Show more

I spent way too long on Elastic given that their docs say it isn't exploitable due to mitigations... Oh well.

Show thread

Spent a few hours last night trying to get RCE on fresh ElasticSearch, Jetty, and Solr (not enough time on this one) installs. But no luck.

"Can you find the optimal route for the trolly?"

submitted by mstjepan

Support this week, and your donation will pack double the punch with an automatic 2X match... eff.org/power-up

US Pol (Roe v Wade) 

Supreme court might eliminate RvW? Make it a law. That's the right way to do these things anyway. (I understand the complication around this, but if it's ever gonna happen this is the best time I've seen so far)

CQ CQ CQ Want to learn CW. I do have a straight key and want to use it on Linux.

How can I physically connect it ? Do I just treat it as a switch and implement hardware debounce ? Or use a GPIO on a pi(w), or hacking a old mouse to replace right click, a ESPxx with a HID interface ?

Advice on this would be appreciated ?

lobste.rs/s/waahpl/jumping_air

ESET looks at that jumps the air gap - how the samples they know about work, and general measures.

I wonder how hard it would be for each of the major cloud service providers to cold start from a complete shutdown. Do their internal management systems even work if the auth subsystem has zero running instances?

Show more
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.