Critical cross-account vulnerability in Microsoft Azure automation service
AutoWarp is a critical vulnerability in Microsoft Azure Automation Service that allows unauthorized access to other customer accounts using the service.
The latest blog posts to take off on Hacker News. 6,153 posts.
AutoWarp is a critical vulnerability in Microsoft Azure Automation Service that allows unauthorized access to other customer accounts using the service.
------ Update 03/12/2022 Reuters has published new information on this incident, which initially matches the proposed scenario. You can find...
Most great thinkers have speculated about the kind of leadership that might give rise to a better society, analyzing it through what’s sometimes called a “normative” lens: What should we be doing? In Leviathan, for example, Thomas Hobbes argued for a single, absolute sovereign to hold together the social contract. He…
my show is canceled, business news reports
A new study finds vitamin D supplements with or without omega-3s decreased the risk of autoimmune diseases by 22 percent compared to placebo.
Nowadays, we have amazing engines like Unity and Unreal. But how does this work exactly? Learning 3D rendering or building your own engine is a daunting task. While there are some tutorials out there,
A Non-Violent Weapon of Non-Cooperation Against Corruption Have you heard of the ZERO-RUPEE NOTE, yet? Many of you may wonder what the use of it is. Well, All Indians face Corruption in almost all…
Copyright maximalists just don’t know when to stop. Having failed in their 2020 attempt to use U.S. law to force GitHub to permanently cut off access to youtube-dl, an open source tool that allows users to download and preserve videos, on the theory that the tool can also be used for infringing...
A plain-text recipe format that generates shopping lists and keeps your recipes in git. Cooklang is like markdown for recipes. It lets you write recipes in a…
I’m declaring defeat. Infinite scroll has won. There is an endless supply of interesting things to consume online, and there are teams and teams of very smart people working very hard to get me to keep watching. One more video means one more metric counter incrementing, one more engagement click, one more step towards…
A tale about game development and techonlogy obsolescence
From the highly eclectic blog of Mark Dominus
As the popular saying goes, there are only two hard problems in computer science: caching, off-by-one errors, and getting a Rust job that isn’t cryptocurrency-related. Today, we’ll discuss caching!...
This article is not intended to convince you to abandon your current antivirus solutions. In this post I would like to share my observations and ways to improve the effectiveness of Defender. You don’
pg-osc is a CLI tool for making non-blocking, zero downtime schema changes in PostgreSQL
To the north of Kyiv is a 40-mile long column of Russian vehicles, trapped by bad tyres, breakdowns, fuel shortage, and mud. But what of the occupants? Are they fit to fight?
If you don’t like email, try a different strategy.
Learn more about how all browser vendors, and other stakeholders, have come together to solve the top browsers compatibility issues identified by web developers. Interop 2022 will improve the experience of developing for the web in 15 key areas.
I found this on a security-related Slack (shared with permission). It launched an entertaining discussion about the risks of taking a potentially fake FIDO token. We all know the risks of taking a free USB drive and shoving it in our computer, right? USB sticks can install software, act as a keylogger, transmit data…
The upgrade to Ruby 2.7 for GitLab involved thousands of deprecation warnings across hundreds of files. Here's how we fixed most of them.
Despite the fact that it is not a 'real' vulnerability, escaping privileged Docker containers is nevertheless pretty funny. And because there will always be people who will come up with reasons or excuses to run a privileged container (even though you really shouldn't), this could really be handy at some point in the…
By Katia Moskvitch
This archive is retained to ensure existing URLs remain functional. It will not contain any emails sent to this mailing list after July 1, 2024. For all messages, including those sent before and after this date, please visit the new location of the archive at…
What you shouldn't do when pair programming.
When Dr. Frederic Whitehurst initially blew the whistle on the systemic forensic fraud in the FBI crime lab, he could never have known it was the start of a lifelong fight for government accountability. In 1994, he reported his concerns with FBI lab practices internally. It was “alterations of reports, alterations of…
"By ‘nationalism’ I mean first of all the habit of assuming that human beings can be classified like insects and that whole blocks of millions or tens of millions of people can be confidently labelled 'good' or 'bad'."