winter reposted
winter
winter
@homosexual.cat
computers and crimes @antithesis.com, compiling haskell to bash @nixos.org, and obsessive mother of two cats she
583 followers473 following997 posts
winter reposted
winter reposted
winter reposted
winter reposted
winter reposted
winter reposted
🚨 Password2Shell 🚨 An attacker just has to type in the username and password to gain full control. Full writeup here: man7.org/linux/man-pa...
winter reposted
winter reposted
winter reposted
This ty + uv integration for PEP 723 might definitively make Python my go-to language for scripts. No more bash at any size. astral.sh/blog/uv-ty-i...
winter reposted
winter reposted
letter to the editor, excerpt, official australian playstation magazine (1999) archive.org/details/Offi...
winter reposted
winter reposted
winter reposted
winter reposted
winter reposted
winter reposted
winter reposted
winter reposted
winter reposted
winter reposted
winter reposted
winter reposted
The macOS built-in curl, git, pip, python3, perl, ruby, and openssl all read /etc/ssl/cert.pem, which still has the emSign root, but they don't check revocation like Apple's Secure Transport libraries. This is, uh, a problem. git and pip especially. I added a short-term workaround to this page.
🚨 Six WebPKI Intermediate CAs are compromised. This is bigger than Heartbleed, but a client-side issue. Anything that verifies certificates against public roots, like most TLS clients, is/was affected. Details, live test, patched versions and workarounds at emudhra.we-have-a-problem.com Act now.
winter reposted
winter reposted
THIS IS NOT A DRILL. If you package/distribute/maintain root stores or chain verifiers, act immediately. If you know how to remove trust in a root, consider doing it now. Otherwise, prepare to update systems as patches/mitigations come. Go users, update to Go 1.27.3 or Go 1.26.10.
winter reposted
winter reposted
winter reposted
winter reposted
winter reposted
America now has second-generation school shooting survivors nypost.com/2026/10/17/u...
winter reposted
winter reposted
winter reposted
winter reposted
This WSJ investigation exposes yet more Tether-related corruption at the White House, revealing that they paid Bo Hines' consulting firm millions as he was ensuring the Genius Act stablecoin law would benefit them. I needed a diagram.
Money from Tether flowed to Nxum while Bo Hines worked in the White House on landmark stablecoin legislation. Once the law passed, Tether hired him as its U.S. chief.
winter reposted
I really don't think folks who weren't there grasp just how much these generations really were shamed or even prosecuted for stuff that giant companies do all the time now like ffs, websites used to shame people for 𝘩𝘰𝘵𝘭𝘪𝘯𝘬𝘪𝘯𝘨 images without paying the site that hosted it for their bandwidth!
winter reposted
It's almost a joke at this point, but the entire story of Mamdani's mayorship really has been "it turns out we can just turn off the orphan grinding machine, the switch was right there the whole time."
New: Mayor Zohran Mamdani and City Council Speaker Julie Menin have reached a deal to abolish NYC's horse carriage industry — a critical breakthrough in a decadeslong, politically fraught effort to ban the tourist attraction. www.politico.com/news/2026/10...
winter reposted
winter reposted
winter reposted