ReginaPhalange

@ReginaPhalange@lemmy.world

• ⁨Comment⁩ on ⁨Presenting 14 practical vulnerabilities in GPG & friends on stage (39C3)⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  What do they suggest for the secure way to validate the header line?
  Let’s say it is Hash: SHA1 and then a million nbsp and then a newline

  Is the header line now considered invalid because of arbitrary character limit?
  Is it invalid because the maximum length of a known hash function is (insert figure here)?
  Should the million nbsp be a part of the text being signed?

• ⁨Comment⁩ on ⁨Presenting 14 practical vulnerabilities in GPG & friends on stage (39C3)⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  At 09:10 - they demonstrate injecting text that does not break signatures - by appending text after manually inserting null terminator.

  • Is null terminator a character that can be inserted using any enhanced text editor? How do I do that in vim?
  • They go on to say that \v\r is not a new line - but actually I thought that Unix style of text documents end a line that way (\r)?
• ⁨Comment⁩ on ⁨Nearly all of Spotify has been scraped and is available via torrents⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Am I losing my mind? All magnet links are metadata, no?

• ⁨Comment⁩ on ⁨Leaker Who Apple Is Suing Says 'Screw It,' Here's the Foldable iPhone Early⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Generally true - but multitouch was a real innovation. I’m not familiar with other manufacturers perfecting touch interfaces AND design paradigms optimized for it.

• ⁨Comment⁩ on ⁨xkcd #3184: Funny Numbers⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  Head-In-Fridge

• How do we know that the ratio between the circumference and the diameter of a circle is preserved across radius sizes?
  Submitted ⁨⁨3⁩ ⁨weeks⁩ ago⁩ to ⁨nostupidquestions@lemmy.world⁩ | ⁨11⁩ ⁨comments⁩
• ⁨Comment⁩ on ⁨TikTok Deal Done And It’s Somehow The Shittiest Possible Outcome, Making Everything Worse⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  We’ll see… We’ll see…
  * Cue accordion hands *

  Accordion playing trump

• ⁨Comment⁩ on ⁨Word.⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  I went over the powershell script out of boredom,
  Found this

  try {
          [void][System.AppDomain]::CurrentDomain.GetAssemblies(); [void][System.Math]::Sqrt(144)
      }
  

  Anyone knows why they are trying to do 2 tasks that actually do nothing?

• ⁨Comment⁩ on ⁨iRobot has filed for bankruptcy and may be taken over by its primary supplier⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  Find a way to operate the device offline RIGHT NOW, and disable firmware updates IMMEDIATELY. We all know this would become a FUTO bounty in a manner of months.

• ⁨Comment⁩ on ⁨Best meal ever⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Meme about UK’s pronunciation of “Bottle of water”

• ⁨Comment⁩ on ⁨Windows 11 to add an AI agent that runs in background with access to personal folders, warns of security risk⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  A volume of NTFS that is filled entirely by folders named “trans porn” would mean that there isn’t a single folder in there that contains 2 folders.

• ⁨Comment⁩ on ⁨Platform for Crowd Sourced Software Bounties?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Any bug bounty program that isn’t part of the source control repo website (GitHub/Lab…) Will not enjoy the deserved exposure for such a program, but, the day that GitHub realize this - they will want a cut of that deal

• ⁨Comment⁩ on ⁨My own copyparty instance⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Take. It. Down.

  Do you know how much CSAM was on Lemmy when it first got started?

  This kind of service should be open for friends and family only, NOT the whole wide world.

• ⁨Comment⁩ on ⁨Progress⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  I understood that reference

• ⁨Comment⁩ on ⁨#environmentalist⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Surely you can’t be serious

• ⁨Comment⁩ on ⁨I present: Torum! A crappy yet functional bearbones selfhosted forum site for termux.⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Termux is the shitty Linux on Android emulation Tmux is the not shitty terminal multiplexer (AKA “make this thing still run even though I’ll disconnect soon”)

• ⁨Comment⁩ on ⁨Discuss⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Peanut butter brown is an African American with jaundice.

• ⁨Comment⁩ on ⁨Hackers can steal 2FA codes and private messages from Android phones⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Listen Mr Zuckerberg, we can improve our ad revenue immensely if we can do this one little trick to Facebook’s code…

• ⁨Comment⁩ on ⁨Software update bricks some Jeep 4xe hybrids over the weekend⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Click here to agree, contact car disposal services otherwise.

• ⁨Comment⁩ on ⁨Just an FYI⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  I need a linguist to tell me why this one feels strange, but if we switch the first line to Alien spaceship it seems better.

• ⁨Comment⁩ on ⁨Hacking group Crimson Collective claims to have breached Nintendo⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Couldn’t happen to a nicer company

• ⁨Comment⁩ on ⁨No password, so your phone automatically connects⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  That

  Pan de Mic

  Is *Chef kiss*

• ⁨Comment⁩ on ⁨Google Confirms Non-ADB APK Installs Will Require Developer Registration⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Most F-Droid users are NOT custom ROMs.
  This means that as long as F-Droid does not get their own developer key - it will become useless. F-Droid is privacy focused - both dev and user, and they oppose requiring devs to essentially give up their privacy and sign the APK with their own dev key.

  Now, if F-Droid is dead, GrapheneOS becomes useless. Who would want to develop apps for the 0.0001% of the population (i.e custom ROM users)

• ⁨Comment⁩ on ⁨v2.0.0: Stable Release of Immich (complete with Merch and DVD)⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:

  I was planning on starting to host my own Immich server for my family. Like I did for other futo projects, I paid, even if there is no technical reason to. Does anyone know what the “sever key”/“client key” thing is? I’m imagining that a client key is what goes in the immich android app, and a server key is what goes in ther server admin console?

  The thing is that if I want to be considered as someone who uses FOSS ethically - and I’m hosting for my family - I don’t want each of them to purchase a client key… In my eyes - purchasing a server key in that price should at least give me some leeway, and the small number of clients I plan on supporting would not be considered unlicensed…

• ⁨Comment⁩ on ⁨ICE to Buy Tool that Tracks Locations of Hundreds of Millions of Phones Every Day⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:

  Ok take a nap…

  But then fire ze missiles!

• ⁨Comment⁩ on ⁨Animal guessing game!!! ⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:

  IT’S PIKACHU!!!

  …
  FUUUUUUU

• ⁨Comment⁩ on ⁨Here's a fun game.⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:

  Dicks Everywhere All at Once

• ⁨Comment⁩ on ⁨A good tool?⁩ ⁨⁨4⁩ ⁨months⁩ ago⁩:

  Oh man I’m still dreading the day that the backwards operated stuff in SAP GUI, made possible because of the IE engine, suddenly lose support.

  I’m looking at you adobe interactive forms.

  That shit is gonna cost thousands of dollars to migrate.

• ⁨Comment⁩ on ⁨Birds of peace ⁩ ⁨⁨4⁩ ⁨months⁩ ago⁩:

  I knew this looked familiar

• ⁨Comment⁩ on ⁨Macaroni and cheese⁩ ⁨⁨4⁩ ⁨months⁩ ago⁩:

  Do it in Rhode Island