Specialist Engineer in 🇸🇪 • 🏆 @GoogleDevExpert • 🏆 @MVPAward •🧠 INTJ-A• ⚛️ I like complicated beep boops
Stockholm, Sweden
Joined August 2009
- Tweets32.8K
- Following737
- Followers10.4K
- Likes17.3K
Pinned Tweet
Hoje eu descobri uma parada interessante, a gente poderia estar codando usando uma máquina de escrever.
Quem usa linux já deve ter visto a palavra TTY no terminal. Mas o que é um TTY?
Parafraseando o primeiro comentário
Flávio Bolsonaro está sendo perseguido porque teve quase 60 milhões de votos, disse Rui Costa Pimenta. Veja o que ele disse na Análise da 3ª:
"A perseguição não tem nada a ver com o defesa da democracia. É uma perseguição política. Por que o Flávio Bolsonaro está sendo perseguido? Porque ele teve quase 60 milhões de votos. Porque ele tem maioria, ele tem uma bancada muito expressiva no Senado e no Congresso. Ele pode conseguir o impeachment de determinados ministros do STF. Então, a perseguição é por causa disso, é um jogo de poder."
Cara não é possível...
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
Lucas Santos 🇧🇷🇸🇪 retweeted
The youth give me hope…
“Just because the government has screwed up doesn’t mean you should destroy the dreams of young people.”
— The Pink Panther protest in France 🇫🇷
Lucas Santos 🇧🇷🇸🇪 retweeted
Pele is a fast, beautiful, open source renderer for Mermaid diagrams we created for the next version of Obsidian.
You can already try it in the Pele playground and integrate it into your own apps.
This is Pele, my new rendering library for diagrams and charts, compatible with the latest Mermaid syntax.
- 100-500× faster than mermaid.js
- 6× smaller bundle
- No dependencies
- Easy to theme
- Responsive to device width
In pursuit of making Obsidian insanely fast and cohesively designed, I always found the Mermaid library to be too big, too slow, and too hard to theme. Pele will be the new renderer in the next version of Obsidian, but you can start using it now.
Pele [ˈpɛlɛ] is named after the goddess of volcanoes and fire. It's open source under the MIT license. Try the playground!
