0x0

86 ms·

961.
by 0x0 9y ago
Interesting that they list "iTunes Connect internal testflight" as a supported distribution method (in addition to external testflight). That must surely be against some kind of terms of service and developer agreement. Also, it&#
962.
by 0x0 9y ago
Symfony core components are also the foundation of Silex, which I find to be a more straight-forward and less opinionated framework than Laravel. https://silex.symfony.com/
963.
by 0x0 9y ago
Is https://github.com/plexinc/plex-media-player/blob/master/LIC... not the Plex source code repository?
964.
by 0x0 9y ago
Isn't Plex based off XBMC/Kodi and licensed under GPL2? I didn't think GPL2 allowed adding additional restrictions to the license? https://github.com/plexinc/plex-media-player/blob/master/L
965.
by 0x0 9y ago
I think this wouldn't reveal any source code, but it would reveal the decrypted binary (which they did not have all along), so it can be disassembled and poked at for vulnerabilities.
966.
by 0x0 9y ago
They would probably use the same warp every time on a specific image, so that you can't average it out across multiple download sessions.
967.
by 0x0 9y ago
I just answer their "chat question" with "no" in the text input.
968.
by 0x0 9y ago
Nah. Depends if you're going slightly "north-east" or slightly "north-west". Also probably depends on your locale.
969.
by 0x0 9y ago
https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentica...
970.
by 0x0 9y ago
You used to be able to put HTTP basic authentication into the URL in the format http://username:password@hostname-or-ip.example.com/ - modern browsers are removing support for the "username:passord@" part because
971.
by 0x0 9y ago
m->k and k->i looks like the right hand on the keyboard was misaligned one row too high.
972.
by 0x0 9y ago
That's up to you. I find the current system of stable releases to work just right.
973.
by 0x0 9y ago
Why don't you just run Debian Sid then? You'll get new packages every day and get all the fun of chasing changing features all the time :D
974.
by 0x0 9y ago
It's an example of how things break if you upgrade to new versions of software. If you avoid going to new versions of software, and instead just backport the essential security fixes, there will be much fewer surprises like this. Imagi
975.
by 0x0 9y ago
Halfway through the article I got a huge popup with a button "Create your whiteboard". When I clicked it, I ended up on a 404 page - https://www.deekit.com/braintree-to-stripe/https
976.
by 0x0 9y ago
It's better to have a competent "second group" do the backport job rather than every single user of a distro having their rug pulled out under them every time they patch. New versions of software can quickly break your enviro
977.
by 0x0 9y ago
Almost all linux distros that use the concept of a "release" will stay on the version numbers they originally released for. Security fixes are backported but no other functionality is imported, thereby keeping the feature set fixe
978.
Compromise on Checkout – Vulnerabilities in SCM Tools(blog.recurity-labs.com)
5 points by 0x0 9y ago|0 comments
979.
by 0x0 9y ago
What's the stuff about "proof layers", is that new in this v2? The paper briefly talks about proof layer requests. Is this something merkle-tree related? What is the purpose? Is it to prevent clients from lying about having p
980.
by 0x0 9y ago
Not a great idea to publish private keys for valid certificates. Anyone could probably submit a certificate revocation request to the CA, as the key would be considered compromised.
981.
by 0x0 9y ago
Packages in unstable can enter testing in 2-10 days, not years :) https://wiki.debian.org/DebianTesting
982.
by 0x0 9y ago
Seems a little risky especially for SMTP services. Will be interesting to see how this pans out!
983.
by 0x0 9y ago
Lots of people seem to be confused about curl's role in other systems: https://daniel.haxx.se/blog/2016/11/14/i-have-toyota-corola/ Maybe a similar confusion caused his boarding to be denied -
984.
by 0x0 9y ago
I'm curious - if you actually had $300m worth of bitcoin and started selling it, would you be able to actually sell everything off for that price before the price started dropping like crazy? Would whatever exchange you're using e
985.
by 0x0 9y ago
Wonder if anything similar could have happened to the author of cURL had he not been denied boarding on a US flight - https://news.ycombinator.com/item?id=14643467
986.
by 0x0 9y ago
You are right, of course.
987.
by 0x0 9y ago
Not the first bug reported for Ryzen. Wasn't there a couple of others too, one with linux locking up and another triggered by the ocaml compiler emitting opcodes refering AH/BH/CH/DH registers in a tight loop? Edit: Sorr
988.
by 0x0 9y ago
The Register posted about this mystery 4.1.4 security fix mentioned in the board minutes back in April. After the article was published, the meeting record appeared to have been edited and any mention of security fixes removed (with time st
989.
by 0x0 9y ago
Wild guess - kernel.org was compromised some years ago, maybe they never rebuilt that service. Also, consider what would have happened if boot.kernel.org was compromised at the same time as kernel.org? :)
990.
by 0x0 9y ago
Yep, the SHA-1 matched the one listed on the website for me too.

More ›