shakna

12 ms·

241.
by shakna 5mo ago
It would surprise me if the judge of such a case did not tell both sides off. Both fraud and negligence are problems.
242.
by shakna 5mo ago
Well, "Sensitive" is the second lowest data label. It must all just be above that.
243.
by shakna 5mo ago
We already have a huge number of safety regulations for cars, that take into account all these various things. There's also insurance that covers flood damage and cars. These are the things that red flag something you need to test, if
244.
by shakna 5mo ago
I would hope for some further fragment of the Cypria to be uncovered.
245.
by shakna 5mo ago
From that thread: https://news.ycombinator.com/item?id=33770905 >> The moment you enter a compilation unit (assuming no link optimizations) with a state which at some point will run into undefined behavior all bets ar
246.
by shakna 5mo ago
Function parameters cannot be evaluated in any order, when one of them is a volatile. > The initialization shall occur in initializer list order, each initializer provided for a particular subobject overriding any previously listed initi
247.
by shakna 5mo ago
> An object that has volatile-qualified type may be modified in ways unknown to the implementation or have other unknown side effects. Therefore any expression referring to such an object shall be evaluated strictly according to the rule
248.
by shakna 5mo ago
> Furthermore, at every sequence point the value last stored in the object shall agree with that prescribed by the abstract machine, except as modified by the unknown factors mentioned previously. I quoted the C standard, first. Not comp
249.
by shakna 5mo ago
I've mentioned elsewhere the standards, and compilers as well, disagreeing with you here. But feel free to run against the various compilers through godbolt. [0] They won't optimise the branch away. Access to a volatile, must be p
250.
by shakna 5mo ago
The compiler is not free to remove accesses to something marked volatile - its defined as a side-effect. Volatile means something else may be acting here. Something else may install anything into the register at any time - and every time yo
251.
by shakna 5mo ago
Volatile wins. GCC calls that out [0] - volatile means things in memory may not be what they appear to be, and that there are asynchronous things happening, so something that may not appear to be possible, may become so, because volatile is
252.
by shakna 5mo ago
Only if there would be no side-effects. Which there are.
253.
by shakna 5mo ago
"volatile" tells the compiler it is _not_ safe to optimise away any read or write, so it can't just optimise that section away at all. > An object that has volatile-qualified type may be modified in ways unknown to the imp
254.
by shakna 6mo ago
> What makes you think I was using Lua in 2014? Seriously, do you even know how to use “git log”? ... It was fixed, upstream, in 2014. Thanks for not checking the number at the start of the CVE, before launching straight into attack mode
255.
by shakna 6mo ago
Then why did those company fight, and not just leave...? Worth pointing out also that the US is the odd one out, here. Europe also enforces consumer rights.
256.
by shakna 6mo ago
The ACCC is more than happy to explain unenforceable terms, if you'd like to do business with Australia. Feel free to consult Steam, Google, Meta and others, if a software license is enough to ignore consumer rights.
257.
by shakna 6mo ago
Sure there is. When purchased, it was able to do something. Due to an update, the customer has now been misled, because a feature was removed. In most countries, that would violate consumer rights. There's an ethics argument here.
258.
by shakna 6mo ago
Yeah, I've had patches submitted to Moonscript, Fengari, and luau. Don't need to sell on why 5.1 is useful. Each version is a new lang, not just a few fixes or niceties. I'm not convinced that vendoring, instead of embedding,
259.
by shakna 6mo ago
Its important to maintain your dependencies, by say embedding Lua, rather than rebranding it and then claiming you have no security flaws. If I can find a CVE that _may_ affect the stack in five minutes, what _actual_ problems lurk there? Y
260.
by shakna 6mo ago
Okay, to respin this - Daniel doesn't say that curl is secure-enough. Half the point of the talks this year, is there has been an uptick in detecting security bugs, not a downturn. And here's some graphs. [0] > Given the look o
261.
by shakna 6mo ago
Well, as you bundle Lua 5.1 (as Lunacy), instead of making a library and loading it, and you bundled the 2012 version, you're probably affected by CVE-2014-5461 and others. Lua hasn't been security fix free.
262.
by shakna 6mo ago
Is not the selling of the model, that it is as capable as anyone and everyone? > Claude Mythos is Anthropic's most specialized model, trained exclusively on security research, vulnerability disclosures, and attack pattern literature
263.
by shakna 6mo ago
Daniel found 30 CVEs in Curl, this year. I would not say that there is nothing to find, here. Just that it takes an actual expert.
264.
by shakna 6mo ago
A USB that was both storage and a keyboard, that executed the keystrokes to download malware, was demo'd at a DefCon a few years back.
265.
by shakna 6mo ago
That sounds a lot like US9116712, but I don't think its ever been publicly said that Windows does this.
266.
by shakna 6mo ago
A friend of mine is adopted. At the time, the worker didn't follow the SOP. Instead of an entry into the adoption registry, they created a new death certificate, and a backdated new birth certificate. A lot of government systems collap
267.
by shakna 6mo ago
Facebook is an unreliable source, and should not be cited.
268.
CVE-2026-7413: Persistent undocumented backdoor access with Yarbo(takeonme.org)
2 points by shakna 6mo ago|0 comments
269.
by shakna 6mo ago
Well, as they're a FreeBSD dev, I would be surprised if they pointed anyone in a different direction.
270.
by shakna 6mo ago
Most managers I've met, struggle with setting up email filters, and have to ask tech support to do it for them. These students will be qualified just fine.

More ›