freeqaz

34 ms·

511.
by freeqaz 4y ago
A lot of these companies have very reasonable P/E ratios now. Microsoft is sitting at around 27, Apple 25, and Facebook 15. None of those strike me as "inflated". Those are normal values for the stock market (20-25). Are inve
512.
by freeqaz 4y ago
I was wondering if it was R or Datalog. Thank you! I did something similar to this with SQLite once. That was fun.
513.
by freeqaz 4y ago
Hopefully that helps the fires this year when it eventually gets hot, at the very least! It's nice to not have to worry about drought, as well. (That's a huge reason why I moved to Seattle from SF.)
514.
by freeqaz 4y ago
I spent a month down there once. Definitely very nice! I found the food wasn't that great though, unfortunately. What makes you want to live there?
515.
Arch Linux Installation Guide for Developers(lunasec.io)
1 points by freeqaz 4y ago|0 comments
516.
by freeqaz 4y ago
Thank you very much!
517.
by freeqaz 4y ago
This page just shows an empty white page for me on mobile Safari. Is the site down? Does anybody have an archive link?
518.
by freeqaz 4y ago
Nice research. Thank you for sharing it!
519.
by freeqaz 5y ago
Pipewire implements the APIs of Pulse, Alsa, and Jack. So instead of having to juggle between them all, you just have one service to manage and it all just works. It only took a few lines for me to switch and I've never had a Linux aud
520.
2018 Rome Escalator Accident(en.wikipedia.org)
2 points by freeqaz 5y ago|3 comments
521.
by freeqaz 5y ago
Semi-NSFW video of this incident here: https://youtu.be/KaGNZi36znA How do escalators even fail like this? This really makes me think through the engineering challenges that we face when designing critical infrastructure.
522.
LunaSec (YC S19) is hiring a growth lead to help build our GitHub community
1 points by freeqaz 5y ago
523.
by freeqaz 5y ago
I wonder where the line is for "fair use" or not? Going a step further: even "public domain" music often gets taken down because there are commercial remixes of it. So even if Disney gets mad, somebody wanting to prevent
524.
by freeqaz 5y ago
Dumb question: Do you mean "Fast" as in speed of execution, or "Fast" as in compile times? (Or maybe you mean both? I haven't used Rust.) Might be worth clarifying because I immediately got excited about a faster Ty
525.
Spring Framework RCE (CVE-2022-22965) NMAP (NSE) Checker (Non-Intrusive)(github.com)
1 points by freeqaz 5y ago|0 comments
526.
by freeqaz 5y ago
If you know of any bands like Sun O))) that are touring still, I'd love to have their names. I'm in the Seattle area and very much interested in interesting live concert experiences! (With earplugs)
527.
by freeqaz 5y ago
Check the post again. We made a repo with a full end to end vulnerable app and POC
528.
by freeqaz 5y ago
I'll ask my engineers to post the one he wrote. He did put more details into the article, so go check that. Here is a repo with a POC though: https://github.com/TheGejr/SpringShell
529.
by freeqaz 5y ago
Thanks for pointing that out -- I didn't realize we missed adding the link! It's in a repo on GitHub, and we were banging on it to verify the exploit prerequisites. I'll go do that as soon as I sit down again.
530.
by freeqaz 5y ago
Nobody wants to hand a bunch of blackhats a working exploit without there being a patch available. But yeah, at some point you have to accept that the blackhats have it and it's "more ethical" to just start handing out the ex
531.
by freeqaz 5y ago
LunaSec founder here. I can understand the suspicion. It's the right mindset to have when looking at CVEs, in general, because 99% of them are overblown. The first title I wrote for the blog post was "There is no vuln" but I
532.
by freeqaz 5y ago
(Author that named "Log4Shell" here) FYI, this is confusing because there are 2 different RCEs that have been published within the last 24 hours. One has a CVE and the other doesn't. OP's post by Praetorian is discussing
533.
Spring4Shell: Security Analysis of the latest Java RCE '0-day' vulnerabilities(lunasec.io)
5 points by freeqaz 5y ago|1 comments
534.
by freeqaz 5y ago
(Author of the original "Log4Shell" post[1] here) An RCE in Spring was posted[0] about last night on HN but a ton of people have been getting confused by the fact that there are TWO new vulnerabilities being discussed. I just wrot
535.
by freeqaz 5y ago
Thanks for the detailed info about this! I'll go poke my head in on this again now that I'm awake and verify all of this. Some people are claiming POCs so I'm very curious to dig in! Just because something is popular doesn&#x
536.
by freeqaz 5y ago
This is the pattern that's in the Spring code, which is why I wrote it there. I agree with you though that it seems non-obvious. My thought is that it's possible to build a payload that is able to go from "serialize(string) -
537.
by freeqaz 5y ago
(Author of the OG Log4Shell post here) I'm poking around at the Spring code and posting some notes about what I find on Twitter[0]. I'm not a Java expert so if anybody feels like chiming in to help connect the dots for others, ple
538.
by freeqaz 5y ago
That's my take on it from reading so far. That's a massive mitigating factor for exploitation, imo. Log4Shell was painful because people were using the library as it was intended to be used (a logger takes strings that are possibl
539.
by freeqaz 5y ago
Containers can help to prevent some attack scenarios, ie by making it easier to "re-deploy" a container that has had all of it's files deleted, but they don't "sandbox" code very effectively against a sophistic
540.
by freeqaz 5y ago
Edit: Lol, I was looking at my previous submissions to HN and I noticed that I'd submitted[3] LavaMoat just a few weeks ago! Maybe with this recent Protestware stuff going on, that project can get a few more contributors wanting to hel

More ›