正在加载视频...

视频加载失败

#HuntingTipOfTheDay: folders with trailing spaces can be created on Windows, and they cause trouble: 🔴 Hard to delete/rename 🟠 Can hide files when same folder w/o trailing space exists 🟡 May enable UAC bypass(see next tweet) 🔍 Hunt for paths with trailing spaces - highly sus

11,433 次观看 • 1 年前 •via X (Twitter)

2 条评论

Wietze 的头像
Wietze1 年前

UAC bypass can be achieved by eg moving the legit perfmon.exe and an evil atl.dll to "c:\windows \system32". Windows is tricked into thinking it's a safe/trusted directory, meaning perfmon will launch with high integrity and also loads your DLL. Several other EXEs are vulnerable!

ljtron 的头像
ljtron1 年前

Interesting my dad always hounded me for using spaces in files and folders but I never knew why.

相关视频

I'm using macOS for more than 14 years now, in a single laptop screen setup with lots of windows open, and I'm using macOS spaces everyday to organize my windows. Switching between spaces is easy: I hit CTRL+arrow left/right, it takes no time. What takes time however, is this macOS-native transition animation that takes a bit less than 1 second, for every single space switch. I've checked everywhere in macOS settings, asked friends with the same problem, and there's just no setting to disable this effect (even with Reduced Motion ON in Accessibility settings). This UX choice from Apple alone costs me days of my time every year, as I'm working non-stop on my SaaS business for 10h a day 5-6 days a week (Crisp for those who know about it!). I calculated that with my daily use of macOS spaces, in 6 months I'd perform 100,000 switches, which costs me the same in seconds waiting for the transition to complete. This represents almost 28 hours waiting. In 1 year, I'd have lost 2.4 days just... waiting! The Hack Fortunately, some other open-source projects discovered a hack not so long ago, which allows disabling the transition when switching spaces: it involves sending to the system a "fake" trackpad left/right swipe gesture that's faster than what's expected (faster than what a human can input via the Macbook's trackpad). Above some threshold, macOS just perform the space switch with absolutely no transition. A friend of mine, Yaël 🛸, made a quick prototype in Objective-C, and it magically worked! The Solution So, I asked my friend if we could make it a proper macOS app together, in a beautiful minimalist package, and he said yes! So, we launched Space Rabbit, a tiny 2MB fully native macOS app, that allows you to optimize macOS spaces for productivity! Space Rabbit is a full rewrite of the initial prototype in modern Swift, with a tray menu bar to configure the app, and a settings window, in a macOS app packaging. Space Rabbit can be downloaded right here: We just released V2 of the app last week, fixing a ton of little bugs, especially for dual screen setups. It's actively maintained to this day as it's my daily driver. The app is open-source: and will always be free, as it's helping improve our productivity in our daily Web Dev tasks for our main businesses. We'll be happy to implement more features from user requests, if you find this app useful and use it daily!

Valerian Saliou

219,111 次观看 • 23 天前

⚠️ A defense evasion tool called ExEngine is being sold as a service, marketed as an AV/EDR killer that disables mainstream consumer security software including Windows Defender, Malwarebytes, Bitdefender, and Avast. The tool combines AV termination with a Ring-3 rootkit, UAC bypass, and decoy payload delivery to support stealthy initial access operations. ⠀ ‣ Threat Actor: ryewx1 ‣ Category: Defense Evasion Tool / Killer ‣ Offering: ExEngine AV/EDR Killer ‣ Industry: Malware Tooling ⠀ The seller claims ExEngine actively terminates security software rather than only obfuscating payloads, granting attackers a longer window of undetected operation. The tool supports Windows 10 and 11 builds and is sold per-build at $150 to $250. ⠀ Advertised capabilities: ⠀ ▪️ AV/EDR termination with primary and fallback techniques ▪️ UAC bypass with automatic privilege escalation ▪️ Ring-3 rootkit functionality to hide files, processes, registry keys, and network connections ▪️ Discord webhook logging for victim machine info and execution status ▪️ Secondary decoy payload (game/document/installer) to keep targets unaware ▪️ Persistence across reboots and logouts ▪️ Anti-VM and anti-debug detection with fake error message exit ▪️ Universal Windows 10/11 support, all payload types ⠀ Risk to defenders: ⠀ ▪️ Active termination of consumer AV products including Windows Defender means traditional endpoint protections cannot be relied on once ExEngine executes successfully ▪️ Decoy payload pattern is designed to delay user-driven incident reporting, lengthening attacker dwell time ▪️ Ring-3 rootkit hiding of files, processes, and network connections complicates incident response triage on compromised hosts ▪️ Discord webhook telemetry indicates the operator is targeting consumer and SMB victims at scale rather than running individual targeted campaigns ▪️ Sold per-build at low cost ($150 to $250), making it accessible to low-skill operators who can pair it with commodity stealers, RATs, or loaders

Dark Web Informer

23,567 次观看 • 3 个月前

No one seemed to want to answer the important question regarding the M&S in Colchester. Are there any spaces just for men or just for women or are they all "gender neutral"/Mixed Sex? So I rang them. The woman in the recent video said they were "breaking the law". They aren't. Marks and Spencer told me that they have 6 changing spaces LOCATED within the Men's dept. 6 spaces LOCATED within the women's department. All 12 are mixed sex and available to everyone. They are not marked as single sex spaces because they aren't single sex. Audio recording below. I did not give Yvonne the customer services representative a hard time because I was not making a complaint, I was getting clarification and info about the store's changing provision and she is not responsible for producing Marks and Spencer policy. The company policy dictating this mixed sex changing arrangement throughout the store is legal. This is the entire problem. Women have been misled to think single-sex changing spaces have now been returned to them. That would be a lie. Marks and Spencer and others can continue to provide spaces unacceptable and unsafe to women. They can do it within the remit of the Equality Act. For women to be safe there needs to be a change to the law which insists on women having single sex space to change or go to the toilet. That has not been achieved by any court ruling or guidance around the Equality Act and GC groups who mostly applauded the recently released 'Code of Practice' know this because they are stuffed full of lawyers. The man in the video may have terrible customer service skills, he may even be prejudiced against women with GC views, but the policy is legal. Grassroots activism on behalf of women might eventually force a change from providers. It is probably all that could, because the Equality Act remains rigidly against us. Yet the grassroots have previously been frowned upon and sneered at for our shouty ways while the GC Suits "handle everything professionally". The woman in the store accused a man of "breaking the law" which he wasn't. Now we have one of the Sex Matters lawyers exposing that employee's details online. What a mess.

Jean Hatchet

93,624 次观看 • 3 个月前

Look ma new Codex Updates! 0.119.0 and 0.120.0 are here. And with it, a HUGE number of quality of life updates and bug fixes! > Hooks now render in a dedicated live area above the composer. They only persist when they have output, so your terminal stays clean. If you're running PreToolUse or PostToolUse hooks, this is a huge readability win. > Hooks are now available again on Windows > CTRL+O copies the last agent output. Small but clutch when you're pulling a code block into another file or chat. > New statusline option: context usage as a graphical bar instead of a percentage. Easier to glance at mid-session when you're trying to gauge how much runway you have left. > Zellij support is here with no scrollback bugs. If you've been stuck on tmux just because Codex was broken in Zellij, you're free now (shout out Felipe Coury 🦀) > Memory extensions just landed. The consolidation agent can now discover plugin folders under memories_extensions/ and read their instructions.md to learn how to interpret new memory sources. Drop a folder in, give it guidance, and the agent picks it up automatically during summarization. No core code changes needed. This is the first real extension point for Codex's memory system, and it opens the door for third-party memory plugins. > Did you know, you can /rename a thread? But what's really cool about that is, after you rename it, you can resume it with the same name, no more UUIDs. codex resume mynewapp or directly from the TUI: /resume mynewapp > Multi agents v2 got an update to tool descriptions More reliable multi agent environments and inter agent communication > You can now enable TUI notifications whether Codex is in focus or not. Modify this in your config: [tui] notification_condition = "always" > MAJOR overhaul to Codex MCP functionality: 1. Codex Tool Search now works with custom MCP servers, so tools can be searched and deferred instead of all being exposed up front. 2. Custom MCP servers can now trigger elicitations, meaning they can stop and ask for user approval or input mid-flow. 3. MCP tool results now preserve richer metadata, which improves app/UI handoff behavior. 4. Codex can now read MCP resources directly, letting apps return resource URIs that the client can actually open. 5. File params for Codex Apps are smoother: local file paths can be uploaded and remapped automatically. 6. Plugin cache refresh and fallback sync behavior are more reliable, especially for custom and curated plugins. > Composer and chat behavior smoother overall, resize bugs remain though. > Realtime v2 got several significant improvements as well. > You're still reading? What a legend. 🫶 npm i -g @openai/codex to update

am.will

742,298 次观看 • 4 个月前

On October 17th, Vancouverites will be asked: 1. Should Vancouver strengthen its laws to forbid open-air hard drug use in public spaces? What would actually change with a YES vote on Question One? It would give police another tool to address open-air hard drug use in Vancouver’s shared public spaces. As Mayor Ken Sim explains, the City already sets reasonable expectations around public behaviour. Under Health By-law 9535, we regulate where people can smoke and other activities that impact everyone’s ability to safely enjoy our public spaces. A YES vote would give Vancouver a clear mandate to apply that same basic principle to open-air hard drug use. If someone is openly using fentanyl, meth, heroin or crack in a park, on a sidewalk on the Granville strip or in another shared public space, officers would have stronger tools to intervene, including directing people to stop or move along. And, unlike now, where appropriate, officers could seize the illegal drugs. That matters. It gives officers another practical enforcement option to address the behaviour without making criminal prosecution the only tool available. This isn’t about criminalizing addiction. It’s about re-establishing social expectations that open-air hard drug use is not acceptable in our shared public spaces, while getting people suffering from severe addiction and mental illness better access to treatment and recovery. This is tangible change. On October 17th, you will have your voice heard. Vote YES for tangible change in public safety and healthcare. #ABCVancouver #PublicSafety #Vancouver

Mayor Ken Sim

17,045 次观看 • 9 天前

This World Cup has shown how Argentinian players are just built different, and it was interesting because, in the press conferences, both managers addressed this. First, Tuchel talks about the Argentinian value of the ball and how they protect the ball at all costs, how they manage those small spaces, and how they learn this from a young age. He references culture, and this is exactly it. A child playing in a certain environment leads to that. Not every Argentinian child is on the national team, but it raises the ceiling. It creates a certain type of style and a certain type of player. Then Scaloni also references his culture. He sees them play without fear of losing. It comes from playing in an environment where you are constantly faced with the potential of losing and being able to play with that pressure, right? They don’t fight against it. They play with it. They use it. And I think this is where youth football coaches should really take note. This does not mean we should copy and paste Argentinian culture into every training environment, because culture cannot just be copied. But the values within that culture can be inculcated in every training environment. The value of the ball. The courage to receive it in small spaces. The ability to protect it under pressure. The confidence to keep playing after a mistake. The willingness to play with the possibility of losing rather than constantly trying to avoid it. Those values can become part of the environment we create every day. They can be present in the games we design, in what we praise, in what we allow players to struggle with, and in how we respond when they lose the ball. If every mistake leads to the coach stopping the session, giving the answer, or taking the pressure away, then players never learn to play with that pressure. They learn to wait for the coach. It was cool to see how two managers, at such a big stage, reference culture and the environments that kids play in when they’re young. Because the players we see on the biggest stage were not only created by tactics or coaching information. They were created by environments that taught them what to value, how to relate to the ball, and how to play when there was something to lose.

David Garcia

170,334 次观看 • 1 个月前

⚡ My first advanced simulation with Grok 3! Finally your OS windows act like REAL windows 🤣 As you know, I've spent more than 2 years sharing all kinds of simulations and mini-games made with Claude, ChatGPT (o3-mini-high), etc. It’s been ages since I last wrote a single line of code. But pretty often, once you hit over 1,000 lines, it turns into a debate against the LLM and you frequently get stuck in a loop that’s hard to break out of. Everyone was raving about Grok 3’s ability to generate code, but until now, I hadn’t really put it to the test. So I decided to challenge it with a prompt that both ChatGPT and Claude were seriously struggling with (debate loop). The initial prompt was: "Use Python and a 2D physics library to create a world where I can generate different static objects like squares, triangles, circles and rectangles. I should be able to move them with the mouse, rotate, scale, and delete them. The cool part is that we’ll see this world through 1 to N operating system windows. In other words, the windows will be like real windows! When one of these windows is active and I hit the spacebar, balls affected by physics should appear and interact with the static objects. You can start with placeholders, but later I'll send you a series of PNG images so they all become beautiful sprites." After a few iterations, I got the result you see in the video. Insane, right? 🤯 Now, with Grok, we have the power to create anything that pops into our mind with just a couple of prompts. It’s mind blowing. Ever since I was 9 and messing around with BASIC on my MSX, I've been hooked on visual simulations... And now I can create them using nothing but natural language. It's f***** amazing that we're living in this historic moment!

Javi Lopez ⛩️

209,470 次观看 • 1 年前

Hexagons and Octagons Those who follow football and coaching will be well aware that there are trends that emerge and become the great break through in coaching, only to vanish quite quickly. A few stick around and become a staple. Such as the rondo, or the 4v4+4 Guardiola rondo variation. One that did not stick around in the coaching collective consciousness that possible should have was Thomas Tuchel’s use of hexagonal and octagonal playing areas in training sessions. Tuchel explained that cutting off the corners and angling the pitch forced “sharp diagonal” passes that would help break the press. The positioning of players outside the hexagon/octagon or players close to the edges will be manipulated into an open body shape by the angles of the pitch. Players are impacted by environmental constraints and embodied cognition, where the geography of the playing area influences their actions. This influence spreads to the creation of triangles and diamonds within the playing area due to the “funnel” like nature of the playing area. We can use the cut outside angles by placing bounce or target players on the exterior, influencing the movement and organisation internally. The inside players will not have to move wide as those areas are occupied. The internal players will seek to create passing angles using the positioning of the outside players and their internal team mates. The diamonds and triangles will appear. If we leave the spaces on the outside empty players can move to fill the spaces. These act as free spaces to receive from the goalkeeper or open spaces for attackers to overlap into, encouraging attacking combination play and crosses. A different way of using the space is to remove goals and goalkeepers from the ends and place bounce/target players on the outside. Players now can combine with the outside players, when they do so they are then free to finish into the outside goals. The condition can be extended to combining with the target player in the opposite side of the pitch before scoring, adding an element of switching play. The hexagon and octagon are versatile spaces that help to replicate aspects of the game. By funneling the spaces we impact players body shape, ability to play forward quickly, team shape (or small group shapes), players cutting in, defending centrally, the types of combination used and the angles of line breaking pass (diagonals). The angles are hugely significant for teams that value combinations and possession football, Straight passes and receiving angles are much easier to intercept and carry high risks for being counter attacked. Short diagonals can bypass players and attacking shapes, creating angled connections. If an angles pass is given away there is still a risk of being counter attacked but there is more chance of having players around the ball to regain possession. To counter press. The question that emerges is should we then be using hexagons and octagons more? If they are of greater benefit than squares and rectangles, why use them? Should all pitches, including those of a small sided nature be hexagonal? Can the rondo square be replaced by the rondo octagon?

TheBeardedCoach

13,461 次观看 • 6 个月前