hun3

9 ms·

91.
by hun3 2y ago
(FYI: Older versions of the PDF reader might have critical parsing vulnerabilities that affect system security. You're probably fine if you only download trusted PDFs, but it's best to take caution.)
92.
by hun3 2y ago
(FYI: A noise-cancelling headphone works best for hums and other "repeating" noise; construction noise is much less predictable for the headphone to get ahead)
93.
by hun3 2y ago
> It's easy to get stuck in the "data driven" mindset, as if data was the be-all and end-all, and not just a stepping stone towards an ever more refined mental model. Yes. "Data driven" either includes sound stat
94.
by hun3 2y ago
Either they have learned and Left the noob status, or they never really got it Right.
95.
by hun3 2y ago
I think the author actually meant "Good code is rarely read twice ."
96.
by hun3 2y ago
> I kind of wish that this pointer casting required unsafe, just because this code should send up red flags, and probably deserves a close look during code review. How about a new lint instead?
97.
by hun3 2y ago
You could scramble/authenticate the signals though, if you don't mind the huuuuuuuge performance penalty.
98.
by hun3 2y ago
C has this problem too: see signal-safety(7). > * If a signal handler interrupts the execution of an unsafe function, and the handler terminates via a call to longjmp(3) or siglongjmp(3) and the program subsequently calls an unsafe func
99.
by hun3 2y ago
Right, you need at least some dm-linear device mapper device in between to ensure a device is RO I think. Also, ext4 has separate "noload" option that actually instructs it not to touch the disk (ofc relying solely on "ro,n
100.
by hun3 2y ago
This can be mitigated somewhat by not having ORs at top level . Of course UNION [ALL] does often yield better performance, yes.
101.
by hun3 2y ago
> node.js application with 100000 dependencies where an update from package version 34.2.4 to 34.2.5 breaks everything because the developers decided to change the order of parameters in one function just for fun. aka "totally unkno
102.
by hun3 2y ago
Relevant: https://blog.rust-lang.org/2024/04/09/cve-2024-24576.html
103.
by hun3 3y ago
Carelessness could arguably a part of operation: testing/probing how thoroughly the community scrutinizes communication from untrusted individuals.
104.
by hun3 3y ago
As a workaround, split into multiple crates. Disclaimer: I concur that this is merely a workaround, not the real fix
105.
by hun3 3y ago
> First say which of my above statements you refer to. Nothing in particular. > Also, why should I not be here? You have any problem with it? Not at all. You might be reading too much into my comment, though.
106.
by hun3 3y ago
That makes sense. Why are you here, though?
107.
by hun3 3y ago
Karma is unimportant, but downvotes fade away the comment. There is little point in making a comment that will disappear anyway, since no one will see it.
108.
by hun3 3y ago
Sort of like defence against possible downvoters. If OP went along the "father, son, and donkey story," then the OP won't have posted it at all.
109.
by hun3 3y ago
Norway. https://hitchdev.com/strictyaml/why/implicit-typing-removed/
110.
by hun3 3y ago
https://github.com/sindresorhus/awesome might be a reasonable starting point for anyone looking for software curations.
111.
by hun3 3y ago
You're generally right, but I wasn't talking about the length of signals. I was talking about if long period of "high" can be distinguished from long period of "low"--DC offsets.
112.
by hun3 3y ago
This is probably irrelevant. The audio is analog (requires DAC to decode into bitstream) and is transmitted with some fixed frequency (44.1kHz or 48kHz), without any particular synchronization.
113.
by hun3 3y ago
> Noo-ot really except in a Turing-tarpit sort of way. That means bash has applications (e.g., batch processing and file management) that JS can't be (easily) used for. And they never said bash is bad at them. That...proves my point
114.
by hun3 3y ago
> it’s also a fairly strong contender as a programming language in the paradigm of many pipelined imperative processes—probably because that paradigm remains largely unexplored. The paradigm is called point-free programming[1], right? I
115.
by hun3 3y ago
You can replace bash with JS. Scripting is their common application domain. Can you replace JS with bash, though? If the answer is "no," that means JS has applications (e.g., servers and web clients) that bash can't be use
116.
by hun3 3y ago
> drive-by exploit It's worth noting that UAC is not a security boundary[1]. Sure, a safeguard mechanism, but not a security feature against stealth rootkits trying to escalate from non-privileged environment. [1]: https:/&#x
117.
by hun3 3y ago
Great work! For unobfuscated or lightly packed ones, I guess your approach could mostly work. One question: how do you detect when a binary is intentionally made to statically look similar to one binary, while its behavior actually mimics a
118.
by hun3 3y ago
> There are products (Nexus Firewall) that can check dependencies for vulnerabilities Products can only do best effort scanning for known patterns of vulnerabilites. Those are only added after someone (or something) discovers it and
119.
by hun3 3y ago
Maybe it could also explain why we decided on hexadecimal radix e.g., each digit has 2^4 possible values.
120.
by hun3 3y ago
Nit, but specifically on this: > call 1f > > 1: <next instruction> It's worth noting that "call $+5" degrades performance if used improperly. Consider: call 1f 1: pop %eax See the prob

More ›