cjbprime

9 ms·

91.
by cjbprime 2y ago
> To access these pages, viewers typed the three-digit page number required into their TV remote control and waited a few seconds for information to appear on the screen. You can tell from "a few seconds" that the author of thi
92.
by cjbprime 2y ago
Why are distros allowing CUPS to listen on all interfaces, then?
93.
by cjbprime 2y ago
The attack can overwrite the real printer with a fake one.
94.
by cjbprime 2y ago
It is untrue that every buffer overflow can be exploited. We won't know whether these can be until someone tries.
95.
by cjbprime 2y ago
Are you sure? E.g. the blog post mentions a one-byte read overflow, which is unlikely to be directly exploitable.
96.
by cjbprime 2y ago
I'm really surprised this was downvoted. Running e.g. mitmproxy and pointing your Python process at it is absolutely the way to do this.
97.
by cjbprime 2y ago
If you have a large client population, you could try something where you pick e.g. ten clients at random to build-and-upload the same artifact, and if they all come up with exactly the same artifact, and collusion between them is sufficient
98.
by cjbprime 2y ago
Ah, this designation appears to be outdated -- it was rescinded a few months ago, according to https://www.haaretz.com/israel-news/2024-06-30/ty-article/ar...
99.
by cjbprime 2y ago
Do you have a source? I didn't think any of the 22 countries in the Arab League considered Hezbollah to be a terrorist organization (either its political branch or its militia!). Many of the countries you mention consider the militia t
100.
by cjbprime 2y ago
I don't think it's reasonable to say that the purpose was to disable those electronic devices. The devices were compromised and modified to include explosives. They could have been modified with a remote kill-switch that destroyed
101.
by cjbprime 2y ago
I suppose that depends on how many of the injured people were bystanders, as opposed to being the people who owned the pagers, do you agree?
102.
by cjbprime 2y ago
Maybe share some examples of searches you'd use?
103.
by cjbprime 2y ago
I worked on OLPC, and wouldn't assign much fault to Yves (although there was a heavily publicized hand crank on the side of the first designs that turned out to fail to a few minutes of serious thought). Like you're imagining, the
104.
by cjbprime 2y ago
I think you're maybe missing the main motivation, which is that "correctly tuned" overtones are in nature, in physics, in all sounds -- they aren't a social construct, unlike everything else about music. I think the arg
105.
by cjbprime 2y ago
One more Jacob Collier mention: also generally releases albums using just intonation, I think, and especially does hand-tuning of thirds etc. I like his description of having to "monkey swing" when an e.g. flattened third needs to
106.
by cjbprime 2y ago
I was following the explanation up until: > This closed the aforementioned circuit, but only if the trigger was currently being pressed. As a result, the light in that zone would flare right as the target passed over it. The sound effect
107.
by cjbprime 2y ago
Windows 95 is an "unfashionable" OS which has not received any security updates since 2001.
108.
by cjbprime 2y ago
Probably not, if you're implying remote code execution -- it was an out of bounds READ operation, not write, causing an immediate crash. Unlikely to be useful for anything other than taking systems offline (which can certainly be usefu
109.
by cjbprime 2y ago
It's worse than that -- if your strategy actually was to use the customer fleet as QA and monitoring, then it probably wouldn't take you an hour and a half to notice that the fleet was exploding and withdraw the update, as it did
110.
by cjbprime 2y ago
Which is a non-trivial amount of fault, given that Apple disallows the equivalent behavior on macOS.
111.
by cjbprime 2y ago
There should be no "post-QC". You do gradual rollout across the fleet, while checking your monitoring to ensure the fleet hasn't gone down.
112.
by cjbprime 2y ago
Is your employment at-will, then? If it is, you can be asked to leave for any reason as long as it is not a legally protected one (like discrimination). What does it mean to "fight" the termination?
113.
by cjbprime 2y ago
You might want to mention which country you're in. In some countries reasons need to be given for dismissal. In some countries you can be dismissed without cause. In some countries when you are dismissed without cause you are eligible
114.
by cjbprime 2y ago
LLMs are lossy compressors. They aren't databases. The training process had enough signal to allow for recognizing the author, but not for memorizing the title.
115.
by cjbprime 2y ago
For the researcher? Because the vendor has a responsible disclosure program. Because they'd rather know about the bugs. (As for the vendor, I'm sympathetic to the argument that there should be vendor liability under some circumsta
116.
by cjbprime 2y ago
Not from here?
117.
by cjbprime 2y ago
A request to a bank that doesn't use TLS would be near-criminal negligence (by the bank) in itself. If the request does use TLS, then even a compromised router should be unable to decrypt it. TLS is end-to-end encryption. If the reques
118.
by cjbprime 2y ago
That doesn't provide evidence for or against it being another human's data. It could be e.g. synthetic data from its training set that it is repeating, LLMs like to do that.
119.
by cjbprime 2y ago
People are always pushed out after a failed coup attempt. It signifies the end of a working trust relationship. The fact that they were pushed out afterwards does not provide evidence for whether their reasons were good ones.
120.
by cjbprime 2y ago
I think those are illegal now. They have been in California for a long time. https://www.ftc.gov/news-events/news/press-releases/2024/04/...

More ›