciting when Flash still existed)
17.
by rurcliped 4y ago
I feel that the goal should be providing tickets to the fans who most want to be there. For example, Round 1 would be for fans who feel confident that a Taylor Swift Eras show would be the best event they would ever experience. A fan in Rou
18.
by rurcliped 4y ago
It looks like MIT didn't maintain their 1789164 U.S. trademark registration number for Athena: "computer programs, and instruction manuals sold therewith, which collectively provide a set of integrated network services; namely, us
19.
by rurcliped 4y ago
The withserve.com homepage refers to the fakercloud.com domain, which seems to host code for Potentially Unwanted Browser Reconfiguration or other unexpected content. It would be better to only use example domains under your company's
20.
by rurcliped 4y ago
The web developer might be very competent, but choose to use the word "manually" to support a higher cost proposal for the project.
21.
by rurcliped 4y ago
Landing page - the primary problem I had was trying to understand what your product does. The phrase "shared by your Twitter friends" implies that you have introduced a new concept ("friends"), perhaps a group of like-mi
22.
by rurcliped 4y ago
The post says "the vulnerability has only existed for a week." Many Linux systems don't yet have a 3.0.4 package available, but apparently Homebrew is already installing the affected version: https://formulae.brew.
23.
by rurcliped 4y ago
In many environments, "For that reason, I decided to use semicolons" will cause all of your code to be automatically rejected, because https://standardjs.com/rules.html "No semicolons" is enforced at the
24.
by rurcliped 4y ago
We don't allow our admins to use Parted to change partition tables on production servers. We feel that this is rational because the documentation explicitly says that it might be buggy: https://www.gnu.org/software&#x2F
25.
by rurcliped 4y ago
With CVEs for ham radio, clearly the next step is to add ATT&CK tactics and techniques. If you compromise a PC that's connected to a ham radio, you might be able to transmit maliciously, or interfere with the radio owner's abi
26.
by rurcliped 5y ago
Redaction can be needed for a document, but redaction can also be needed for a video (car's license plate, credit card number, etc.). As far as I know, there's no video editing software that recommends black bars and, for example,
27.
by rurcliped 5y ago
The specific URL on mitmh2022.com might not work as intended in all web browsers. To reach the puzzle in question, you may have to click on this link once, press the Public Access button on the resulting page, and then click on the same lin
28.
by rurcliped 5y ago
Here's one: https://api.developer.monday.com
29.
by rurcliped 5y ago
another class of security issues that has been seen in other quiz apps is client-side disclosure of questions/answers, e.g., https://mentimeter.canny.io/feature-requests/p/make-sure-que...
30.
by rurcliped 5y ago
It's common for outbound traffic to 127/8 to be blocked, at the application layer, to prevent SSRF. For example, in WordPress: https://github.com/WordPress/WordPress/blob/9d4d3f8fba13be09...

More ›