bawolff

29 ms·

541.
by bawolff 6mo ago
> My first thought is "support a tiny subset of svg that probably still covers 90% of real-world use cases". It sounds like the linked post was about someone using a blacklist instead of a whitelist. It doesnt matter how tiny y
542.
by bawolff 6mo ago
These aren't really SVG specific issues. They are all pretty standard XSS that apply to html and are very well known vectors. Like this post didn't even mention presentational attributes, like how cursor attribute can contain a ur
543.
by bawolff 6mo ago
I imagine they were pissed. I dont think anyone likes being in the middle of a war. Nonetheless in the weeks leading up it was clear USA was moving massive amounts of naval assets into the region. It was on the news 24/7. I'm sure
544.
by bawolff 6mo ago
One think to keep in mind is that firefix is probably a pretty hard target. Everyone wants to try and hack a web browser. One assumes the low hanging fruit is mostly gone. I think the fact this is even a conversation is pretty impressive.
545.
by bawolff 6mo ago
> So wouldn't we want more military service members making bets Who is the "we" in this sentence? Yes, insider knowledge makes the prediction market more accurate (albeit at the cost of being less "fair"). Howeve
546.
by bawolff 6mo ago
I mean, surely everyone in the middle east knew a war was on the horizon. Obviously not the exact plan or day, but it wasn't a secret that usa was gearing up for a war.
547.
by bawolff 6mo ago
Reddit's also famous for NSFW content. There are also stories about harrasing people who post in the "wrong" subreddit (e.g. political subreddits that are the opposite view). I think there are non bot reasons to do that.
548.
by bawolff 6mo ago
Feels like we are getting closer and closer to https://xkcd.com/810/
549.
by bawolff 6mo ago
From the sounds of this it sounds like it doesn't persist past browser restart? I think that would significantly reduce the usefulness to attackers.
550.
by bawolff 6mo ago
11 people over 4 years doesn't seem like that much. Its not clear to me how big a population that is out of but if its government scientists i assume there are tens of thousands of those if not hundreds of thousands. Still, FBI should
551.
by bawolff 6mo ago
I think its a fairly common plot. Its also the plot of So many steps to death by Agatha Christie.
552.
by bawolff 6mo ago
I imagine it is difficult to get good work out of scientists at the point of a gun. With physical labour you can tell if someone is doing a good job, but with intellectual labour its much harder to tell if someone is intentionally being slo
553.
by bawolff 6mo ago
I mean, that sounds more like you were setup to fail.
554.
by bawolff 6mo ago
I don't think this is an example of setting boundries. Usually a boundry would be stopping people from making you do work you don't want to do. This is just a change in position of what work is useful for others to do.
555.
by bawolff 6mo ago
Which is still true in our brave new llm world.
556.
by bawolff 6mo ago
I think every maintainer should be able to say how they want or don't want others to contribute. But i feel like it was always true that patches from the internet at large were largely more trouble then they were worth most of the time
557.
by bawolff 6mo ago
If the headline of the article was that fighter jets are bad in general instead of just F-35, i suspect the convo would be very different. But still, even if you assume that was what the author meant, its still a confusing article. The stat
558.
by bawolff 6mo ago
From what i understand the 15 factor was just a stunt and didnt use the actual error corrected algorithm that needs to be used in general. I think an analogy would be, imagine you are driving across north america in a car, but your engine i
559.
by bawolff 6mo ago
Going from breaking a key in a month to breaking a key in 1 second seems trivial compared to the effort of going from where we are now to being able to break a key in a month. I dont know what the quantum future holds, but if quantum actual
560.
by bawolff 6mo ago
Yeah, but the war drums are beating for it. USA is shifting focus to china in lots of their policy documents China is massively building up arms Lots of talk about a potential invasion of taiwan at some point. Its clearly something war plan
561.
by bawolff 6mo ago
I think the likely result would be more war. It wouldn't be with america, but without anerica providing protection to its allies in the region, the various countries in the region would probably be emboldened to fight it out themselves
562.
by bawolff 6mo ago
> A million dollar patriot missile to shoot down a cheap drone, etc. Except this is more propaganda than truth. In general america does not use patriots to shoot down drones except in exceptional circumstances. Not that the ecconomics of
563.
by bawolff 6mo ago
In the intro: > Meanwhile, modern conflict, from Ukraine’s drone war to naval engagements in the Red Sea to Iran’s own mass missile and drone salvos, increasingly favors systems that can be produced at scale and replaced when lost. In th
564.
by bawolff 6mo ago
Spending time "on" communicating is not the same thing as communicating.
565.
by bawolff 6mo ago
Yes. I didn't really want to go into causes, because you end up going into x did this but y did that. The important part in context is just that usa has hated iran for a long time. But it is frustrating how people seem to totally ignor
566.
by bawolff 6mo ago
This is a bit nuts. USA has hated iran since the revolution. Trump himself has talked about blowing up iran since long before he was in power. The geopolitical situation favoured it (while still being highly risky) like no other time previo
567.
by bawolff 6mo ago
There are people who reverse engineer security vulns of closed source products by comparing the before and after of the compiled binary.
568.
by bawolff 6mo ago
That's a poor comparison given they said CS theory . I could easily imagine a CS theory course that doesn't involve any programming language at all.
569.
by bawolff 6mo ago
Courses aren't supposed to be pure memorization. If you can only answer questions directly covered in the material but can't apply it to new situations, you should not get an A.
570.
by bawolff 6mo ago
Exams are kind of like interviews, at some level they are always at least a bit artificial and sometimes very artificial. I don't really think they do a good job of proving understanding but we also don't really have anything bett

More ›