HNHacker News
TopNewBestAskShowJobs

moontear

674 karma · joined May 5, 2010

[ my public key: https://keybase.io/moontear; my proof: https://keybase.io/moontear/sigs/Ru4KTBF2j6kHz6CcV00OKfVK6qHpnsX61oooiJ_JKzA ]
submissionscomments
moontear··on EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
O365 defaults there now? I‘m not sure I understand.

The Copilot we are talking about here is M365 Copilot which is around 30$/user/month. If you pay for the license you wouldn’t want to turn it off would you? Besides that the remediation steps are described in the article and MS also did some things in the backend.

moontear··on EchoLeak – 0-Click AI Vulnerability Enabling Data Exfiltration from 365 Copilot
Thank you! I was looking for this information in the original blog post.
moontear··on Mozilla to shut down Pocket and Fakespot
It says (https://support.mozilla.org/en-US/kb/exporting-your-pocket-l...) there is supposed to be an "Export HTML file" button, I only see export CSV file. Wrong documentation?
moontear··on Show HN: Text to 3D simulation on a map (does history pretty well)
Doesn't work in Chrome (no map), doesn't work in Firefox. This sounds really interesting and I would love a video of it working its magic.
moontear··on WireGuard vanity keygen
Discord? Why use the native app instead of just the browser version? Use e.g. Ferdium (https://ferdium.org/) to have all your messaging apps in one place.
moontear··on Ditching Obsidian and building my own
You can self-host obsidian syncing which is exactly what I'm doing. You can also share your notebooks with something like Syncthing, but you may get merge errors that way - just self host the database (CouchDB) and you're good to go:

https://leduccc.medium.com/setup-self-hosted-synchronization...

moontear··on Mozilla Firefox – Official GitHub repo
Without knowing their reason, there are a few things tied to the org where multiple orgs make sense. If you do SSO for example you tie the org to a SSO provider, you can’t tie „just a few users“ to the SSO provider (afaik). The Firefox repo may have totally different authentication / users than the main Mozilla repo.
moontear··on Samsung is paying $350M for audio brands B&W, Denon, Marantz and Polk
https://web.archive.org/web/20250507182014/https://www.engad...
moontear··on New Vulnerability in GitHub Copilot, Cursor: Hackers Can Weaponize Code Agents
Of course, but this doesn’t undermined the OPs point of „who allows the AI to do stuff without reviewing it“. Even WITHOUT the „vulnerability“ )if we call it that), AI may always create code that may be vulnerable in some way. The vulnerability certainly increases the risk a lot and hence is a risk and also should be addressed in text files showing all characters, but AI code always needs to be reviewed - just as human code.
moontear··on Tailscale has raised $160M
This is not true. You can run Tailscale with a custom self hosted OIDC provider such as Authelia.

https://tailscale.com/kb/1240/sso-custom-oidc

moontear··on Extracting DNA from the air – DNA evidence of human occupancy in indoor premises
How would that argument go? As far as I understand it, the DNA of the occupants of said lab may be found. That would mean that the criminal samples may also contain DNA of the lab occupants/scientists. Isn’t that the case currently as well and those DNA parts would be omitted?
moontear··on Show HN: I built an app to stop me doomscrolling by touching grass
How is it blocking other apps? Is it creating apple shortcuts which go through this app as a launcher?
moontear··on YC Graveyard: 821 inactive Y Combinator startups
And all inventory of the defunct startups goes here: https://svdisposition.com/auctions
moontear··on Feeling Targeted: Executive Order Ending Wasteful DEIA Efforts
The article states exactly that: still a law
moontear··on Exposing the Clearingstelle Urheberrecht Im Internet (CUII)
Circumvention is easy, that is true. It still leaves a sour taste in one’s mouth that you can’t use any default German ISP DNS server without seemingly random blocking orders.
moontear··on Using less memory to look up IP addresses in Mess With DNS
Interesting read - but how cool is Mess with DNS! What a nice live learning tool.
moontear··on Vaultwarden: Unofficial Bitwarden compatible server written in Rust
Since Vaultwarden is gaining traction here, also check out this VERY active PR (including custom build/image) for adding SSO via OpenID Connect: https://github.com/dani-garcia/vaultwarden/pull/3899
moontear··on .INTERNAL is now reserved for private-use applications
I wish there was a way to remove public information such as this. Just like historical website ownership records. Maybe interesting for research purposes, but there is so much stuff in public records I don't want everyone to have access to. Should have thought about that before creating public records - but one may not be aware of all the ramifications of e.g. just creating an SSL cert with letsencrypt or registering a random domain name without privacy extensions.
moontear··on Wcurl: a curl wrapper to download files
Not in my Debian distro and also documented differently in the man pages. If it works for you: nice
moontear··on For advertising, Firefox now collects user data by default
How is your personal story related to the story? I don’t believe Chrome is better than Firefox on terms of ad tracking.
moontear··on Ente Auth: open-source Authy alternative for 2FA
I come from Authy and switched due to the desktop apps demise.

2FAS does not have a desktop app and and doesn’t offer self hosting. The browser extension is fine, but was clunky at times. I started disliking using a browser extension as my main thing to manage 2FA. I feel a lot better with the Ente Auth desktop app and mobile apps.

You can actually import stuff to 2FAS as well as Ente Auth, so no problem in trying out both.

moontear··on Ente Auth: open-source Authy alternative for 2FA
If your one Bitwarden store were compromised in any way, it is game over since it also contains the 2FA codes.

If you were to use two apps / two stores, there is another hurdle.

moontear··on Wcurl: a curl wrapper to download files
Stealing this, but had to lookup the parameters. It does work, but it should be `-C -` with a space. Also I like progress bars so my alias for now is:

  curl -#JLOC -
* -# Progress bar instead of the standard meter

* -J Use the server-specified Content-Disposition filename instead of extracting a filename from the URL

* -L Follow redirects

* -O Write output to a local file (download)

* -C - Resume transfers

Maybe a good mnemonic would be something along the lines of jlo liking hashtags?

moontear··on Microsoft breached antitrust rules by bundling Teams and Office, EU says
How is the Teams we are talking about here integrated into Windows?

Teams is integrated into M365 and taking Outlook as an example you can register another calling/status app just like others do so your online status and calling functionality is not Teams (used to be Skype).

moontear··on Microsoft AI spying scandal: time to rethink privacy standards
No, this is not what the article nor this discussion is about. Windows Recall is completely local and hence actually is in line with the argument of the article that stuff was local way before they were in the cloud. Those screnshots Recall takes pose a whole different security and privacy problem: that someone (bad actor, your employer, your partner) may access these screenshots and gleam a lot of information about you they shouldn’t get. Recall is not about „Microsoft having way, way more data about you“. Other MS products, sure - Recall isn’t the point here.
moontear··on How did authorities identify the alleged LockBit boss?
Reading article by Brian it always shows me how much information is „out there“. Sure this is cyber security / dark web we are talking about but there are companies hoarding gigabytes of data that was released, leaked at some point. In this case sure that is nice, but just always makes me wonder about the future and how open and public everything is.
moontear··on Aberdeenshire memorial inscriptions records removed from Ancestry
I like that you clarified that you are a human. Just to be safe. AGI is coming or something along those lines.
moontear··on CSS for printing to paper
The code seems very opinionated, at least it is pretty focused on US needs.

I don’t want someone to tell me what paper I should use (size: Letter portrait). Frankly I don’t own letter-sized paper.

Also all sizes are in inches, which I don’t calculate in and wouldn’t know whether still sensible margins when printing on a different paper size.

moontear··on AdGuard Home: Network-wide ad- and tracker-blocking DNS server
Honestly? Have two instances and point to both via your router dhcp dns. Very Client will use them and you are good to go. There are also solutions like adguardhome-sync to keep both installations in sync.
moontear··on AdGuard Home: Network-wide ad- and tracker-blocking DNS server
There is no primary and secondary dns on windows. Both dns servers are queried, if one goes down you are fine but you won’t hit your local dns all the time.
← PreviousPage 4 of 9Next →