WingNews logo WingNews GitHub [2]

flotwig's comments

flotwig | 2 years ago | on: How to colorize Game Boy games

Before reading this, I assumed the method would involve rewriting large parts of the game's graphics code. But it sounds like the author is intercepting draw calls and changing them to use color instead! Looking forward to the rest of this series.

flotwig | 2 years ago | on: The curl-wget Venn diagram

Looks like cURL and SQLite have the same woes: https://www.sqlite.org/cves.html

Previously I worked on an open source project that pulled in many third party libraries. Users would run their corpo vulnerability scanners on the project and find dependencies with open CVEs and demand fixes, not understanding that in our usage of the libraries, the vulnerability is not exposed.

I think in 4 years, we had users open roughly 50 issues like this, which corresponded to exactly 0 real world exploitable issues.

A central vuln DB makes sense for sysadmins, but too many make it the end-all-be-all.

flotwig | 2 years ago | on: “Typo leak” exposes millions of US military emails to Mali web operator

It sounds like the DOD already does block emails to .ml because of this issue:

> Lt. Cmdr Tim Gorman [...] said that emails sent directly from the .mil domain to Malian addresses “are blocked before they leave the .mil domain and the sender is notified that they must validate the email addresses of the intended recipients”.

I think the issue is people sending emails from personal accounts that the DOD cannot control. The article also mentions travel agents as another source of the email.

flotwig | 3 years ago | on: Wikipedia is not short on cash

I felt the same way, which is why I started a recurring donation to WikiMedia. After about a year, they e-mailed me trying to convince me to write WikiMedia into my will. Check out this transparent attempt at manipulation:

> Many supporters like you who understand the usefulness of planning ahead have chosen to include a gift to Wikipedia in their will. They want to do more to protect free knowledge and are invested in building a legacy with Wikipedia to ensure their values live on for many years to come.

"If you understood the importance of planning ahead, you'd already have WikiMedia in your will, bozo"

flotwig | 3 years ago | on: Using a catch-all domain is a mistake

> The truth is no one really sells your email – at least no legitimate companies.

`[email protected]` is the only email that I've ever caught being sold via my catch-all email. I get a decent amount of phishing, scams, malware, etc. to that address. But I guess the author is still correct, since Xfinity/Comcast are sometimes less than legitimate.

flotwig | 4 years ago | on: Price increase on .io domains on January 1, 2022 (Renewal: $55.00)

Does ICANN already have rules around what prices registrars can charge for domains? It seems like that's the only solution in the current TLD system - ICANN needs to step in and prevent anti-consumer practices like year-over-year price increases that vastly outstrip inflation.
page 1
more