Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)LE
Posts
12
Comments
345
Joined
2 yr. ago
Cybersecurity @sh.itjust.works
leds @feddit.dk

popular github action compromised

https://www.stepsecurity.io/blog/harden-runner-detection-tj-actions-changed-files-action-is-compromised

Harden-Runner detection: tj-actions/changed-files action is compromised We are investigating a critical security incident involving the popular tj-actions/changed-files GitHub Action. We want to alert you immediately so that you can take prompt action.

Your secrets are in the build logs

  • I read that as recipe checker and got more and more confused reading that. Are they now having people checking your recipes in the shop to make sure you got all the ingredients?

  • It is usefull but the trouble is that they should be much and much more certain about their designs. Let's say they want 99.99% reliability for real payload then they should by now be at 99.9% . If they want to do it by trail and error they would need to do a lot trials to show that they actually achieved that reliability. Otherwise the next one is still just as likely to explode. I guess what I'm trying to say is that you can't get there by trial and error.

  • Opening bank accounts can be difficult due to the reporting/spying requirements banks have on US citizens. Actually not just citizens , I think it is called US persons of interest or something like that. Anyway not all banks want to deal with that and will not allow you to open an account.

  • Piracy: ꜱᴀɪʟ ᴛʜᴇ ʜɪɢʜ ꜱᴇᴀꜱ @lemmy.dbzer0.com
    leds @feddit.dk

    I dont know who needs to hear this bit qBittorrent has a nasty vulnerability ( and there are some older ones too)

    qBittorrent, on all platforms, did not verify any SSL certificates in its DownloadManager class from 2010 until October 2024. If it failed to verify a cert, it simply logged an error and proceeded.

    To be exploitable, this bug requires either MITM access or DNS spoofing attacks, but under those conditions (seen regularly in some countries), impacts are severe.

    The primary impact is single-click RCE for Windows builds from 2015 onward, when prompted to update python the exe is downloaded from a hardcoded URL, executed, and then deleted afterwards.

    The secondary impact for all platforms is the update RSS feed can be poisoned with malicious update URLs which the user will open in their browser if they accept the prompt to update. This is browser hijacking and arbitrary exe delivery to a user who would likely trust whatever URL this software sent them to.

    The tert

    Selvgjort er velgjort @feddit.dk
    leds @feddit.dk

    VVS spørgmål

    Er der nogen af jer som kan fortælle mig om der skal paksalve eller tape på den her kugle samling til drikkevand (på selve kontakt flåde af kuglen). Jeg har det svært med at få det vandtæt uden nogen som helst.

    Opdatering: Den koniske samling som opslag drejede sig er faktisk fuldstændig vandtæt uden tape eller garn! på resten af samlinger har jeg skifted taped ud med garn og salve og det virker meget bedre.

    Free and Open Source Software @beehaw.org
    leds @feddit.dk

    My experience with LineageOS tonight

    so.. i'm running lineageOS on my phone (a Oneplus 6T) , have been for a very long time. Usually i'm really happy with this but not tonight:

    • Phone suggest a update of OS , just a weekly build. Sure why not, so it does it thing and i reboot, all good.
    • Open a app to listen to some podcast: screen goes black flickers a couple of times showing empty launcher. thankfully power button long press shows shutdown menu (but looks different from normal?) and lets me restart
    • do same thing again , ok looks like latest update broke something
    • update app, same
    • go to settings , updates to try to revert to previous version: no option to install older version , only option is export. weird ok lets try to export old version . Now it lets me install that
    • installation loops , seems it failed
    • try app again, same black screen , hold power button to get boot menu again : now phone says ERASING .. wait what stop no .. (does lineage have a panic wipe my phone key combo i didn't know about?)
    Nyheder @feddit.dk
    leds @feddit.dk
    Gardening @lemmy.world
    leds @feddit.dk

    favas eating ants?

    Hi All, my fava beans are being eaten by black ants , no aphids. the ants themselves seem to be sucking the juice out of the leaves, leaving black spots where they have been nibling.

    I thought they normally employed aphids to do the hard work for them but maybe they are skipping the middle man. Anyone seen this before?

    Other leaves are full of holes but that looks more like snails , dont think the ants are capable of that.

    Any good tips for encouraging the ants to move elsewhere ?

    Nyheder @feddit.dk
    leds @feddit.dk
    Programmer Humor @programming.dev
    leds @feddit.dk

    DO NOT MERGE

    Merged

    Nyheder @feddit.dk
    leds @feddit.dk
    Nyheder @feddit.dk
    leds @feddit.dk

    breaking news

    SyntaxError som overskrift...

    Selvgjort er velgjort @feddit.dk
    leds @feddit.dk

    selvgjort rødebede frokost

    Hent friske rødebeder fra køkkenhaven

    Vask og skær

    Steg i olie med lidt balsamico eddike

    Tilføj stilkerne og til sidst bladene

    Spis!

    Feddit.dk @feddit.dk
    leds @feddit.dk

    Fire dages arbejdsuge for at fastholde seniorerne

    Jeg tænker hvis seniorerne få ret til 4 dages arbejdsuge vil det også være nemmere for resten af os, nu er det ikke noget man kan nemt spørge om ellers få man nemt svaret at "det er ikke muligt her"