cjbprime

44 ms·

601.
by cjbprime 5y ago
It's actually easier for an attacker on desktops/laptops. Phones have excellent sandboxing and defenses by comparison. The ideal attacker would find a way to silently steal a credential (e.g. session cookie) from your phone, then
602.
by cjbprime 5y ago
Agree with you, but a quick clarification: PCIe IOMMUs exist now, a PCIe device doesn't get DMA access to main memory.
603.
by cjbprime 5y ago
Don't think which part is accurate? 1200x900 has 28% more pixels than XGA, right? (And that XGA was often on a 14" screen instead of a 7.5" screen.)
604.
by cjbprime 5y ago
Because when the screen is visible to a user, the back of the screen is pointing at the ground, not the sun. Here's a video of an external panel running the laptop: https://youtu.be/ITHNbOrPQyM
605.
by cjbprime 5y ago
None were funded PhD theses -- a mix of salaried devs, donated engineering time from partners like Red Hat, work done by volunteers in purchasing countries like Uruguay, and general open source contributions. (I was a long-time salaried dev
606.
by cjbprime 5y ago
> low resolution Do you mean color resolution? The screen pixel resolution was 1200x900, which was unusually high both for a 7.5" screen, and for a 2007 laptop.
607.
by cjbprime 5y ago
Yes, but the Classmate was created in response to the OLPC laptop. From its Wikipedia page: > The Classmate PC represents Intel's competitive response to the OLPC XO, whose unusually low prices and use of AMD chips threatened to ste
608.
by cjbprime 5y ago
Yes, these are the tradeoffs between client side and server side link previews. (If the sending client does it, they could lie; if the receiving client does it it's a privacy leak and attack surface increase; if the server does it then
609.
by cjbprime 5y ago
On the other hand, asking them for money while also not using the domain yourself may bolster their claim that you are "cybersquatting" on their trademark, so talk to a lawyer before doing that too.
610.
by cjbprime 5y ago
If I recall, it helped that the Snowden leaks contained slides claiming that NSA was (at the time of writing) unable to track Tor users. https://www.theguardian.com/world/2013/oct/04/nsa-gchq-attac...
611.
by cjbprime 5y ago
On the very easy end of tech interview style problems, requiring almost no computer science theory yet having concrete solutions, but there's a split between part 1 and part 2 of each challenge, and one of the most interesting parts is
612.
by cjbprime 5y ago
Why do you say that? Go's data races can produce memory corruption through bounds checking failures. I'm not aware of Java having that kind of memory corruption.
613.
by cjbprime 5y ago
There's probably a disconnect between safety culture and PR culture here. It is true that this shouldn't have happened. It's extremely important to work out how to avoid it happening in a general sense. No-one here is angry a
614.
by cjbprime 5y ago
Go is sometimes considered memory unsafe because of the presence of data races. (This is a controversial semantics.)
615.
by cjbprime 5y ago
Why do you think there might be? They just described how the error was their system returning 404s.
616.
by cjbprime 5y ago
Configuration change being the most likely cause of outage is true across all post mortems, not solely Google's. It feels like you're blaming them for not solving something that no-one else knows how to solve either. Facebook ou
617.
by cjbprime 5y ago
4k120 is interesting because gaming consoles have it, but an extremely expensive GPU from a few years ago like 2080Ti doesn't (with HDMI you need HDMI 2.1).
618.
by cjbprime 5y ago
CVEs alert end users that they need to take action to apply updates. That's relevant when a specific npm package contained a known vulnerability. It's not relevant when the npm server contained a known vulnerability. There's
619.
by cjbprime 5y ago
It was originally incorrectly thought to require authentication, but actually doesn't.
620.
by cjbprime 5y ago
No. The original submission described the vulnerability as requiring an authenticated user, but it was later discovered (recently) that it works unauthenticated too, and that's what kicked off this mass exploitation. No user account is
621.
by cjbprime 5y ago
Perhaps worth mentioning that medical malpractice lawsuits are a devastating possibility for doctors (because of license suspension), especially in the US, and so they may have sensible reasons to specifically avoid the phrases "I don&
622.
by cjbprime 5y ago
At the FAANG level, it's sometimes possible to have your offer include a buyout of unvested RSUs which you would lose by accepting the new offer.
623.
by cjbprime 5y ago
No advice, sorry! It's a rare example (for me) of having a skill despite never having actively worked at improving it, and my touch typing form is not good even though the speed is high. I had a lot of classical guitar lessons as a te
624.
by cjbprime 5y ago
I'm a fast qwerty typist (135wpm) who looked into steno but ultimately decided not to put the effort in to learning. I was surprised to discover that learning steno theory is much like learning a new foreign language due to the use of
625.
by cjbprime 5y ago
I'd be surprised if Conservancy holds kernel copyrights directly, but I agree they can represent holders, as I think they have with e.g. Christoph Hellwig vs. VMWare.
626.
by cjbprime 5y ago
https://www.levels.fyi/charts.html Parent commenter didn't write "easily attained", so it's bad form to quote it. FAANG companies hire new grads, and when they do you can see from the levels.fyi charts t
627.
by cjbprime 5y ago
There was a puzzle in the MIT Mystery Hunt a few years ago where teams were given a physical Zip disk (amongst other outdated tech) and had to figure out how to read its contents :)
628.
by cjbprime 5y ago
There's discussion of exactly this here: https://lwn.net/Articles/587028/ I agree with you.
629.
by cjbprime 5y ago
> A single person answered 76k questions about SQL on StackOverflow TFW you forget to add the WHERE clause.
630.
by cjbprime 5y ago
It doesn't even really mean that anymore. From the blog post here: > I've reported four 0-day vulnerabilities this year They're just using 0-day to mean "a new vulnerability finding disclosed to the vendor privately&q

More ›