costco

12 ms·

121.
by costco 3y ago
Did you decide on a hypervisor instead of an emulator for overhead reasons? I don't work there but I heard Microsoft has something called tkofuzz which similarly emphasizes determinism but uses Bochs internally.
122.
by costco 3y ago
They can. You can also subpoena them for information on an account, there are literally lawyers with blogs talking about how to do this. The people complaining essentially think that they should have the right to take anything they want d
123.
by costco 3y ago
I mean, it's conceivable that could happen down the line but it would break most of the current Internet. Also the rule explicitly says its for US providers. However, the government really loves the extraterritorial enforcement angle
124.
by costco 3y ago
The penalties for violating that are also not very high at the scale of small internet businesses. Violations of the proposed rule are treated as violations of IEEPA which is far more serious.
125.
by costco 3y ago
This is about KYC for servers. There are plenty of reasons to think that this will be completely ineffective because foreign providers are under no such obligation. It's also incredibly misguided because the providers that generally
126.
Commerce Department Proposes Imposing "Know Your Customer" on IaaS Providers(natlawreview.com)
144 points by costco 3y ago|137 comments
127.
by costco 3y ago
This will be required in the US for all providers within a year unless a sufficiently large number of people comment on the Commerce Department's proposed rule: https://www.natlawreview.com/article/us-department-co
128.
by costco 3y ago
OSS-fuzz is great in many cases but as this post hints at it seems like a lot of the time the fuzzers miss things because no one actually reviews the coverage info. Not in this case, but sometimes it's like someone just found the func
129.
by costco 3y ago
Well doesn't printf also buffer output using a buffer of size BUFSIZ?
130.
by costco 3y ago
⠀
131.
by costco 3y ago
That's true I did not think of that.
132.
by costco 3y ago
Just do type Username string And replace return Username{username} with return Username(username)
133.
by costco 3y ago
I got into University of Michigan which I think is T25. I would not have gotten into an Ivy. But I'm just saying that based on my experience for a large number of people, their high school extracurriculars are "fake" in that
134.
by costco 3y ago
Extracurriculars are by and large a scam. I became vice president of a few clubs, started a UNICEF chapter at my school, etc. But I made almost 0 impact on the world because we only raised like $200, most of which was from me and my famil
135.
by costco 3y ago
What does the new SAT even measure? It's just some Common Core© Algebra 1 and 2 knowledge (also basic trig), reading comprehension, and a section where you read sentences in your head and see if they sound right. You can get over 10
136.
by costco 3y ago
I mean it's enough to make at the most a few thousand a month selling residential proxy plans on crime forums. Not really significant. There are orders of magnitude larger botnets (some 100k, 400k+ in size) you can read about on htt
137.
by costco 3y ago
What if a hospital was disconnected from the Internet because it has some insecure IoT device in it? The truth is that this "enforcement action" will make absolutely 0 difference because these devices were just used as proxies to
138.
by costco 3y ago
Facebook or Snapchat or whatever did not create any of these tragedies. People using these services did. A handful of victim families and lawyers looking for a payday weaponized these stories and created a cottage industry of extorting tec
139.
by costco 3y ago
How is buying gift cards money laundering tactics? I don’t think either one of us will persuade the other so might as well end this here.
140.
by costco 3y ago
People accept crypto all the tine. I use it to pay for servers, donate to open source projects, etc. You can buy gift cards or Visa cards if you really want with it. For coins that are liquid you can sell billions of dollars of it.
141.
by costco 3y ago
The Commerce Department is asking for mandatory KYC for cloud services. This is weird and the kind of thing that authoritarian countries do. Why must all actions be tied to a registered identity?
142.
by costco 3y ago
I believe it. On Ethereum for instance before lots of competition came whoever was behind this address made literally hundreds of thousands of dollars a day in 2021 doing atomic arbitrage. You can see this graph of their balance here: the
143.
by costco 3y ago
Maybe it's possible to have a server somewhere without having to trust your provider? Use this in tandem with chassis intrusion detection, epoxy, and probably other things I'm not aware of.
144.
by costco 3y ago
I wonder how many bugs like this are found with and without fuzzing. I don't really know very much about this area but the diffs to fix these bugs are always a couple of lines and it's always very subtle. You'd basically ha
145.
by costco 3y ago
Exodus sells vulnerabilities to the government.
146.
by costco 3y ago
There is no copying of memory going on, the a[i: i+4] or a[i: i+4: i+4] slice references the same underlying data as in a.
147.
by costco 3y ago
Protip: librespot doesn't actually require premium Just modify the authentication code in https://github.com/librespot-org/librespot-golang/blob/maste... to look something like this: packet :=
148.
by costco 3y ago
That's what the EFF does.
149.
ShapeSecurity's JavaScript VM: Part 1(botting.rocks)
1 points by costco 3y ago|0 comments
150.
by costco 3y ago
https://www.ipxo.com/

More ›