HN user
From the link, on how the attack works:
An attacker can send a crafted request like GET /protected with a Host: example.com/health?x= header. The request will reach the /proteced path, but request.url would be https://example.com/health?x=/protected, and request.url.path would return /health instead of the real request path.
And others: https://mlu-explain.github.io/
Try onlyoffice.
Even though I prefer htmx, another emerging gravity is what LLMs are good at. LLM-based coding/debugging/planning is a thing and going to stay, and if there are less code-bases to train LLMs, any new language/framework will be at disadvantage.
And by unsubscribing, you just gave us a signal that you are active.
Applicable in corporate world too: https://youtu.be/0MD4Ymjyc2I?t=410 (Yves Morieux; Two TVs)
1. Aegis has a setting for creating secure backup on every change. 2. Autosync that backup directory via syncthing to your PC. 3. Run a compatible desktop software (e.g. linux has authenticator) to import aegis backup files manually.
Since totp addition is not a frequent activity, the last manual import step was not a hassle to do whenever needed.
Start with educating architects and developers on how to measure and optimize costs. They are the first point (and probably cheapest) to optimize costs.
Later, FinOps role can evolve but expectations will mostly be reactive.
Now only if llm response font is some handwritten style.
I really want to use zulip but last I checked they charged for push notifications. Without it, my group lost interest in using it due to missed messages.
I saw a post about webpush a day ago. Not sure if anything has changed for zulip in that area.
Worth mentioning photoprim, if you maintain photos on local hardware, nas, etc.
Check out minetest open source too, which is similar but separate game like minecraft. You can self-host the server.
Do you know if a remote backup service was written? I am going through SimpleBackup code, (and if not exists) I would like to contribute remote agent for backup. Any pointers for that implementation would be appreciated.
This has been part of standard ubuntu repos for sometime. (apt install solaar)
Stories Pushing Imaginary Nonsence
or perhaps a brand refresh.
Doesn't brand refresh often includes new components and new design language? In creative space, every design agency tries to sell something different to the organization and thus brand refresh will discontinue any prior design tokens and come up with new one.
Can you share some of the zigbee devices that you are using? Thanks.
zigbee2mqtt makes things easier to establish the bridge. Running as a container, next to home assistant container.
For this type of data, preference could be toward fully open source stack (i.e. fdroid, etc).
Another thing I recommend is to enable versioning on syncthing for the database. This way accidental changes can be reverted easily.
Desktop: keepass variants.
Android: Keepass2 android.
Use syncthing to stay in sync.
For another use case, I experienced that the phone battery starts swelling after few months. It was an indoor setup and I had removed the phone backcover to avoid overheating.
Now imagine, if there was a timeline to show the evolution.
Inspired from physical newspaper reading, how about page right/left keys too? Think of infinite canvas apps, games, web carousel, etc.
similar to Pyramid Principle by Barbara Minto (McKinsey)
Time to publish the next book in "Stealing the network" series.
I did a project with kids to visualize similar information in grafana. https://salmanzg.files.wordpress.com/2023/12/image-1.png
The shell scripts are still alive collecting data for past couple of months and there are interesting "interest" patterns. That's how I decide which stories I should not miss.