← Feed

Posts

• Post #2207329

  Someone apparently found some security issues in Forgejo but isn't willing to follow the security procedure of the project. What is troubling me is that their posts calling out of the potential vulnerabilities are getting removed on Mastodon, first on infosec[.]exchange then on mastodon[.]social. What is the limit on rules against harassment when it targets an entity (the Forgejo/Codeberg project) and not individuals? Is it okay to downplay or hide the potential security issues in this...

• Post #1952084

  Trademark Violation: Fake Notepad++ for Mac Someone vide-coded a macOS app with Notepad++ source code as input. They claimed it is an official macOS port, which is not the case. They used the name Notepad++ for Mac, with the same logo and registered a domain name with a "-mac" suffix appended to the official one. Exactly like phishing. They even included information on Notepad++ core developer without authorization. And their repository don't include Git history with the attribut...

• Post #1948156

  @bgrier@universeodon.com Hello, this application is not endorsed by the Notepad++ project. This is actually a vide-coded rip-off. https://notepad-plus-plus.org/news/npp-trademark-infringement/

• Post #1946143

  Last week, EPI Company, behind Wero, published a press release on its use of American cloud providers. They're saying that they plan to reduce that dependency. > When EPI first launched Wero, only cloud services from international providers could deliver the performance, security and stability needed to deliver a competitive solution. > EPI is currently working to reduce its dependency on non-European suppliers https://epicompany.eu/media-insights/wero-reduces-its-dependence-on-inte...

• Post #1319029

  @cyrielle_chatelain@piaille.fr À l'intention de Cyrielle Chatelain ou de ses collaborateurs, Je viens d'écouter la séance de la commission d'enquête sur les vulnérabilités du secteur du numérique qui a accueilli Nicolas Guillou. Wero est mentionné comme solution alternative future. Avez-vous connaissance du fait que Wero semble reposer actuellement sur Amazon Web Services, hébergeur états-unien ? Il s'agit d'un problème majeur de souveraineté dans la mise en œuvre de cett...

• Post #1023099

  @bortzmeyer@mastodon.gougere.fr Attend que Trump découvre qu'on a l'arme nucléaire et qu'on va renforcer notre arsenal dans les prochaines années.

• Post #877653

  @canardpc@mastodon.social La page Itch n'existe pas, j'y ai cru

• Post #848534

  @TritTriton@shelter.moe 8 Mbps en down sur de la fibre ?

• Post #845629

  @TritTriton@shelter.moe N'hésite pas à activer l'option pour avoir une IPv4 dédiée. Et bon courage parce qu'elle n'est pas fixe, et même le bloc IPv6 peut changer.

• Post #822812

  @ramsey@phpc.social I'd rather use ++C

• Post #818768

  I'm seeing an increasing number of tools that do not provide a "latest" version to install. The reasoning is that without a "latest" version, users will read breaking changes before upgrading to a newer version. Personally, I want to decrease the time needed for maintenance and for my own stuff I prefer to be bold: I have backups in place if something goes wrong, and I'd rather have automated upgrades to the latest version that go wrong rather than having to follow...

• Post #810537

  @AAKL@infosec.exchange I thought the picture showed a graveyard

• Post #420158

  > We scanned millions of websites and found nearly 3,000 Google API keys, originally deployed for public services like Google Maps, that now also authenticate to Gemini even though they were never intended for it. https://trufflesecurity.com/blog/google-api-keys-werent-secrets-but-then-gemini-changed-the-rules via https://news.ycombinator.com/item?id=47156925

• Post #397288

  @stefan@gardenstate.social Same for me, watched 13 episodes when it came out and I didn't feel attached to the MC so I dropped it. I don't understand why so many people enjoy this anime.

• Post #334824

  @Le_M_Poireau@mastodon.social C'est une copie de l'article en accès libre.

• Post #249877

  I have read the archives of the old issues on the Oliphant blocklist debacle and I realize this happened only three years ago. Recently, someone created a project on GitHub called vouch, which can be used to create public block lists of users. They plan to make it possible for multiple projects to share block lists. This is even worse than Oliphant because it directly contains usernames and not merely instance domain names (which can also refer to individuals). And of course, no reasons need...

• Post #236760

  @Saorsa@neondystopia.world I'm included in the "seirdy[.]one" blocklist and they don't answer emails about asking for a reason. @xaetacore@neondystopia.world