You'll probably find me over at BlueSky now:
https://bsky.app/profile/synackpse.bsky.social
| GitHub | https://github.com/LeeBrotherston |
| OpsHelm (work) | https://www.opshelm.com/ |
| BlueSky | https://bsky.app/profile/synackpse.bsky.social |
Just open sourced the new https://MadeInCanada.social website, feel free to send pull requests to add new platforms, I am working on a new section for Canadian servers (like mstdn.ca, lemmy.ca, pixelfed.ca) and more!
Fun Ticketmaster design flaw: if you change your email address, it locks out your current one before you’ve verified the new one.
So if you typo the address or something, you can’t verify it, and so cannot log in with either, switch back to the old address, or fix the typo in the new one. Win!
So, federalreserve.gov doesn't even have it's cloudflare configured properly. So that's a good sign to start with :)
dansup
$ badflare -h federalreserve.gov
'federalreserve.gov' has IP(s) which are part of the Cloudflare network
Found "real" (non-Cloudflare) host: 63.71.14.191
Found "real" (non-Cloudflare) host: 132.200.132.69
Found "real" (non-Cloudflare) host: 132.200.132.70
Found "real" (non-Cloudflare) host: 132.200.132.75
Found "real" (non-Cloudflare) host: 132.200.132.76
Yesssssss!!!! It’s now possible to write VS Code extensions using WASI 0.2 and Wasm Components! https://code.visualstudio.com/blogs/2024/05/08/wasm It doesn’t yet eliminate the need for TypeScript in extensions, but it certainly provides a more compelling experience than managing sub-processes and bespoke RPC calls - as is common in extensions using languages other than JS/TS.
So... the postgres client library (and hence a number of 3rd party clients) dies with a double free malloc omg wtf bbq, if you try to connect to postgres over TLS with OpenSSL 3.2.0.
So that's nice.
So what do we think? Like Shell Shock all over again, where people start discovering all the shell scripts they have that use curl and they didn't realize?
When you go to the effort of installing signal to do crimes, but don't turn on expiring messages
Here in Canada we have another breach (https://www.bornincident.ca/) which is a result of the moveit breach (https://community.progress.com/s/article/MOVEit-Transfer-Critical-Vulnerability-CVE-2023-35036-June-9-2023).
Looking at the moveit response, it reads like their fix for a server side SQL injection vulnerability is to update the clients. Hopefully I'm missing something and they didn't just add client-side filters to mitigate a server issue 😳
