This breach is worse than just a website’s database being leaked. These are info-stealer malware logs. Meaning that you had malware on one of your devices that recorded you typing your credentials into websites and then the logs of that malware were publicly leaked.

Before changing all of your passwords (and setting up a password manager if you don’t already use one) you need to identify which of your devices was compromised and wipe it.

If you change all your passwords from the compromised device then the malware will just record all of your new passwords.

This article reads like a recipe website.

For Xitter, BlueSky is drop-in replacement

You’re posting this on the Fediverse and still recommending centralized corporate social media? We can do better than make the same mistakes again and again.

Try Mastodon as a Xitter replacement.

Friendica as a Facebook replacement.

And if you’re able and have transport, support your local businesses by buying products locally (especially independently owned stores), instead of ordering from Amazon.

If you have a Facebook, X or Amazon account, I hope you can find it in your heart to switch to one of their competitors. It’s worth a try.

His full name is John Mastodon Pterodactyl Triceratops Sabre-tooh Tiger Tyrannosaurus but he just goes by John Mastodon for short.

The linked site doesn’t load for me.

Apparently this CVE is a RCE in the v8 Javascript engine.

I’ve been typing with 10 fingers for 3 years

That’s 30 finger-years!

blog post of the guy getting fucked by people polling his bucket due to an open source project typo

Was it this one?: https://medium.com/@maciej.pocwierz/how-an-empty-s3-bucket-can-make-your-aws-bill-explode-934a383cb8b1

How do people end up finding them? Don’t they have random UUIDs in the URL? Or are they predictable?

For the most part, large open source projects are worked on by adults not children.

Why did your distro update those Electron apps, if they have unsatisfied dependencies?

This is irrelevant to Linux kernel development.

The article seems like a rebuttal to a strawman argument to me.

You’d have to be pretty oblivious (or a non-software engineer) to express the premise of this article as an opinion.

The only interesting part to me was asking specifically what types of functionality are being delegated to libraries instead of (re-)implemented in the program itself. The author should ask this same question of some Rust and Javascript programs of similar size, so we can see if left-pad in Javascript is just a meme or if programmers armed with convenient package managers are delegating trivial one-liners to external libraries.

Stop recommending Ventoy! It’s a huge security risk and the author has not responded in 8 months.

Shit article that barely summarizes the original Kaspersky report and then adds a clickbait headline. There are no “advanced sophisticated techniques” mentioned at all.

Some file formats just seem to be cursed.

Who else remembers when every week there was a new 0-day in Adobe Acrobat Reader and Macromedia Flash Player?

sadly I pissed of some Gentoo devs on IRC #gentoo :(

Do not meddle in the affairs of wizards, for they are subtle and quick to anger.

QubesOS can be built from source code but none of the linux distros can.

lol what?

Night Trap

Is this concern trolling?