DethNinja

11 ms·

61.
by DethNinja 4y ago
Unfortunately if you can read a configuration file in a user's home directory, you can also get local admin rights very easily via various simple exploits. This is why RCE type exploits are super dangerous. There probably won't ev
62.
by DethNinja 4y ago
I think reasons are simple: Untalented staff in general. Especially art directors and set decorators of Netflix shouldn't be allowed near 5 ft of any camera. These two professions are usually underrated but they usually make or break t
63.
by DethNinja 4y ago
“Users” in this case are supposed to be software engineers. Thus, I don’t see how Amazon’s claim can be misleading. Server side encryption is very valuable, especially against breaches on the cloud provider. I would expect any mid to senior
64.
by DethNinja 4y ago
I think your guide and HardeningKitty type solutions are good for non-targeted attacks and for your average user. Main problem is that targeted attacks are rife in the software industry. Even small startups get frequently targeted by compet
65.
by DethNinja 4y ago
This is at best a very basic list. Securing windows against targeted attacks are far harder than securing Linux. For people that are interested about more advanced ways to secure Windows: https://github.com/scipag/Hard
66.
by DethNinja 4y ago
Did they ever disclose exact amount of engineers that were laid off? Twitter laid off lots of people but I doubt majority of them were engineers.
67.
by DethNinja 4y ago
This looks amazing. Lots of people complain about node based editor but there is a real need for non-destructive/parametric 2D workflows. Why not make this commercial though? I wouldn’t mind spending a small amount of money on such an
68.
by DethNinja 4y ago
Is it still int32 though? Most of the user space APIs give this value in int64 so I thought kernel would’ve kept it as int64 as well.
69.
by DethNinja 4y ago
This is a common misconception. AI is not copying anything. It is studying the images in a similar way that humans do. Entire size of the stable diffusion model is around 6gb, with pruning it goes down to 3gb. Training set is in terabytes.
70.
by DethNinja 4y ago
Is there any reason to use these cloud based solutions when open source alternatives like KeepassXC is available?
71.
by DethNinja 4y ago
What is the memory requirements of this model?
72.
by DethNinja 4y ago
It is commercial code, so I can’t share it. However, algorithm is really simple to implement in Houdini: * Generate depth image from 3D meshes * Send depth image to local HTTP server running Hugging Face diffusers library. Generate textured
73.
by DethNinja 4y ago
Depth Guided models are amazing for game art texturing: https://hackaday.com/2022/12/18/image-generating-ai-can-text... I already incorporated this to Houdini to generate 3D distance meshes and it works wonde
74.
by DethNinja 4y ago
Do modern browsers check this though? It would introduce a large latency to each request, I bet none of the browsers do that. Moreover, Chrome removed the browser extension API for TLS certificate details, so it is not even possible to do C
75.
by DethNinja 4y ago
It is great that people are concerned about UUID entropy, because some implementations actually got much less than ~120 bits. However, I think article missed the point that you shouldn’t use UUIDs as a security measure anyway.
76.
by DethNinja 4y ago
This is pretty neat. I wonder what would be the maximum CPU & Ram you can go without installing any moving parts (fan or pump) on a mini itx board. Has anyone got a setup if you want to use more than 12 cpu cores?
77.
by DethNinja 4y ago
It is most certainly possible to escape browser sandbox and inject to a vulnerable driver through JS.
78.
by DethNinja 4y ago
Do Windows care about vulnerable drivers? Is there anyway to prevent installation/execution of drivers with such CVEs?
79.
by DethNinja 4y ago
> at worst it cost money. I would say at worst they would woke up an eldritch abomination.
80.
by DethNinja 4y ago
Even multi-hop is not enough to hide your IP. There are timing correlation attacks, you need to build a system with jitter and randomness to somewhat hide your IP. It is a very complicated topic. You cannot hide your IP by just chaining two
81.
by DethNinja 4y ago
There is a test and experience record verification process, optionally a recorded interview. You cannot get a P.Eng license just by paying membership fees. There is also a discipline process for engineering misconduct.
82.
by DethNinja 4y ago
I worked for large companies all my life and all of them are actually like this. I wonder how one can find companies with no office politics, and one that rewards real engineering work. Do any of the FAANGs actually qualify for this?
83.
by DethNinja 4y ago
I’m very jealous of people capable of pulling this off. I guess there is no way to do something like if you are not in the right circles.
84.
by DethNinja 4y ago
I can explain it, but you won’t like it: * Entire economy is right now controlled by FED and mega funds like Blackrock. What Engineers or public think is at the moment is unimportant, entire shift to Metaverse is directed by these mega fund
85.
by DethNinja 4y ago
Zero maintenance is an impossibility. What happens when hosting provider goes bankrupt? However, there is a way to make minimal maintenance websites. Make a static website and upload it to a provider that you believe won’t go away for at le
86.
by DethNinja 4y ago
I think open source firmware is one of the major requirements for security in 2022. It is fairly easy to backdoor or infect firmware, yet very few companies use components with open source firmware. Infections can be dealt with frequent fir
87.
by DethNinja 4y ago
I wish somebody would create an online playground for learning x64 assembly. It isn't so hard to install NASM and start from there, but it would be substantially easier to learn if there was an option like codeacademy for assembly.
88.
by DethNinja 4y ago
> How about stop giving away money period… That would be very convenient for the ruling class, after all most of the printed money was handed out to them. This would result in some form of feudal system. Right now government either has
89.
by DethNinja 4y ago
Turkey’s problems goes further than a simple interest rate increase. Even if they increased the interest rates, they would still have substantial inflation. Truth to be told I don’t think such third world economies can ever recover. It is t
90.
by DethNinja 4y ago
So far I’ve used six languages to build everything from web apps to desktop applications and C++ is still by far my favourite language. It is sad that it is still haunted by prejudice due to pre-C++11 era but modern C++ is easy to learn and

More ›