planede

52 ms·

1. 661.▲
   by planede 4y ago

   A lot of people brought up scanners that auto-click links. How do these scanners deal with verification email links or unsubscribe links in general? I mean unsubscribe links are commonly two-stage (you have to click a button on the target w
2. 662.▲
   by planede 4y ago

   Just take all of Debian packages, or something like that.
3. 663.▲
   by planede 4y ago

   I think both Firefox and Chrome support forms now, although I know that there are other interactive features that they don't support. But yeah, I can see the attacker convincing the victim to use Adobe regardless.
4. 664.▲
   by planede 4y ago

   Most people view pdfs now in web browsers built-in viewers. Especially if the job offer comes from a linkedin message, I would imagine most people would default to the browser viewer. While browsers are sure not without security vulnerabili
5. 665.▲
   by planede 4y ago

   And that's where it was taken down, if I remember correctly.
6. 666.▲
   by planede 4y ago

   Why on Github?
7. 667.▲
   by planede 4y ago

   Hmm, maybe dedicated "measuring out" spoons should be chained to their corresponding container, so at least you can use them for measuring out sugar and coffee. For stirring you can always use other utensils in a pinch.
8. 668.▲
   by planede 4y ago

   There is one advantage of Philips/Pozidriv I can think of: I have two Philips screwdrivers on my Swiss pocket knife, and they are compatible with a wide size-range of Philips/Pozidriv screws. While for Torx I need to have a set of
9. 669.▲
   by planede 4y ago

   When you get shocked by a Van de Graaff generator, you do get high voltage, as well as high currents. The missing ingredient is time. The shock takes a very small time, so the energy delivered by the shock is very small. Skin-effect also he
10. 670.▲
    by planede 4y ago

    Can they actually sue, or can they just terminate the service for this one account?
11. 671.▲
    by planede 4y ago

    I guess you can limit entire shell sessions with firejail, to amortize the startup time. But I suppose the limits would need to be looser in that case to be useful.
12. 672.▲
    by planede 4y ago

    firejail is not limited to GUI apps, is it?
13. 673.▲
    by planede 4y ago

    Compilers definitely don't keep barriers between function calls internally. AFAIK LTO enables inlining as well, but inlining is not the only inter-procedural optimization that can happen.
14. 674.▲
    by planede 4y ago

    If you want to set it a date, then set a deadline for the issue. It should still annoy the right person.
15. 675.▲
    by planede 4y ago

    I don't get why so many people likes this. No, I don't want a suddenly failing pipeline on master because of an expiring TODO. A better approach is for a TODO to be required to reference a ticket, and add a ticket. Prioritization
16. 676.▲
    by planede 4y ago

    > Debuggers aren't very good at handling this situation. Because once the control flow jumps to the NULL page, you'd need to find a way to rewind execution history to figure out how it got there. This is one place where reversi
17. 677.▲
    by planede 4y ago

    > the moment you fingerprint the device it's got the intermediates practically forever That's not true, the point is that you fingerprint using misconfigured hosts, they never get the intermediates through them. Of course it&#x
18. 678.▲
    by planede 4y ago

    According to Firefox bug tracker, this is fixed now https://bugzilla.mozilla.org/show_bug.cgi?id=1334485 .
19. 679.▲
    by planede 4y ago

    I don't see why you would need to generate CAs on the fly. You could have a few end-points with a certificate signed by common intermediates, but not serving the intermediate themselves. Then you can check if resources from those end-p
20. 680.▲
    by planede 4y ago

    Umm, can this intermediate certificate caching be used for fingerprinting? Looks like a privacy concern.
21. 681.▲
    by planede 4y ago

    Ironically, Ghost Commander is also available on the Play Store.
22. 682.▲
    by planede 4y ago

    App passwords are only available for 2fa enabled accounts, while OAUTH is available for everyone. So far I didn't get a clear answer if "the end of less secure authentication methods" means the end of app passwords as well, o
23. 683.▲
    by planede 4y ago

    Not all languages make call stacks observable.
24. 684.▲
    by planede 4y ago

    You don't need to use the asterix after site:, site:.edu or even site:edu works the same.
25. 685.▲
    by planede 4y ago

    I find syntax highlighting to be much more visible in a dark theme. Otherwise I agree.
26. 686.▲
    by planede 4y ago

    I'm in the same boat, I'm happy with tempus_future in neovim https://github.com/protesilaos/tempus-themes I have my custom theme for the 16 terminal colors, as tempus doesn't handle well dark <color&g
27. 687.▲
    by planede 4y ago

    At least GNU grep has `grep -r --include='*.d' <pattern>`
28. 688.▲
    by planede 4y ago

    My hot take is that 1-based indexing is often a mistake in math too. It's also not universal, even within math. And linear algebra doesn't need 1-based indexing either, and some operations are even more easily expressed with 0-bas
29. 689.▲
    by planede 4y ago

    And by YAML, some libraries implement YAML 1.1, some others implement YAML 1.2, and by YAML 1.2 they actually mean YAML 1.2 core schema. And often they implement that poorly. So it doesn't help that: * there is YAML 1.1 and YAML 1.2, a
30. 690.▲
    by planede 4y ago

    Not to take away from your point, but a standup with eight devs really shouldn't take 30 minutes.