medium.com

It's a short read, enjoy.

It’s beyond wild to me why anyone would have any kind of “loyalty” to Amazon. I’m also somewhat astonished at how popular it’s become to hook everything in your house up to the Internet, including door locks. I understand these aren’t new observations or concerns, but it still surprises me how people go “all in”...

A friend shared this with me today when we were talking about alternative music notation, and I thought it was super interesting.

A tutorial on how to get Elixir support up and running in Emacs 29 with tree-sitter and eglot

What to focus, what to ignore, and avoid overwhelm

Just wanted to post a couple of really interesting medium articles I found on Iphone pentesting. As an Iphone user, I have always wanted to see the source code of the apps I use, so it has been really interesting going through the process of jailbreaking my old iphone and ftping the .ipas to my host machine for analysis. The...

'Mastodon-skaperen, Eugen Rochko forteller i bloggpost om ny retning for plattformen. Twitter-utfordreren har lenge levd på god støtte i konkurransen mot Elon Musk sitt nye Twitter-regime, men nå har deler av miljøet reist motmæle om de nye endringene.'

Have you read any of the books listed in this article? How were they? I haven’t read any of these, or even heard of most of them. War With the Newts sounds like it would be an interesting and funny read, and I’ve been meaning to pick up Her Body and Other Parties.

Google launched this week a new TLD or “Top Level Domain” of .zip, meaning you can now purchase a .zip domain, similar to a .com or .org domain for only a few dollars. The security community immediately raised flags about the potential dangers of this TLD. In this short write-up, we’ll cover how an attacker can leverage...

The beautiful, intimate origin story of the tildes community

So one could have replace a JS file with one fetched from attacker controlled server for any site behind Akamai like LastPass or PayPal. That JS could have exfiltrated all the secrets from these sites on the client side (post decryption) or replace account numbers with their own on behalf of the user.