Show HN: VSCan - Detect Malicious VSCode Extensions
file_upload 1. Input Extension Provide the VSCode Marketplace name or ID of the extension you want to analyze.
Stay updated with the latest in technology, AI, cybersecurity, and more
file_upload 1. Input Extension Provide the VSCode Marketplace name or ID of the extension you want to analyze.
A cybersecurity researcher has developed FileFix, a variant of the ClickFix social engineering attack that tricks users into executing malicious commands via the File Explorer address bar in Windows. FileFix, a variation of the social-engineering attack called ClickFix, allows threat actors to execute commands on the victim system through the File Explorer address bar in Windows. Cybersecurity researcher mr.d0x discovered the new method and demonstrated that it could be used in attacks targeti
Switching pip to uv in a Dockerized Flask / Django App I noticed about a 10x speed up across a number of projects, we'll avoid using a venv and run things as a non-root user too. Prefer video? Here is it on YouTube. I was surprised at how painless it was to switch things over. You can see the git diffs to make the change for both of my example Flask and Django projects. In this post we’ll go into more detail about these changes and how to use a few uv commands. Let’s start with defining our
I recently changed jobs and found myself in a position where I would need to do a lot of work on remote machines. Since I am Emacs user, the most common way to do this is using TRAMP (Transparent Remote access, Multiple Protcol). TRAMP is an Emacs package that let’s you treat a remote host like a local system, similar to VSCode Remote Development Extension. I had used TRAMP before and it tended to be slow. Since I would be using it all day now I figured I should take some time to make it faster.
Some tools might be unavailable due to heavy traffic in this file. Try again Learn more Dismiss
this is a whole blog post because it is "outside the overton window"; it usually takes at least a video before people even understand the thing i am trying to describe. so, here's the video: the steps here that tend to surprise people are , , and . when i say "surprise" i don't just mean that people are surprised that i've set this up, but they are surprised this is possible at all. here's what happens in that video: I start with Windows Terminal open on my laptop. I hit ctrl + shift + 5 , wh
Some tools might be unavailable due to heavy traffic in this file. Try again Learn more Dismiss
this is a whole blog post because it is "outside the overton window"; it usually takes at least a video before people even understand the thing i am trying to describe. so, here's the video: the steps here that tend to surprise people are , , and . when i say "surprise" i don't just mean that people are surprised that i've set this up, but they are surprised this is possible at all. here's what happens in that video: I start with Windows Terminal open on my laptop. I hit ctrl-shift-5 , which
I recently changed jobs and found myself in a position where I would need to do a lot of work on remote machines. Since I am Emacs user, the most common way to do this is using TRAMP (Transparent Remote access, Multiple Protcol). TRAMP is an Emacs package that let’s you treat a remote host like a local system, similar to VSCode Remote Development Extension. I had used TRAMP before and it tended to be slow. Since I would be using it all day now I figured I should take some time to make it faster.
🍞 mbake A Makefile formatter and linter. It only took 50 years! A Makefile formatter and linter. It only took 50 years! Table of Contents Features Configurable rules via ~/.bake.toml CI/CD integration with check mode Extensible plugin architecture Rich terminal output with progress indicators Syntax validation before and after formatting Smart .PHONY detection with automatic insertion Formatting Rules Indentation & Spacing Tabs for recipes : Recipe lines use tabs instead of spac
MSI Viewer and Extractor¶ This interactive tool allows you to view the contents of MSI files and extract their files directly in your browser. The processing happens entirely on your device - no files are uploaded to any server. Behind the scenes, it is running pymsi using Pyodide.
Must. Connect. To. Linux. Jack Wallen/ZDNET Almost daily, I need to send a file from my Pop!_OS Linux desktop to my Android device. Over the years, I've found some solutions, but this latest option, called Packet, makes sending files from Linux to Android a breeze. Packet works with Quick Share, and both desktop and mobile devices only have to be on the same wireless network to function. Once on the same network, sending a file to Android is simple. Also: My 6 favorite open-source Android app
Microsoft is investigating a known OneDrive issue that is causing searches to appear blank for some users or return no results even when searching for files they know they've already uploaded. In a support document updated this week, the company shared that this bug impacts Windows, Android, iOS, and web users. "Some OneDrive personal account users may notice that search results appear blank or don't return files they know exist. While the files are still present and accessible, they don't ap
Kerry Wan/ZDNET Recently, I wrote about the various uses of the USB ports that come standard on the back or side of any smart TV. In this article, I'm focusing on one particular important use: installing firmware updates using a USB device. Also: How to disable ACR on your TV (and why doing so makes such a big difference) Updates are essential because they ensure your TV has the latest software, features, and security patches. Most smart TVs are designed to automatically check for and install
Must. Connect. To. Linux. Jack Wallen/ZDNET Almost daily, I need to send a file from my Pop!_OS Linux desktop to my Android device. Over the years, I've found some solutions, but this latest option, called Packet, makes sending files from Linux to Android a breeze. Packet works with Quick Share, and both desktop and mobile devices only have to be on the same wireless network to function. Once on the same network, sending a file to Android is simple. Also: My 6 favorite open-source Android app
OpenAI CEO Sam Altman has said humanity is only years away from developing artificial general intelligence that could automate most human labor. If that’s true, then humanity also deserves to understand and have a say in the people and mechanics behind such an incredible and destabilizing force. That is the guiding purpose behind “The OpenAI Files,” an archival project from the Midas Project and the Tech Oversight Project, two nonprofit tech watchdog organizations. The Files are a “collection o
Kerry Wan/ZDNET If your computer desktop looks a little chaotic and you're noticing some performance slowdown, it might be time to do a cleanup. The best way to keep things running smoothly is to ensure you're running the most updated version of Windows (you'd be surprised how many folks' devices are several updates behind). But if you're up-to-date, there are other things you can do to optimize. Also: 'End of 10' offers hope and support to Windows 10 users who can't upgrade their PCs Windows
Universal Rules Template for AI Coding Assistants Bugs or ideas → open an Issue in the repo in the repo Anonymous feedback: Go to the Google Form Supercharge Your AI Coding Workflow Across Cursor, CLINE, RooCode, Windsurf, and Github Copilot Tired of inconsistent AI behavior across different coding assistants? Struggling to maintain context and enforce best practices on complex projects? This template provides a robust, cross-platform framework designed to elevate your AI pair-programming ex
lstr A blazingly fast, minimalist directory tree viewer, written in Rust. Inspired by the command line program tree, with a powerful interactive mode. An interactive overview of lstr 's project structure... using lstr . Philosophy Fast: Runs directory scans in parallel by default to maximize speed on modern hardware. Runs directory scans in parallel by default to maximize speed on modern hardware. Minimalist: Provides essential features without the bloat. The core experience is clean and un
Blog Windows 10 EOL June 17th, 2025 (permalink) So Microsoft decided to produce tons of e-waste for no obvious reason. There's a lot of capable hardware out there, and it would be of software company's interest to support as much hardware as possible. Instead, they made some arbitrary reason to deprecate "old" hardware. At the same time they also turned all of windows VR headsets into garbage. We'll have to wait for the open source implementations to catch up for any hope of them being usable
I don't use Microsoft Office very often. I do most of my writing in Obsidian and my number crunching in Google Sheets. Every once in a while, though, someone who does use Office sends me a Word document or an Excel spreadsheet. What do I do if I want to open it, make edits, and send it back? In this situation, it's probably excessive to purchase Microsoft Office. A one-time purchase of the Microsoft Office suite costs $150, which is a lot for the occasional file. An alternative is Microsoft 36
PeaZip is a free and open-source file archiver utility that serves as an alternative to popular tools like WinRAR, WinZip, and 7-Zip. Designed to be cross-platform, it runs on Windows, Linux, and macOS, offering a user-friendly interface paired with advanced features. Built on open technologies including 7-Zip/p7zip, Zstandard (by Facebook), Brotli (by Google), FreeArc, PAQ, and the PEA project, PeaZip provides powerful and flexible file compression and extraction capabilities. It supports ope
Zeekstd A Rust implementation of the Zstandard Seekable Format. The seekable format splits compressed data into a series of independent "frames", each compressed individually, so that decompression of a section in the middle of an archive only requires zstd to decompress at most a frame's worth of extra data, instead of the entire archive. Zeekstd makes additions to the seekable format by implementing an updated version of the specification, however, it is fully compatible with the initial ve
MEOW The most Purr-fect Image File Format for your AI workflows Wait- What? You Can Just Make File Formats? Well- yes, but no, I'll come to that bit later, but before that, let me geek out about what this project is MEOW (Metadata Encoded Optimized Webfile) is a Python-based image file format designed to be efficient, practical, and cross-platform compatible. With support for RGBA transparency, metadata, and fast rendering capabilities, MEOW provides a modern alternative for image storage and
filedb A key-value store inspired by Bitcask. FileDB is a Zig-implementation of Bitcask by Riak1 paper. FileDB stores record metadata in a log-structured hashtable and parallely keeps 1 disk file open for inserting records in append-only mode. On restarts or MAX_FILE_REACHED , the disk file is rotated and all the oldfiles are kept open for reading only . , the disk file is rotated and all the oldfiles are kept open for reading . A compaction process running every config.compactionInterval se
filedb A key-value store inspired by Bitcask. FileDB is a Zig-implementation of Bitcask by Riak1 paper. FileDB stores record metadata in a log-structured hashtable and parallely keeps 1 disk file open for inserting records in append-only mode. On restarts or MAX_FILE_REACHED , the disk file is rotated and all the oldfiles are kept open for reading only . , the disk file is rotated and all the oldfiles are kept open for reading . A compaction process running every config.compactionInterval se
QRKey qrkey is a command-line tool for generating and recovering QR codes from files for offline private key backup. It allows you to convert files into QR codes that can be printed or stored, and later recovered from those QR codes. It supports large files by splitting them into multiple QR codes, and includes metadata for easy recovery and validation. Convert a file into a PDF with QR codes Recover from a PDF with QR codes with a barcode scanner Recover from a PDF with QR codes from a file
If you’ve ever had to wait for the ancient speed of an old hard disk drive (HDD) to transfer large files, you know firsthand how infuriating it is. Now that files are becoming larger and workflows need faster transfers, a solid state drive (SSD) is no longer a luxury: it’s a must-have. The SanDisk 2TB SSD is one of them and Amazon just dropped the price to $144 from its list price of $210 (32% off) which is an all-time low for a drive that’s an absolute bestseller. See at Amazon Why Should Yo
A BitTorrent client implementation in Go that supports downloading files using the BitTorrent protocol. This project implements the core functionality of a BitTorrent client, including torrent file parsing, peer discovery, and file downloading. Features Bencode Encoding/Decoding Support for all Bencode types (strings, integers, lists, dictionaries) Robust error handling and validation Torrent File Processing Parse .torrent files (both single-file and multi-file torrents) Info hash calculation
McWig (temporary name) Hi! Welcome to my text editor page. McWig is a modal, Vim-like text editor written in Go. I use it as my daily driver, btw. Note: McWig currently supports only .go files. Do not edit files that are not backed up. McWig is still in an early stage of development and may damage your files. Features LSP autocomplete, goto definition, hover info Tree-sitter support Color themes (borrowed from the Helix text editor) Lots of bugs Macro support Something like Emacs org-mo