invokestatic

7 ms·

31.
by invokestatic 4y ago
It’s actually not bad advice, and it feels crazy to say this considering the security of Windows was atrocious 15 years ago. At least the bundled zip extractor receives auto-updates via Windows Update. If a zero day RCE drops in 7-zip, how
32.
by invokestatic 4y ago
It's actually written in the Constitution that we as Americans enjoy many rights that aren't explicitly written in the text. It's in the 9th amendment and 14th amendment due process clause. The 14th, to me, encompasses everyt
33.
by invokestatic 4y ago
> following their failures to force through the GPLv3 such as the EFF Surely you mean GNU and not EFF.
34.
by invokestatic 4y ago
The treasury does not create money. The treasury deposits its money at the Federal Reserve Bank of New York.
35.
by invokestatic 4y ago
I believe this was to mitigate certain PHP code execution and file upload exploits. It used to be fairly commonplace that file upload code was buggy, allowing you to upload arbitrary files into the web root. So people would upload “PHP shel
36.
by invokestatic 4y ago
Nothing stops a hacker from siphoning all the credentials from a login page either. Servers have to handle plaintext passwords regularly.
37.
by invokestatic 5y ago
As explained in the introduction, this escape used only logic bugs. So rust would still be affected
38.
by invokestatic 5y ago
I am still deeply skeptical that this exploit really exists, or if it does, it is extremely exaggerated. I can’t really articulate the reasons why. Part of it is the fact that a lot of the people reporting on it self-admit that they are unf
39.
by invokestatic 5y ago
Depends on the /state/ as well.
40.
by invokestatic 5y ago
I went with OSv (another unikernel) for a previous pet project and, while I really loved the concept, I found the tooling to be immature. This project’s tooling and documentation does looks better so I look forward to trying it out. One thi
41.
by invokestatic 5y ago
Your last point is why I don't really see the hype over RISC-V from an end-user perspective. Companies manufacturing RISC-V processors are free to add whatever private extensions (or backdoors) they want. And unlike software, you can&#
42.
by invokestatic 5y ago
I used to reach for shell scripts to configure servers, then Puppet, then Salt, and then finally to Ansible. Configuring servers declaratively is such a massive improvement over shell scripts. The fact that Ansible is agentless is also very
43.
by invokestatic 5y ago
I’ve really come to the conclusion that OS users are merely policy barriers and not security barriers (or at least, not strong barriers). This seems to be the position of Microsoft as well, given their stance on UAC and privilege escalatio
44.
by invokestatic 5y ago
Uses C# for its scripting API, but crucially the engine itself is written in C++.
45.
by invokestatic 5y ago
I have no qualms with releasing a subset of the data that is properly and irreversibly anonymized. But you have to keep in mind that by introducing “randomness” into the dataset, you limit it’s usefulness to check to make sure the statistic
46.
by invokestatic 5y ago
Under the safe-harbor deidentification guide you posted, all dates must be removed except for the year. If this was done on a clinical trial dataset, the data would be useless. Specifically for the COVID vaccine trial, the “statistic” used
47.
by invokestatic 5y ago
I’m a software consultant for Pharma companies and have worked on projects that used the same kind of study design as the Pfizer COVID vaccine (Kaplan-Meier). “Raw data” is submitted to the FDA in the CDISC format. This format contains a lo
48.
by invokestatic 5y ago
The term “ransomware” is never used to describe malware that steals passwords, thats the point of confusion.
49.
by invokestatic 5y ago
This is still susceptible to ransomware. Ransomware will simply encrypt over each file with its own key, regardless of if the file is already encrypted or not.
50.
by invokestatic 5y ago
Why Affero? Are there cloud linker tools? Or simply because it is one of the most restrictive open source licenses?
51.
by invokestatic 5y ago
I’ve been “daily driving” F35 with Wayland on Nvidia for the last couple weeks and it’s been an… OK experience. The only real show stopper for me now is that GNOME night light doesn’t work (Nvidia issue) and screen sharing in some select ap
52.
by invokestatic 5y ago
One of the things that the Windows kernel does just better than Linux is providing a stable kABI. The argument against that is “just upstream/open source your driver”. Well that’s not always possible. I think this is honestly holding b
53.
by invokestatic 5y ago
Lopez overturned Filburn for the most part. > Doesn't it need to be framed as the government having the right to apply a medical treatment to me against my will? This will be tested in litigation in cases like OP, but remember, thes
54.
by invokestatic 5y ago
It's interesting you bring up both commerce clause and abortion as I'm currently taking a constitutional law class covering both issues. The commerce clause did wildly expand through the 20th century, but I just want to point out
55.
by invokestatic 5y ago
I think it’s actually reasonable for an agency (CMS) to decide eligibility criteria for receiving federal Medicare and Medicaid dollars. This was authority granted to the agency by Congress. Requiring employees to be vaccinated as a conditi
56.
by invokestatic 5y ago
resistFingerprinting has kind of a nasty side effect of making every website think you are in UTC. I put up with it, but I’m sure others may find it annoying.
57.
by invokestatic 5y ago
I am often happy to give up full control in exchange for convenience. WSL2 works fantastic for very quickly getting a Linux box up and is pre-configured for interoperability with Windows. Sometimes I don’t want to mess around getting these
58.
by invokestatic 5y ago
I actually completely agree after upgrading. Very trivial differences over 10. At least it forced me to upgrade from MBR to GPT and UEFI boot.
59.
by invokestatic 5y ago
I’m not really seeing the WireGuard aspect of this. Sounds like TLS would be fine.
60.
by invokestatic 5y ago
Virtualization-backed container technologies are a definite security improvement over traditional containers (including Hyper-V), but most of the measures in this article are still important. Remember, security-in-depth. Virtualization main

More ›