Joel Margolis (teknogeek)

Yo, new big thing: Shift.
AI seamlessly integrated into your HTTP proxy.

Use cases:
"Take this JS and build the JSON request body"
"Fill in these IDs from my notes - UserA"
"Create a match and replace rule to turn on this feature flag"
"Generate a wordlist with all HTTP Verbs"

06.12.2024 15:38 — 👍 11    🔁 5    💬 1    📌 1

@orange.tw welcome!

28.11.2024 11:24 — 👍 31    🔁 5    💬 1    📌 0

A tutorial on how to write alt-text, with the famous "capybara with yellow fruits" as an example

Here’s some tips on how to design an alt-text

⬇️

16.11.2024 21:17 — 👍 13    🔁 5    💬 3    📌 0

Reverse Engineering iOS 18 Inactivity Reboot Wireless and firmware hacking, PhD life, Technology

How does the new iOS inactivity reboot work? What does it protect from?

I reverse engineered the kernel extension and the secure enclave processor, where this feature is implemented.

naehrdine.blogspot.com/2024/11/reve...

17.11.2024 21:42 — 👍 282    🔁 107    💬 12    📌 11

let wrapper = document.createElement("div") document.body.append(wrapper) let anchor = document.createElement("a") /*1*/ anchor.href = "//<style onload=alert()>" /*2*/ anchor.href = "<style onload=alert()>" /*3*/ anchor.href = "https://a.a/<style onload=alert()>" /*4*/ anchor.href = "https://a.1/<style onload=alert()>" /*5*/ anchor.href = "a:<style onload=alert()>" wrapper.innerHTML = anchor.href

Specification challenge! ☃️
Which (if any) of the href values (1-5) would pop an alert in this scenario?

🛑 No testing, just thinking!
⚠️ Warning: answers in comments

(bonus: why/why not)

18.11.2024 08:47 — 👍 14    🔁 3    💬 8    📌 1

I've made a start on one for the people I've found so far. Who else is good people to add?

go.bsky.app/NRP3ecE

28.10.2024 22:20 — 👍 36    🔁 19    💬 8    📌 1

TGIF y’all 🙏

25.08.2023 22:06 — 👍 0    🔁 0    💬 0    📌 0

this app reminds me of the old twitter, quite a nice change of pace

20.08.2023 16:50 — 👍 9    🔁 0    💬 0    📌 0