bawolff

31 ms·

781.
by bawolff 8mo ago
It is kind of risky - you now have an entire, mostly unreviewed, ecosystem of javascript code, that users can experiment with. However its been really useful to allow power users to customize the interface to their needs. It also is sort of
782.
by bawolff 8mo ago
That's a fair point, but keep in mind normal admin is not sufficient. For local users (the account in question wasn't local) you need to be an "interface admin", of which there are only 15 on english wikipedia. The accou
783.
by bawolff 8mo ago
You need to be a special type of admin, called "interface-admin" to edit it. Normal admin is not enough.
784.
by bawolff 8mo ago
> Vandalizes 20 random articles with a 5000px wide image and another XSS script from basemetrika.ru Note while this looks like its trying to trigger an xss, what its doing is ineffective, so basemetrika.ru would never get loaded (even ig
785.
by bawolff 8mo ago
There is nothing to do, the incident was not caused by a vulnerability in mediawiki. Basically someone who had permissions to alter site js, accidentally added malicious js. The main solution is to be very careful about giving user accounts
786.
by bawolff 8mo ago
Sheesh wtf did i just read? This seems less like you were being lied to and more like you are kind of being delusional.
787.
by bawolff 8mo ago
This sort of thing is sometimes used in so-called "scriptless xss" attacks, where if you can force the website to have an unclosed url, you can capture part of the page contents (hopefully containing secrets) and exfiltrate it. To
788.
by bawolff 8mo ago
How much of the current situation is a result of that previous deal? The deal basically stopped iran's nuclear program but allowed the regime to better send money and guns to its proxy network. The current war is effectively the downst
789.
by bawolff 8mo ago
Largely because they didn't actually need it. Their conventional artillary pointed at south korea was already (and still is) more of a deterrnt than the nuke is.
790.
by bawolff 8mo ago
I didn't say they were doing a good job at it. I would agree, american foreign policy and especially how it is communicated has been all over the place.
791.
by bawolff 8mo ago
Sometimes yes, but is there in this specific case? Because from my vantage point it looks like the choice is, status quo or bomb them. Its not like america can double sanction iran, they are already fully economically sanctioned. What is th
792.
by bawolff 8mo ago
That seems pretty unlikely at the moment.
793.
by bawolff 8mo ago
US messaging has been all over the place, but stop funding proxies has been one of the more consistent parts. To be clear, im not saying protecting shipping is the primary reason for this war. I'm just saying if that is what you think
794.
by bawolff 8mo ago
While oil is a major interest its hardly the only one. USA is still playing at being world hegemon in competition with china and to a lesser extent russia. Maintaining alliances is a part of that.
795.
by bawolff 8mo ago
> But rather than protect global sea lanes, the US is bombing Iran. That’s not the same thing. Arguably the primary threat to modern sea lanes is Iran. Right now Iran is harrasing traffic. Previously the Houthis, generally considered an
796.
by bawolff 8mo ago
US has tons of interests in the region. This is just as much for america's benefit as it is for Israel's.
797.
by bawolff 8mo ago
I think when people are asking about the cost of a war, they are asking about excess costs. How much extra money would be saved if the war didn't happen.
798.
by bawolff 8mo ago
Seems like a massive understatement given how much of this war has been shooting down iranian missiles. According to wikipedia, a single patriot missile cost 4 million, and you often have to use multiple to get a succesful shoot down.
799.
by bawolff 8mo ago
True. Honestly i think my main opinion is that we have no idea what the number is, but its probably a large one.
800.
by bawolff 8mo ago
Wouldn't some of these costs be present either way? Without a war US would still have aircraft carriers, they would just be floating somewhere else. On the other side, it seems like this is not tracking interceptor costs (presumably du
801.
by bawolff 8mo ago
And how do you think i get to live a life like that? It didn't just happen but was paid for in blood by the previous generation.
802.
by bawolff 8mo ago
I don't think knallfrosch's post was implying it was a singular someone. Like if you say "someone is at the door", you don't literally mean that exactly one person is at the door.
803.
by bawolff 8mo ago
> To be fair, Trump usually chickens out. I feel like he mostly chickens out on tarrifs or things that have a large potential for high costs or where the opponent has some actual leverage. Here he is blowing up Iran. Iran doesnt really h
804.
by bawolff 8mo ago
If someone made 500k, then someone lost 500k. Any money you win gambling has to come from someone else, it doesn't just appear.
805.
by bawolff 8mo ago
Those aren't mutually exclusive. The best predictions are going to be those based on non public information.
806.
by bawolff 8mo ago
Maybe, but also the strike was super telegraphed. It doesn't take a genius to figure out that when USA pulls its embassy staff from israel, britian pulls its embassy staff from iran and USA creates the biggest build up of military hard
807.
by bawolff 8mo ago
> The US isn't ever going to leave anyone, let alone Iran, alone. The options are a) fight and cease to exist and b) don't fight and cease to exist. Well i think this is true in the present moment, i think its also important to
808.
by bawolff 8mo ago
> It's not a stalemate if Ukraine ends up losing 30% of its territory. That's Russian victory. I'd call that both sides losing. Russia certainly did not achieve its geopolitical goals with that outcome.
809.
by bawolff 8mo ago
> with their war machine the likes of which has never been seen, could not bring peace and democracy to Afghanistan. As far as i understand, the US propped up an unpopular governmet that many of the locals did not like (there were rumour
810.
by bawolff 8mo ago
Based on context, i kind of imagine they are more thinking of the issues surounding libxslt.

More ›