juliusdavies

7 ms·

31.
by juliusdavies 3y ago
Isn’t the appraisal offer they got an actual real offer to buy the car right there on the spot for cash from the appraisal company? If that’s the case then it’s not really a fair offer. It’s an offer the appraisal company is confident it ca
32.
by juliusdavies 3y ago
Impossible here because the exploit was carefully engineered to be unreplayable and NOBUS (nobody but us) so it couldn’t go viral. Even if you intercepted a complete tcp byte trace of the attack there was nothing you could do with that to
33.
by juliusdavies 3y ago
I asked Ariadne Conill from the Alpine project about this. She says they don't static link. Here's a copy/paste of her response from LinkedIn ( https://www.linkedin.com/feed/update/urn:li:activity:718
34.
Ldd /usr/sbin/sshd – Alpine vs. Ubuntu for exploitability of CVE-2024-3094(mergebase.com)
10 points by juliusdavies 3y ago|7 comments
35.
by juliusdavies 3y ago
They refused to divulge how they knew
36.
by juliusdavies 3y ago
They need an "Extreme Resilience" check where the maintainer hires a red team of elite security analysts that work full time to try and breach the project. Projects get 1 point for each full time security analyst that worked on t
37.
by juliusdavies 3y ago
Litigation including criminal prosecution
38.
by juliusdavies 3y ago
Yes, but hopefully it does protect Lasse Collin.
39.
by juliusdavies 3y ago
Lucky the XZ license switched from "Public Domain" to 0BSD in February (just before these 5.6.0 and 5.6.1 releases)! 0BSD has no clauses, but it does have this: > IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
40.
by juliusdavies 3y ago
My sense was this backdoor gets to execute whatever it wants using whatever "user" sshd is running as. So even if root logins are disabled, this backdoor doesn't care.
41.
by juliusdavies 3y ago
Every Linux box inside AWS, Azure, and GCP and other cloud providers that retains the default admin sudo-able user (e.g., “ec2”) and is running ssh on port 22. I bet they intended for their back door to eventually be merged into the base Am
42.
by juliusdavies 3y ago
Last 5000 years. Personally I don't care about AI, but there would be no AI without Wikipedia.
43.
by juliusdavies 3y ago
I always set this: SET enable_seqscan = OFF;
44.
by juliusdavies 3y ago
Does the pope count as a precedent? Lots of donations head the pope’s way every day.
45.
by juliusdavies 3y ago
I think there is a way to make APIs copyrightable: 1.) Hire a bonafide poet (e.g., someone with an MFA degree in Creative Writing). 2.) Have them write Haikus on salary for your company ("work made for hire" under copyright law)
46.
by juliusdavies 3y ago
This reminds me of the blog post, "People can read their manager's mind," by Yossi Kreinin. https://yosefk.com/blog/people-can-read-their-managers-mind.... In particular: "Corollary 1. Who can, and
47.
by juliusdavies 3y ago
Pipe/exec into GPL generally considered okay (not a derivative work) What you described only okay with LGPL
48.
by juliusdavies 3y ago
<table align=“center”><tr><td><div>Here you go!</div></td></tr></table>
49.
by juliusdavies 3y ago
I wrote this and wish more people followed this specific git advice: https://mergebase.com/blog/doing-git-pull-wrong/ TLDR: don’t be afraid of rewriting history but ALWAYS do “git pull -r —autosquash “
50.
by juliusdavies 3y ago
Very appropriate post for Shrove Tuesday !
51.
by juliusdavies 3y ago
I recently streamed the Taylor Swift Eras concert movie through Apple TV (Dolby Atmos) and Amazon Prime (Dolby DDS I think?) to compare (through a Denon X6200W with a 9.1 speaker setup). Yes, I paid the $19.89 two times. For science. The a
52.
by juliusdavies 3y ago
I think the original author (or their heirs) can take away that MIT license during a special “copyright termination” window 35 years after granting it at least in the USA.
53.
by juliusdavies 3y ago
Try buying some ads through Google ads and you might lose some of your optimism. I want to run ads and I am unable to. Chrome never finishes loading ads.google.com so I switched to Firefox. It loads successfully on Firefox but I cannot ge
54.
by juliusdavies 3y ago
This is like watching someone arguing with the French Laundry staff that the cooking on the USS Ronald Reagan is still technically good cooking.
55.
BC police took DNA from Kurdish community in tea sting to solve murder(cbc.ca)
1 points by juliusdavies 3y ago|0 comments
56.
by juliusdavies 3y ago
The CBC version of this story is much more detailed: https://www.cbc.ca/news/canada/british-columbia/tea-cup-stin... For example: > In December 2022, Crown lawyer Porte told the court that 150 cups were co
57.
by juliusdavies 3y ago
Ah! What you are saying honestly enriches my understanding of this line in the piece I cited: > When it comes to war with Israel, Nasrallah is the ultimate decision maker.
58.
by juliusdavies 3y ago
I've read that Hezbollah does not take orders from Iran, and that Nasrallah's thinking and decision making on strategy is given a lot of weight (just like Britain did not take orders from USA in WW2): https://consortium
59.
by juliusdavies 3y ago
I consider Wikipedia to be the last standing wonder of the WWW (world wide web). - Google search results get worse every year. - Stackoverflow lies in ruins (albeit the ruins are still useful). - ICQ/Gtalk/AIM completely dead and
60.
Beam Me Out of This Death Trap, Scotty (1980)(iasa-intl.com)
83 points by juliusdavies 3y ago|57 comments

More ›