cendyne

cendyne, 1 month ago to random

Deep breaths

cendyne, 8 months ago to security

JWT, the gift that keeps on giving.

https://starlabs.sg/blog/2023/09-sharepoint-pre-auth-rce-chain/

#jwt #cryptography #security #vulnerability

cendyne, 1 year ago to random

In typical Hacker News style, the moment diversity and inclusion of people of color is mentioned, everyone focuses on that in the comments. They show how blatantly racist they are while emphasizing merit and so on without even considering the merit of the person affected is far more significant than anything they have personally offered or produced.

We need more representation and inclusion of people of color, queer, and those that live differently in tech. Not this racist bullying.

cendyne, 10 months ago to random

Search how to generate password with bash
The first suggestion in the first result is... hash the date

NOOO DO NOT HASH THE DATE

cendyne, 8 months ago to random

Someone wants me to die tomorrow by sending an 8th meeting with no prior notice or context

cendyne, 8 months ago to random

The use case for AI is to spam

cendyne, 3 months ago to random

CSS prefers Light theme? Dark theme? Why not prefers-color-scheme hot-dog-stand?

cendyne, 6 months ago to random

Seems like all the early adopters are going to sh*t in the pool of information for generations to come.

The quality of search results are going down for all sorts of reasons. And it is taking a dive for the worst, fast,

Does Australia exist? According to Bing: no. With credible citations too.

"Wikipedia isn't a source" my middle school teachers would say, and yet it is nearing the most long term reputable source of information.

cendyne, 1 year ago to random

Cursed idea: the light below the microwave goes out. You find it's part and get an aftermarket compatible replacement. The microwave recognizes it isn't official and won't use it (it's just a light!). Fed up after no firmware downgrade guides work, you look for the official part. The original bulb lasted so long they don't sell the part anymore.

cendyne, 1 year ago to random

Oh no, I feel like writing again.

cendyne, 9 months ago to random

OpenSea won't pay royalties anymore to artists as part of the transactions

Technologists
Keeping Promises
Not even once

cendyne, 8 months ago to random

Researching / reimplementing a WIP to do registration for Fur Squared next year. This time with modern payment processing.

It is not as simple as getting a nonce anymore and charging it, if you want to support 3DS verification.

The state diagram I drew while figuring this redirect + back channel webhook stuff out feels like OpenID Connect. It is uncanny how the "secure" primitives of web browsing identity is a bunch of redirects and sometimes with back channels.

cendyne, 8 months ago to random

It might have happened.

I might have over 1000 stickers

cendyne, 6 months ago to random

Halloween

cendyne, 6 months ago to Nintendo

The Wii Mario Kart community is kept alive by exploiting ASN.1 parsing in the game-bundled operating system.

Edited this gem from Malleo's video.

#certificates #pki #asn1 #exploit #nintendo #security

all of this is possible without hacking your wii. Nintendo shut down servers in 2014 Wiimfii is the new community server Wii accesses naswii.nintendowifi.net Your browser uses digital certificates When the wii connects to another server, the signature won't match The extra information has no parameters for SHA-256 with RSA. If we change null to octet string causes the wii to accept the certificate. It doesn't check all the errors. This was patched in a later version of the operating system. Each game disk is tied to a copy of the operating system. This behavior lets us connect to unofficial servers on an unmodified wii.

cendyne, 8 months ago to random

Last public release of openssl 1.1.1

Time for Amazon to move 1000000 microservices to a newer version

cendyne, 8 months ago to random

"... but can you run kubernetes on a yubikey?"

cendyne, 2 months ago to random

Cookie chips are keeping me up at night

Not that kind

I mean.. https://developers.google.com/privacy-sandbox/3pcd/chips

cendyne, 8 months ago to random

Watched the Mario movie

My first thoughts were: The US CSB has educated me on the dangers of entering constrained spaces, especially pipes

My last thoughts were: wow that was a lot of references and nostalgia. It felt like a mass produced cookie: enjoyable in the moment, and forgotten after.

I guess that's what summer movies are supposed to be?

cendyne, 9 months ago to random

Hey so when is NPM, a Microsoft property, going to add OIDC authentication to publish packages with GitHub, also a Microsoft property?

cendyne, 29 days ago to random

Waiting for the day randsomware is built with electron

cendyne, 17 days ago to random

I came back from vacation and our AWS TAM leaves a yubisneeze in the shared slack channel

cendyne, 16 days ago to random

I got complimented for writing two pages of questions for a first time meeting with an integration middleware company. "Of the forty partners we've had, you're the only one to do this"

I mean, it's my 5th time overseeing an integration, I know what we care about and what will get in the way.. why not come prepared if we have only 30 minutes to talk

cendyne, 17 days ago to random

Listening to some internet radio
It kept getting discord noises and setting me off at work

cendyne, 14 days ago to random

@arch what the dog doin