Forwarded from Brickspacer
Каждый день вы обязаны уделять хотя бы по одному часу своей мечте, от которой вы не можете отказаться.
Кто бы что не говорил, какие бы оправдания вы не находили.
Дисциплина. Дисциплина бьет талант.
Кто бы что не говорил, какие бы оправдания вы не находили.
Дисциплина. Дисциплина бьет талант.
👍5❤2🔥2
This media is not supported in your browser
VIEW IN TELEGRAM
All users with Safari running on iPhones, iPads and MacBooks are vulnerable
------
iLeakage: Browser-based Timerless Speculative Execution Attacks on Apple Devices
iLeakage, a transient execution side channel targeting the Safari web browser present on Macs, iPads and iPhones. iLeakage shows that the Spectre attack is still relevant and exploitable, even after nearly 6 years of effort to mitigate it since its discovery.
Researchers show how an attacker can induce Safari to render an arbitrary webpage, subsequently recovering sensitive information present within it using speculative execution. In particular, we demonstrate how Safari allows a malicious webpage to recover secrets from popular high-value targets, such as Gmail inbox content.
Finally, researchers demonstrate the recovery of passwords, in case these are autofilled by credential managers.
(source)
------
iLeakage: Browser-based Timerless Speculative Execution Attacks on Apple Devices
iLeakage, a transient execution side channel targeting the Safari web browser present on Macs, iPads and iPhones. iLeakage shows that the Spectre attack is still relevant and exploitable, even after nearly 6 years of effort to mitigate it since its discovery.
Researchers show how an attacker can induce Safari to render an arbitrary webpage, subsequently recovering sensitive information present within it using speculative execution. In particular, we demonstrate how Safari allows a malicious webpage to recover secrets from popular high-value targets, such as Gmail inbox content.
Finally, researchers demonstrate the recovery of passwords, in case these are autofilled by credential managers.
(source)
🤯1🌚1
Tomorrow Island (Big Diomede) and Yesterday Island (Little Diomede).
The Diomede islands are just three miles apart but the bigger island is almost one day ahead of its smaller neighbour (21 hours) because they sit on either side of the International Date Line which passes through the Pacific Ocean and marks the boundary between one calendar day and the next. They sit in the Bering Strait between mainland Alaska and Siberia
Big Diomede is located on the Russian side while Little Diomede is on the US side. The ice bridge that forms between the two islands in winter makes it possible, although illegal, to walk the short distance between them and 'travel through time'
So, basically, Russia is tomorrow land, but US is yesterday
(source)
The Diomede islands are just three miles apart but the bigger island is almost one day ahead of its smaller neighbour (21 hours) because they sit on either side of the International Date Line which passes through the Pacific Ocean and marks the boundary between one calendar day and the next. They sit in the Bering Strait between mainland Alaska and Siberia
Big Diomede is located on the Russian side while Little Diomede is on the US side. The ice bridge that forms between the two islands in winter makes it possible, although illegal, to walk the short distance between them and 'travel through time'
So, basically, Russia is tomorrow land, but US is yesterday
(source)
👍4
https://vxtwitter.com/camchis_/status/1719354374818783359
WalletConnect banned RU and UA, modern time — modern solutions.
Update: UA has been unbanned
WalletConnect banned RU and UA, modern time — modern solutions.
Update: UA has been unbanned
vxTwitter / fixvx
💖 71 🔁 17
💖 71 🔁 17
Cameron (@camchis_)
seems @WalletConnect have added Russia and Ukraine to their list of blocked countries
https://github.com/WalletConnect/blockchain-api/commit/fcdab76b7ac983e2ac0f638ceda01861366f619f
【QRT of banteg (@banteg):】
'hearing reports that @WalletConnect has started…
https://github.com/WalletConnect/blockchain-api/commit/fcdab76b7ac983e2ac0f638ceda01861366f619f
【QRT of banteg (@banteg):】
'hearing reports that @WalletConnect has started…
🤬4🌚1😭1
https://twitter.com/zachxbt/status/1717901088521687330 — Attack against LostPass's users.
Stanger, remember, your keys — your money.
Stanger, remember, your keys — your money.
X (formerly Twitter)
ZachXBT (@zachxbt) on X
Just on October 25, 2023 alone another ~$4.4M was drained from 25+ victims as a result of the LastPass hack.
Cannot stress this enough, if you believe you may have ever stored your seed phrase or keys in LastPass migrate your crypto assets immediately.
Cannot stress this enough, if you believe you may have ever stored your seed phrase or keys in LastPass migrate your crypto assets immediately.
👍2
Happy Halloween! 😈 🧸
Where did this holiday come from?
It is believed that the origins come from the ancient Celtic festival Samhain. The Celts, who lived in Europe before the great migration, celebrated Samhain as the end of the harvest season and the beginning of winter. The word Samhain is a combination of sam + hain, which translates as summer + sunset. The Celts divided the year into two parts — light and dark, and it was the transition between them that they celebrated.
With the adoption of Christianity, this holiday was localized and replaced with "All Souls' Day". The Orthodox Church did something similar, replacing pagan holidays with religious ones.
Our ancestors were skilled in long-term motivation, which is good. Instead of idly living each day, they worked and celebrated the result of their labor, for example, in such a holiday. You can try to imagine how they could feast on such days, having worked for months beforehand.
Over time, the tradition of asking for sweets (spiced cakes with raisins) emerged, in exchange for which prayers were offered for the repose of souls. It was then that "Jack's lantern," a character from Irish folklore with a lantern carved from a beet, appeared. This tradition was transferred to America, where the beet was replaced by a pumpkin, which over time transformed into one of the features of the holiday in the form of various carvings.
Now, in the modern secular world, people humorously perceive this holiday and use it as an occasion to rejoice.
Where did this holiday come from?
It is believed that the origins come from the ancient Celtic festival Samhain. The Celts, who lived in Europe before the great migration, celebrated Samhain as the end of the harvest season and the beginning of winter. The word Samhain is a combination of sam + hain, which translates as summer + sunset. The Celts divided the year into two parts — light and dark, and it was the transition between them that they celebrated.
With the adoption of Christianity, this holiday was localized and replaced with "All Souls' Day". The Orthodox Church did something similar, replacing pagan holidays with religious ones.
Our ancestors were skilled in long-term motivation, which is good. Instead of idly living each day, they worked and celebrated the result of their labor, for example, in such a holiday. You can try to imagine how they could feast on such days, having worked for months beforehand.
Over time, the tradition of asking for sweets (spiced cakes with raisins) emerged, in exchange for which prayers were offered for the repose of souls. It was then that "Jack's lantern," a character from Irish folklore with a lantern carved from a beet, appeared. This tradition was transferred to America, where the beet was replaced by a pumpkin, which over time transformed into one of the features of the holiday in the form of various carvings.
Now, in the modern secular world, people humorously perceive this holiday and use it as an occasion to rejoice.
Please open Telegram to view this post
VIEW IN TELEGRAM
❤1
https://www.linkedin.com/feed/update/urn:li:activity:7125215279688601600/
https://www.researchgate.net/profile/Ed-Gerck
Unverified, but scarry news
Update: I requested pre-print
Update2: looks like fake, I didn’t find any technique or algorithm that can help repeat and/or prove the attack. Keep calm :)
https://www.researchgate.net/profile/Ed-Gerck
Unverified, but scarry news
Update: I requested pre-print
Update2: looks like fake, I didn’t find any technique or algorithm that can help repeat and/or prove the attack. Keep calm :)
This message is not supported by your version of Telegram. Update app to view:
https://telegram.org/update
https://telegram.org/update
😁2🔥1
What do you see wrong there?
This code example from matic snapshot downloader.
They just copied 2TB of parts into a single one, spending a lot of IOPS and wasting time.
It would be much better to write:
And save about 30 minutes of life
(source)
output_tar="$client-$network-snapshot-${date_stamp}.tar.zst"
echo "Join parts for ${date_stamp} then extract"
cat $client-$network-snapshot-${date_stamp}-part* > "$output_tar"
rm $client-$network-snapshot-${date_stamp}-part*
pv $output_tar | tar -I zstd -xf - -C . --strip-components=3 && rm $output_tarThis code example from matic snapshot downloader.
They just copied 2TB of parts into a single one, spending a lot of IOPS and wasting time.
It would be much better to write:
output_tar="$client-$network-snapshot-${date_stamp}.tar.zst"
echo "Join parts for ${date_stamp} then extract"
cat $client-$network-snapshot-${date_stamp}-part* | pv | tar -I zstd -xf - -C . --strip-components=3 && rm $output_tar
rm $client-$network-snapshot-${date_stamp}-part*
And save about 30 minutes of life
(source)
Hi, be careful with remote RPCs.
The use of RPCs is indeed critical for web3 and blockchain developers for state observation and interaction with the blockchain.
Hosting your own node can be costly and time-consuming, so the use of third-party RPC providers becomes a practical solution.
It's essential, though, to ensure data integrity and security when relying on these external services.
For example, GetBlock.io periodically produces testnet blocks instead of mainnet.
1) At first, they respond with a 404 Error to requests
2) Later (next request), they send a response with a testnet block instead of mainnet block
Where 0x2121c19 and 0x58a057779ff907d3987c595e801c11bd1067c0fe7485492396176b75eaf7a291 is testnet block
It's critical to implement additional validations and checks when observing blocks to ensure the integrity of the data and the correct functioning of your software. You should validate chainId in getBlockByNumber response.
(dump)
The use of RPCs is indeed critical for web3 and blockchain developers for state observation and interaction with the blockchain.
Hosting your own node can be costly and time-consuming, so the use of third-party RPC providers becomes a practical solution.
It's essential, though, to ensure data integrity and security when relying on these external services.
For example, GetBlock.io periodically produces testnet blocks instead of mainnet.
1) At first, they respond with a 404 Error to requests
POST /API-KEY/mainnet HTTP/1.1
…
{"jsonrpc":"2.0","method":"eth_getBlockByNumber","params":["latest",false],"id":111973596}
HTTP/1.1 404 Not Found
…
2) Later (next request), they send a response with a testnet block instead of mainnet block
POST /API-KEY/mainnet HTTP/1.1
…
{"jsonrpc":"2.0","method":"eth_getBlockByNumber","params":["latest",false],"id":111973597}
HTTP/1.1 200 OK
…
{"jsonrpc":"2.0","id":111973597,"result":{…"hash":"0x58a057779ff907d3987c595e801c11bd1067c0fe7485492396176b75eaf7a291",…,"number":"0x2121c19",…}
Where 0x2121c19 and 0x58a057779ff907d3987c595e801c11bd1067c0fe7485492396176b75eaf7a291 is testnet block
It's critical to implement additional validations and checks when observing blocks to ensure the integrity of the data and the correct functioning of your software. You should validate chainId in getBlockByNumber response.
(dump)
👍3🔥2😭1
Stranger, wanna know how to earn?
Okta report unauthorized Access to Okta's Support Case Management System.
1) 2023-09-29,2023-09-02,2023-10-12 private reports — time to sell!
2) 2023-10-20 public report — time to buy!
SO, YOUR WAY TO EARN IS JUST TO GET THE INSIGHTS FIRST!
(report)
Okta report unauthorized Access to Okta's Support Case Management System.
1) 2023-09-29,2023-09-02,2023-10-12 private reports — time to sell!
2) 2023-10-20 public report — time to buy!
SO, YOUR WAY TO EARN IS JUST TO GET THE INSIGHTS FIRST!
(report)
😁2