rst

20 ms·

181.
by rst 5y ago
Well, WRT Google Calendar in particular: https://www.discalbot.com/ I understand that's one of at least several, and that if Slack isn't actively making trouble, looking for alternatives is a switching cost that m
182.
by rst 5y ago
FWIW, some of the hosted Slack alternatives, like Zulip, support at least versions of some of these -- see their integrations page here: https://zulip.com/integrations/ What would be ideal from this perspective would b
183.
by rst 5y ago
If you explicitly add 'materialized' to the CTE declaration -- that is: with dummy_table_name as materialized (select stuff from table ...) the intent becomes explicit. (FWIW, while the nonstandard "materialized&q
184.
by rst 5y ago
Lots of government agencies have "alert" twitter feeds which aren't as readily available on their own web sites; there certainly isn't an easy way to get a comparable aggregation of all of them.
185.
by rst 5y ago
Twitter does have a "latest tweets" option in the standard client which spares you from most algorithmic manipulation (reshuffling, trends, showing stuff someone else "like"d), though not paid promotion. Putting all of
186.
by rst 5y ago
The first example of a contemporary speaker is a Catholic priest and former staffer at the Vatican. That subsequent examples are drawn from elsewhere is probably the author deliberately trying to convey it isn't just the church.
187.
by rst 5y ago
For every reported, exploitable bug in a firmware blob there are generally several in machine-independent core OS components. So, upgrading everything they easily can still has value -- and that's a lot.
188.
by rst 5y ago
That's the argument here, but as a defense of Google, it's a really bizarre argument. If a volunteer-run effort like LineageOS can manage to get recent AOSP Android (including all the hardware-dependent bits) running on a Pixel 3
189.
by rst 5y ago
The filename is "output04.txt".
190.
by rst 5y ago
It can be used as a basis for systems with temporal safety; the MS blog post here has a capsule description of how they're doing that.
191.
by rst 5y ago
Bounds for storage are known when it is allocated. CHERI puts those bounds into the pointers (which double in size so they can fit), and has the processor do the runtime checks at every dereference. So, same effect as the proposal you ref
192.
by rst 5y ago
Not quite sure what you mean. All it can do is turn undefined behavior on an out-of-bounds reference into a segfault, but if that ends up turning an RCE vulnerability into something less severe, it's still an improvement -- at least f
193.
by rst 5y ago
The CHERI extensions for the ARM architecture allow for compilers that achieve this effect by making all pointers "fat", with bounds, and doing pervasive hardware bounds checks. They've been playing with FPGA versions and em
194.
by rst 5y ago
These seem to all date from the '80s or later. Quite a few earlier systems are available to run under simulation -- including historically interesting ones for the PDP-10, PDP-8, and other DEC hardware. Here's a starter list, fr
195.
by rst 5y ago
There are also applications which might reasonably have to process dates 16 years in the future right now. I suspect most of finance, for instance, is on 64-bit systems at this point, or we'd be hearing a little bit more about this.
196.
by rst 5y ago
In a typical installation of something like Apache Tomcat, there will be config files that tell the server what code to load and run. If you can modify those config files...
197.
by rst 5y ago
The threat here is that "an attacker with permission to modify the logging configuration file can construct a malicious configuration". If the attacker can modify server config files, this particular log4j fixup is likely to stil
198.
by rst 5y ago
He's a software engineer with a business background (his degree is from Copenhagen Business School), who thinks about problems both ways.
199.
by rst 5y ago
It has already been used in the wild as a cryptominer delivery vehicle.
200.
by rst 5y ago
It's been widely reported that iCloud is exploitable (by setting your phone's name to something that includes the "${jndi:ldap://...}" incantation), so if you're using an iPhone, cloud services you use may
201.
by rst 5y ago
The patch which apparently introduced the vulnerable code path landed in 2013 -- https://www.lunasec.io/docs/blog/log4j-zero-day/ For context, injection attacks were on the original OWASP top 10 list from 200
202.
by rst 5y ago
Wikipedia being loaded is not a bad thing. But a lot of other worthy orgs aren't, and many donors will prefer to send their limited funds to those. Which makes it problematic for the donors if Wikipedia is being coy about already hav
203.
by rst 5y ago
It's not clear that every case of epilepsy has a common cause, but this is certainly possible.
204.
by rst 5y ago
The two nuke stories aren't quite equivalent. The nuclear-naive postdocs designed a Nagasaki-style fission weapon. The "Fogbank" material that we forgot how to make is a component of fusion bombs, which are widely reported
205.
by rst 5y ago
That's not the position that Haugen took testifying before Parliament in the UK -- where she expressed strong support for e2e encryption. She said her views had been misreported earlier -- that she'd questioned whether Facebook c
206.
by rst 5y ago
New York has multiple grids, though. The one in Manhattan north of 14th street is the one most people are aware of. But Queens and Brooklyn are mostly a patchwork of separate grids, and even Manhattan gets messy south of 14th street. (Wes
207.
by rst 5y ago
There's an actual name for it -- Panglossianism -- named for Dr. Pangloss, the tutor in Voltaire's Candide who keeps insisting, despite catastrophically mounting evidence, that "all is for the best in this best of all possibl
208.
by rst 5y ago
One answer to this is "Bridgerton"; see also Game of Thrones. Sex certainly hasn't vanished frim media in general, or even HBO.
209.
by rst 5y ago
There's precedent for a communications company skewing the news to protect its monopoly -- in the 19th century, Western Union (the telegraphy monopoly) gave the Associated Press cut-rate access, in return for agreeing to boot any newsp
210.
by rst 5y ago
Charming. Just grabbed the first link that described the issue. But yeah, the Spanish organization seems... confused at best regarding its own role.

More ›