pull down to refresh

Wake up: learn about new vulnerabilities, hacks, rumors of hacks, mayhem everywhere.

228 sats \ 7 replies \ @sox 30 Oct

We're at a point in history in which my macbook is the most vulnerable machine in my network.

reply

Hopefully not running vscode or cursor because then the only thing you'll be doing for the rest of your Friday is rolling keys.

reply
126 sats \ 0 replies \ @sox 30 Oct

… lmao

reply
126 sats \ 1 reply \ @plebpoet 30 Oct

uh oh what does rolling keys mean

reply

well if someone gained access to your dev box, the first thing they'll do is leech your ssh / codesigning / mtls keys. Normally you have those passworded so now you have to do a rollover before they can crack them. Or if you don't have them passworded... yeah... better start now lol. (and password them)

reply
126 sats \ 2 replies \ @justin_shocknet 30 Oct -210 sats

whole point of using cursor is not to run claude slop

Funnily I made it 4 hours in today before an affecting vuln made me have to do something, instead of the regular first thing I see. May have something to do with my backlog and I needed to review a signal release because I had postponed that a few days.

Normally my prime waking time is exactly what you describe, but having said that, npmsec and apparently overall GHSA review&verification from repo-specific to the global registry can take over half a month now. So my weekend is going to be developing something that can monitor 3500 source repos. Github is going to appreciate my API consumption.

reply

Do you feel yourself becoming more nihilistic?

reply