quasigod

here's a little writeup of a vulnerability I found in pangolin that let's you bypass access rules set on paths via path traversal quasigod.xyz/blog/pangoli...

maybe it would get better faster if they made the defensive capabilities available widely right now instead of waiting 18 months

if you think claude is sentient you probably shouldn't use it for work unless you Also think slavery is okay

hister.org is fantastic software

i changed PDS and now popfeed is broken :(

iroh is so cool I need to think of a project that could use it

i got the root flag for last weeks htb s11 box but i was literally 30 seconds too slow to get points :( nimbus was such a tough machine but it was a really fun one

ngl i'm surprised its this cheap and even more surprised that people thought itd be cheaper not saying its a good price. all hardware is a horrible value right now. there was just no reality where it would be cheaper or equal to the steam deck imo this is just the cost of pc gaming atm sadly

a little writeup on a recent bug bounty submission stealing user logins by hijacking a vulnerable webview implementation in a mobile app

Speedrun xkcd.com/3246/

facts some packages have really useful ones, discord's let you enable client mods really easily. it would be neat if they were exposed somehow so you could see them on the package search page instead of having to check the source.

the only reason I want an edit button is to shut up the people who are constantly demanding it and shitting on any other new features

Listening to infosec people freak out over Mythos is so tiring. Like, bro, your local water treatment plant runs Windows XP, your mobile provider's hardware is older than you are, and the protocol that routes internet traffic is secured by everyone just agreeing that hijacking it would be uncool.

need this in helium asap

in case anybody else using emacs on android wanted to keep it always running in the background quasigod.xyz/notes/keep-e...

freak the fuck out and panic sell everything right now

nixos docs added to tranquil 4 hours before i start setting it up lfg

and the Phillies curse of only scoring in one inning continues

It's an account for Atmosphere apps. It's not a "handle" for the whole "internet". It's not a "Bluesky" account, a lot of us don't host our account there, and hopefully less will over time. Atmosphere came from the community, we build as a community. Don't overcomplicate it. Atmosphere Account.

a truly decentralized DNS replacement

a blocklist of anyone agreeing with this post would make using this site way better

Finding XSS via indirect prompt injection A short writeup of how I found a stored XSS vulnerability in an AI-powered writing app

the bsky team needs PR training so badly

ipv6 is better than ipv4 because you can put 4 colon threes in your address

🔲 Can't yell at republicans, they're not on here 🔲 Can't yell at transphobes, they don't care ☑️ Can yell at allies that are unable to solve systemic problems on their own

the future of software is emacs

what if app.bsky.actor.profile records had a preferredFrontend value? then sites like aturi.to could have the top option be the users preference or even support automatically redirecting them and frontends could have a simple "set as default" option in the settings

HTB Writeup - Interpreter A medium rated Linux machine running Healthcare software https://quasigod.xyz/blog/htb-writeup-interpreter

this is cool as hell. I don't hate pixels, but excited to have more options for my next phone.

HTB Writeup - WingData https://quasigod.xyz/blog/htb-writeup-wingdata

no tim i do not want your major featues

why is this Firefox's color picker on android it only has 9 options. now I have to wait til I'm at my PC to make a little guy

Music Assistant's mobile app is coming along super well! Its really nice having a good UI for controlling my speakers, the web app works well on desktop but is pretty jank on move.