jkrejcha

10 ms·

91.
by jkrejcha 2y ago
PAGE_FAULT_IN_NONPAGED_AREA[1]... was the BSOD that occurred in this case. That's basically the first sign that it was a bad pointer dereference in the first place. (DRIVER_)IRQL_NOT_LESS_OR_EQUAL[2][3] is not this case, but it's
92.
by jkrejcha 2y ago
> and on Linux On Linux, they apparently had done the same thing and caused a bunch of Linux systems to crash[1]. [1]: https://www.neowin.net/news/crowdstrike-broke-debian-and-roc...
93.
by jkrejcha 2y ago
> does the Operating System not have some responsibility in not allowing such outages to happen? No. External drivers are acting as part of the operating system, their responsibility is to follow the rules for kernel drivers. Don't
94.
by jkrejcha 2y ago
It, according to Eric Lippert, was at least partially to fix the problem of vexing exceptions[1] that plagued Int32.Parse. Parse was first and it was kind of an unfortunate design decision to make a almost expected result (parsing to fail)
95.
by jkrejcha 2y ago
It's a feature flag, they're not all necessarily floating point related. As an example though, I still intentionally humorously misread -funroll-loops as funroll loops even though it's f(eature) unroll loops
96.
by jkrejcha 2y ago
In this context, Googlers does in fact mean Google employees. The context from the surrounding talk[1] talks about Google's use cases such as concurrency being a key part of the language, etc. [1]: https://www.youtube.com&#x
97.
by jkrejcha 2y ago
> Will probably be the same for iterators. I think especially because people were already doing iterators, just in a not-really-specified way, as the discussion[1] for this change mentions. (I mean people were kinda doing generics to
98.
by jkrejcha 2y ago
It's good etiquette, for one, and encouraging good etiquette (both on the parts of website operators and website requestors) is a good thing. As a website operator, I've actually increased ratelimits for a service I ran , from a p
99.
by jkrejcha 2y ago
This melding of the sync and the async is actually kinda interesting to me. I know that at least in lots of environments, the sync and async paths are effectively separate for things like I/O[1]. I wondered (and still do for some cases
100.
by jkrejcha 2y ago
GitHub, as I've read[1], uses a different implementation of SSH which is tailored for their use case. The benefits is that it is probably much lighter weight than OpenSSH (which supports a lot of different things just because it is so
101.
by jkrejcha 2y ago
C++ is pretty unique in considering infinite loops without side effects undefined behavior. It's allowed in C[1] as well as pretty much all mainstream programming languages from the low level to the high level (for good reason). Furthe
102.
by jkrejcha 2y ago
As an aside, for those curious, it's the MD5 of the empty string :)
103.
by jkrejcha 2y ago
> Additionally, you have now leaked information related to the traffic of your users. Even if the request is just vanilla HTTP-only, an adversary can see that your users from one region are interested in the weather and can start buildin
104.
by jkrejcha 2y ago
Jason Scott works at the Internet Archive[1]. [1]: https://en.wikipedia.org/wiki/Jason_Scott
105.
by jkrejcha 2y ago
Yeah, it definitely is (especially since SIGIO is a thing :)). Even the Unix signals had more added to them over time (SIGWINCH and friends iirc came from the BSDs). A lot of the mechanisms are very OS specific but I do think they're g
106.
by jkrejcha 2y ago
Unix signals do... a lot of things that are separate concepts imo, and I think this is why there are people who don't like it or take issue with it. You have SIGSTOP/SIGCONT/SIGKILL, which don't even really signal the
107.
by jkrejcha 2y ago
The one that I've always found odd is everything deciding to dump itself in the user profile directory (this is even something that stuff like VS Code does). XDG_CONFIG_HOME (|| ~/.config) and friends has been a standard for a lon
108.
by jkrejcha 2y ago
>180.101.88.232 Amusingly I recognize those IPs by that specific prefix as well, basically that entire /24 (at the very least) appears to be an absolutely massive source of the SSH login attempts. Small world, I guess
109.
by jkrejcha 3y ago
So I think the WinForms editor thing occurs because of how windows are drawn rather than something related to Visual Studio itself. (You could see this more easily on Windows XP or whatever where if you decided to change from Luna to Oliv
110.
by jkrejcha 3y ago
\r\n is a standard though (in fact, it's arguably more of a standard than what Unix and C did), so you really can't just do something different and expect everyone to follow. (For example, most text-based internet protocols such a
111.
by jkrejcha 3y ago
Carriage Return (\r) - move to start of line Line Feed (\n) - move down 1 line Essentially, when you're sending commands to teletypes, that's how you'd have to do it.
112.
by jkrejcha 3y ago
Yeah, conhost.exe is the old terminal emulator effectively (cmd.exe being a shell). Before that, csrss.exe handled terminal emulation (which is why console windows weren't themable[1]). [1]: https://devblogs.microsoft.com&#x
113.
by jkrejcha 3y ago
Above your security context, no, but you can definitely WriteProcessMemory any other process that is in your same security context or lower (something similar holds for ptrace, although remember that SUID/SGID binaries are running not
114.
by jkrejcha 3y ago
You can login as Administrator if you enable the user account. You can also just turn admin approval mode to "never ask" in the Control Panel. While you can't login as SYSTEM (since it's not really a user account), you c
115.
by jkrejcha 3y ago
Fwiw, gets() was actually removed in C11 because of it's inherit security problems. :) But aside from that, I think it's just a different style. Waiting 10 years from deprecation to remove a deprecated thing might be required with
116.
by jkrejcha 3y ago
Yes, they're almost certainly going to do it a 3.x release. I think in some senses these backward compatibility breaks have already happened. I remember that Google got bit by async becoming a keyword in I think Tensorflow. Generally a
117.
by jkrejcha 3y ago
Yes, a lot of tools, including some like w3af do: https://github.com/andresriancho/w3af/blob/fb345a5/w3af/core... This one sends the payload reversed as a test to see if the delay is due to the SQLi