chockchocschoir

14 ms·

1.
by chockchocschoir 5y ago
The problem with giving options regarding security is that sometimes the people who are responsible for setting up those, forget about "convenience versus security", or they get pressured by other groups to "forget" abou
2.
by chockchocschoir 5y ago
Presumably most people don't build their own desktop computers (think offices and alike) and those usually use the stock coolers that come with the CPU. At least in my experience.
3.
by chockchocschoir 5y ago
A company focusing on one thing will always beat a company "focusing" on a hundred things. Noctua basically focuses on various cooling components, and only that sector, meaning they have deep expertise in that. Intel I can't
4.
by chockchocschoir 5y ago
I don't like it either. I got good news for you and bad news. The good news is that emoji usage seems higher in open source/side-projects than in professional environments. The bad news is that yes, some people, even professionall
5.
by chockchocschoir 5y ago
Comparing Java Serialization with $language Serialization, and the usage of both of the languages, does Java have more RCEs per line written than $language? Or is it just a function of its popularity?
6.
by chockchocschoir 5y ago
The "I mean" is added to give an informal tone instead of a "Here is a correction since you are incorrect" tone. Obviously it wasn't enough. > And I don't believe that this kind of obsession with being techn
7.
by chockchocschoir 5y ago
Java doesn't make exploitable RCEs more or less possible than any other programming language. Or do you have something to back this up beyond the common "Java be bad" trope?
8.
by chockchocschoir 5y ago
I mean, the stars in this visualization are not real, they are "virtual" in the sense that they are a digital replication of something real in our computers. You're right, it's probably a typo. But the typo at least does
9.
by chockchocschoir 5y ago
One of the emails read: This is a chain letter which I received from Peter Baumbach a little while ago. I know that all of you don't know me, but if you don't then you probably know Bill "Wadd" Waddington,
10.
Worlds first email chain letter? (1982)(dan.info)
1 points by chockchocschoir 5y ago|1 comments
11.
by chockchocschoir 5y ago
> Especially the contrast/magic number discussion Speaking about accessibility, who came up with that name "magic number"? It's already an overloaded term with multiple meanings and even has one negative one (for cons
12.
by chockchocschoir 5y ago
> Why should MS in the US somehow respond to a request from police department in Cuxhafen in Germany? If a non-US company does business in the US, most people would expect the business to also answer to US law enforcement. You can't
13.
by chockchocschoir 5y ago
One could make the same argument of any computer system where the security wasn't as tight as one could hope. "But judge, they never patched their $software to the latest version, so technically the software allowed me to dump the
14.
by chockchocschoir 5y ago
Naming things is indeed hard, using multiple keywords for searching is not (both Google and DuckDuckGo supports this). "Drift pastebin" turns up two hits that would lead me to this project. This HN submission will make the reposit
15.
by chockchocschoir 5y ago
I'm not too familiar with YAML, so can't answer to that. But re JSON: > object keys in a different order They can't be "in a different order" as JSON keys are not ordered. They can be whatever order, and would st
16.
by chockchocschoir 5y ago
Indeed. One could just do `diff $(jq . $fileOne) $(jq . $fileTwo)` and you'll end up with a "nice enough" diff even if $fileOne and $fileTwo were very differently formatted.
17.
by chockchocschoir 5y ago
> Makes me wonder if your assertion is more based on the superficial media takes of the day, and not reality. Again, it's based on watching hearings and other media released by my government when they are talking about technology. I
18.
by chockchocschoir 5y ago
I'm not saying because they are "old and experienced" they don't have any value nor wisdom. I'm simply saying that don't trust their opinion on things they don't understand. And if they don't understa
19.
by chockchocschoir 5y ago
I'd expect politicians who don't understand something to bring experts that does understand that thing, not to ignore everything they don't understand.
20.
by chockchocschoir 5y ago
That's an unusual take on the technical capabilities of the "old and experienced". I agree that it's generally hard to secure, but many "old and experienced" in governments are not against new technology becaus
21.
by chockchocschoir 5y ago
No, they're the same. Although here used in different contexts (trying to start a sync conversation VS marketing trying to get you to sign up for something), but they are effectively saying the same thing, "I need a minute from yo
22.
by chockchocschoir 5y ago
Another non-confrontational way of dealing with this issue is to engage the first time they do it, and when the conversation is about to end, tell them "hey by the way, in the future I'd appreciate it if instead of saying "he
23.
by chockchocschoir 5y ago
Fair presumption but no, I agree it should be fixed. I just don't agree with the authors idea of how important it is to fix it, as it's highly unlikely to be exploitable in the wild. Even without any proxies/WAF, PHP is alway
24.
by chockchocschoir 5y ago
Even if someone wrote code like that, they'd have to have configured their web server to accept 4GB of input somewhere, which gets passed to that function. That adds another "rare +" instance, as most web servers ship with wa
25.
by chockchocschoir 5y ago
> Call me an optimist, but I think the framework churn is finally moving behind us. Such an optimist! For real though, I've heard this for every single "paradigm change" that has happened during the last ~20 years (and I&#
26.
2.4 gigabytes of emails leaked from Russian construction company RostProekt(ddosecrets.com)
7 points by chockchocschoir 5y ago|1 comments
27.
by chockchocschoir 5y ago
It was claimed in the $lapsus Telegram chat by $lapsus themselves: https://twitter.com/_MG_/status/1506345542837628932/photo/1 From the screenshot: > I don't think storing AWS keys within Slack w
28.
by chockchocschoir 5y ago
> There are efforts being made to run PHP on Serverless infrastructure This is very interesting, I didn't know this. This is a perfect fit for PHP, as it was always designed with this model in mind, and the programmers that use PHP
29.
by chockchocschoir 5y ago
Honestly, I think the killer feature of Git was GitHub, and it was made popular by people wanting to use GitHub. The rest of the features were cherries on top of being able to use GitHub. So I guess the killer feature for Fossil would be Fo
30.
by chockchocschoir 5y ago
Most importantly missing: DNS, which usually is handled over UDP (changing slowly now with DNS-over-HTTPS and some TCP resolvers). Without handling DNS requests via your proxy, you're still leaking information about yourself to the res

More ›