Technical Advisory: OpenClaw Exploitation in Enterprise Networks The promise of autonomous AI agents is rapidly turning into a security beachhead for initial access.

Yikes! One big attack surface.

alt text:

“Protip: alias sudo to ‘please’ for a much more wholesome Unix experience”

Need.

I’d vote for 6. Title 1 is my favorite but it could land you in hot water teaching at a public institution under this administration.

Lastly, for Co-Pilot:

display: none;

CSS did the trick. How does a multibillion dollar company with leading accessibility research completely abandon users of a product that is for enterprise company.

None of this is #WCAG complaint. Do better and stop forcing users to self accommodate

I was able to make it accessible for me by altering the Z-Index of these elements.

The site performs poorly with dark reader so I went with a simple css solution for dark mode:

html { filter(90%); } seemed to do the trick.

I’ve tried using extensions to hide them from the DOM, but due to dynamic class naming schemes in react for the least desirable features, they will eventually reappear.

I found the only solution is to use a custom style sheet and select on data-id (since it needs this consistent to work).

Copilot integration moves all of the communications around, preventing them from being interacted with properly until it is complete.

The number of times I’ve tried to open a note and then landed on a completely different page due to this is a menace.

These “features” cannot be disabled by users.

Is it just me or is Microsoft Dynamics CRM one big #A11Y fail? The teams button has a Z-Index of 1 and is jam packed with ARIA roles.

It grabs the keyboard focus on every page, preventing people who navigate with a keyboard from easily using the app.

There is no dark mode either.

Rant below:

Is it possible to self host with my own API keys?

GitHub - andrewpking/transgressionmapUI: UI for transgression map server UI for transgression map server. Contribute to andrewpking/transgressionmapUI development by creating an account on GitHub.

Finally got around to making a MVP that is not vibe coded. That was just a rapid prototype. github.com/andrewpking/...

I don’t have speakers but I wanted everyone to have sound. I had to learn how to setup sinks with pipewire so I could route the audio through two PS5 controllers. No need to edit configs.

I found a really good article on how to do this from the terminal. I can dig it up if anyone is interested.

A coworker told me about Pummel Party and I’m really enjoying this game. Great way to ruin your friendships 😂

A client at work showed me Windows + V keyboard shortcut for smart clipboard and my life will never be the same.

I don’t use windows on my personal computers and I’m curious if anyone has recommendations for clipboards on macOS (App Store) and Linux (flathub)?

recently my friend's comics professor told her that it's acceptable to use gen AI for script-writing but not for art, since a machine can't generate meaningful artistic work. meanwhile, my sister's screenwriting professor said that they can use gen AI for concept art and visualization, but that it won't be able to generate a script that's any good. and at my job, it seems like each department says that AI can be useful in every field except the one that they know best. It's only ever the jobs we're unfamiliar with that we assume can be replaced with automation. The more attuned we are with certain processes, crafts, and occupations, the more we realize that gen AI will never be able to provide a suitable replacement. The case for its existence lies on our ignorance of the work and skill required to do everything we don't. By magicmosshka, yesterday's

the discourse on what jobs are acceptable to replace with generative AI reveals a lot about what we think of other people's jobs

Google Has Chosen a Side in Trump's Mass Deportation Effort Google is hosting a CBP app that uses facial recognition to identify immigrants, while simultaneously removing apps that report the location of ICE officials because Google sees ICE as a vulnerable…

Google is hosting a CBP app that uses facial recognition to identify immigrants, while simultaneously removing apps that report the location of ICE officials because Google sees ICE as a vulnerable group. “Big tech has made their choice.”

www.404media.co/google-has-c...

The design seems well flushed out and I like the indicator light on the power button a lot. Definitely something I am curious about, despite typing faster on a touchscreen than mini QWERTY.

I was watching this with my boyfriend and his grandma. I burst out laughing at “Charlottes Weeb”.

Made my first #JIRA ticket today. Feeling pretty accomplished. Cant go into details but the investigation shows that I found something important!

Having react preinstalled instead of downloaded for each web page would increase page load speeds significantly. React + React-Dom compressed is around 40KB, which is several cycles over TLS.

Web performance would be improved a lot if PWAs could depend on react just being there preloaded.

Can’t wait for the next season!

#builtwithmapbox

Thank you! I just applied. :)

Commenting for visibility

Looks like I missed the deadline. Do you accept people who finished their degrees?

a cartoon character says " why are you so lame " ALT: a cartoon character says " why are you so lame "

I honestly am disappointed in myself.

@profanity.accountant have I been naughty this year?

Is there a free trial to see if this works for me?

Spent the day at a cafe yesterday putting together a roadmap. I think our dream will become real soon!

a woman is holding a pink burn book in her hands and saying `` you let it out , honey . write in the book . '' ALT: a woman is holding a pink burn book in her hands and saying `` you let it out , honey . write in the book . ''

Spill the tea! 🍵