57 karma · joined August 9, 2023
Just today we had a guy who got similar messages from one drive as one in the blogpost, and made the mistake of asking chatgpt about it. After renaming, moving, deleting and even doing regedit as llm instructef, some of the files went missing, some we managed to find.
Few weeks ago I had to explain over the phone how to setup windows without ms account, and we had to resort to turning off WiFi in the house lmao
I wonder why it hasn't been adopted more widely.
https://en.wikipedia.org/wiki/Near-field_magnetic_induction_...
The closest historical analog seem to be Jewish communities of medieval europe, perhaps up to 1900s. They could sometimes get different treatment, and had some structures, although never as centralised. Some countries even wanted them for their knowledge/skillset and connections (?) which lines up with digital nomad's attributes.
This is true for all laws, all scams, all ads.
I think that big enterprises are full of old systems that are put on vans, vpns, conditional access rules etc., so it's weird to me that ftp is such a problem?
There is also a point in their tos: 7.4 - boils down to "your printer will block printing until you accept critical security patches" that directly contradicts the linked blog post
Worth adding that WPE is owned by private equity, and they allegedly tried to remove the newsfeed from wp-admin to hide his (dramatic) posts about them
Yeah, but not the spec itself, meaning it's hard to have both secure and conforming implementation.
As for donations, it's still good. Instead of having vast amount of cash flow unnoticed as bribes/corruption, now you atleast know that the politician received that amount of money. I don't see how it is worse that normal cash.if one can cap amount of anonymous donations with banks and cash, why not do the same here?
I have mixed feelings about CRA, but I am satisfied with FOSS protections. I wish it could allow for more commercialization though,not just donating.
As for commercial work, it's good to have a lighter regime for small, low risk products, but it's still alot of head scratching and uncertainty on our part. Also ditto for independent HR and payroll systems, as they aren't low risk. I wonder if their VPN/VM setups they always included work towards security of the app? Again, more work figuring that out.
You are very knowledgeable (for your coding and bug bounties) and very lucky (for the static ip, as well as understanding parents lol)!
Why would you want to announce to the client that he is tripping on a security? When erratic behaviour is detected, systems usually deny access or request more authentication.
In the second case, this seems like a nice quality of life code, but this should be mentioned in the rfc and not left for me to figure out. Besides, a more generic "please reauthenticate now" would fit better (as to not expose the reason?) or even reusing the 403 forbidden could work for this usecase.
The voice was in local language, while subtitles were in English. They did not match, possibly to evade detection by the more advanced, English, tooling.
You could try that in court since the base gdpr is the same, but EU law implementations still differ.
Point fo captcha is to make sure that there is a human eg. writing this comment or creating account.
If I used this (admitedly cool and useful) rate limiter instead of real captcha I would have 1000s of ai generated posts and 100s of new accounts. Yes, it would be rate limited and spread over a day or week, and servers would easly handle it, but that's not the point. I don't want this fake activity at all - that's the point!
This seems like a good alternative/addition to cloudflare and their anti ddos features though (?)