dracs

joined 2 years ago
[–] dracs@programming.dev 3 points 9 months ago (1 children)

The issue isn't a big deal for the average user. The vulnerability required them to first get your username and password, physically steal your Yubikey, spend half a day using $10-15k worth of electronics equipment to repeatedly authenticate over and over, they then could potentially make a clone of the key.

[–] dracs@programming.dev 6 points 9 months ago

She'll independently recycle your matter into more coffee.

[–] dracs@programming.dev 4 points 10 months ago (1 children)

I'd say it's worth doing this regardless to help determine if it's an application or system issue causing them not to go off.

[–] dracs@programming.dev 6 points 10 months ago

It's a good game. Just don't take the content warning at the start lightly. I've tried to finish it twice but haven't been able to get more than a couple of hours in.

[–] dracs@programming.dev 6 points 10 months ago

My bonus just came in today. Was planning to order one of these this week. Not sure of I'll wait to see what's happening at PAX. All they've said so far is that Steam will be there.

[–] dracs@programming.dev 1 points 10 months ago

I bet O'Brien is a Giliac.

[–] dracs@programming.dev 7 points 10 months ago* (last edited 10 months ago)

Probably don't need to scrape it. Just query WikiData for it

https://wikidata.org

[–] dracs@programming.dev 16 points 10 months ago

When I migrated emails last time, I setup my old email to automatically forward to the new email. Then on my new email, I setup an automatic label for any email that was addressed to the old address. Every week or two I'd review what was sent to it and either update the email address used or unsubscribe. Eventually it got to a level where I wasn't getting much at the old email anymore and finally deleted it.

[–] dracs@programming.dev 3 points 11 months ago

Ah, they did add that block AI scraping.

The TLDR version of it is the changing barcode is done the same way the six digit OTP codes from an authenticator app. They send the secret required to generate the codes to the app, rather than individual codes. So when they buy the ticket, they can generate all rotating barcodes the same way the app does.

[–] dracs@programming.dev 1 points 11 months ago

That was pretty much my reaction while reading it too, haha.

[–] dracs@programming.dev 9 points 11 months ago (4 children)

Unfortunately it wasn't a very good attempt at it. It's been completely reverse engineered already and the "secret" to generate the changing barcodes is sent to the buyer with every purchase. So anyone can generate the dynamic barcodes at will. 404 Media did a good write up on it recently.

https://www.404media.co/scalpers-are-working-with-hackers-to-liberate-non-transferable-tickets-from-ticketmasters-ecosystem/

[–] dracs@programming.dev 12 points 1 year ago (1 children)

I'm just using Mozilla's Multi-Account Containers extension. In my work's infinite wisdom I have a total of five "single sign on" accounts. So I have different containers for each account so I avoid the endless "which account would you like to use" and "this account doesn't have access to this resource".

The extension allows me to set specific domains to always open in container X. That covers 90℅ of my use cases. Some sites I need to use different accounts with and for that I have to select which one to use each time.

view more: ‹ prev next ›