geofft

31 ms·

211.
by geofft 5y ago
Anecdotally in that people recognized simulated phishing attacks from the vendor, or that they recognized real phishing attacks, including high-effort spear-phishing (like the one in TFA)?
212.
by geofft 5y ago
"Criminals would be in favor of this" is a discussion-killing point to make in basically anything about crime and law. Some other things that criminals would be in favor of: - the right to not be obligated to testify against thems
213.
by geofft 5y ago
Is there any evidence that security awareness training actually prevents employees from getting phished?
214.
by geofft 5y ago
Eh, I think this framing discounts the fact that sober moderation and extremism tend to be present in every human endeavor, and have always been. Some people make their country's traditional food on holidays; some people garb themsel
215.
by geofft 5y ago
Yes, this is called "fallible allocations." You add methods with the "try_" prefix that work like the existing methods, except they return a Result which fails if it's out of memory instead of panicking. We have a l
216.
by geofft 5y ago
Yeah, I think what specifically happened here is that they made the user realize (correctly) that they were breaking it through their own fault, and therefore culpability was not on the vendor. Which is a great trick if you can do it, but w
217.
by geofft 5y ago
https://twitter.com/jeffdean/status/1282882643277656065 seems to explain it - "varz" is one of the "z pages" (a convention that by now has leaked outside Google), so it's handled by the Go
218.
by geofft 5y ago
I don't think the comment you're replying to is talking about justification or justice, just rationality. If I say "Your bike lock doesn't have to be unbreakable, it just has to be strong enough that a rational thief wil
219.
by geofft 5y ago
There's a whole lot of other possible confounding hypotheses here: more frequent outdoor activity, increased ventilation in buildings, increased sunlight, lower population density, lower spread from international travelers, less robust
220.
by geofft 5y ago
$12 per person per what unit of time? $12 gets you like three tablets. That's according to some claimed protocols enough to (probably) get you out of the hospital alive, but that's not a long-term preventative. Meanwhile, the gove
221.
by geofft 5y ago
FROM alpine:latest
222.
by geofft 5y ago
Because in order to end a debate and quantify what "proper research" is, you have to have rules for the debate and establish in advance what proof is enough. In the eyes of the world governments, the debate is already over. There
223.
by geofft 5y ago
I'm skeptical of the "there's no money in it" angle. Ivermectin advocates seem to be suggesting that you take it as a preventative measure for covid - i.e., that the way to stop the pandemic is to have everyone take iv
224.
by geofft 5y ago
I don't know about your state, but in my state, rich people have influence at the state level too. It doesn't seem axiomatic to me that rich people will always exist (I'm not sure I even agree that poor people will always e
225.
by geofft 5y ago
The most coherent plans in recent times to do exactly that came from Elizabeth Warren. It would have solved the problem elegantly. But people are too partisan (and too fractally partisan within their parties) to listen to a good idea from
226.
by geofft 5y ago
I'm not sure I see where the article talks about poor time management?
227.
by geofft 5y ago
In a free country? Yes.
228.
by geofft 5y ago
Oh, I see. But if it was UTF-8 it would have worked... I guess the problem is that JetBrains is generating the file in (e.g.) Windows-1252, and Python needs to be told that? Does it work if you set the environment variable PYTHONENCODING to
229.
by geofft 5y ago
Not without a sandbox escape, at which point you often have more juicy targets without even getting to root (e.g., bank account credentials). The attack requires the ability to open a terminal device and do strange ioctls on it. Web browser
230.
by geofft 5y ago
Python 3 usually handles this correctly, and I'm a little bit confused what's going on in the article, exactly. For UNIX path names (and other OS data like environment variables), Python uses the "surrogateescape" error
231.
by geofft 5y ago
No, it should not, because it is impossible for the check to fail in valid C. A use-after-free is invalid C. Type confusion is invalid C. If you have the function void free_ws(struct ws *ptr) { ptr->magic = 0xdeadc0de;
232.
by geofft 5y ago
Yes, but this is by far the least weird type of optimization, and the one you'd least want to turn off. It's the sort taught in undergraduate compiler design classes. Here's a piece of code that would go slower if you turned
233.
by geofft 5y ago
It's a live write to a valid pointer that's never read from, so it can't have any influence on the program behavior if the rest of the program is valid C. Compilers are free to optimize that (and they basically need to for
234.
by geofft 5y ago
This only protects you against unintentional use-after-free. If a use-after-free of struct ws is a thing you're worried about an attacker intentionally causing, in order for this to be useful, the attacker needs to control one of tho
235.
by geofft 5y ago
The commit messages are pretty unclear about whether there's any security impact: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin... https://git.kernel.org/pub
236.
by geofft 5y ago
Kubernetes does simplify and abstract - just like C++ simplifies and abstracts compared to writing assembly. :) In both cases, the scope of what you can do expands significantly, which means that the systems you build with the higher-leve
237.
by geofft 5y ago
IMO Kubernetes is of the level of complexity of a programming language or an OS. It's just at a larger scope, and we don't have a lot of things in that space, so we don't have well-defined concepts like "language" o
238.
by geofft 5y ago
Michael Kail worked for Netflix as VP of IT ops. Netskope wanted Netflix to be a customer. Netflix (or, more specifically, whoever they talked to at Netflix) said "Sure, we will buy your product, but you have to pay Michael Kail."
239.
by geofft 5y ago
True, but this doesn't apply to the article: > The latest release comes from NAEP’s 2020 assessment of long-term trends, which was administered by the National Center for Education Statistics to nine- and 13-year-olds before COVID-
240.
by geofft 5y ago
Yeah, it's a pretty deadly disease. Vaccines work by preparing your body to fight a disease more easily if you get it. They don't physically prevent you from getting it in the first place (that's the effect of physical barrie

More ›