404 to $4,000: Exposed .git, .env, and Hidden Dev Files via Predictable Paths”

Image

How Bug Bounty Hunters Can Turn Common 404s Into Critical Information Disclosure Bounties

[Continue reading on InfoSec Write-u … ⌘ Read more

Ukraine and Russia agree to swap 6,000 bodies of soldiers killed in three-year war ⌘ Read more

Harpoom: of course the Apple Network Server can be hacked into running Doom
Of course you can run Doom on a $10,000+ Apple server running IBM AIX. Of course you can. Well, you can now. Now, let’s go ahead and get the grumbling out of the way. No, the ANS is not running Linux or NetBSD. No, this is not a backport of NCommander’s AIX Doom, because that runs on AIX 4.3. The Apple Network Server could run no version of AIX later than 4.1.5 and there are substan … ⌘ Read more

IDF: First 600 days of war saw nearly 30,000 projectiles launched at Israel ⌘ Read more

Russia masses over 50,000 troops for offensive on northeastern Ukraine, Zelenskiy says ⌘ Read more

Against Curry-Howard Mysticism
Comments ⌘ Read more

This is one of my attempts:

$ go build ./cmd/xor/... && ./xor
Generation  95 | Fitness: 0.999964 | Nodes: 9   | Conns: 19
Target reached!

Best network performance:
  [0 0] → got=0 exp=0 (raw=0.000) ✅
  [0 1] → got=1 exp=1 (raw=0.990) ✅
  [1 0] → got=1 exp=1 (raw=0.716) ✅
  [1 1] → got=0 exp=0 (raw=0.045) ✅
Overall accuracy: 100.0%
Wrote best.dot – render with `dot -Tpng best.dot -o best.png`

10 Big Ideas Born in British Pubs
It is often said that people should get out of their comfort zone if they want to dream up big new ideas, but maybe it all depends on where that comfort zone is. If it is one of the 45,000 or so pubs found across the British Isles, it might be better to stay put. […]

The post 10 Big Ideas Born in British Pubs appeared first on Listverse. ⌘ Read more

Russia Forces 20,000 Naturalized Migrants to Fight in Ukraine or Face Losing Citizenship ⌘ Read more

Adafruit Hit With $36K Tariff Bill on 1,000 lbs of Electronics
Adafruit CEO responds to The Lunduke Journal with details and stays non-political about changing tariffs. ⌘ Read more

$20,000 Bounty: How a Leaked Session Cookie Led to Account Takeover on HackerOne

Image

How one accidental copy-paste exposed sensitive data and what you can learn to find similar bugs

[Continue rea … ⌘ Read more

$10,000 Bounty: HackerOne Report Comments Leak via “Export as .zip”

Image

How a new export feature unintentionally exposed private discussions in limited disclosure reports

[Continue reading on InfoSec Write-ups »](https://infose … ⌘ Read more

$16,000 Bounty: Stored XSS in GitLab

Image

From Regex to XSS: Inside a $16,000 Vulnerability in GitLab

Continue reading on InfoSec Write-ups » ⌘ Read more

$50,000 Bounty: GitHub Access Token

Image

How a hidden token in a desktop app could have compromised one of the world’s biggest e-commerce platforms

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/50-000-bounty-github-access-token-c29cb6f00182?source=rss—-7b722bf … ⌘ Read more

Introducing Mac Themes Garden
I’ve “launched” the Mac Themes Garden! It is a website showcasing more than 3,000 (and counting) Kaleidoscope from the Classic Mac era, ready to be seen, downloaded and explored! Check it out! Oh, and there also is an RSS feed you can subscribe to see themes as they are added/updated! ↫ Damien Erambert If you’ve spent any time on retrocomputing-related social media channels, you’ve definitely seen the old classic Mac OS themes in your timeline. They are exquisitely beauti … ⌘ Read more

Single day Firebase bill for $100,000
Comments ⌘ Read more

I had Chick-fil-A breakfast today (sausage, egg, and cheese biscuit, hash browns, coffee, and orange juice). Then at lunch my work place offered hot dogs. I had two (kosher, if that matters), plus a coke, a macadamia nuts cookie, and a small chocolate brownie.

So, here I am, at home, feeling hungry but guilty and refusing to eat anything else for the rest of the day. To top it off, I have only clocked 4,000 steps today (and I don’t feel like walking). I am going to hell, am I?

That’s exactly what came to mind. Even millionaires would simply pay with a credit card for the convenience, and yes, because what kind of a sociopath will carry $3,000 around?! Just one more stumping item to that despicable person list.

“A handbag belonging to the homeland security secretary Kristi Noem containing her passport, department security badge and $3,000 in cash was stolen on Sunday night at a restaurant in Washington, the department confirmed.”

Oh dear!

How to take climate action with your code
There are 60,000+ climate-focused projects on GitHub, explore one this Earth Day!

The post How to take climate action with your code appeared first on The GitHub Blog. ⌘ Read more

$10,000 worth GitHub Access Tokens | Secret Search Operators

Image

Secret but basic GitHub dorks & search operators that can lead to $10k bounty worth Acess Tokens.

[Continue reading on InfoSec Write-ups »](https://infosecwriteups.com/10- … ⌘ Read more

@prologic@twtxt.net in this case it isn’t vendor lock-in. I believe they do it because the carrier “eats” the costs (the interest part of the instalments). The phones are fully unlocked.

I will return the two we got for parents, and re-buy them again, this time on an instalment plan. Why pay $2,000 up front when you can split the cost in convenient monthly payments, all interest free, right?

Finally lawn is mowed—well, the one at the front, the wild forest in the back will have to wait a bit longer. I haven’t clocked my 10,000 steps today, but what I didn’t walking, I did through full body “exercise”. Will call it a day. 😅

KubeCon + CloudNativeCon Europe 2025: Day Two Keynote Recap
Over 12,000 attendees streamed into the ExCel Arena for the second day of KubeCon + CloudNativeCon Europe 2025, enjoying yet another sunny day in London and primed to hear real world stories of cloud innovation. Here’s… ⌘ Read more

Cartographie de la laideur
En février dernier, on découvrait qu’un atelier de sculpture risquait la faillite après que le tribunal administratif de Nice lui ordonnait de retirer de la ville sa statue de Jeanne d’Arc, et d’en rembourser le paiement de 170.000 euros. Pourtant, la statue était plutôt réussie. Mais voilà : un élu local a jugé bon de pointer […] ⌘ Read more

‘I feel utter anger’: from Canada to Europe, a movement to boycott US goods is spreading
In Canada, where the American national anthem has been booed during hockey matches with US teams, a slew of apps has emerged with names such as “buy beaver”, “maple scan” and “is this Canadian” to allow shoppers to scan QR barcodes and reject US produce from alcohol to pizza toppings. In Sweden, more than 70,000 users have joined a Facebook group calling for a … ⌘ Read more

Framework Unveils $2,000 Non-Upgradable “AI” PC
Listen now (18 mins) | The company made popular by making modular laptops now makes a desktop with soldered-on RAM. ⌘ Read more

10 War Relics with Fascinating Stories
War has always been unavoidable. Evidence of warfare stretches from ancient times to at least 10,000 years ago. Anyone who wants to learn about history or humans has to know about the series of wars that shaped our civilization. Most people generally avoid thinking, seeing, and reading about such things. But sometimes, we’re urged to […]

The post [10 War Relics with Fascinating Stories](https://listverse.com/2025/02/24/10-war-relics-with-fascinating-stor … ⌘ Read more

Gróf Rudolf Chotek st. a Futocké panstvo
Gróf Rudolf Chotek st. sa narodil 12. februára 1822 v Miláne a zomrel 3. decembra 1903 počas návštevy svojho rozsiahleho a hospodársky veľmi vyspelého panstva vo Futogu. K panstvu Futog patrili osady Starý Futog, Nový Futog, Begeč, Hložany, Petrovec, Kysáč a Rumenka. Osobitným panstvom bol Čerević a k nemu patriaci Neštin a Banoštor. Išlo tu približne o 30.000 k.j. pozemkov. O vysokej vyspelosti panstva svedčí údaj spred 140 rokov, podľ … ⌘ Read more

Erlang Solutions: DORA Compliance: What Fintech Businesses Need to Know
The Digital Operational Resilience Act (DORA) is now in effect as of 17th January 2025, making compliance mandatory for fintech companies, financial institutions, and ICT providers across the UK and EU. With over 22,000 businesses impacted, DORA sets clear expectations for how firms must manage operational resilience and protect against cyber threats.

As cybercriminals become more sophisticated, regul … ⌘ Read more

Godot Game Engine Went Woke… And Lost $160,000 Per Year.
A few months ago, the Open Source Godot Game Engine enacted a mass “cleansing” of Non-Woke supporters. Then their monthly donations dropped by over 25%. ⌘ Read more

Operating System in 1,000 Lines – Intro
Article URL: https://operating-system-in-1000-lines.vercel.app/en

Comments URL: https://news.ycombinator.com/item?id=42631873

Points: 513

# Comments: 56 ⌘ Read more

El análisis de Domingo Soriano: Casi 100.000 personas tienen tres o más trabajos
Dieter comenta con Domingo Soriano la necesidad del pluriempleo por el aumento de precios, el número real de parados, y la emisión de deuda del Tesoro ⌘ Read more

**(#7yfkzjq) * Page size 1MB

• Median 50 pages per query
  

• 80% pages cached
  

• 200us SSD reads
  

• 100us Memory reads
  

• Query time:
  

  • (50x0.80x10 …**
    

• Page size 1MB

• Median 50 pages per query

• 80% pages cached

• 200us SSD reads

• 100us Memory reads

• Query time:

  • (50x0.80x100)+(50x0.20x200)‎ = 6,000

  • 6000us

  • 6ms ⌘ Read more

El análisis de Domingo Soriano: El paro baja, pero la Seguridad Social pierde más de 30.000 afiliados
Dieter comenta con Domingo Soriano los datos de empleo, las consecuencias de la subida del SMI y la contratación de repartidores por parte de Glovo. ⌘ Read more

**(#pldqlcq) My solution to:

How much will the storage of logs cost for a standard, monolithic 100,000 RPS web application?

• 512 bytes logge …**
  My solution to:
  

How much will the storage of logs cost for a standard, monolithic 100,000 RPS web application?

• 512 bytes logged per request

• 100,000 RPS

• ~50MB/s

  • ~4TB/day
    

• $0.02/GB Blob Storage

  • $0 ingress
    

• 90 days retention

  • ~400TB

  • $8k Blob Storage

• Costs:

  • ~$88/day

  • ~$2.6k/month

  • ~$32k/year ⌘ Read more

**(#pldqlcq) A reminder of the problem:

How much will the storage of logs cost for a standard, monolithic 100,000 RPS web application?**
A reminder of the problem:

How much will the storage of logs cost for a standard, monolithic 100,000 RPS web application? ⌘ Read more

**Problem 1: How much will the storage of logs cost for a standard, monolithic 100,000 RPS web application?

#napkin-math**
Problem 1: How much will the storage of logs cost for a standard, monolithic 100,000 RPS web application?

#napkin-math ⌘ Read more

@doesnm@doesnm.p.psf.lt up to you. I have mine to rotate at 1,000 twtxts. I have vomited over 400, so far. I have some way to go till rotation. :-D

CNCF and Andela Announce Partnership to Train 20,000+ African Tech Professionals
The partnership will upskill African tech talent on Kubernetes basics; extend opportunity as global borderless workforces grow Salt Lake City, UT. – KubeCon + CloudNativeCon North America – November 15, 2024 – The Cloud Native Computing Foundation® (CNCF®),… ⌘ Read more

KubeCon + CloudNativeCon North America 2024 Day One: Keynotes, sessions, announcements and more
More than 9,000 people convened at the Salt Palace Convention Center in Salt Lake City for the first day of KubeCon + CloudNativeCon North America. The mood was energetic and lively and the audience was primed… ⌘ Read more

International retailers fly into WA to learn more about avocados as export demand grows
Last financial year Western Australia produced a record volume of more than 65,000 tonnes of avocados, representing 44 per cent of the total volume grown in Australia. ⌘ Read more

[ANN] The MAGIC Monero Fund received a new grant application: ‘Monerotopia Buildathon 2024’

Deverick is asking for 4,000 USD to host a hackathon/buildathon to improve Monero integration in the BTCPay self-hosted merchant payment system, especially with BTCPay 2.0 coming up. Community feedback on this idea is appreciated :D

Link: https://github.com/MAGICGrants/Monero-Fund/issues/37

@r​ucknium:monero.social ⌘ Read more

Facebook Developed Custom Portal to Help Biden Administration Censor Americans
All while storing your password as plain text, accessible to 20,000 Facebook employees. ⌘ Read more

‘God-like’ coding educator accused of harassment
More than 200,000 students went through Grok Academy’s classes last year, and now nine women have accused its CEO of misconduct. ⌘ Read more

How students teamed up to decode 2,000-year-old texts using AI
Students used GitHub Copilot to decode ancient texts buried in Mount Vesuvius, achieving a groundbreaking historical breakthrough. This is their journey, the technology behind it, and the power of collaboration.

The post How students teamed up to decode 2,000-year-old texts using AI ap … ⌘ Read more

Mango lovers get ready, Darwin is forecast to produce 2.4 million trays this season
Mango season in the Northern Territory is starting to heat up, with 24,000 trays sent to markets last week and future yields looking good. ⌘ Read more

Chute de l’immobilier : dégâts d’une bulle
Un article de Henry Bonner Les Bourses autour du monde reprennent leur hausse, le marché a confiance dans les baisses de taux d’intérêt en vue par la Réserve fédérale. L’once d’or atteint un record à plus de 2.500 $. Le Bitcoin, de même, grimpe à 57.000 euros, il approche du record de 64.500 euros de […] ⌘ Read more

@New_scientist@feeds.twtxt.net It’s great that US regulators have approved launching 40,000 satellites with a 5-year lifespan before we had this kind of information about what’s likely to happen when they start falling out of orbit at a rate of several per hour.

There is a bug in yarnd that’s been around for awhile and is still present in the current version I’m running that lets a person hit a constructed URL like

YOUR_POD/external?nick=lovetocode999&uri=https://socialmphl.com/story19510368/doujin

and see a legitimate-looking page on YOUR_POD, with an HTTP code 200 (success). From that fake page you can even follow an external feed. Try it yourself, replacing “YOUR_POD” with the URL of any yarnd pod you know. Try following the feed.

I think URLs like this should return errors. They should not render HTML, nor produce legitimate-looking pages. This mechanism is ripe for DDoS attacks. My pod gets roughly 70,000 hits per day to URLs like this. Many are porn or other types of content I do not want. At this point, if it’s not fixed soon I am going to have to shut down my pod. @prologic@twtxt.net please have a look.