TZubiri

19 ms·

361.
by TZubiri 3mo ago
Oh interesting. I'm not sure if you question whether the first sale or the latter resale might not be contracts. But in either case, I believe both them to be. It's similar to a sale of a stolen good with an unaware purchaser. It&
362.
by TZubiri 3mo ago
Don't think that would trigger the bug, it needs to be at the repo root when the user opens the agent CLI, it's not like the agent is calling another agent CLI process with the new repo root as its project root.
363.
by TZubiri 3mo ago
Critical difference is that PDF is a data file, while a git.exe is an executable marked to the OS as executable.
364.
by TZubiri 3mo ago
>This bug is simple. A developer opens a repository in Cursor on Windows, and if that repository contains a malicious git.exe in the project root, A vuln that requires an existing malicious executable to have already been downloaded and
365.
by TZubiri 3mo ago
>but if you enter a contract with the intent to violate it, is that legal? My understanding is that it's technically illegal (only civil perhaps, but still illegal), the impracticality of enforcement notwithstanding. On the first m
366.
by TZubiri 3mo ago
There was a story about two men and a tiger The men see the tiger, one scrambles to run and the other starts putting on their shoes "Why are you putting on shoes? You'll never outrun the tiger" "I don't need to, I j
367.
by TZubiri 3mo ago
Not a lawyer but here's how it works: Illegal usually means there's a law forbidding it. Tickets are usually governed by the Terms and Conditions (Contract) between original purchase. It's already possible for the terms to fo
368.
by TZubiri 4mo ago
Imagine your org gets compromised and they are tracing back the vuln to a malicious package in the supply chain, and it's the Mr. Meeseks Claude Code plugin.
369.
by TZubiri 4mo ago
True, reminds me of the failure of litecoin to make an algorithm that was asic resistant and benefitted normal user hardware, but it didn't last long. PoW tends towards ASIC capitalization. Theoretically users would ideally pay some ce
370.
by TZubiri 4mo ago
Author is redis dev. Seems deep in vibecode mode Genuine question, is redis actually used by competent engineers? The idea of a separate networked process to store and retrieve variables from memory sounds like something a first year engine
371.
by TZubiri 4mo ago
Should we then add a pdf for early pdf specs?
372.
by TZubiri 4mo ago
How is this different from your competitors like Socket dev?
373.
by TZubiri 4mo ago
Ever heard the phrase that the exception proves the rule?
374.
by TZubiri 4mo ago
I'm anti virtualization, but mostly due to the internal complexities of the guest applications being swept under the rug, it's undeniable that the host is protected and thus neighbouring guests (of course it is with almost 20 year
375.
by TZubiri 4mo ago
And then going there 1 million times under fake identities? Yeah, I'm sure that's not a bad actor.
376.
by TZubiri 4mo ago
https://salad.com/salad-gateway-service https://salad.com/earn
377.
by TZubiri 4mo ago
Why the air quotes? Evading a ban and using (potentially ill gotten) residential ips to circumvent that refusal of service, is a bad actor.
378.
by TZubiri 4mo ago
>We have not gone with tools like Anubis, partly because it causes annoying delays for those trying to get to the site, but also partly because it seems inevitable that the scrapers will eventually find their way around it. Indeed, there
379.
by TZubiri 4mo ago
Did you see the article about how security is becoming PoW? Whoever spends more tokens wins
380.
by TZubiri 4mo ago
Some see a 30 year old system and think "outdated", I see a 30 year old system and think "time tested." Clearly a process per connection is more stable and that's what I'm using. It's unclear what problem
381.
by TZubiri 4mo ago
>You never really could. You can, open a TCP socket on port 25 to $IP, and just start sending email headers. You can also use local domains, no DNS. You can also leave a file in the /var/mail directory with the filename of the
382.
by TZubiri 4mo ago
>Missed opportunity to get rid of SPF. > you should reject it, regardless where it came from. Just don't use it yourself then? "v=spf1 ?all"
383.
by TZubiri 4mo ago
Right, and when you don't configure DMARC successfully and the recipient requires DMARC, then you cannot send email successfully.
384.
by TZubiri 4mo ago
Is this standarized terminology in some RFC like SMTP? Or is it presumably some well established folk lingo?
385.
by TZubiri 4mo ago
You can't have the cake and eat it too. Either you use cheap infrastructure that attackers can buy by the bulk for sybil attacks. Or you pay a reasonable price for a slice of an IP block that doesn't share its reputation with elch
386.
by TZubiri 4mo ago
When contacting support: "Please upload a screenshot of the error by dragging a zip of the png file."
387.
by TZubiri 4mo ago
And if there's a form or something with a backend? Just break?
388.
by TZubiri 4mo ago
The argument would be that they sell the kevlar and the guns Kevlar: https://developers.cloudflare.com/bots/ https://www.cloudflare.com/products/turnstile/ Guns: https://support.cl
389.
by TZubiri 4mo ago
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=COM:2022...
390.
by TZubiri 4mo ago
Nope, I've rented a dedicated server through OVH and I never had to touch a single cable or change a single disk. I also dealt with owned servers and I had to deal with power outages and gas based generators, internet outages caused by

More ›