nebulous1

9 ms·

61.
by nebulous1 2y ago
It's not a single file unless it's tar'd or compressed or whatever. It's completely normal to distribute software projects as some form of archive. This is doubly true for a "leak" like this where you want th
62.
by nebulous1 2y ago
What is the reason for it to be uncompressed?
63.
by nebulous1 2y ago
It worked FF/Android for me, but it froze for a second every so often.
64.
by nebulous1 2y ago
> Effort and consistency trumps all. Being a 10x developer has no effect whatsoever on what you can accomplish in work or in life. Ehhh. There may be issues with the term 10x developer, but if you're using it then it literally mean
65.
by nebulous1 2y ago
I have to admit that I got stung when google released .dev as HSTS only, although that was only for local testing. I'm surprised that this company didn't realise that this was problematic before this happened. Also, if the respon
66.
by nebulous1 2y ago
I wonder why Helen Wang chose this as a research topic
67.
by nebulous1 2y ago
The commit that they have a screenshot of notes this, but it isn't in the article text. FWIW I can't read that screenshot with zoom level 100% on my desktop, but I can if I zoom further or open it in a new window (it isn't c
68.
by nebulous1 2y ago
You can make that argument for initial approach, but it falls flat on its face after the author told Vlad that they didn't want to communicate with them and Vlad responded with a lecture. Vlad comes off as fairly unhinged here.
69.
by nebulous1 2y ago
We have to move away from prerun autotools scripts in tarballs entirely, but honestly I don't expect curl to be at the forefront of that. It's not clear (to me) that Lasse knew that Jia Tan was pseudonymous. I agree with him that
70.
by nebulous1 2y ago
Oh, I didn't mean to imply it was a good way of doing things, just that the intent was to auto-update. Regardless of how the auto-update works, if a program like this is auto-updating then you're giving arbitrary execution permis
71.
by nebulous1 2y ago
It's just auto-updating. Would be better if it was using the github url directly. Should also be using a method less prone to corruption
72.
by nebulous1 2y ago
So the site is clearly parasitic, doesn't add anything and detracts from security. The term "malicious" does imply a little more to me though, like it's actually serving me altered software. I guess the question is whet
73.
by nebulous1 3y ago
Do you use a banking app? Last I read depending on the type of check used some apps can still be problematic.
74.
by nebulous1 3y ago
I agree, but actually it's just a really bad example that takes the reader to the wrong place because it has the participants acting so irrationally. The underlying issue is still there, they've just distracted from it by putting
75.
by nebulous1 3y ago
I can't remember where I read that but it would likely have been from a HN link or possibly a comment. I just found this: https://news.ycombinator.com/item?id=39868773 which is definitely not where I originally read it
76.
by nebulous1 3y ago
In "Ghost in the Wires" Kevin Mitnik details one of the ways he obtained information was via a law enforcement receptionist* who he managed to trick into believing he was law enforcement over the phone. He obtained information th
77.
by nebulous1 3y ago
Completely conclusive proof? No, but it seems unlikely that there ever would be conclusive proof of such. They don't seem to exist outside of this incident and things related to this. There were multiple people who also don't see
78.
by nebulous1 3y ago
The character was in a string, not directly in what was being compiled. The contents of the string failing to compile was the point, as landlock was then disabled. From what I understand, this landlock disabling wasn't relevant to the
79.
by nebulous1 3y ago
I read that as "us" being the xz dev team.
80.
by nebulous1 3y ago
Well, it appears that it would be as safe as any other vulnerable server behind port knocking. Although there's still the possibility that the backdoor is doing something we aren't aware of yet. So yeah, it's as "safe&
81.
by nebulous1 3y ago
I haven't seen any comments quoting the TOS that support this being non-hosting services only, even though the CEO is saying that's the case. When looking at the TOS it seems to make very clear that it's talking about all of
82.
by nebulous1 3y ago
From what I understand they acquired the rights to redis from antirez sometime after employing him. I assume he received money for this.
83.
by nebulous1 3y ago
I feel like you are underestimating how many fundamental misunderstandings people can have (including both of us) even though they have deep understanding of adjacent issues.
84.
by nebulous1 3y ago
The fact that there are so many different peculiarities in different regex systems has always raised the hairs on the back of my neck. As in when a tool accepts a regex and I have to a trawl the manual to find out exactly what regex is acc
85.
by nebulous1 3y ago
Yes, I think that's a transcription error
86.
by nebulous1 3y ago
Apparently she can't "return" it, it has to be annulled by the British monarch.
87.
by nebulous1 3y ago
I agree that it came off as a bait and switch. Having looked a bit deeper, the plugin is open source and you can download, compile and distribute it for free. They charge for the precompiled binaries that you can get in the Unity Store (now
88.
by nebulous1 3y ago
> but there are people who can blow right past them Ultimately, I think this is what's often downplayed in these conversations. Just because your friend was able to excel at Go in those 15 years, doesn't imply that any other s
89.
by nebulous1 3y ago
Regarding the list of noteworthy upsets, it's worth noting that, while I didnt go through all of the games, the top three results were all due to the stronger player making easy to spot blunders and the lower rated (but still strong) p
90.
by nebulous1 3y ago
> though maybe the plentiful comments in regards to ease of use also had something to deal with that. It's an engine with almost no community that's based on an engine that's notoriously difficult to use. It would not surp

More ›