今日已更新 144 条资讯 | 累计 34428 条内容
关于我们

标签:#r

找到 29343 篇相关文章

开发者

The Key That Unlocks Everything: Prototype Pollution in JavaScript

Imagine a hotel where every room key is cut from a master template. When a guest checks in, the front desk hands them a key that opens only their room. Simple enough. Now imagine a guest who, during check-in, sneaks a tiny modification into the key-cutting machine itself — changing the template so that every new key cut from that moment on also opens the manager's office, the safe, and the server room. The guest didn't break a lock. They didn't clone anyone's key. They changed the factory that makes all keys. That factory is JavaScript's Object.prototype . And the attack is called Prototype Pollution .

2026-07-12 原文 →
开发者

Ask HN: Why isn't Google indexing information about the AT Protocol?

I've been observing this for a while, where very basic queries about atproto stuff doesn't show up. But yesterday I found a query that makes it VERY obvious: "list of public atproto relays". Here's DuckDuckGo: 1. https://firehose.directory 2. https://atproto.at/relays 3. https://atproto.wiki/en/wiki/reference/core-architecture/relay 4. https://pulsar.feeds.blue 5. https://leaflet.pub/12022731-ae4f-4a13-9f7a-5738b7a83c2e Of those results, Google only has 3, the only one on the list that... doesn'

2026-07-12 原文 →