kkirsche

10 ms·

91.
by kkirsche 5y ago
Great resource for anyone interested in this. It’s really enlightening: https://pomb.us/build-your-own-react/
92.
by kkirsche 5y ago
It’s the most demoralizing aspect as even just typing the standard library online documentation and examples (such as Emil autoname example) would be extremely valuable.
93.
by kkirsche 5y ago
Git everyday’s web version: https://git-scm.com/docs/giteveryday Git tutorial’s web version: https://git-scm.com/docs/gittutorial
94.
by kkirsche 5y ago
“Type aliases and interfaces are very similar, and in many cases you can choose between them freely. Almost all features of an interface are available in type, the key distinction is that a type cannot be re-opened to add new properties vs
95.
by kkirsche 5y ago
I’d highly recommend using the ProxyJump directive in your ssh configuration file to avoid the need to track which host goes where manually.
96.
by kkirsche 5y ago
Your company may care about it. Endpoints are as common a vector for attacks as the server is. As a penetration tester, I’ve used DoS vectors before to make a developer think they needed their password to kill an app, and stole their creden
97.
by kkirsche 5y ago
It’s not actively harmful. No one is forcing you to do anything. If your team sets the standard as no security issues that’s a team workflow issue not this. Information is information. What you do with it is your choice.
98.
by kkirsche 5y ago
Good for you but looks like a rip off of AMPlosion.
99.
by kkirsche 5y ago
I was with you till the last line. Npm and Poetry are fulfilling the same role of external dependencies, what am I missing here?
100.
by kkirsche 5y ago
I don’t know it’s current status but either PyOxidizer or Nuitka are the two Python compilers I’d look to for that. It is full of trade offs, but to an extent that’s many dynamic languages like Python (said as a Python developer) https:&#x
101.
by kkirsche 5y ago
I use build type with scope of the package manager. For example: build(poetry): update alembic dependency to 1.7.0
102.
by kkirsche 5y ago
Worked for me. Maybe view limits or something
103.
by kkirsche 5y ago
I think this is more likely incorrectly understood leaks. Similar to what occurred with the Nintendo Switch OLED. My guess is the chips and whatnot the iPhone will use will support this but Apple won’t enable it in the software. I believe t
104.
by kkirsche 5y ago
That’s actually common in exploit hunting between releases of operating systems as a way of locating the changes routines from a patch Tuesday. Sadly most people I know use VMs and resource intensive snapshots to handle it
105.
by kkirsche 5y ago
You can tell pydantic not to mutate the field value in its definition when using Field
106.
by kkirsche 5y ago
Depends. I use debuggers like pdb when I can’t quickly figure something out as it lets me interact with the running state. I’m less likely though in languages like Golang where I haven’t had as easy of a time using one, and have ended up av
107.
by kkirsche 5y ago
That hasn’t been my experience with large enterprises, but my experience is simply anecdotal so you may be right.
108.
by kkirsche 5y ago
This is huge. The hash based approach makes speed improvements over complex iptables usage very impressive, in its most common implementations
109.
by kkirsche 5y ago
It may be meant for software developers but has legitimate value in other domains. For example, DigitalOcean has their legal team use it as a way of providing diffs on their terms of service and other policies. This type of use case is wher
110.
by kkirsche 5y ago
Penetration testing proof of concept XSS code. We commonly use alert to demo that it is executing code. Certainly there are other options, it’s just a common tool for many testers.
111.
by kkirsche 5y ago
Is this a replacement or an augment for the Merlin ID project from Cornell? https://apps.apple.com/us/app/merlin-bird-id-by-cornell-lab/...
112.
by kkirsche 5y ago
I’m not in favor of this. For this to be reasonable, coming from someone who writes exploits for work and fun, you need to define all. Otherwise you’ll be unreasonably putting people in already overcrowded and underfunded jails. Instead of
113.
by kkirsche 5y ago
The Decimal class is one way if you roll your own. py-moneyed seems to be a well maintained library though I haven’t used it. Disclaimer: I only work with currency in hobby projects.
114.
by kkirsche 5y ago
As someone who wants to learn systemd, even just to understand what I’m stuck with and why it was made, this is the best introduction I’ve found. Does anyone have other resources to help beginners learn how to use systemd efficiently and it
115.
by kkirsche 5y ago
I would add context is key to some forms of code. Yea some things may be sloppy, but they also may have been added at 3 am during an incident. While hopefully these gets cleaned up, sometimes they get forgotten or de-prioritized. Even the b
116.
by kkirsche 5y ago
My understanding is it’s not an OS level feature but new features in the not yet released swift playgrounds update.
117.
by kkirsche 5y ago
While I feel strongly about the opinion, I think this is a good thing. As a worker, I’d much prefer a clear message like this so that I know what is expected so I can act and choose whether this fits with me than a let’s try this and see ho
118.
by kkirsche 5y ago
I’ve seen it a fair amount in cyber security, especially if you are attacking or leveraging things that the company sells or promotes. Does it work? Anecdotally yes, but that’s not something I would bank on when releasing content that I fee
119.
by kkirsche 5y ago
What do you mean by past? Your past interactions, eg lack of ability to engage other users related to things you’ve commented on? “Past” posts? Something else?
120.
by kkirsche 5y ago
You may be right but this seems extremely presumptuous—how do you know the people will go back vs taking a gap year or other extended hiatus or field change?

More ›