f-

11 ms·

91.
by f- 13y ago
It's hard to win bidding wars with nation states. It's even harder to make such victories matter: after all, they can always switch to doing security research and exploit development in-house. Instead of trying that, we're ca
92.
by f- 13y ago
In essence, we have a reward structure that we think is internally consistent, attracts the right sorts of research, and makes an optimal use of our resources - and we try to apply it fairly. Here, we handled the communications poorly, and
93.
by f- 13y ago
Motivations vary, and it's not for everyone - but we're quite happy with the participation we're getting out of it. FWIW, the average amount is sort of meaningless: we pay between $3k and $20k for high-impact bugs. There are
94.
by f- 13y ago
I think it's a valid security bug report. We welcome all reports of security vulnerabilities, we try to fix them quickly, and we credit the researchers - but we offer rewards only for higher-impact flaws. You can check out this page fo
95.
by f- 13y ago
Hey folks, I am one of the co-founders of the Vulnerability Reward Program at Google. It's one of the longest-running and most generous programs of this kind: since 2010, we have paid out around $1M in rewards for more than 1,500 quali
96.
by f- 13y ago
Well, it's actually a bit more complicated than that. The bug is definitely something we wanted to know about, and we're thankful for the report. That said, there are some constraints that we put in place for the reward program to protect r
97.
by f- 13y ago
I put these together a while ago, feel free to self-certify yourself: http://lcamtuf.blogspot.com/2012/06/this-page-is-now-certifi...
98.
by f- 14y ago
That's true to some extent, although it's useful to keep two things in mind: 1) The improvements in the output of FDM printers is in good part due to switching to lower-strength materials (e.g., ABS -> PLA). It's great news if you want
99.
by f- 14y ago
That's actually touched upon in the article (I'm the author). In short, it's possible - but not given: 1) The culture of knowledge- and-design sharing has been prevalent in the DIY community for decades, but hasn't produced anything compara
100.
by f- 14y ago
There are quite a few mills priced comparably to 3D printers, e.g.: http://www.rolanddga.com/products/milling/imodela/ https://sites.google.com/site/cncdiyorg/2520 https://probotix.com/FireBall_v90_cnc_router_kit/
101.
by f- 14y ago
I'm from the Internet, and I can confirm that he promises that this file is not malicious.
102.
by f- 14y ago
Golden-mantled ground squirrel.
103.
by f- 16y ago
The key point is that there are dozens of serious vulnerabilities found in Firefox and Chrome every year. The availability of a vulnerability at an exact time in an exact place is not a good way to compare such broad trends.
104.
by f- 16y ago
It focuses on the largely insignificant debate over the merits of one syntax structure over another. It's essentially the vi versus emacs of programming.
105.
by f- 16y ago
The original "considered harmful" article was essentially one big nitpick, so this use is probably quite appropriate.