Posts
2435Following
583Followers
1293Heretek of Silent Signal
repeated
Kevin Beaumont
GossiTheDog@cyberplace.social
Tabletop exercise, your major SaaS supplier got hit with ransomware 8 days ago and they're in the US, but you're in the UK, and you haven't had an update in 4 days, and they've gone on holiday as it's Thanksgiving. https://blueyonder.com/customer-update
1
4
0
repeated
repeated
HackerNews
newsycombinator@framapiaf.orgBluesky Social Dataset (235M posts from 4M users)
Link: https://zenodo.org/records/11082879
Comments: https://news.ycombinator.com/item?id=42261804
0
3
0
buherator
buheratorhttps://chandlerc.blog/posts/2024/11/story-time-bounds-checking/
#frombsky
0
1
1
repeated
tante
tante@tldr.nettime.org"But average people like AI poetry better than real one"
(Original title: Saturday Morning Breakfast Cereal - Poetry)
1
6
0
buherator
buheratorhttps://remyhax.xyz/posts/luks-vm-dump/
"if the system boots and automatically decrypts the LUKS partition, this blog is about that type of system"
0
7
9
repeated
buherator
buheratorhttps://medium.com/@clearbluejar/everyday-ghidra-ghidra-data-types-creating-custom-gdts-from-windows-headers-part-2-39b8121e1d82
0
2
2
repeated
Petr Beneš
petrbenes@bird.makeup
After 6 years, I made a blog thingy again.
This time about MmScrubMemory. An innocuous looking function that has bitten my ass several times in the last several years. And if you're developing a hypervisor, it might've bitten yours, too.
0
2
0
repeated
Kagi HQ
kagihq@mastodon.socialGoogle is required to include any search engine that meets specific criteria, such as having an app with over 5,000 installs, in the default list for Android and Chrome.
We'd love it if you install the Kagi app and help us meet the criteria! We're almost there:
https://play.google.com/store/apps/details?id=com.kagi.search
0
1
0
repeated
buherator
buheratorhttps://nastystereo.com/security/cross-site-post-without-content-type.html
0
0
1
buherator
buheratorShow content
https://bsky.app/profile/mrose.ink/post/3lbwpud2mes2n
"One enduring complication with all this is that scraping happens all the time for reasons that people *don’t* find inherently objectionable, and in fact support—the Wayback Machine, all kinds of public health and extremism research, etc. The mistake was assuming that goodwill transfers.
A key problem in the Disc Horse (and policy to a lesser extent) is reminding people that scraping as a technological process is Important, Actually, for all the things You Think Are Good, and any proposed solutions to curtail GAI training uses need to be VERY narrowly tailored to not impact those.
All the proposed solutions so far have had some critical flaw that makes them unworkable.
Manual consent? Ok, how do we implement that at scale? robots.txt style flags are fine, but they’re also not legally binding—and that’s good! If they were, Wayback wouldn’t be able to index!
So exclusion protocols can be ignored, For Good Reason. “What if we give an exclusion protocol the force of law for this specific use?” Closer, but there’s active debate in the courts about whether this is all a fair use, and if the answer is “yes,” then it doesn’t matter
…then best case scenario the tags are rendered null (because you can’t legally override fair use), and worst case you’ve just recreated a DMCA 1201 style lockout trick, and we have spent the last 25 years seeing just how incredibly those fuck up everything around them."
0
2
1
repeated
polprog68k
gorplop@pleroma.m68k.church
0
3
0
repeated
bert hubert 🇺🇦🇪🇺
bert_hubert@fosstodon.org23 years old, and if you replace a few hyped things with today's equivalents, the article is 100% fresh. Things have gotten even worse since then it appears. https://www.joelonsoftware.com/2001/04/21/dont-let-architecture-astronauts-scare-you/
0
3
0
repeated
Baldur Bjarnason
baldur@toot.cafe“CrowdStrike Earnings: Cybersecurity Firm Posts Higher Revenue Amid Swing to Loss - WSJ”
So, I've long argued that all of software dev's dysfunctions can be traced to the fact that business outcomes do not depend on software quality, design, or reliability. As long as this dynamic continues the software we use will only get worse
2
3
0
buherator
buheratorRE: https://infosec.exchange/@josephcox/113551853623942786
1
1
3
buherator
buheratorShow content
1
1
7
repeated
/r/netsec
_r_netsec@infosec.exchangeNew PE Vulnerability in Windows OS! https://ssd-disclosure.com/ssd-advisory-ksthunk-sys-integer-overflow-pe/
0
1
0
repeated
bert hubert 🇺🇦🇪🇺
bert_hubert@fosstodon.orgEarlier post, but in recent talks I'm encountering more and more organizations that are losing their last technical people. You can outsource a lot, but most places have a core thing that they should really own. And once your own technical department is no longer viable, you are hosed. The longer story: https://berthub.eu/articles/posts/your-tech-my-tech/
1
2
0