lyu07282

48 ms·

901.
by lyu07282 2y ago
To be fair it's just SPI and a big package, super easy to read even centuries from now. I don't think we will somehow forget everything about basic electronics.
902.
by lyu07282 2y ago
Could just buy the chip itself for less than a dollar, connect it to Arduino or rpi and write it yourself: https://www.lcsc.com/datasheet/lcsc_datasheet_2112091730_FUJ... Or go with the 64kb version for 6 dollars.
903.
by lyu07282 2y ago
another important role of NASA is to demonstrate that government agencies waste money, its like the USPS or the NBN in Australia, its liberals putting other liberals in charge of these projects so liberals can say "look private space f
904.
by lyu07282 2y ago
> Using curl is surprisingly secure one thing to remember is that you can make a server respond one thing when a user does "curl <url>" and another thing when the users does "curl <url> | sh": https:&#x2F
905.
by lyu07282 2y ago
This has been well known for years, it's just NASA operating for decades with it's hand tied behind it's back by neoliberal mandated public private partnerships embezzling it for tax dollars.
906.
by lyu07282 2y ago
the imminent danger is more 1) wealth transfer of a magnitude we've never seen before, destroying the future of and sending hundreds of millions into poverty in the western world and 2) scalable governmental/corporate repression,
907.
by lyu07282 2y ago
Kind of by necessity the nature of ADSL, how else are you gonna offer broadband internet over the (by now) rotten infrastructure you were privatized into "owning". How can you squeeze as much profit (and as many bits per second) a
908.
by lyu07282 2y ago
You are missing the point. Nearly 100% of those bugs are due to the fact that it is written in a memory unsafe language, FFmpeg is 23 years old and we still find memory corruption bugs in it every few months. That's why people are sayi
909.
by lyu07282 2y ago
I would say if you plug user uploaded files into ffmpeg, it would be complete negligence not to sandbox it in some way.
910.
by lyu07282 2y ago
You are getting down voted, but you aren't really wrong, there have been 142 vulnerabilities[1] in ffmpeg since 2018, 3 in this year so far. The attack surface is huge, with mostly memory corruption issues being found. Not sure rust is
911.
by lyu07282 2y ago
> result in having to wear welding glasses when walking around the street to avoid being blinded by the 3D advertisements that are being shot at your face... but I'm sure the welding glasses would fit the overall cyberpunk aesthetic
912.
by lyu07282 2y ago
I was thinking of BinaryFormatter and NetDataContractSerializer, etc. unsafe .NET object deserialization. I'm sure the default JSON serializer in C# is safe (lmao language fanboys) https://github.com/pwntester/ysos
913.
by lyu07282 2y ago
In applications using pickle on untrusted data, that's a big distinction. There are a huge number of similar java and c# object serializationg bugs as well.
914.
by lyu07282 2y ago
Yes but the fact that R was apparently able to fix the issue at all is a bit strange then. You can't "fix" pickle code execution.
915.
by lyu07282 2y ago
I don't think Signal is even trying tbh
916.
by lyu07282 2y ago
> “Our innovative approach allows existing Bluetooth-enabled devices to be retrofitted to transmit data to the Hubble Network without any hardware modifications, ushering in a new era of connectivity.” I'm always fascinated by the l
917.
by lyu07282 2y ago
Which can have a passphrase and an agent, all sorts of MFA. One benefit to wireguard though is it's using UDP with a much less noisy handshake, you will never even know if the port you tried connecting to runs it (if your firewall is c
918.
by lyu07282 2y ago
It's not better because it's gql, it's better because it's more feature complete (like RLS), offers more/easier customization, isn't written in Haskell, etc., but ofc your milage may vary. > As for layers of
919.
by lyu07282 2y ago
perhaps its because ORMs are considered bad by some people, so to them writing these GET API endpoints is very tiresome, having to always construct these complex filter queries by hand. From that vantage point it would make sense to move to
920.
by lyu07282 2y ago
Well, database introspection isn't new, we could've done that decades ago, but there are good reasons for the layer of abstraction. Also if you go down this route, I think Postgraphile is a much better realization of that idea (us
921.
by lyu07282 2y ago
I don't think so, it's rare that you have such an extreme power imbalance in conflict, only for it then to be viewed as "both sides are equally bad" a hundred years later. We just have a skewed perspective on the proport
922.
by lyu07282 2y ago
I would argue if you sanitize your input you are already doing it wrong, you should parameterize queries and send the data entirely separately from code.
923.
by lyu07282 2y ago
Well people are technological illiterates for the most part, but the mobile platforms are dumbed down to such a degree that it would be impossible for people to learn even if they grew up with it. It's a vicious cycle, you have to desi
924.
by lyu07282 3y ago
44 years and ~20 local privilege escalation vulnerabilities later...
925.
by lyu07282 3y ago
I agree with Lennart so I'm curious what the argument is against the notion that SUID was a bad idea and we should move away from it in Linux?
926.
by lyu07282 3y ago
Its a common finding during pentests, but that's just unconvincing anecdote vs. anecdote. Another argument, besides misconfiguration, is the reduced attack surface by removing the huge complexity of sudo entirely. If your argument is b
927.
by lyu07282 3y ago
A lot of Kernel privescs are also technically container escapes, so 2 months ago was the last one actually: https://www.cvedetails.com/cve/CVE-2024-1086/
928.
by lyu07282 3y ago
I think what is perhaps something to consider is how much of an attack surface sudo is and how unaware people are of the fact. Many people think they can configure sudo to be safe to use for unprivileged users, by only allowing specific thi
929.
by lyu07282 3y ago
> In March, The Insider, along with its investigative partners 60 Minutes and Der Spiegel, uncovered evidence implicating Unit 29155 in directed energy attacks thought to be the cause of Havana Syndrome "Evidence" is such a str
930.
by lyu07282 3y ago
They used test driven development for the backdoor development? Kind of hilarious ngl

More ›