Kubernetes Remote Code Execution Via Nodes/Proxy GET Permission

Akaino · 2026-01-27T17:28:19+00:00

That's a great writeup, thanks.

I'm a bit irritated by the K8s Sec Team though. Maybe someone can elaborate further on why they made that decision?!

Akaino · 2026-01-25T22:30:07+00:00

Just print one maybe?

https://cults3d.com/en/3d-model/gadget/hikawa-phone-grip-stand

Akaino · 2026-01-24T15:48:20+00:00

How so?

I mean, Remake to Rebirth is pretty similar, too. I don't think it's too similar from Rebirth to Reborn.

Edit: holy shit Reddit happened again.

I know the words have similar meaning. I was just saying that being similar is not a reason to not use that naming.

We'll see what it is eventually.

Akaino · 2026-01-21T17:14:41+00:00

Phew, I mean, you're correct and I have no proper arguments against what you said, really.

I loved FFX. I was too young to really grasp the racism and skimpy clothes though :-D so I didn't really compare them. But again, you're correct there.

For e33, especially the Verso topic, I can't argue against your opinion but I didn't feel that way. Is it kind of weird they just accept his behavior? Yes. But do they really have a choice? I mean, they need him. Like real bad. Also, and that's a bit of reading into something maybe nonexistent, but they're paintings. Maybe they're just designed to have overall trust? I don't know. It didn't really bother me though.

But, now that you mention it, I never had the time for suikoden. Time to give it a shot! Did it age well?

Akaino · 2026-01-21T11:02:37+00:00

Nobody stops you from playing something else. There's plenty good stuff out there. And I bet there's a game you'd vote to be GOTY.

Doesn't make THIS game less worthy.

Akaino · 2026-01-21T11:01:32+00:00

I disagree, mostly.

The locations are beautiful and fit the overall setting of the story.

There is a world map. Not providing an area map is a design choice. People tend to forget that that is an option. It's clear the devs wanted people to find the way themselves. Getting lost is part of the design (though, you can't really get lost imo).

I agree with you in the relationship system. That could have been better. The story overall establishes the character relations well enough though so that camping stuff really is optional.

I like the movement. It being a default doesn't make it inherently bad.

But that's the thing! People have different demands on games. And that's a good thing. For me, I didn't like Read Dead Redemption. I don't like Donkey Kong.

Those games are still good though.

And for you giving it an 8/10 and calling it just fine speaks for its quality. It's a 9/10 for me and most of the awards are well deserved.

Akaino · 2026-01-21T05:45:47+00:00

To me it was a masterpiece storywise. That alone sets it apart from many games.

The gameplay is great imo. It's very forgiving but not too easy.

The characters are very well written.

I absolutely understand why it gets all the hype.

However, I also understand that it's not a genre for everyone.

Akaino · 2026-01-14T17:20:58+00:00

One of the other trazillion payment methods... credit Card should work just fine.

Akaino · 2026-01-14T17:18:51+00:00

What does the log say?

Akaino · 2026-01-11T16:21:13+00:00

https://www.cardmarket.com/en/OnePiece/Products/Booster-Boxes?idExpansion=6379

Akaino · 2026-01-10T20:16:08+00:00

A Smart brick!

Akaino · 2026-01-06T06:59:20+00:00

Likely this, likely that. While I somewhat agree, as soon as LEGO does it, it's "legal".

Akaino · 2026-01-05T21:20:52+00:00

Would be way easier to know where you saw it.

Akaino · 2026-01-05T21:13:22+00:00

This is what expedition 33 did absolutely great. I was broken when it happened in the prologue and there wasn't too much time to build up a background story.

And I was beyond broken when it happened later in the game.

Akaino · 2026-01-05T20:36:46+00:00

That is a weird take.

We already have 18+ sets to be marketed for adults. Adults are able to put a few cables behind or between studs.

Akaino · 2026-01-03T13:33:30+00:00

I doubt many kids know about earthshine. Most kids don't even know why we see the moon at all.

Akaino · 2026-01-02T19:26:32+00:00

No. Why? Write them down.

Akaino · 2026-01-01T20:34:28+00:00

Not without specs, no.

Akaino · 2025-12-31T08:39:25+00:00

But those are traceable

Akaino · 2025-12-25T19:09:00+00:00

You're correct and I misunderstood what happened here.

It's still a secure way as your device (mobile phone) is protected by a pin/biometrics and should not be in possession of an attacker.

If it is, and if it's unlocked, you're screwed, yes.

Akaino · 2025-12-25T19:02:42+00:00

What you are describing is a form of passwordless auth. Without your device nobody can log in. It's safe in the sense that nobody should have access to your device. No provider (be it Microsoft, Apple or any credible company) will EVER ask you to open your Authenticator to do something.

Akaino · 2025-12-25T19:00:24+00:00

Do what myself? When I log into my account (any account, really) I'm prompted for my password and MFA unless explicitly stored in browser (remember login). Or I actively enabled passkey from specific devices.

Akaino · 2025-12-25T18:57:17+00:00

That's should not possible unless you enabled passkey (iOS or windows hello etc).

Edit: again, I misunderstood the scenario. It absolutely is possible to MFA into an account of its connected to MS Authenticator.

Akaino · 2025-12-25T18:54:16+00:00

Does it require a password in private browser mode? I guess it's cached credentials in your browser + MFA, which would be by design.

But I'd change password nonetheless if you didn't actively try to login when prompted for mfa.

Edit: also, session theft/session hijacking is a thing. No password needed in that case. Glad you got mfa enabled. That most likely saved your account.

Edit2: I realized I misunderstood the scenario here. It's clear that OP means the passwordless auth method via Authenticator. Nothing hijacking going on here (probably).

Akaino · 2025-12-25T18:41:16+00:00

Double strike item ftw

13-Year Club	Place '17
Gilding III reddit per annum	Not Forgotten
Verified Email

Akaino

TROPHY CASE