esnard

Could this be the correct link?

https://arxiv.org/abs/2412.06056

Also discussed here: https://news.ycombinator.com/item?id=48307237

Nice find! Have you contacted the vendor to check if they're planning a fix?

I missed that, thanks!

Wow, is it related to the "make me a sandwich" XKCD?

https://xkcd.com/149/

No more vulnerabilities then I guess!

I spoke to a few people living in Iran, and they definitively confirmed that 100+ people died. They obviously don't have the exact number, so that 36,500 figure might be exaggerated, but there are more than enough videos online to verify the 100+ claim if you really want to.

If you're using the same domain for each of your email address, HIBP has a domain-wide search feature which is free (but you need to register to validate your domain)

5894 means that the password appeared 5894 times in the dataset.

5894 is not the password associated with the hash.

Link for anyone willing to contribute: https://github.com/bagder/http3-explained

Looks unmaintained, though.

I know nothing about the Ruby ecosystem, but I really do appreciate that someone cares that much to mediate this mess. Thank you.

This feature is available in English for users in the US, Canada, UK, and Australia, and is being introduced gradually to ensure great performance and quality.

Not available in Italy yet.

Weird. The file was cracked in May 2024, while the password had appeared in a database leak which was added in HIBP (and thus pretty much public) back in October 2017.

Unsure why it took the community so long to crack the file.

Note: one of the founders of the World app is Sam Altman.

Related links:

- Vulnerability Disclosure FAQ ( https://googleprojectzero.blogspot.com/p/vulnerability-discl... )

- Reporting Transparency ( https://googleprojectzero.blogspot.com/p/reporting-transpare... )

Cloudflare publishes a "crawl-to-refer" ratio, which can be used to estimate the traffic from LLMs:

https://radar.cloudflare.com/ai-insights#crawl-to-refer-rati...

Do you have a link talking about those Facebook's recent tricks? I think I missed that story, and would love to read an analysis about it

It's actually 100 microyears!

If anyone else is confused, a microcentury is apparently around 52.6 minutes long.

I've updated (Firefox 138.0) and the feature doesn't seem to exist in my browser, even when carefully reproducing the steps in the video / tutorial.

From the support page: https://support.mozilla.org/en-US/kb/tab-groups

This feature is experimental and is being introduced to the Firefox user base through a progressive rollout. It may not yet be available to all users.

I'll wait a few more days then I guess?

This sounds like good news, thanks!

Do we already have an ETA for the ENISA vulnerability database?

Announcement post: https://blog.cloudflare.com/d1-read-replication-beta/

Is this the VPN you're talking about?

https://www.reddit.com/r/Windscribe/comments/1jovk03/weve_he...

Yes. I didn't escape the asterisks before posting, and HN replaced ** with \* without me noticing.

Just tested up to 2 * 1000000, and it indeed looks like that's all of them.

To be fair, the article doesn't even contain the word "prove".

Back in 2018, I was wondering how that paper was still relevant, considering all the new security features added to web browsers.

The consensus seemed to be that it wasn't that impactful anymore (if it ever was).

https://security.stackexchange.com/q/185435/76718

Just scripted something to find them all:

    U+01C5: Dž (lower dž, upper DŽ)
    U+01C8: Lj (lower lj, upper LJ)
    U+01CB: Nj (lower nj, upper NJ)
    U+01F2: Dz (lower dz, upper DZ)
    U+1F88: ᾈ (lower ᾀ, upper ἈΙ)
    U+1F89: ᾉ (lower ᾁ, upper ἉΙ)
    U+1F8A: ᾊ (lower ᾂ, upper ἊΙ)
    U+1F8B: ᾋ (lower ᾃ, upper ἋΙ)
    U+1F8C: ᾌ (lower ᾄ, upper ἌΙ)
    U+1F8D: ᾍ (lower ᾅ, upper ἍΙ)
    U+1F8E: ᾎ (lower ᾆ, upper ἎΙ)
    U+1F8F: ᾏ (lower ᾇ, upper ἏΙ)
    U+1F98: ᾘ (lower ᾐ, upper ἨΙ)
    U+1F99: ᾙ (lower ᾑ, upper ἩΙ)
    U+1F9A: ᾚ (lower ᾒ, upper ἪΙ)
    U+1F9B: ᾛ (lower ᾓ, upper ἫΙ)
    U+1F9C: ᾜ (lower ᾔ, upper ἬΙ)
    U+1F9D: ᾝ (lower ᾕ, upper ἭΙ)
    U+1F9E: ᾞ (lower ᾖ, upper ἮΙ)
    U+1F9F: ᾟ (lower ᾗ, upper ἯΙ)
    U+1FA8: ᾨ (lower ᾠ, upper ὨΙ)
    U+1FA9: ᾩ (lower ᾡ, upper ὩΙ)
    U+1FAA: ᾪ (lower ᾢ, upper ὪΙ)
    U+1FAB: ᾫ (lower ᾣ, upper ὫΙ)
    U+1FAC: ᾬ (lower ᾤ, upper ὬΙ)
    U+1FAD: ᾭ (lower ᾥ, upper ὭΙ)
    U+1FAE: ᾮ (lower ᾦ, upper ὮΙ)
    U+1FAF: ᾯ (lower ᾧ, upper ὯΙ)
    U+1FBC: ᾼ (lower ᾳ, upper ΑΙ)
    U+1FCC: ῌ (lower ῃ, upper ΗΙ)
    U+1FFC: ῼ (lower ῳ, upper ΩΙ)

I just discovered that they discontinued their VPN back on June 20th.

Somehow, I am not surprised.

From https://blog.cloudflare.com/steps-taken-around-cloudflares-s... :

Since the invasion, providing any services in Russia is understandably fraught. Governments have been united in imposing a stream of new sanctions and there have even been some calls to disconnect Russia from the global Internet. As discussed by ICANN, the Internet Society, the Electronic Frontier Foundation, and Techdirt, among others, the consequences of such a shutdown would be profound.

[...]

Beyond this, we have received several calls to terminate all of Cloudflare's services inside Russia. We have carefully considered these requests and discussed them with government and civil society experts. Our conclusion, in consultation with those experts, is that Russia needs more Internet access, not less.