Joker_vD

17 ms·

331.
by Joker_vD 6mo ago
All you need for that is the ability to read and write binary blobs to and from files, which Windows gives you, and to know what "text files" means for the other programs on that platform. Windows itself doesn't care for text
332.
by Joker_vD 6mo ago
> At some point there's an interface where something that's part of the application asks something that's part of the OS to do something, and that interface had better be stable and well-specified. It's defined, and w
333.
by Joker_vD 6mo ago
> Unix does offer an API for writing C-standard in-memory text strings Why on bloody Earth should a presumably generic-purpose OS provide a special API for dealing with internal representation of some data structure in a (particular) imp
334.
by Joker_vD 6mo ago
From literally any language. The WriteFile function comes from kernel32.dll shared library, and follows the certain calling convention. You don't need to use this calling convention inside your own binary (and indeed, MinGW and MSYS us
335.
by Joker_vD 6mo ago
Yep, on Unixen the translation of CRLF to LF when printing to the terminal (and from CR to CRLF when reading input from the terminal) is done in the kernel, it's called "line discipline".
336.
by Joker_vD 6mo ago
> and you lose access to the file, It's literally at https://github.com/Joker-vD/keepassdb/raw/refs/heads/master/... in my case, plus a couple of other free hosting sites that support e
337.
by Joker_vD 6mo ago
> They just need to be panicked, or overconfident, or overworked. One of the best thing about digital computers, compared to humans, was that they can't be the first or the third thing you mentioned; unfortunately, they absolutely a
338.
by Joker_vD 6mo ago
Some applications annoyingly use the opposite convention: Shift+Enter is what commits the entered text, while plain Enter inserts a newline.
339.
by Joker_vD 6mo ago
Terminal keyboards generally used to have two separate ENTER (submit the form to the mainframe) and RETURN (insert a line break) keys. I mean, even the original 101-key PC keyboard has them: the RETURN key above the right Shift, and the ENT
340.
by Joker_vD 6mo ago
What a terrific idea! You totally should file a patent. Meanwhile, we'll have to use the next best thing: the mouse.
341.
by Joker_vD 6mo ago
Normally, people don't suddenly go insane, snap and start deliberately deleting things in production. Sure, it happens, but very, very rarely.
342.
by Joker_vD 6mo ago
Well, the fashion changes. At one time, sugar too was advertised as beneficial for tooth health.
343.
by Joker_vD 6mo ago
> Put your data where it makes sense on the filesystem Right near the data it's derived from is the most obvious place, you know, and makes sense for most of the application developers (it may not "make sense" for you but
344.
by Joker_vD 6mo ago
> It takes a bit of effort That's a wild understatement. For most users, having a password manager is already very near to the upper bound of acceptable friction.
345.
by Joker_vD 6mo ago
Yeah, pretty much, which is why this adherence to dark matter seems even more puzzling: we already had a mysterious substance with nonsensical mechanical properties (perfectly solid, but has zero collision) that turned out to be completely
346.
by Joker_vD 6mo ago
That would violate the First Amendment. /s
347.
by Joker_vD 6mo ago
> I increasingly feel like build systems should never be relying on any "native" utilities from the host system, and should instead be bringing them in via dependencies. Well, you see, while this, frankly, applies not just to b
348.
by Joker_vD 6mo ago
I sincerely agree. By the way, thanks for lending your machine for my "Network-Retransmission-and-Compute-as-a-service" network.
349.
by Joker_vD 6mo ago
But... thumbs.db is precisely not an "attempt to use filesystems in "interesting" ways" — it's literally a just hidden file with previews stored in it. Storing the preview in the alternative stream of the file wit
350.
by Joker_vD 6mo ago
> What alternative solution do you actually propose here? I don't, I am just saying that if you do things like e.g. user/group name resolution outside of the kernel, then they will be done in the userspace (duh) with all of the
351.
by Joker_vD 6mo ago
> the groups responsible for distributing patches? Those groups don't exist, to my knowledge. And probably can't, realistically speaking.
352.
by Joker_vD 6mo ago
One of the reasons this unavoidable deadline was invented, is that the alternative is that one company (or all of them) can simply decide to ignore the vuln report, and then the vulnerability will stay forever undisclosed and forever out
353.
by Joker_vD 6mo ago
Obviously, if you tie the ability to handle those things to your filesystem layout, either by loading dynamic libraries from whatever is /usr/lib, or by reading /etc/whatever.conf, or even providing a whole virtual mount
354.
by Joker_vD 6mo ago
> What did I get wrong there? Nothing; you just missed some other considerations. For instance, Linux generally follows POSIX. That's what the 2004 version has to say about chdir's errors: ERRORS The chdir() function
355.
by Joker_vD 6mo ago
European Convention on Human Rights, Article 7: "No punishment without law" 1. No one shall be held guilty of any criminal offence on account of any act or omission which did not constitute a criminal offence under
356.
by Joker_vD 6mo ago
> Well you can[1], No, you can't, it's an entirely different syscall that does something vaguely similar. IMHO there are a bit too many root-restricted operations that should not have been; but they are, so we're stuck wit
357.
by Joker_vD 6mo ago
> The root cause is not thinking: Why is root chrooting into a directory they do not control? Because you can't call chroot(2) unless you're root. And "control a directory" is weasel words; root technically controls
358.
by Joker_vD 6mo ago
Nope! But basically, expect anything that resolves usernames, or host names, to be done in the userspace by NSS. Sun engineers Thomas Maslen and Sanjay Dani were the first to design and implement the Name Service Switch. They fulf
359.
by Joker_vD 6mo ago
Yes? The quote says "tends to", and you still can cd into that directory, albeit not in a single invocation. Windows has similar limitations [0], it's just that their MAX_PATH is just 260 so it's somewhat more noticeable
360.
by Joker_vD 6mo ago
> The pattern is always the same. You do one syscall to check something about a path, then another syscall to act on the same path. Between those two calls, an attacker with write access to a parent directory can swap the path component

More ›