mvolfik

My guess is that lf/crlf is just a proxy for windows/linux comparison

you mention "text message to miband 3" - did you, by chance, make MiBand hackable?

looks like you invented HTML-over-the-wire before it was cool :)

that is not supported. But why would you want to serve that with CORS headers? It's only meant to be displayed in the browser and in dev environment, not production

but VS code still only has to support monospaced code + some popups and sidebars, not mix-and-match of font and all its variants in all complex layouts, line heights, paragraph spaces, column layouts, images including float etc etc

How are these set in werkzeug? Sound like you would be using the werkzeug dev server then...

But this works for me:

    @app.errorhandler(ApplicationError)
    def handle(e):
        resp = e.args[0]
        resp.headers["Access-Control-Allow-Origin"] = "..."
        resp.status_code = 500
        return resp

    @app.route("/err")
    def err():
        raise ApplicationError(jsonify({"reason": "test"}))

well, if this is the author of the book, they probably have their contact anyways. And if the claim was clearly illegitimate and the owner didn't want to provide this, I guess he could try going without it. There are probably easier ways to dox people

yup, it was the author, see counternotice: https://github.com/github/dmca/blob/master/2021/04/2021-04-2...

How does it help them? If you find file with this MD5 on your system, you have either the virus, or a colliding binary crafted by the attackers - bad in either case \o/

reminds me of the reddit bot that lets you know when you accidentaly post a haiku. Internet can be a nice place at times

I know that market has changed a lot, but seeing the mention of having part-time job since 15, I'd still love to ask about that: how did you finding such job go? Was it remote? Any advice for high schoolers looking for something like that now?

I'm not a crypto supporter, but I'd say that he is right there. If _you_ found private key to a wallet with 1 BTC somewhere, would you leave it be? Even if you can't buy a coffee with it, the exchangability for USD is real.

After posting this, I found https://chrisdiana.dev/simplestore/. This is pretty much the level of what I'm aiming to build - session in local storage, two clicks checkout. Doesn't look very complex. I just wanted to be careful about Dunning-Kruger effect - already ran into that once quite hardly

why would somebody use public ranges (even though unused) internally?

Beware though that "available on Spotify" (idk Podimo) doesn't necessarily mean that it's exclusive there. But it's very common around here and many people use it for convenience (and the podcasts can advertise it as "look we are in this fancy mainstream app", not weird (?) RSS, while they likely offer that too). I myself used Spotify for freely available podcasts too, only recently switched to Podcast Addict for nerdy automatic download settings

That would be so creepy. Imagine a random face you've never seen in your life appearing as your avatar

these are pretty. Do you have any idea if there is a way to use the library with other data (hashes) other than the Urbit 'names' or what it is?

Try changing just a few letters in the hash. If you change letters at the start, it changes drastically. But letters at the end change just small bits

Some interesting things for context:

- Russian embassy in Prague is one of the biggest embassies in CZ

- our president is strongly leaning to Russia, lobbying for Sputnik V vaccine even though it's not approved, and verbally dismisses sanctions against Russia

- all of this is happening during preparations of Dukovany nuclear power plant expansion, where Russian Rosatom still wasn't dismissed despite clear security risks

I got used to these so quickly – my favourite ones are cal.new (Google calendar event), docs.new (Google doc) or gist.new, I use these almost every day

this is way too common in Python world too - packages (crates) use dashes (they look nicer?), but the packaged library is named with underscores, because `-` is math operation and can't be in a name

I'll be soon doing this for a project running on LAN without connection to internet, during events once COVID is over

Then you can retrieve salt, do hash on server, and use the stored procedure to compare. More requests, but a tradeoff for security \o/

I think there was some bug in a big service (Twitter? very unsure) a few years ago related to this conflict of ISO and 'real' year

Czech Mapy.cz (part of a big corporation for cz scale) also has a good one (almost) every year. This year they restricted you from browsing more than 10 km from your location and the map went blank after 9 PM, according to current covid restrictions here. Obviously, there was a simple way to escape it.

I loved this article, but I'm confused about one thing – if I read it correctly, it seems to connect hacked routers inserting tokens into traffic, and tokens found on hundreds of pages (discovered with a script run by the author). But he wouldn't see these at all, so the same token found by him on many hosts is caused by something different, isn't it?

in comments on the first commit it was said that the access was revoked, but another one appeared, which points at the server

but why would you test that so obviously ('fix typo' but add code)? and they made it clear that they likely had access to the git server (by pushing 'from' different accounts), which (obviously, if that's what is actually happening) can kill their access

am I understanding it correctly that somebody had breached the PHP git server and tried selling it to 0-day and similar exploiting businesses?

This is the thing - for some things (e.g. searching for tech to use), you care about recency. But for something you absolutely don't. But the search engines magic seems to throw this all into one bucket and notice that people are more clicking the '2021' links. And the consequence of this is SEO optimization done by automatically updating all links to current year - I searched for something on 1st Jan and already got a bunch of '2021 comparisons'