ok123456

28 ms·

631.
by ok123456 3y ago
I did the same thing. I solved all the levels. I got random emails from Google trying to recruit me for a while. I had no interest in working for them. I just wanted to solve programming puzzles in a time before it got dysfunctionally commo
632.
by ok123456 3y ago
It's flagged now, too. It's all so tiring.
633.
by ok123456 3y ago
A security review or snake oil AI black box didn't stop this. It was stopped by a 'code slinger' who noticed a performance regression in ssh. Deloitte coming in a checklist would have NEVER stopped this one.
634.
by ok123456 3y ago
With all the CI tooling and containerization, it seems to be going in the opposite direction.
635.
by ok123456 3y ago
People have been bullied out of 'nice' communities. See the 'Actix' debacle in Rust.
636.
by ok123456 3y ago
http://www.bitsavers.org/pdf/cdc/cyber/books/DesignOfAComput...
637.
by ok123456 3y ago
And Alpine Linux is largely a mistake.
638.
by ok123456 3y ago
Except that's not the case at all with Rust.
639.
by ok123456 3y ago
> The exact same thing you do in this current situation? It depends on what the issue is. Cargo isn't magic. False. In the current situation, you just release a new shared library that is used system-wide.
640.
by ok123456 3y ago
So, I know that librustxz has been compromised. I'm Debian. I must dive into each rust binary I distribute as part of my system and inspect their Cargo.toml files. Then what? Do I fork each one, bump the version, hope it doesn't b
641.
by ok123456 3y ago
Rust is the issue here because it doesn't give you much of an option. And that option is the wrong one if you need to do an emergency upgrade of a particular library system-wide.
642.
by ok123456 3y ago
The binary was an xz test file that contained a script that patched the c-code.
643.
by ok123456 3y ago
Those CI and build infrastructures rely on the Debian and RedHat being able to build system packages. How would an automated CI or build infrastructure stop this attack? It was stopped because the competent package maintainer noticed a perf
644.
by ok123456 3y ago
It's much worse because it requires repackaging every affected system package instead of a single library. Knowing which packages are affected is difficult because that information isn't exposed to the larger system package manage
645.
by ok123456 3y ago
Most Rust libraries are not dynamically linked; instead, versions are pinned and included statically during the build process. This is touted as a feature. Only a few projects are built as system-wide libraries that expose a C-compatible ab
646.
by ok123456 3y ago
What should I look for? The evil bit set?
647.
by ok123456 3y ago
Wouldn't a supply chain attack like this be much worse with Rust and Cargo because of the fact it's not just a single dynamic library that needs to be reinstalled system-wise, but, instead, every binary would require a new release
648.
by ok123456 3y ago
Following the SSH hardening guide stops 99% of bots and scanners because they can't negotiate a cipher using whatever ancient ones their SSH implementation is set up to use.
649.
by ok123456 3y ago
Not with McKinsey & Company's well-documented track record of destroying companies and decimating their capacities for short-term stock gains.
650.
by ok123456 3y ago
Thank you. People get too cute with what should be a link to a file.
651.
by ok123456 3y ago
Getting "Unsupported operand types: int - string" when I click download.
652.
by ok123456 3y ago
It takes education and practice to take a CAD model or technical drawings and run the machines to produce it.
653.
by ok123456 3y ago
Blind seems to be where tech people post reviews now. Non-tech people just use an alternative Google account and post the review on the company's page Google Maps reviews page.
654.
by ok123456 3y ago
They do. My gym has a garage door like this. Because of the lack of springs, I didn't realize it had a door opener until the owner went to lower it.
655.
by ok123456 3y ago
Is there a benefit from using an LLM for Python byte code? Python byte code is high enough level that it's possible to translate it directly to source code from my experience.
656.
by ok123456 3y ago
Judging from the javascript, they scraped. The system they were scrapping would have been cutting-edge in 2004-5. Keeping something running that long, duck tape and all, is no small feat.
657.
by ok123456 3y ago
I use rofi and bind $mod+q to search for windows.
658.
by ok123456 3y ago
No. They just freeze your bank account while you're under investigation.
659.
by ok123456 3y ago
Unfortunately, I've heard similar stories from a Ph.D. in distributed databases applying to Google. At first, it seemed like a match. They were looking for someone with that exact knowledge. Then, a few emails later, the recruiter sent
660.
by ok123456 3y ago
After years of upping the ante by ratcheting up what is expected for a technical interview, only to realize you've merely attracted people who are good at cramming for technical interviews, we're told now all that is overrated. Ma

More ›