phonethrowaway
Joined 7 years ago
Karma
94
Submissions
56
Member since
May 26
Recent submissions
Comment · 4 years ago
Comment · 4 years ago
it doesn't say meta, duh
Comment · 4 years ago
flask-security is a trivial addon.
Comment · 4 years ago
they don't even address shell escape injection which is definitely possible...
Comment · 4 years ago
The farm bill made all hemp derived products legal federally at long as they contain only trace amounts of Delta 9 THC. Delta 8 and THC-O/acetate are legal. Not as strong, slightly different, but it gets the job done... kinda. Check it out... if you can. Check your state laws.
Comment · 4 years ago
Old isn't janky... hmm... to me janky means duct tape and bubble gum.
Comment · 4 years ago
shell escapes are real attack vector too...
Comment · 4 years ago
the point is it's a feature, not an exploit. control and escape codes are a thing for a reason.
it's worse with web stuff though... and it's a real vector.
https://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=terminal+es...
https://packetstormsecurity.com/files/162518/AWS-CloudShell-...
Comment · 5 years ago
The NSA doesn't need to illegally spy on Americans when an ally can do it for them and then share the data legally.
Comment · 5 years ago
ASSESSEE NAME AND ADDRESS ARE NOT AVAILABLE ONLINE
PER CA GOV CODE §6254.21
Comment · 5 years ago
name it carbon lol
Comment · 5 years ago
I've seen PAM modules for otp/totp, but that really only adds security if authenticating against a remote machine, if you validate the second factor locally doesn't that still open you to mitm or other exploits? Can you trust your own environment?
Comment · 5 years ago
humanure is a thing
Comment · 5 years ago
most companies have perverse incentives not to clean up fake profiles... just like SoundCloud.
Comment · 5 years ago
this is still a problem (irq conflicts) especially with thunderbolt enclosures...
Basic color support for syntax highlighting is what I've been waiting for...