colemannugent

Reading this I'm almost certain the firewall vendor is Palo Alto Networks. They included a PAN-OS setting verbatim and the SELinux config matches my experience.

This is 100% PAN-OS

Also noticed .not

I think .cos and .con should probably be rejected for typosquatting concerns.

It kinda is. If they use Chrome and it's cloud backed password manager, odds are they use GMail. That plus full access to a trusted device (which you have in this scenario) allows you to change their Google account password. Boom, full persistence.

I can think of at least a dozen easier ways to do nefarious things with this level of access that are at least that simple. As an example, faking user attribution would be trivial.

How could Google patch this? If the client is compromised and the attacker can manipulate the local TPM or it's equivalent there's no defense.

>4. Using the hash of that handshake, the attacker interacts with the victim’s TPM and uses the extracted identity key to sign the handshake hash together with the assertion request

Huh? If you have this level of local privileges you can just read session cookies from the browsers store? I guess stealing all the keys is notable, but you can manipulate any password manager with this level of access right?

What's the threat model here, that synced passkeys should be secure in even in situations involving compromised clients? How?

Not on the public status page, you have to be signed in to a Microsoft account to access this link.

One of the recent updates:

>Starting at 14:44 UTC on 23 July, 2026, customers may have experienced intermittent connectivity failures, increased latency, or difficulty accessing Azure services in West US region. Customers with traffic traversing the West US region may also experience downstream impact. Impacted services include, but are not limited to:

>API Management, Application Gateway, Azure Database for PostgreSQL, Azure Kubernetes Service (AKS), ExpressRoute Circuits, ExpressRoute Gateways, Network Infrastructure, Power BI Embedded, Virtual WAN, VPN Gateway

>We have identified a potential trigger and are isolating certain impacted devices and redirecting portions of traffic to healthier devices as part of a mitigation plan. We are actively monitoring traffic patterns and service recovery. We will continue to evaluate the effectiveness of mitigation, assess customer impact, and investigate contributing factors. We will provide additional information as soon as it becomes available.

DBeaver will generate an ER diagram from a connected DB

They can pin certs, but at least you know that you can't see that traffic and make a policy decision about allowing it anyways or trying to force the vendor to drop it.

Which is why you need a modern firewall that MitMs both TLS and SSH. Not hard to do these days.

TLDR: Bard will render Markdown images in conversations. Bard can also read the contents of your Google docs to give responses more context. By sharing a Google Doc containing a malicious prompt with a victim you could get Bard to generate Markdown image links with URL parameters containing URL encoded sections of your conversation. These sections of the conversation can then be exfiltrated when the Bard UI attempts to load the images by reaching out to the URL the attacker had Bard previously create.

Moral of the story: be careful what your AI assistant reads, it could be controlled by an attacker and contain hypnotic suggestions.

Could you add a general "game" for round-based games?

The current Scrabble score-card is close, but it would be nice to have a per-round score and a running total as columns.

Seriously, ~120 comments and this is the first one to question the posts legitimacy?

The reddit poster goes on to comment:

>15 minutes phone call to decide to file for bankruptcy and for them to take their money back (and then some) and shut down my company

What? In no world would that happen. Even a mostly failed company has quite a bit more value than $0.

No mention of the name of the company or even the vertical. 100% BS.