msm_

12 ms·

151.
by msm_ 3y ago
I have never tried the remote ssh setup (even though vscodium is my primary editor). I don't know anyone who uses it daily, and I've never heard anyone irl mention doing it. I think you're slightly biased here by your experie
152.
by msm_ 3y ago
As it has been since 2011, and yet here we are.
153.
by msm_ 3y ago
Firewall misconfigurations, mostly. It's way harder to keep firewall up to date when you have to worry about two independent stacks.
154.
by msm_ 3y ago
>Well one option is Apple just closes the store, hires a couple hundred high quality developers and builds out their own library of Apps, take 100% of the revenue. No tax in that situation! But I'm not sure it's a better outcom
155.
by msm_ 3y ago
>Most browser "fingerprinting" methods have a pretty short half-life. The last assessment I read said something like half of the fingerprints were lost within 24 hours. That's absolutely not my experience. Maybe if you use
156.
The Artemis Security Scanner(cert.pl)
1 points by msm_ 3y ago|0 comments
157.
by msm_ 3y ago
Interesting, i've always considered monorepo to be a maintainability win. Your code doesn't rot (as much) because it's constantly rebuilt and tested. When someone improves some downstream code (for example makes some code fas
158.
by msm_ 3y ago
>I'm sure OpenBSD developers have very good intuition on what could be used in a vulnerability, without having to write one themselves Why? On average programmers are not very good security engineers. And the opposite - security eng
159.
by msm_ 3y ago
You say it like it's something bad. Having a common vocabulary is extremely helpful for communication. Instead of restating the obvious concept over and over all the time you can just ask your peer "is this idempotent?". Nami
160.
by msm_ 3y ago
Interesting, I'd think logging is one of the clearest situations when you want best effort. Logging is, almost by definition, not the "core" of your application, so failure to log properly should not prevent the core of the p
161.
by msm_ 3y ago
This doesn't sound right. REP prefixes are pretty rare. Depending on compiler they are used rarely, for a few specific operations (like rep movsd for memcpy) or usually never. Most common prefixes are by far REX prefixes in 6h4 64bit a
162.
by msm_ 3y ago
This sounds fine and well, but it's not how Github Actions work (or at least, not the encouraged workflow). Let's have a look at the snippet from one of the projects I work on: - name: Set up Docker Buildx uses: docker&#x2
163.
by msm_ 3y ago
If I remember correctly, this tiny binary is used to (reproducibly) bootstrap the next binary, which bootstraps the next binary, until eventually GCC can be compiled (and compile other software).
164.
by msm_ 3y ago
That's the most Ameri-centric thing I've read all day. I assure you that: - There is no such thing as a "standard keyboard" - Not everyone can type Latin alphabet - Almost nobody can read, speak, hear or write latin, and
165.
by msm_ 3y ago
The difference is that the forums were small, self-contained and didn't rule your digital life. They were (are) much more similar to how the "real world" operates - you may get excluded from a local fizzbuzz club after a disa
166.
by msm_ 3y ago
Fortunately polkit can't be abused to do something like privilege escalation, right [1]? Ok, I'll drop the snark. Do you know of any distributions that approach your idea seriously and ships absolutely no setuid binaries? Ideally
167.
by msm_ 3y ago
Most CAPTCHAs are already solvable automatically. Usually there's a rate limitter as a second line of defense, and also some heuristics that detect bot-like behaviour (user keeps upvoting posts of certain users without even reading the
168.
by msm_ 3y ago
Is there any reason why (in theory) we can't release heat to space in some other way? I can think of many (imaginary) ways of releasing space, for example shooting superheated materials to space, maybe some planet-scale laser-powered h
169.
by msm_ 3y ago
To be fair, because of my job I hear about a lot of issues at the national level, and ICS (like power plants, water treatment facilities, etc) have terrible track record of security (think: admin panels with default password just left open
170.
by msm_ 3y ago
This. Linked post is a misconception of how EU actually work. They will never "hardcode" something like "linux drivers" into the law. But, in theory, they could write a law like "If you want to sell your device in t
171.
by msm_ 3y ago
Why not just use tor? If you want you can also buy a VPN with tor and use it to connect to tor later. It just sounds better than chained VPNs in every way.
172.
by msm_ 3y ago
>Can someone chime in with how quantum computers effectively at least double the output of traditional "classical" computers? In general: Quantum computers halve the search space, not speed, so for example quantum computer need
173.
by msm_ 3y ago
I'm not sure I get your point. I don't own a car, and I rent my apartment. So... 0 in both cases? (unless vacuuming once a week counts as maintenance, then add a dozen minutes). I definitely don't feel like I have any signifi
174.
by msm_ 3y ago
As an owner of an Android phone (Pixel 4a) that just reached EOL and for which a potential 0-click RCE 0day was just released (the webp thing), I'd take three more years of security updates on the spot. But well, I guess time for a n
175.
by msm_ 3y ago
There's no contradiction. If it's easy to generate rent income from a house then houses will appreciate in price. For example, if I can buy a house and pay off the loan just from rent payments then it's a great investment.
176.
by msm_ 3y ago
>Our new host has better built out infrastructure that makes the site load significantly faster than Fandom, especially in different parts of the world and with slower internet connections I'm reading this over the ultra-slow[1] air
177.
by msm_ 3y ago
Leaking 0.0005 bits/character means that you leak a full bit after 2000 characters. This may already be a problem - for example if you know the (2000 characters long) message starts with either "Victory" or "We lost&quot
178.
by msm_ 3y ago
>Solitaire (...) was featured in Neal Stephenson’s book Cryptonomicon under the name “Pontifex”. It was introduced under the name "Solitaire", "Pontifex" was used initially as a temporary code-word when characters cou
179.
by msm_ 3y ago
Running arbitrary Powershell scripts from disk during OS autostart is one of the (if not the) loudest things attacker could do. The point of this blog post is stealth. Nobody claims it's a vulnerability in VS code (or vulnerability in
180.
by msm_ 3y ago
Yes, I don't want any clever tricks from my chat clients. I dislike this kind of under-the-hood magic. Client should just receive the message and send a notification if it's not silenced.

More ›