remram

8 ms·

61.
by remram 1y ago
But the example code doesn't do much validation. If you did want to use a regex, you would have to compile and bundle the regex crate...
62.
by remram 1y ago
I don't use tmux. CVE-2020-27347 is exactly the kind of memory safety bug exploitable by terminal output that I was talking about.
63.
by remram 1y ago
At least the article is honest about being a clickbaity AI-generated attack...
64.
by remram 1y ago
It "feels" much easier to generate random non-solutions and check if the random questions happen to pass, though. Is it really all there is to it? You increase the number of questions to compensate and that's the whole scheme
65.
by remram 1y ago
That's only for interactive proofs though. Like GP I have no problem understanding those.
66.
by remram 1y ago
You forget that tmux is a terminal emulator. Trusted programs can have untrusted/attacker-controlled terminal output. If the program running inside tmux (e.g. cat, curl -s, weechat) can output malformed unicode or escape commands that
67.
by remram 1y ago
The verdicts: > Thomas François, 52, a former Ubisoft editorial vice-president, was found guilty of sexual harassment. > Serge Hascoët, 59, Ubisoft’s former chief creative officer and second-in-command, was found guilty of psychologic
68.
by remram 1y ago
How much does this particular slap reduce earnings really? Alphabet shows $41 billion before tax, so 0.7%? Assuming they do pay that amount. I'm not well-versed in financial matters so please check my numbers. http://abc.xyz
69.
by remram 1y ago
It can't be shared without networking so I am not sure what you mean. Are you sure you need it to be shared?
70.
by remram 1y ago
Do you have any evidence at all of Mozilla doing anything? The facts are he resigned as CEO after visible external pressure.
71.
by remram 1y ago
As an outsider, it seems weird to me that you would go to Edge when you are unsatisfied by Mozilla's spotty long-term support. Edge exists because Microsoft dropped support for IE (and then for their own rendering engine altogether whe
72.
by remram 1y ago
See also SVCB
73.
by remram 1y ago
I thought this was possible to do with CEL but it looks like this has barely reached alpha: https://kubernetes.io/docs/reference/access-authn-authz/muta... Webhooks like yours will still be needed for a while
74.
by remram 1y ago
I wonder if you can build this into your container runtime config instead. Automatically rewriting is nice but you will still see the rewritten image when reading from the API server.
75.
by remram 1y ago
Not to be confused with Kubernetes' Spiegel: https://spegel.dev/ https://github.com/spegel-org/spegel
76.
by remram 1y ago
Works for me (from France)
77.
by remram 1y ago
"?" call "into()" automatically, which covers simple wrapping.
78.
by remram 1y ago
The author dismissed that option saying "I value that docker build can have a clean environment every time", so this is self-inflicted.
79.
by remram 1y ago
It was written by one vendor for their own use. It is miles away from an RFC or "standard"
80.
by remram 1y ago
In my environment, the number one reason Apptainer is used has nothing to do with deployment, isolation, or software availability: it is to work around inode limits. On our HPC cluster, each user has a quota of inodes on the shared filesyst
81.
by remram 1y ago
That one does look like a bug. I stand corrected.
82.
by remram 1y ago
> Any ip like 2001:0000:0000::1 is going to be incorrect. This is neither a possible input nor a possible output of that code.
83.
by remram 1y ago
No, on the contrary. You can't get a valid certificate for non-global IP, but you can already get a certificate for a domain name and point it to 192.168.0.1.
84.
by remram 1y ago
You can point a name at your home IP just as easily as any other IP.
85.
by remram 1y ago
So what do we call it? PNG3? The spec is titled "Portable Network Graphics Specification (Third Edition)". Surely they aren't releasing a new, incompatible version and expecting us to pretend it's the same format...? &gt
86.
by remram 1y ago
> `uv lock` fails if your lock file has a mismatch Now you seem even more confused. Do you mean `uv sync` will fail? `uv lock` is literally the command you run when there's a mismatch between pyproject.toml and uv.lock to update u
87.
by remram 1y ago
That's surprising to me, it was when I used Comcast (2016) that I first purchased a cable modem. It did save me money.
88.
by remram 1y ago
> The parent's description isn't what happens with the original code Yes, it is: both gchamonlive and myself pointed out that if your lock file exists and is out of date, your (previous) script would silently update it before i
89.
by remram 1y ago
I see you just changed your article from what it was when we commented: if ! test -f uv.lock || ! uv lock --check 2>/dev/null; then uv lock; fi Your new version no longer has the bug we are talking about. I don't kn
90.
by remram 1y ago
You changed the code in the article to fix the problem. So there is no bug anymore is what you mean.

More ›