Hacker News Reader

And he even missed crocs... https://www.youtube.com/watch?v=bmSkqybtwBk

michaelermeron Apple parental controls have more holes than Swiss cheese

This is crazy, friends told me apple was good on this, before we had to get a phone for our self, I now think they simply don't understand whats happening. It looks fine to non-tech parents i guess. The question is, what can be used as an alternative? I had first tried an old Android phone, but theres no way to disable app store, so kid figured out he can watch app store videos with no limit...

michaelermeron Comparing Docusaurus and Starlight and why we made the switch

Same here, funadocs also integrates OpenAPI seamlessly and you can use blocks of the OpenAPI operations in your actual documentation which is perfect for writing developer guides.

michaelermeron CVE-2022-23529 – node-jsonwebtoken

I am trying this on GitHub https://github.com/github/advisory-database/pull/1595

michaelermeron CVE-2022-23529 – node-jsonwebtoken

This CVE is a joke, there is no attack vector. If an attacker is able to create an object with an executable function in the scope claimed in the CVE, he may just run the malicious code himself.

michaelermeron Vulnerability in the Mac Zoom client allows malicious websites to enable camera

This is crazy, heres a video what happens after deleting and opening your URL. https://www.youtube.com/watch?v=DMY7Z9Fe0ic Before testing that I had the app itself removed months ago...

michaelermeron Apple Cancels AirPower Product

Or a credit card ;)

michaelermeron The death of Google

They don't tell if it was exploited, all they said was "we have no logs".

michaelermeron Chrome 67 – Cookies hidden in developer tools network tab

Yes, all of them

michaelermeron PhantomJS: Archiving the project, suspending development

Also look at stuff like this... https://github.com/SeleniumHQ/selenium/pull/5468

michaelermeron Blizzard games were vulnerable to DNS rebinding attack

I call BS, it's the responsibility of the server to check Host headers and implement CORS. All browser provide these security measurements. There are valid use cases for having domain aliases for local ips.

michaelermeron Blizzard games were vulnerable to DNS rebinding attack

And/or simply implement CORS headers.

michaelermeron Reading privileged memory with a side-channel

Google's post is newer and has more insights, the registry article is now outdated.

michaelermeron Linux page table isolation is not needed on AMD processors

Full Story https://www.theregister.co.uk/2018/01/02/intel_cpu_design_fl...