Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing... The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer. - TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely. - LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap. - OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for. These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure. foxio.io/blog/choose-your-ba…

Why settle for an Apple Duo when you can get a tri-fold and have this: An Electric-type Dorito, a Water-type Voltorb, and a Fairy-type marshmallow. @thsottiaux @poteto @alexandr_wang

Ambition? Niche market? A problem worth solving? Hear directly from the @IndiaQuotient team on what they’re looking for. 📅 Pitch Day Edition #2: 30th October, 7 PM We’re already shortlisting, so don’t sleep on this. ⤵️ luma.com/n9wjrmhz

chrome.tabGroups.query() and chrome[.]tabs[.]group() never return. No error, just pending. Claude is just waiting for the query() call to resolve, maybe a timeout or not depending on tabgroups should work fine? @claudeai @ClaudeDevs

We made the first AI model you can have a realistic conversation with that was trained entirely on speech! Dessa is a full-duplex speech-to-speech model that you can run on consumer GPUs. This is a GPT3 moment for speech.

Tried @instinct , after connecting whatsapp, gott to know, it's invite only! Anyone with an invite code to join!?

3 steps to becoming an actual software programmer 1. Build personal software 2. Build internal software (for a select group of people) 3. Build public-facing software If you've only ever built personal software you're not qualified to build public-facing yet. As you climb the rungs the stakes get higher, your constraints get tighter, and you need to QA harder. So my advice for anyone who's never built an app is this: Find a small group of testers (even 1 is great) that will actually use an app you built in their real lives. The feedback you'll get will blow your mind. It'll show you how forgiving you are of your own crappy product. You'll begin to focus on process and quality. It'll be frustrating, slow, and hard work. That's programming.