0daysto.live

0daysto.live

0daystolive | @[email protected]

Opinions are those of my employer.
Computer Hacker.
Work @ https://sorcery.ie
Blog @ https://0daysto.live

@GossiTheDog I went and hashed the keys on https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/API%20Key%20Leaks/Files/MachineKeys.txt and compared. There's only 252 keys on Microsoft's list that aren't in this one

Old Soviet joke repurposed for 2025:
Several times daily, a woman opens a news website, glances at the screen, then closes it.

Her spouse, curious, asks what she's doing.

The woman explains she's looking for death notices.

The spouse says that the website only has headlines, not obituaries.

The woman replies, "Oh, the obituaries I'm praying for will be headlines."

Why is elden ring lore so gratuitously obtuse and complicated

The hidden DOM nodes of a shadow tree are generally not affected by anything applied outside the shadow tree, and vice versa. The shadow boundary, where the shadow DOM ends and the regular DOM begins, can be traversed, but only very intentionally:

@gf_256 there's a browser extension called Dearrow that makes titles less clickbaity and has user contributions

just learned about recency bias. my favourite type of bias for sure

@underthebreach this is fake https://sourceforge.net/p/sevenzip/bugs/2539/ much like the Twitter users previous tweets about getting 120k$ from Riotgames bugbounty I suspect

who decided on the name Secret Santa when Nondisclosure Claus was right there for the taking

@PogoWasRight if the compromise of one worker leads to the entire company going under I don't believe you "did everything right". It doesn't even sound like the worker was an IT admin so they didn't follow the Principle of Least Privilege and internally the network was insecure.

@roolyaboolya what part is non-deterministic? Is it the surplus ballot redistribution when candidates reach the threshold?

@ghouston @briankrebs Parkinson's Law of Triviality

Bluesky and the Fedi: It's VC vs. DIY and you can't underestimate that distinction in your comparisons

Bluesky received $35 Million in a year.

"The Fediverse" as a whole, may have managed to acquire a grand total of $500k in investment from individuals and nonprofits over the past eight years.

Mastodon itself has like 3 paid devs. None of them are getting rich.

Things just are not going to move at the same speed or at the same scale--and they literally can't, because the money isn't there.

It's the difference between VC-funded and volunteer-funded and any discussion or comparison to platforms needs to fully internalize that this difference does matter.

It's like wondering why the local bakery can't compete with, I dunno, BreadMax, the franchised international bread consortium with a store on every corner.

This isn't to say there aren't cultural differences, but ultimately it just feels like a much different conversation.

New person joins Bluesky and no one really talks about the infrastructure because you can't just "host your own," not really. Hosting your data isn't the same as hosting the "means of posting and discoverability itself." Moderation isn't outsourced in the same way as it is to every individual server admin here.

Also, a person joining Bluesky can be like, "WTF devs?" and devs who are literally working fulltime, every single day, with no side projects or silly distractions like "needing to support themselves with a job to live" to take away their focus from building the thing, will build the thing.

And "the thing" will materialize, as if by magic. Wow, when you fund a development team and dedicate them to a task and when the millions fall from the fucking skies, it's amazing what you can do!

Isn't it, though? If you put money behind a dev or design team, suddenly stuff starts happening.

The problem comes in trying to look over here at Johnny's little Snac activity pub server and mocking it and going, "Damn, Snac, get it together. Bluesky has quote posts already. And where's your reply control?"

And the Snac dev/devs (I am just picking one project at random) look up and go, "Uhhhh, I don't actually WORK for you. Evidenced by the fact that you aren't paying me a goddamned thing to work on this, so I'll get to your concerns eventually, but watch your fucking tone or make your own or just fuck off, I don't care."

And people will go, "Damn, this place is rude."

Well.... YOU are kinda rude too, you know? I even do this to some degree and it's not okay.

Like when I complain about Mastodon, I'm basically demoralizing a (largely unpaid) team who is drastically underfunded for the scale of projects against which they are competing.

We just don't have millions of dollars to fuel development. Lots of times, it's people building the shit for free. So I get that you're mad that we're not farther along, and that stuff moves slowly, and whatever, but it's hardly a surprise that a team with access to millions of dollars is moving more quickly than a space with development funded largely--although not entirely--by people working for free.

And, I dunno, when you come into the house of people working for free to build a thing and you yell at them about the thing, it hits a lot differently than when you're yelling at a company with millions of dollars in the bank and the resources to do the stuff you want at the speed of the market.

Reminder: RFK Jr caused a deadly measles outbreak in Samoa that killed 83 people, mostly children.

RFK Jr and his non-profit visited Samoa to lobby the government and spread misinformation that reduced measles vaccination rates.

He may now lead the top US health agency.

Chart: Samoa Measles Vaccine Rate

> There are no official bilateral relations between the People's Republic of China (PRC) and the Holy See. The Holy See instead recognizes the Republic of China (Taiwan) as the representative of China ever since the establishment of relations with the ROC government in 1942.

erm based

speaking about the Deutsche Bahn like one would about a god of travel:

  • "if the Bahn wants it, I shall arrive at dawn"
  • "may the Bahn grant you swift travels"
  • "our travels shall be guided by the Bahn's mercy"

This evening I saw "Inhumane Zones", an exhibition of Forensic Architecture's work documenting the Gaza genocide @ Echo Correspondence in Vienna. Harrowing testimony from medics treating civilians with horrific injuries. FA are doing important work in documenting war crimes against civilians.

A significant step to have this exhibition in a country where many people are either in denial that these crimes against humanity are taking place, or worse, try to justify them.

https://www.echocorrespondence.com/program/forensic-architecture-inhumane-zones

A bill called the ā€˜Stop Resistance Activities by Federal Employees Actā€™ was introduced in the House yesterday. It covers federal employees at or above GS-15 and would impose very serious penalties for ā€œopposing, obstructing, or impeding lawful directives from the President, Vice President, or any other political appointeeā€.

The language isā€¦.well itā€™s fascism. And Iā€™m not exaggerating. And maybe it wonā€™t pass this time, but we all see the trend.

https://pfluger.house.gov/uploadedfiles/strafe_act.pdf

@gabriel @GossiTheDog 18TB of sensitive customer data != Storage space available on the machines. Also != Total data on the machines. Hardly (?) anyone deploys honeypots that size with believable data in them.

@GossiTheDog their software must be filled with issues šŸ‘€

Ā»