@edwiebe@mstdn.ca

Science - Photography - Woodturning - Climate - Weather - Curious - Running - Cycling - Computing - Sense - Nonsense

This profile is from a federated server and may be incomplete. Browse more on the original instance.

EpiphanicSynchronicity, to obsidianmd
@EpiphanicSynchronicity@pkm.social avatar

I wish the indent = code block behavior would get deprecated from the specs. Triple backtick fences for code blocks and single backticks for inline code seem to have those bases covered, and indents could be freed again for the purposes for which they’ve always been used in prose and verse. (Markdown sucks for because of the indent prohibition.)

Programmers aren’t the only ones who use markdown.

@obsidianmd

edwiebe,
@edwiebe@mstdn.ca avatar

@EpiphanicSynchronicity @obsidianmd ASCIIDoc might be better. It’s more complete.

https://asciidoc.org

malwaretech, to random
@malwaretech@infosec.exchange avatar

This is absolutely crazy stuff. Chinese hackers were able to get into a bunch of government email accounts by forging Microsoft access tokens, but how it happened is wild.

Apparently an internal Microsoft system responsible for signing consumer access tokens crashed, then a bug in the crash dump generator caused the secret key to be written to the crash dump. Microsoft's secondary system for detecting sensitive data in crash dumps also failed, allowing the crash dump to be moved from an isolated network to the corporate one. The Chinese hackers compromised a Microsoft engineer's account and were able to get a hold of the crash dump. They were not only able to find the key and figure out that it's responsible for signing consumer access tokens, but were also able to exploit a software bug to use it to sign enterprise access tokens too, basically giving them the keys to the kingdom.

So many security system had to fail for this to happen. Either the hackers were very lucky or extremely patient.

https://msrc.microsoft.com/blog/2023/09/results-of-major-technical-investigations-for-storm-0558-key-acquisition/

edwiebe,
@edwiebe@mstdn.ca avatar

@malwaretech If it’s Microsoft I think assuming they made made a mistake is a safe bet.

edwiebe,
@edwiebe@mstdn.ca avatar

@Glaive0 @JoShmoe I really have no deep understanding of Apple but my guess is that they actually want to ensure repaired devices meet their specs for command and control of it, for purity of image, and experience of using it, and to reduce possible hassles dealing with people who complain about their now (possibly) off-spec device. I’m betting on some vision of purity (reputation) and control. Anyway, I don’t think the repaired for resale market would do much to sales.

edwiebe, to random
@edwiebe@mstdn.ca avatar
  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • uselessserver093
  • Food
  • aaaaaaacccccccce
  • test
  • CafeMeta
  • testmag
  • MUD
  • RhythmGameZone
  • RSS
  • dabs
  • KamenRider
  • Ask_kbincafe
  • TheResearchGuardian
  • KbinCafe
  • Socialism
  • oklahoma
  • SuperSentai
  • feritale
  • All magazines