denysvitali
Joined 7 years ago
Karma
7,114
Submissions
1,323
Member since
Jun 10
Recent submissions
Comment · 4 days ago
> but these scanners did successfully exploit Adel Karimi's honeypot, which was a likely contributing factor to CISA’s decision to include PHP2Shell in their KEV list.
Adel is doing an amazing job. Both in open source (https://github.com/perplexityai/bumblebee, https://github.com/perplexityai/numbat, https://github.com/0x4D31/galah) and with his reports.
So proud of him!
Comment · 5 days ago
> Beyblade
I’d completely forgotten about them, but just seeing that word brought back so many memories. Thanks for the post!
Comment · 9 days ago
They're a Root CA too, Sectigo should have done their job before blindly x-signing it though.
Comment · 9 days ago
Worse yet, why is that CA even part of the Root CAs shipped on all the modern devices?
My trust in those vetting the CAs is completely broken now.
Comment · 9 days ago
I was confused and thought it's a new model... but no, it's the same. What's the purpose of reposting this as a new story? Am I missing something?
Comment · 10 days ago
I'd add "AGAIN" to the title
Comment · 10 days ago
If you see a certificate error, you're good. There's a checker on the website, but this is the easiest way to curl on your system and check
Comment · 10 days ago
If you can see this, you're affected. Update your system trust store immediately.
Comment · 16 days ago
They might have fixed it in the meantime though
Edit: indeed https://github.com/anomalyco/opencode/commit/d099d2cb2a0869d... / https://github.com/anomalyco/opencode/pull/55586
Comment · 16 days ago
Their installer (curl | sh) was taking so long yesterday for me.
It turns out it's incredibly slow... because of the progress bar rendering. This is insane. The installer took 6 minutes to reach 10%:
curl -fsSL https://opencode.ai/v2/install | bash
Managed to fix it by running this instead:
curl -fsSL https://opencode.ai/v2/install | bash 2>&1 | cat
Comment · 21 days ago
What's more useful, or at least was a while ago, is the CA combos list - basically showing which bands can be aggregated and how.
A while ago I built a decoder for that (Qualcomm only!), it was fun and helped me improve the support of my device for my carrier.
Comment · 26 days ago
First thing that came to mind. I have to admit, I was a bit disappointed.
Socials: - github.com/denysvitali - linkedin.com/in/denysvitali - t.me/denvit - https://blog.denv.it - x.com/DenysVitali
---