Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
taway1237
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
9 ms
·
91.
▲
by
taway1237
3y ago
Why is cython (python-like fast language) worse than mojo (python-like fast language)?
92.
▲
by
taway1237
3y ago
In the real world maybe? I never understood the point of hookup apps like Tinder.
93.
▲
by
taway1237
3y ago
Defence in depth. Now you need a working chain of 3 exploits instead of one. It's about raising the bar, perfect security is impossible.
94.
▲
by
taway1237
3y ago
>Every major black hat group operates with the blessing of some state. Citation needed. As far as I know that's true. Yes, some groups cooperate with the state (true in Russia after the escalation of the war in Ukraine, for example)
95.
▲
by
taway1237
3y ago
Not a native English speaker here. What's a difference in technical context?
96.
▲
by
taway1237
3y ago
I value ma data, that's why I don't keep important information in random chats. But I digress. If you care about losing your history, the proper solution is backing it up, right? Signal does support that.
97.
▲
by
taway1237
3y ago
>Alameda's losses on the fat-finger trade were staggering - on the order of tens of millions. But because it had been an honest mistake, there wasn't much to do except to implement additional sanity checks for manual trades. Im
98.
▲
by
taway1237
3y ago
User consent popups are awesome. I never agree to anything, and I know exactly which sites are spying on me and which are OK.
99.
▲
by
taway1237
3y ago
Trojans only need to connect to one server (c&c) and they usually use http(s). Worms are almost nonexistent nowadays. Spambots are a concern (some of which could be consider a worm if you squint hard enough), but they only need to conne
100.
▲
by
taway1237
3y ago
It's less surprising and the obvious way to do it. Iptables are very powerful, but not needed in this case.
101.
▲
by
taway1237
3y ago
Certainly not all, as the ones I'm using don't. Unless you have a very cherry-picked definition of "modern".
102.
▲
by
taway1237
3y ago
There's a huge difference. Browser sandboxes are not "real" VMs and share a kernel. And in case of Chromium it's enough to read a few bytes from another process (token) to escape.
103.
▲
by
taway1237
3y ago
Parsing and tokenisation are usually (at least conceptually) separate steps. Your example almost certainly tokenizes as selectcount, (, *, ), fromtable. It's plausible "select 123abc" would tokenize as select, 123, abc becaus
104.
▲
by
taway1237
3y ago
Isn't it still a default somewhere? I recently formatted a pendrive on Windows and somehow mindlessly selected FAT (and ofc had troubles down the road). I probably picked a default somewhere. And to respond your question: >Why on ea
105.
▲
by
taway1237
3y ago
Just don't do what, edit your data? The problem is all JSON implementations agree what a properly encoded JSON file look like, and it's not true for CSV. Arbitrary CSV is not, in general, round-trippable.
106.
▲
by
taway1237
3y ago
Whonix is great. I use it all the time in my dayjob. I write a lot of scripts that have to interact with criminal (malware c&c, phishing website, etc) infrastructure, including APT analysis. You don't want to make an opsec fail and
107.
▲
by
taway1237
3y ago
Funnily enough, real malware does this correctly. Usually by just ShellExecing "ping -n 3 127.0.0.1 >nul" followed by "del" - no temporary file needed.
108.
▲
by
taway1237
3y ago
I'm not even sure if you and GP agree or disagree. As for me, I want IPv4 to stay forever. It works for me and I don't see any reason to spend time and migrate to something else.
109.
▲
by
taway1237
3y ago
>Like, yes theoretically the compiler can do anything, but tangibly, coherently, most compilers deal with most UB in a sane way. I have to disagree - I do a lot of hacky low-level stuff, and C/C++ compilers love to "break"
110.
▲
by
taway1237
3y ago
The definition is pretty precise, compiler can do whatever it wants with UB. That's not very helpful or useful, but the standard is very explicit about that.
111.
▲
by
taway1237
3y ago
>Reality is practically continuous not discrete. Do we actually know this?
112.
▲
by
taway1237
3y ago
I must be missing something, but why not just mount your code into the container? That's what I usually do.
113.
▲
by
taway1237
3y ago
As a reverse engineer who works with malware most of the time (and my current project is related to a spyware family) I'm annoyed by your incorrect and inflammatory use of the word "spyware". Words have meanings for a reason,
114.
▲
by
taway1237
3y ago
100% agree, but I have to add:DRM is not necessary for all media, just a small percentage of sites (like netflix/spotify i guess) use it. I personally never enabled DRM in my firefox.
115.
▲
by
taway1237
3y ago
Spyware exists primarily to steal data, firefox also has "some" other uses. Calling firefox "spyware" dilutes the meaning by implying it's somehow similar to actual spyware.
116.
▲
by
taway1237
3y ago
Yeah, it reads backwards. 2.4% of total greenhouse emissions just for one kind of food item sounds huge.
117.
▲
by
taway1237
3y ago
This also won't work since it'll crash on missing fields. e.get("commit", {}).get("author", "") maybe (ignoring the corner case of non-list top level object).
118.
▲
by
taway1237
3y ago
And yet everyone understands what this term means when applied to software licensing. Pretty good argument that this word, in fact, exists and has a well defined meaning.
119.
▲
by
taway1237
3y ago
Doesn't it prove GP's point? If you use MongoDB in your commercial software it gets infected with AGPL, because people interact with it over the internet - just like linking does with GPL.
120.
▲
by
taway1237
3y ago
Well, the point of the article is that they are not cpmpetitors and are used differently. For me, 99% of the time i'm curl-ing some API and I definitely don't want to save the result to disk (but often want to pipe it to grep/
More ›