Hacker News: exploraz

New comment by exploraz in "An image can overflow"

exploraz — Sun, 16 Aug 2026 12:27:27 +0000

Other hypotheses:

- VPN/Proxy/Datacenter IP/Tor usage

- Censorship bypass tools triggering destination server's firewall (suspicious TLS fingerprint or connection characteristics, or bad proxy IP)

- Bad ISP (e.g. one ISP IP address or range of addresses shared by so many users that could create collateral damage if one or more user gone rogue)

- Actual botnet/hidden residential proxy exit node on the same IP/local network (e.g. TV boxes or SDKs embedded inside apps that users are not aware of)

- Strict privacy settings (unlikely to cause 403 straight away), or obscure browsers (also unlikely, but can trigger firewall because of connection fingerprint/characteristics)

- Actual bad behavior (scraping, etc)

New comment by exploraz in "An image can overflow"

exploraz — Sun, 16 Aug 2026 11:17:19 +0000

Still working for me, your IP or browser request might be flagged by their firewall or anti-bot protection

New comment by exploraz in "An image can overflow"

exploraz — Sun, 16 Aug 2026 05:23:54 +0000

Okay, I've figured it out, thanks to the "test distros online" thingy to test version 145 and 148 as I previously mentioned.[0]

From Firefox 148 release notes for developers:[1]

> The overflow, overflow-x, and overflow-y CSS properties can now be used on replaced elements such as images, in the same way that they are used with other elements. Prior to this, replaced elements were always clipped to their bounding container. (Firefox bug 1999100).

[0]: https://news.ycombinator.com/item?id=49272986 [1]: https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Rel...

New comment by exploraz in "An image can overflow"

exploraz — Sun, 16 Aug 2026 05:17:52 +0000

Works for me on FF stable 148.0, 153.0.4, but does not with FF 145.

LocalSend v1.18.0 and v1.18.1 Released

exploraz — Thu, 13 Aug 2026 13:57:30 +0000

Article URL: https://github.com/localsend/localsend/releases

Comments URL: https://news.ycombinator.com/item?id=49286066

Points: 4

# Comments: 0

This Month in Ladybird – July 2026

exploraz — Tue, 04 Aug 2026 10:48:51 +0000

Article URL: https://ladybird.org/newsletter/2026-07-31/

Comments URL: https://news.ycombinator.com/item?id=49166783

Points: 30

# Comments: 6

New comment by exploraz in "NPM publish-time malware scanning and dual-use metadata"

exploraz — Wed, 29 Jul 2026 13:06:05 +0000

Earlier: https://news.ycombinator.com/item?id=49092172

Registration of new accounts to the Arch AUR reopened with hardened requirements

exploraz — Sun, 26 Jul 2026 11:23:47 +0000

Article URL: https://lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/message/TT3OCFFNM6SBMUBKIVTHTKA6UZJNMXIJ/

Comments URL: https://news.ycombinator.com/item?id=49056968

Points: 6

# Comments: 2

7-Zip XZ Decompression Heap-Based Buffer Overflow RCE Vulnerability

exploraz — Tue, 21 Jul 2026 13:46:23 +0000

Article URL: https://www.zerodayinitiative.com/advisories/ZDI-26-444/

Comments URL: https://news.ycombinator.com/item?id=48992294

Points: 4

# Comments: 1

New comment by exploraz in "Mangrove Reviews – Read and Write Reviews/Ratings (Open Reviews Association)"

exploraz — Tue, 21 Jul 2026 12:55:36 +0000

Found this open reviews platform while reading the 2026-07-16 CoMaps update change log,[1] which at a glance is a nice addition to CoMaps (still WIP I think).

[1]: https://codeberg.org/comaps/comaps/releases/tag/v2026.07.16-...

Feature request tracking: https://codeberg.org/comaps/comaps/issues/556