sigseg1v

7 ms·

91.
by sigseg1v 10mo ago
SSRF* sorry typo
92.
by sigseg1v 10mo ago
isn't this actually XSRF and worse than XSS? Also, if users can run arbitrary JS on someone else's server then what stops them from doing CPU-bound work such as crypto miners?
93.
by sigseg1v 10mo ago
Agreed. A situation similar to this happened to me with Steam over a payment issue with their service. They banned me even though I had thousands of dollars of games and an account since Sept 2003. I had to go to my bank and escalate multip
94.
by sigseg1v 11mo ago
Curious if you've tested something such as: - "First, calculate the orbital radius. To do this accurately, measure the average diameter of each planet, p, and the average distance from the center of the image to the outer edge of
95.
by sigseg1v 11mo ago
Maybe he means invisible whitespace characters that don't render? I haven't verified this but depending on the definition of whitespace it's possible you can pass a base64 string and insert an arbitrary number of them. When d
96.
by sigseg1v 11mo ago
This is what I'm most interested in. I have an application which has a smaller trimmed down client version but it shares a lot of code with the larger full version of itself. Part of that code is query logic and it's very dependen
97.
by sigseg1v 11mo ago
I'm using teams at work and it's a laggy buggy mess, even with fairly beefy machines (eg. 64GB RAM, nvme ssd, workstation gpu). By this I mean when you click on a button or hover over something on the UI there is frequently more t
98.
by sigseg1v 1y ago
>You can't trust anything "will resolve in time period X" As is, this statement just means you can't trust anything. You still need to choose a time period at some point. My (pedantic) argument is that timestamps&#x2F
99.
by sigseg1v 1y ago
What about a `DEFERRABLE INITIALLY DEFERRED` trigger that increments a sequence only on commit?
100.
by sigseg1v 1y ago
Which customers? I definitely do not demand software upgrades on any of my vehicles and in fact if I could easily pin a certain version and upgrade only after seeing the changelog or diff that would be best.
101.
by sigseg1v 1y ago
The user base of the application I develop is non-technical. Most of them double click or drag EVERYTHING. It ends up highlighting stuff that looks weird and now they are dragging and dropping things with a quarter of the screen highlighted
102.
by sigseg1v 1y ago
This sounds unattainable to me. For code bases in the 2 million or more lines range, something as simple as refactoring the name of a poorly named base class can hit 5000 lines. It also was not a mistake with the original name it had, but y
103.
by sigseg1v 1y ago
> Obviously commits like "fixed review comments" or "removed some left-over comments" or "fixed typo" should not be pushed into a PR you asked others to review. Could you explain this a bit more? I'm ha
104.
by sigseg1v 1y ago
Worked for me for a long time until I found the samba-ad image won't run on podman. Worked fine on the same machine with docker. Everything else has been working as a drop-in replacement.
105.
by sigseg1v 1y ago
Artosis' channel on Twitch has got that one covered.
106.
by sigseg1v 1y ago
Whoever designed the keyboard animation for Walmart self checkouts should take note. Every time you want to type in a product by name, you must endure a 2 second slide-in of the keyboard before you can start typing on it. It's so slow
107.
by sigseg1v 1y ago
What size of codebases are we talking here? I've had a lot of issues trying to do pretty much anything across a 1.7 million LOC codebase and generally found it faster to use traditional IDE functionalities. I've had much more succ
108.
by sigseg1v 1y ago
Well said. An example I encountered was someone taking the "KISS" approach to enterprise reporting and ETL requirements. No need to make a layer between their data model and what data is given to the customers, and no need to make
109.
by sigseg1v 1y ago
The first link in the article I clicked for context led to a cert provider whose business name I recognize. Found the problem. I inherited a process using the same thing last year and it is the absolutely most insane nonsense I can think of
110.
by sigseg1v 1y ago
Outcompeted in the competition of what, exactly? How quickly they can produce inaccurate garbage?
111.
by sigseg1v 1y ago
Ever since the recent AI fad, more and more of these types of people have come out of the woodwork. Every random unknown business now truly believes that they have built something novel and revolutionary. They have the audacity to see diffi
112.
by sigseg1v 1y ago
Are you using them daily? I find that maybe 3 or 4 programming questions I ask per day, it simply cannot provide a correct answer even after hand holding. They often go to extreme gymnastics to try to gaslight you no matter how much proof y
113.
by sigseg1v 1y ago
Regulate software development. Other industries already do this. You could: - make Software Engineer a protected title that requires formal engineering education and mentorship as well as membership to your country's professional engi
114.
by sigseg1v 1y ago
Is it though? Just checked for hotels 3 star and up in my city, 1 month out, 1 bed, and it's $314 per night for the cheapest one. I have a hard time believing that if I stay here for 2 or 3 nights and pay them $1000 that they are barel
115.
by sigseg1v 1y ago
Arguably, I do not think that everyone is clear on how MIT works. Huge amounts of software, dare I say most, don't even include a way to view the license, which is a requirement to use MIT.
116.
by sigseg1v 1y ago
Agreed. I'm an amateur archer and I asked my archery instructor the highest poundage recurve bow he's ever seen someone fire, and he says that one time someone came to the range with a 100 pound draw bow, but he's only seen t
117.
by sigseg1v 2y ago
> the greatest tool in human history So would the greatest tool in human history in your mind be something that is used to plagiarise most content in the world and then output correct-30%-of-the-time slop? Or is there another definition
118.
by sigseg1v 2y ago
> People sometimes wonder if software wouldn't get better (boy technologically and socially) if software engineering was a licensed profession. In some countries such as Canada, it is a licensed profession and if you refer yourself
119.
by sigseg1v 2y ago
I have no clue why someone who wants art as output would do this but you'd probably get some mediocre mishmash out.
120.
by sigseg1v 2y ago
In AWS why would you need a NLB/ALB for this? You could expose all ports you want all day from inside the EC2 instance, but nobody is going to be able to access it unless you specifically allow those ports as inbound in the security gr

More ›