taviso

5 ms·

1.
by taviso 15d ago
> the biggest failure of MV3 is not in lacking anything new whatsoever, it's in forcing the removal of a lot of API options which were useful in the name of ulterior motives. What was the ulterior motive? If it was to break ad block
2.
by taviso 16d ago
> Nevertheless, MV3's ability to offer limited filtering on startup does not seem like such a blessing when the other option was to just support full filtering on startup Sure, but as I said, it's a design decision, and nothing
3.
by taviso 16d ago
> and then the request had to wait until it was given to and processed by the blocker. Despite the name, the requests were not blocked until the extension had initialized. The browser could make network requests before that happened wi
4.
by taviso 16d ago
> content can load without the blocker being ready to filter This isn't an MV3 issue, it's a Chromium design decision that extensions cannot block browser initialization. It was also true with MV2. In fact, MV3 has improved the
5.
by taviso 16d ago
I think the new features in MV3 are great, and UBO lite is great. The initial versions of UBOl worked, but definitely lost some power user features. Those are basically all back, it now has full scriptlet support, custom dynamic filters wor
6.
by taviso 28d ago
I have one of these, there is an open source project called gshock_api that supports it. I think that makes it a much more interesting device. I don't use the app, I tag alarms in remind, and sync them from cron - works great. https:&
7.
by taviso 1mo ago
They still do! AMD Zen cores use RISC86, I documented it a little bit here: https://github.com/google/security-research/blob/master/pocs...
8.
by taviso 1mo ago
That's nothing to do with MV3 though, that was also true with MV2. The situation actually seems improved in MV3, because static (and dynamic, IIRC) DNR rules are initialized and enforced immediately, right?
9.
Building a UMatrix Replacement(lock.cmpxchg8b.com)
72 points by taviso 4mo ago|32 comments
10.
by taviso 5mo ago
Hey, another 1-2-3 nerd :) I don't have any nostalgia it, I just appreciate how thoughtfully it was designed for data-input efficiency. I actually ported the official UNIX version of 1-2-3 to Linux a few years ago, I still use it regul
11.
by taviso 6mo ago
Major breaking bugs. A regression here and there would be normal before, major features breaking in this stable 25 year old software is simply unheard of. This is not exciting cutting-edge software, it's a boring financial app. My inst
12.
by taviso 6mo ago
I'm experiencing something similar with another piece of software. ledger-cli is a boring, dependable accounting application. The next release will be the first where the majority of commits will be made by AI, and it has definitely no
13.
by taviso 10mo ago
If you hear a rumor that sounds too crazy to be true on social media, maybe don't repeat it as fact. Imagine how you would feel reading something like that.
14.
by taviso 10mo ago
why would you post such a patently absurd accusation.
15.
by taviso 1y ago
I really liked the QNX Photon aesthetic, for a long time I maintained an absurdly complex FVWM configuration designed to look like it. This was a screenshot of my Gentoo desktop around 2004! https://lock.cmpxchg8b.com/img&#x
16.
by taviso 1y ago
The point is to view it in a terminal (e.g. XTerm, Konsole, etc), of course you can just run it in an X server.
17.
by taviso 1y ago
It's fun, but reminds me of a trick using Xvfb. For example... $ Xvfb :7 & [1] 21688 $ xeyes -display :7 & [2] 21697 $ xwd -display :7 -name xeyes -out /dev/stdout | convert xwd:- sixel:- It
18.
Why are anime catgirls blocking my access to the Linux kernel?(lock.cmpxchg8b.com)
839 points by taviso 1y ago|908 comments
19.
by taviso 1y ago
In 2022, Google TAG were awarded a "lamest vendor" award at defcon for fixing a Chrome vulnerability they discovered was being exploited in the wild... without asking for permission from the NSA first. That was the turning point f
20.
by taviso 1y ago
I've used the tool sequin in the past to debug issues: https://github.com/charmbracelet/sequin It worked great for me, seems much easier to debug logs directly in the terminal.
21.
by taviso 2y ago
They accidentally used the example key from AES-CMAC RFC, the full details are in the accompanying blog post: https://bughunters.google.com/blog/5424842357473280/zen-and-...
22.
Zentool – AMD Zen Microcode Manipulation Utility(github.com)
236 points by taviso 2y ago|66 comments
23.
by taviso 2y ago
The attacker doesn't need to literally be sitting at a keyboard, that can just be automated. > I'm curious though why you don't think TOTP or similar are good against credential stuffing though I have written about this be
24.
by taviso 2y ago
I'm not familiar with the expert they consulted, but the claim that "The main advantage of 2FA is that it is much more difficult to gain access to your accounts via phishing attacks" is just plain false. TOTP or SMS-2FA are o
25.
by taviso 2y ago
I think that's a miss for Claude, this doesn't look right at all. The accrual account is an okay solution, but the syntax is wrong! That syntax is only used for budgeting and forecasting. I think the solution is effective dates, t
26.
A bullet hell game written in bash(twitter.com)
104 points by taviso 2y ago|12 comments
27.
by taviso 2y ago
This seems like a weak excuse, the same problem exists on UNIX, but slocate solves it well enough. The slocate solution is to build the index and record permission and ownership, then it can restrict output to entries you have permission
28.
SwissMicros DM32 Released [video](youtube.com)
25 points by taviso 2y ago|17 comments
29.
by taviso 2y ago
I bought a few items at a drugstore yesterday, and noticed the cashier had very elaborate nails. She used the second knuckles on her inverted hands (i.e. palm facing up) to operate the touchscreen PoS system, and was very efficient. Tool us
30.
by taviso 2y ago
I think they're talking about the cp example, doesn't seem like it would handle filenames with spaces! Super neat project, btw!

More ›