stevemk14ebr

12 ms·

91.
by stevemk14ebr 4y ago
it could be. With the legit package named with a misspelling on purpose, users may confuse the correct spelling 'request' for the real package. in that case the typosquatting attack would actually not be a typo at all! You can&#x2
92.
by stevemk14ebr 4y ago
how is a physical yubikey any different from a loss POV?
93.
by stevemk14ebr 5y ago
then it went un-free again...
94.
by stevemk14ebr 5y ago
Lol, your life is not everyones. I also get to work in under 15 minutes on average. How? I live within 2 miles of work and I have a vehicle.
95.
by stevemk14ebr 5y ago
it's clear their == netflix.
96.
by stevemk14ebr 5y ago
Wasm is a sandbox first off. Any situation where you want to isolate a computation is an application suitable for wasm. Browser is just one instance of that
97.
by stevemk14ebr 5y ago
either way nothing you can do. So don't worry until there's something you can control
98.
by stevemk14ebr 5y ago
Bumping no_std support up the priority queue would be extremely welcome.
99.
by stevemk14ebr 5y ago
A VM based obfuscation scheme is known as virtualized. Defeating the VM and restoring the original code is called devirtualizing
100.
by stevemk14ebr 5y ago
You are incorrect. I work with malware professionally, defeating a VM obfuscator is often called devirtualizing. There is also the compiler optimization term as you say, but terms can mean more than one thing...
101.
by stevemk14ebr 5y ago
> either rewrite on not write the book in that case Your comment doesn't actually answer anything lol - he would - or wouldn't and you say both
102.
by stevemk14ebr 5y ago
I work in security - your statement is incorrect. Its fairly common.
103.
by stevemk14ebr 5y ago
IMHO there are better things to pick on Go for. The choice of using capitalization for public/private is probably the largest imho. When you want to change a field you have to change all references to it too. You could argue an IDE mak
104.
by stevemk14ebr 5y ago
please consider raising the priority of no_std wasmer support. This is the biggest barrier for seeing wasm in some really cool areas, kernel, embedded, etc
105.
by stevemk14ebr 5y ago
If you read the how.md it mentions the key insight was to introduce an operation into the language that allowed temporary violation of 'sensical rules' that the author calls superposition. Then computing or applying one of these s
106.
Reddit files to go public(reuters.com)
541 points by stevemk14ebr 5y ago|787 comments
107.
by stevemk14ebr 5y ago
Proving it did exist would be awesome too. Using it as a tool to study inflation, he mentions some of that at the end
108.
by stevemk14ebr 5y ago
In my case the right hand preview being generated is literally HTML that is presented as formatted markdown. The solution for me was to detach the generated markdown html tree from the creation of the react elements. You can have the worker
109.
by stevemk14ebr 5y ago
Everything is assembly, that's how your CPU works. If you run C code, rust, go whatever you have to Target an architecture so the compiler can generate the correct assembly instructions. Even python or js interpreters must be recompile
110.
by stevemk14ebr 5y ago
You issue is likely due to a heavy computation blocking the main js thread (rendering). In this scenario the suspense api will not solve the UI lag. I've had the exact same pattern with a home build markdown editor where the right side
111.
by stevemk14ebr 5y ago
Useless, to you. Having weekend security incident response people with auditing like this we love because their system is actually introspectable
112.
by stevemk14ebr 5y ago
you want your kernel to do that because it's the source of truth. And what if you want to audit execution that includes binary blobs you don't own the source of?
113.
by stevemk14ebr 5y ago
If it's not clear, here's a summary. FireEye acquired Mandiant a while ago for ~1B. FireEye had all the jazzy physical tech of the time like good, hardened sandboxes, sensors, etc, stuff you physically sell. Mandiant had the incid
114.
by stevemk14ebr 5y ago
As a person who works in cyber security, no, no we probably wouldn't share those details. It gives an edge to attackers about how we track them. Those details are only made public when the malicious activity is aggressive or widespread
115.
by stevemk14ebr 5y ago
Crypto makes it more efficient. It would still occur without crypto just fine. Your talking about a black market worthy many millions, maybe billions.
116.
by stevemk14ebr 5y ago
Checkout the shadow stack used for CET (control flow enforcement technology). It is literally this idea
117.
by stevemk14ebr 5y ago
Can someone ELI5 please? My field is low level computer systems, and unfortunately that knowledge does not extend to low level physiological processes!
118.
by stevemk14ebr 5y ago
Also see https://blog.can.ac/2021/03/22/speculating-x86-64-isa-with-o...
119.
by stevemk14ebr 5y ago
I like it alot. Feels straight edged and modern
120.
by stevemk14ebr 6y ago
Calling a sync function from an async when using the tokio executor is literally documented as a thing you should not do. Furthermore if you want to then spawn a task or whatever it's called, which is the documented way to do this safe

More ›