terom

23 ms·

1.
by terom 6mo ago
https://x.com/telegram/status/2038069726316834994 Telegram claims that exploitation of the vulnerability is blocked by server-side validation of stickers
2.
by terom 9mo ago
I haven't seen a serialization exception, but I have run into plenty of footguns with YAML (ref GitHub Actions). The DSL semantics can be weird with when things like params/env expansions in options block are evaluated.
3.
by terom 9mo ago
Working with Jenkins CasC, JobDSL and declarative pipelines, I'm not sure where the million times comes from. Sure, there are some annoying parts, and GHA has the social network for reusable actions, but apart from that it's not t
4.
by terom 10mo ago
downdetectorsdowndetector.com does not load the results as part of the HTML, nor does it do any API requests to retrieve the status. Instead, the obfuscated javascript code contains a `generateMockStatus()` function that has parts like `res
5.
by terom 11mo ago
re-search :D
6.
by terom 1y ago
Also with additional control difficulty due to reduced hydraulic pressure. > On the Boeing 767, the control surfaces are so large that the pilots cannot move them with muscle power alone. Instead, hydraulic systems are used to multiply t
7.
by terom 1y ago
From the Cloudflare incident: > Cloudflare’s critical Workers KV service went offline due to an outage of a 3rd party service that is a key dependency. As a result, certain Cloudflare products that rely on KV service to store and dissemi
8.
by terom 1y ago
Based on [1] it seems like one `management.endpoints.web.exposure.include=*` is enough to expose everything including the heapdump endpoint on the public HTTP API without authentication. It's even there in the docs as an example. Looks
9.
by terom 1y ago
Going a bit further, it seems like there's a grain of truth here, HTTP/2 has a stream priority dependency mechanism [1] and this report [2] from Imperva describes an actual Dependency Cycle DoS in the nghttp implementation. Unfort
10.
by terom 1y ago
The git commit hashes in the diff are interesting: 1a2b3c4..d4e5f6a I think my wetware pattern-matching brain spots a pattern there.
11.
by terom 1y ago
Portugal has an even bigger relative drop in load, from 5852MW at 11:00 hours -> 613MW at 13:00 hours - these seem like 1 hour averages. [1] https://transparency.entsoe.eu/load-domain/r2/totalLoadR2/sh...
12.
by terom 1y ago
That graph doesn't seem to make a very clear distinction between historical, real-time and predicted values... I think the event happened at 12:30 local time or so. There seems to be some kind of recurrent daily pattern where the Frenc
13.
by terom 1y ago
It looks like the Iberian peninsula is relatively isolated from the rest of the CESA synchronous grid, with only 2% cross-border capacity compared to local generation. [1] There's a map at [2] > The Spanish electricity system is cur
14.
by terom 1y ago
https://news.ycombinator.com/item?id=43486945 related
15.
by terom 1y ago
Yeah, you have to move it off-planet to achieve an actual security boundary. In our threat model the upper bound on the useful lifetime of the system is limited by the light-distance time from the nearest adversary.
16.
by terom 2y ago
Yeah, and that makes sense in the context of an acceptable use policy for Mozilla services that are not your use of the Firefox browser. But the same AUP for the services is now explicitly referenced in the TOS for the browser. How are you
17.
by terom 2y ago
Wait, Mozilla is banning the use of their Firefox browser for porn? That's going to hurt adoption. What's with the mixup of their browser and services policies? [1] Your use of Firefox must follow Mozilla’s Acceptable Use Policy,
18.
by terom 2y ago
It's fascinating that we've built a system that has expended perhaps several million dollars of engineering, legal and admin etc time over the issue of a single letter not being capitalized [1], without any demonstrable impact bey
19.
by terom 2y ago
These are technically kinda crazy, because they use a normal schuko plug (with male pins) to output power. It allows loading the circuit with a higher total ampacity than the circuit breaker protecting the wiring at the distribution panel.
20.
by terom 2y ago
Renewing the certificates seems technically pointless, but some organizations/federations require it. Rotating the keys would make some sense, but just swapping the cert for a new one issued against the same keys doesn't. It'
21.
by terom 2y ago
The title seems incorrect, per Comment#10 https://bugzilla.mozilla.org/show_bug.cgi?id=1877388#c10 all missued certificates were eventually revoked > 2024-01-22 > 08:25 The error message “ERROR: basicConstraints MAY a
22.
by terom 2y ago
https://old.reddit.com/r/crowdstrike/comments/1e6vmkf/bsod_e... quotes the CrowdStrike advisory verbatim, which has timestamps of 04:09 UTC for the problematic version and 05:27 for the reverted (good) v
23.
by terom 2y ago
"post-processing step" aka regex? :) HN comments from a green username citing a friend who knows someone aren't the greatest source, but this sounds so believeable
24.
by terom 2y ago
https://azure.status.microsoft/en-us/status/history/ doesn't seem to have links to the individual incidents. Some reports claim the Azure / Microsoft 365 outages were related to crowdstrike, but thi
25.
by terom 2y ago
Reboot harder. > Update as of 10:30 UTC on 19 July 2024: We have received reports of successful recovery from some customers attempting multiple Virtual Machine restart operations on affected Virtual Machines. > We've received fe
26.
by terom 2y ago
I don't think DNSSEC would help in the common case of non-validating stub resolvers querying a public resolver. My understanding is that the DNS query response from a DNSSEC-validating public recursive resolver doesn't contain the
27.
Write a Review of the AWS Managed Nat Gateway in the Style of Chuck Tingle(awscommunity.social)
1 points by terom 2y ago|0 comments
28.
Ansible Galaxy Not Functional?(forum.ansible.com)
1 points by terom 2y ago|0 comments
29.
by terom 3y ago
https://a.aliexpress.com/_EzMRNIv €250 for one axis (edge) and €500 for a 3-axis (single point). There are a couple sellers / designs.
30.
by terom 3y ago
It will take a bit more engineering than some optimistic sign-flipping to bring it down to $50 retail (~$10 BOM). > In my case, the BOM was close to €2500, so be prepared for that. EDIT: someone pointed out that there are actually some d

More ›