J-Kuhn

5 ms·

1.
by J-Kuhn 17d ago
Photos of your hand? What is next? Run some arbitrary command? Make photos of your feet? We really ought to think what is an acceptable way to verify that someone is an actual human.
2.
by J-Kuhn 1mo ago
https://en.wikipedia.org/wiki/Tragedy_of_the_commons
3.
by J-Kuhn 1mo ago
It even works on Windows.
4.
by J-Kuhn 1mo ago
> We would prefer the Play Integrity API being banned by regulators but this is good enough for now. Unfortunately, the EU is currently developing their age-verification-app, and it mandates hardware attestation[1], and it seems that the
5.
by J-Kuhn 1mo ago
Yeah, its the "well, legally, we have to provide the source code, but we make it as painful and slow for you as we can without it becoming a blatant violation of the GPL."
6.
by J-Kuhn 2mo ago
Alternative Phone Line? You want the bootstrapping problem?
7.
by J-Kuhn 2mo ago
Exactly. You can make it not throw by adding `--add-opens java.base/java.lang=ALL-UNNAMED` or similar to the command line, but breaking things like this is becoming harder.
8.
by J-Kuhn 2mo ago
For me, Nix(OS) solved most of the problems: * Getting a dev env with `nix-shell -E '(import <nixpkgs> {}).somePackage'` where I can edit the source and compile it with the various `runPhase` commands[1]. Yes, a bit cumb
9.
by J-Kuhn 2mo ago
Before openjdk did move to github, they made sure they had a solution for those problems: * Contributors without github accounts * Moving away from github (when needed) * No vendor lock-in for github stuff. I personally think, this is a goo
10.
by J-Kuhn 2mo ago
The problem is not that the array is mutable, but that the size of the array may differ for different strings. (In fact, it usually* does differ if the string length is different). This makes it impossible to flatten - as the VM needs to kn
11.
by J-Kuhn 2mo ago
Such hacks will slowly stop working (without explicitly allowing it from the command line.) In this example, it would throw an IllegalAccessException, because java.base doesn't open java.lang.
12.
by J-Kuhn 2mo ago
I changed the sudo settings to not require a password. Now an application on my computer can obtain root without user interaction. Where is my CVE?
13.
by J-Kuhn 3mo ago
By some logic: * If they want to tell someone personally what to do or not to do, is some form of employment. * If it is not paid, it can be considered slavery. * It is usually possible to quit jobs.
14.
by J-Kuhn 3mo ago
Systemd (part of many major linux distributions) has for example machine-id[1], readable by anyone on the machine under /etc/machine-id. [1]: https://www.freedesktop.org/software/systemd/man/latest&#
15.
by J-Kuhn 3mo ago
Sarcastic view: Doesn't matter - the EU wont listen, then pull a surprised pikachu and make laws to force googles play integrity to attest that other devices are genuine, because obviously, the problem is google, not stupid design deci
16.
by J-Kuhn 3mo ago
You can do GET & POST requests without preflight. The logic behind this is: It was possible to do this before the introduction of those APIs anyway - but you could not read the response. You could send a GET request by, for example, emb
17.
by J-Kuhn 4mo ago
Yes, the EU calls it "digital sovereignty" and is currently "in" with the EU.
18.
by J-Kuhn 4mo ago
To my knowledge, any app can just instruct the installed browser (Google Chrome, Vanadium, Firefox...) to open http[s]://tracker.evil-ad-network.example/?installedId=012345.
19.
by J-Kuhn 4mo ago
Or simply forgetting to renew the domain, at which point an attacker can deliver arbitrary files through correctly signed TLS.
20.
by J-Kuhn 4mo ago
There is also Idris 2 for JVM ( https://github.com/mmhelloworld/idris-jvm ) Frege targets Java source code, which is then compiled by javac - the downside of that approach is you can not preserve the line numbers for deb
21.
by J-Kuhn 4mo ago
At a quick glance, it seems to be missing some hook to resolve class hierarchies - which is needed when merging stacks with different types. Consider var foo = expr ? new Foo() : new Bar(); For such an expression, some superclass o
22.
by J-Kuhn 4mo ago
This information is shown on the site of the breach, as example: https://haveibeenpwned.com/Breach/BakerDistributing
23.
by J-Kuhn 4mo ago
This is a bad idea, for multiple reasons. https://www.troyhunt.com/here-are-all-the-reasons-i-dont-mak...
24.
by J-Kuhn 4mo ago
You assume that the EU acts in a coherent manner. I think that premise is wrong - there are many interest groups, and by luck/lobbying/reaching critical mass/... they manage to put one of their interests into a law.
25.
by J-Kuhn 4mo ago
Fun Fact: When Cookies were introduced into Netscape, you got a browser permission prompt. Then browser vendors set it to allow by default. And then legislation required those consent boxes back, so everyone built their own, instead of dema
26.
by J-Kuhn 4mo ago
Oh, I also got one: https://wiki.archlinux.org/index.php?title=Special:CreateAcc... > To protect the wiki against automated account creation, we kindly ask you to answer the question that appears below (more info): What
27.
by J-Kuhn 5mo ago
Inspired by this, I wrote a quick prototype using MethodHandle combinators: https://gist.github.com/DasBrain/19804df69c78cee257dd0294b00... It doesn't have all the bells and whistles - so no support for annotation
28.
by J-Kuhn 5mo ago
I think they point weird-eye-issue wants to make is: Students attend college to become qualified to work.
29.
by J-Kuhn 5mo ago
In some parallel universe, they may still have it built in.
30.
by J-Kuhn 5mo ago
Still has the same vibe as "she did consent by wearing such a short skirt".

More ›