GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Notices by Morgan (kaidenshi@exquisite.social)

  1. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Tuesday, 05-May-2026 13:39:31 JST Morgan Morgan

    Holy shit, Microsoft. Whoever made this decision should be fired. Into the Sun.

    https://lemmy.world/post/46435614

    #infosec #facepalm #clowncar

    In conversation about 2 months ago from exquisite.social permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: lemmy.world
      Microsoft Edge loads all your saved passwords into memory in cleartext — even when you’re not using them; Microsoft will not fix, says the behavior is "by design" - Lemmy.World
      Hacker News [https://news.ycombinator.com/item?id=48012735]. > When you save passwords in Edge, the browser decrypts every credential at startup and keeps them resident in process memory. This happens even if you never visit a site that uses those credentials. > > At the same time, Edge requires you to re‑authenticate before showing those same passwords in the Password Manager UI — yet the browser process already has them all in plaintext. > > Edge is the only Chromium‑based browser I’ve tested that behaves this way. By contrast, Chrome uses a design that makes it far harder for attackers to extract saved passwords by simply reading process memory. > > It decrypts credentials only when needed, instead of keeping all passwords in memory at all times. App‑Bound Encryption (ABE) adds another layer by binding decryption to an authenticated Chrome process, preventing other processes from reusing Chrome’s encryption keys. > > Because of these controls, plaintext passwords appear only briefly during autofill or when the user views them, making broad memory scraping far less effective. The risk of keeping the passwords in cleartext in memory becomes evident in shared environments. > > If an attacker gains administrative access on a terminal server, they can access the memory of all logged‑on user processes. In the video the attacker has compromised a user account with administrative rights and is able to view stored credentials for two other logged on > > (or even disconnected) users with Edge running. I reported this to Microsoft, and the official response was that the behavior is “by design”. They have been informed that I would be sharing this as a responsible disclosure so users and organizations can make informed decisions > > about how they manage credentials. Last wednesday (April 29th) I disclosed this on BigBiteOfTech by Norway Simple, educational proof of concept [https://github.com/L1v1ng0ffTh3L4N/Proof-of-Concepts/tree/main/EdgeSavedPasswordsDumper], to show that the passwords are stored in cleartext in memory. Source [https://farside.link/nitter/L1v1ng0ffTh3L4N/status/2051308329880719730].
  2. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Friday, 24-Apr-2026 23:53:54 JST Morgan Morgan
    in reply to
    • Leah Rowe is not a Rowebot

    @libreleah @MaddieM4 Just under an hour on the main workstation. I think I'm ready to go all in on OpenBSD now. Thank you so much!

    In conversation about 3 months ago from exquisite.social permalink

    Attachments


    1. https://media.exquisite.social/exquisite/media_attachments/files/116/460/069/414/145/246/original/99569097b2bb3331.png
  3. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Friday, 24-Apr-2026 12:11:20 JST Morgan Morgan
    in reply to
    • Leah Rowe is not a Rowebot

    @libreleah @MaddieM4 Hell yes I'm about to chuck an SSD I found in my desk into my main workstation and start grinding away at it.

    In conversation about 3 months ago from exquisite.social permalink
  4. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Friday, 24-Apr-2026 08:18:03 JST Morgan Morgan
    in reply to
    • Leah Rowe is not a Rowebot

    @libreleah @MaddieM4 I backed up the package I built for safekeeping since it runs perfectly (actually a little faster than Firefox on the same machine). I tend to run -current so I'll just use your binary once it's merged.

    In conversation about 3 months ago from exquisite.social permalink
  5. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Friday, 24-Apr-2026 06:23:28 JST Morgan Morgan
    in reply to
    • Leah Rowe is not a Rowebot

    @libreleah @MaddieM4 Success! Damn it feels good to run this browser on this OS. Thank you so much Leah!!

    In conversation about 3 months ago from exquisite.social permalink

    Attachments


    1. https://media.exquisite.social/exquisite/media_attachments/files/116/453/683/670/214/627/original/15beca97b1b4e33b.png
  6. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Thursday, 23-Apr-2026 09:56:19 JST Morgan Morgan
    in reply to
    • Leah Rowe is not a Rowebot

    @libreleah @MaddieM4 Okay yeah this 35W CPU is...not fast. This will probably still be building when I go to bed in a couple of hours.

    But, this is the furthest I've gotten with it and assuming it builds correctly, tomorrow evening I'm backing up the main workstation and going full Puffy on the 5600GT. It should build in about 30 minutes on that relative beast.

    In conversation about 3 months ago from exquisite.social permalink
  7. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Thursday, 23-Apr-2026 09:12:50 JST Morgan Morgan
    in reply to
    • Leah Rowe is not a Rowebot

    @libreleah @MaddieM4 In other news, all dependencies satisfied on my current iteration, and the librewolf package officially started building at 20:08 local time. It's an HP mini pc with the i5-6600T so probably similar compile time to yours, if not a little slower. Fingers crossed!

    In conversation about 3 months ago from exquisite.social permalink
  8. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Thursday, 23-Apr-2026 09:07:43 JST Morgan Morgan
    in reply to
    • Leah Rowe is not a Rowebot

    @MaddieM4 @libreleah yep I saw that on the mailing list, I feel like that’s a sensible and efficient approach. I know Landry is not a fan of browser forks (reminds me of the Void Linux devs) but hopefully will be willing to work with you on it.

    In conversation about 3 months ago from exquisite.social permalink
  9. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Thursday, 23-Apr-2026 09:03:10 JST Morgan Morgan
    in reply to
    • Leah Rowe is not a Rowebot

    @libreleah @MaddieM4 That would be awesome and much appreciated! I still want to succeed at building it for my own personal achievement, but a pre-built package would be a boon to those of us who have been waiting years for a proper LibreWolf port. I feel like the intersection of OpenBSD enthusiasts and LibreWolf enthusiasts has to be wide and populous.

    In conversation about 3 months ago from exquisite.social permalink
  10. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Thursday, 23-Apr-2026 08:45:37 JST Morgan Morgan
    in reply to
    • Leah Rowe is not a Rowebot

    @libreleah @MaddieM4 Oh it's nothing wrong with your port, I just ran into issues building dependencies so I tried installing them as packages to both speed things up and avoid any compile issues, and that one package was being fiddly (the correct version from ports kept erroring out during compile, and (at the time I tried it the other day) the version in packages wasn't right).

    Trying again right now with a fresh install of -current on my most powerful dedicated OpenBSD machine, hopefully this time it's all in place and it builds successfully.

    In conversation about 3 months ago from exquisite.social permalink
  11. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Thursday, 23-Apr-2026 08:38:11 JST Morgan Morgan
    in reply to
    • Leah Rowe is not a Rowebot

    @libreleah @MaddieM4 May is great, happy birthday to me! I've been trying to get your port to compile on my secondary workstation here at the house but I'm still trying to figure out dependency stuff (I am in no way, shape, or form a developer). I think I've managed to tackle every dependency except icu-i18n. If I can't get it to build on my own I'll just use your -current port once it hits the tree since I tend to run -current anyway.

    In conversation about 3 months ago from exquisite.social permalink
  12. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Thursday, 23-Apr-2026 07:55:32 JST Morgan Morgan

    I am slowly coming to understand that the reason some applications crash often on OpenBSD is not the fault of OpenBSD, but the fault of poorly written applications that have tons of vulnerabilities. OpenBSD is designed to be a secure operating system as one of its main goals, and trying to circumvent these safety guardrails by "optimizing OpenBSD for desktop use" -- i.e. tweaking sysctl.conf to the max -- defeats the purpose of having the guardrails in the first place.

    If you want an OS where applications are free to roam full of holes and exploits without crashing, use Linux I guess. It will happily continue to allow those poorly written programs to run, giving the user a false sense of stability. Meanwhile, I'm starting to prefer safety and security over "desktop performance at all costs". If a program misbehaves it should die, and OpenBSD will kill it before I even know it misbehaved.

    #OpenBSD #ProactiveSecurity

    In conversation about 3 months ago from exquisite.social permalink
  13. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Thursday, 23-Apr-2026 07:52:00 JST Morgan Morgan
    • Leah Rowe is not a Rowebot

    @MaddieM4 I have OpenBSD running on a few devices, but my main desktop is Void Linux. When I finally move it to OpenBSD I won't even bother with a dual boot, I'll just go all the way. And I'm close. Really, really close! Honestly just waiting on the LibreWolf port being worked on by @libreleah to be accepted into ports and I'm there.

    In conversation about 3 months ago from exquisite.social permalink
  14. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Saturday, 18-Apr-2026 14:24:00 JST Morgan Morgan
    in reply to
    • Leah Rowe is not a Rowebot
    • James Vasile

    @jamesvasile @libreleah I hope whoever told you not to daily drive OpenBSD on a laptop is not still giving out advice, because that's absolutely garbage advice.

    OpenBSD is really, really good on Thinkpads, older Intel Macbooks (pre T2 era), and pretty much any standard Intel or AMD PC. Their fork of Xorg (Xenocara) is in the base installation and out of the box the only thing you have to do to get an X desktop is answer "yes" to the question in installation asking if you want one, or if you answered "no" during installation you can (as root) "rcctl enable xenodm" and reboot.

    OpenBSD is really good on the desktop because its developers run it as their workstations, i.e. they "dogfood" the OS so that they are able to see what is needed for all use cases and improve the OS accordingly.

    If you'd like to follow a guide to setting up an Xfce desktop on OpenBSD, I wrote one a while back: https://www.kaidenshi.com/posts/openbsd-as-a-daily-driver/

    ...and there are other guides out there as well.

    In conversation about 3 months ago from exquisite.social permalink

    Attachments


  15. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Sunday, 22-Mar-2026 19:48:21 JST Morgan Morgan

    My mind is blown. When I first got this HP hybrid tablet, one of the first things I tried was installing OpenBSD. However, the installer (7.8 amd64) would never boot all the way, rebooting the machine around the time it was detecting the CPU cores. I tried a lot of different Linux distros and other OSes, and eventually settled on Fedora KDE as it had complete support for the device, including the touch screen and digitizer pen, the detachable keyboard and its battery, and so on.

    Well today, in a fit of boredom, I flashed a USB drive with the OpenBSD installer and booted it on the tablet, and inexplicably it finished booting and got me to the installer prompt! Of course I immediately blew away the Fedora installation and installed and configured OpenBSD to my usual desktop, Xfce. I'm typing this now on the tablet, everything is working except it doesn't detect the secondary battery or the digitizer pen. I can live without the keyboard's battery gauge as it is always secondary to the tablet's battery anyway, and I never use the pen so that's no loss. No Bluetooth either but that's a given with OpenBSD on any hardware.

    Needless to say I am thrilled and amused, and I'm going to keep OpenBSD on this thing out of pure spite.

    #OpenBSD

    In conversation about 4 months ago from exquisite.social permalink

    Attachments


    1. https://media.exquisite.social/exquisite/media_attachments/files/116/270/254/867/375/583/original/808ad8a5af9ac392.jpeg
  16. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Wednesday, 17-Dec-2025 00:21:59 JST Morgan Morgan
    in reply to
    • Annika Backstrom

    @annika Such an underrated show! I've watched the whole series twice now, and it's one of those rare shows where nearly every episode is top notch, with only a few misses here and there.

    My favorite episode is the one with the skydiver, even knowing what happens on the second watch I still felt the pain of that poor woman grow worse with each iteration.

    In conversation about 7 months ago from exquisite.social permalink
  17. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Friday, 10-Oct-2025 08:01:11 JST Morgan Morgan

    My letter to #Framework about the recent news of their gleeful fascist alignment:

    Hello,

    I am writing to you as a formerly potential customer of yours. I've followed your company from the beginning, I adore the idea of user-repairable computers and you seemed to truly care about your customer base and any potential new customers.

    After seeing your company not only gleefully support the bigoted and fascist-aligned developers behind Omarchy and Hyprland, but to then double down and fully embrace the hatred and racism and sexism espoused by those devleopers rather than even entertain the notion that you may have made a mistake, makes me very uncomfortable and unable to support your company. I had planned to make my first purchase from you, a Framework Desktop mainboard, within the next couple of months to replace my aging AMD 5600GT based mainboard. Now that you have come out as fascist aligned and fully supportive of bigots and racists, I can no longer in good faith spend any money with you.

    I will now have to pay more to get a full PC from Minisforum or Geekom or another of your competitors, rather than replace just my mainboard and keep my existing case and power supply. You see, your active support of bigotry and hatred has a knock-on effect of causing more e-waste rather than less, which is against the mission statement you insist you believe in.

    Actions have consequences, and your company's actions surrounding this issue speak volumes about who you really are and what you really care about. While I am not directly affected by the words and actions of your new fascist friends, many of my friends and colleagues are BIPOC and/or LGBTQIA+ and/or immigrants, all of whom are targets for the hatred and violence of those you have aligned yourself with.

    Shame on you. Be better.

    In conversation about 9 months ago from exquisite.social permalink
  18. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Saturday, 07-Jun-2025 08:03:37 JST Morgan Morgan

    My i5-7500 e-waste* desktop has been in heavy OS rotation since I dragged it out of the closet to test Solaris (spoiler alert: wouldn't boot Solaris). So far I've successfully run OpenBSD, Haiku OS, NetBSD, and AlmaLinux Workstation on it. AlmaLinux is nice and all but not really suited to desktop use, it's definitely more of a server OS.

    So fellow OS nerds, what should I try to boot on it next? I'd like to try something I can "live in" for the weekend. Anything non-Linux would be awesome, as I already know it runs pretty much any Linux distro with no issues.

    *not Win11 supported so it was free

    In conversation about a year ago from exquisite.social permalink

    Attachments


  19. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Saturday, 26-Oct-2024 04:30:09 JST Morgan Morgan
    • Thom, a distro-agnostic tool

    Incredible thrift store #retrocomputing find on my lunch break today! A fully functional Palm m125 (curiously in a box for a m105) complete with docking station, official Palm folding keyboard and software, a retail copy of ThinkOffice, and a belt case, all for US$10!

    This is one of the few Palm models I didn’t own back in the day and I had to have it.

    @thomholwerda

    In conversation Saturday, 26-Oct-2024 04:30:09 JST from exquisite.social permalink

    Attachments


    1. https://media.exquisite.social/exquisite/media_attachments/files/113/368/895/084/663/143/original/1bed0e60a1103a38.jpeg

    2. https://media.exquisite.social/exquisite/media_attachments/files/113/368/895/082/446/760/original/72757cc9be33d71d.jpeg
  20. Embed this notice
    Morgan (kaidenshi@exquisite.social)'s status on Monday, 17-Jun-2024 21:21:32 JST Morgan Morgan

    Now that I'm living alone for the first time in 11 years, I've come to the conclusion that I have WAY too many computers. I currently have (in a working state) four laptops (Macbook Air, Dell garbage laptop, HP garbage laptop, glorious Lenovo Thinkpad T420 with ALL the upgrades), three desktops (AsRock A300 mini PC, MeLE Quieter 4C, Mac Studio), three thin clients (HP T620, one converted to retro gaming PC, one converted to router, one doing nothing), a Steam Deck, and a Surface Go 2 running OpenBSD. I'm not including a significant number of Raspberry Pi boards all doing various things (and a few sitting in a drawer waiting to be used).

    I need help. Serious help. I'm going to sell or give away all of them except the one AMD mini PC, the Macbook, and the Steam Deck. Selling the Mac Studio because it was stupid expensive even used and I want to recover that money. But the rest are up for grabs for any Fedi folks who need a development platform or just need a computer of some sort because theirs died or something. You cover shipping from Atlanta GA USA and you can have it. Priority will go to anyone wanting something for #OpenBSD development/research but I won't discriminate beyond that.

    Again, I am serious. Hit me up folks!

    In conversation Monday, 17-Jun-2024 21:21:32 JST from exquisite.social permalink

User actions

    Morgan

    Morgan

    OpenBSD nerd, open source hardware and software fan, retrocomputing enthusiast, Haiku OS evangelist, tinkerer, filthy casual gamer, goofball. One day I'll start writing again. He/him. Proudly anti-fascist. Trans rights are human rights. No hate, only love! Profile pic by @JgbirdHeader image by Carlos Lopez Castillon (https://pixabay.com/users/magocarlosyo-19404921/)

    Tags
    • (None)

    Following 0

      Followers 0

        Groups 0

          Statistics

          User ID
          265743
          Member since
          17 Jun 2024
          Notices
          20
          Daily average
          0

          Feeds

          • Atom
          • Help
          • About
          • FAQ
          • TOS
          • Privacy
          • Source
          • Version
          • Contact

          GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

          Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.