vetrom

23 ms·

241.
by vetrom 12y ago
To be honest, I'm not so sure about that. Two attack surfaces I can think of off the top of my head where that could be leveraged are dynamic plugin loading, a-la old school ActiveX, and LD_LIBRARY_PATH attacks on ld.so based platform
242.
by vetrom 12y ago
It really is the moments like this when I look at my stack of Gimp, Inkscape, Scribus, and Darktable, and am glad that I invested in the alternate solution.
243.
by vetrom 12y ago
You know... I'd be fine with that as long as other vehicles also got regularly ticketed when they flagrantly violate the right-of-way of bicycles following road rules as defined by $JURISDICITON. The last time I saw that was....... ne
244.
by vetrom 13y ago
Eve is also a sharded world, the system there just tries to implement transitions are transparent. The abstraction leaks sometimes, though. (Each system in Eve is a shard, and when events in that game happen 'at scale', scaling i
245.
by vetrom 13y ago
Heroku also folds bandwidth and electrical costs into their price model. Having built a couple of cloudy services, I can confirm that these far dominate your costs at scale.
246.
by vetrom 13y ago
I've always found that Betteridge's Law of Headlines is an excellent first (but not 100% accurate) measure for early-warning of link and 'content' farms.
247.
by vetrom 13y ago
Could it merely be sugar crash from metabolism and starch breakdown? A lack allergies or what not does not imply that it's healthy to stuff your face with it all day. EDIT: nevermind, acconrad described the same thing 3 hours ago.
248.
by vetrom 13y ago
"AP isolation".
249.
by vetrom 13y ago
I think there is some degree of conflation here. You can have different views/communication for session state and separate that from database state. Websocket apps are almost invariably in the family of apps that act on some sort of s
250.
by vetrom 14y ago
On the contrary, I think randall, commenting previously, highlighted perfectly well how it relates to startup commentary. HN is very much about accelerated startups and investor attraction I think, but there are those who also want to work
251.
by vetrom 14y ago
To add to the old news litany: Saw this on Vodafone over in Germany a few years back. To add to the security litany: SSL. EVERYWHERE. Firesheep ends up useful again :) That said, this was probably only noticed as quickly as it was due to i
252.
by vetrom 14y ago
Responsible versus full disclosure is a debate rooted in problems far older than HN. At least we get to see security issues in the light these days!
253.
by vetrom 14y ago
Unfortunately for us Americans, the Swiss have had at least a couple of hundreds of years longer to evolve discourse in the public eye, depending on how you read your history. While there have been exceptions, I would imagine that the first
254.
by vetrom 14y ago
As a matter of fact, I also just realized that it may be possible that nice-ing the 'victim' process down to -20 may also make it easier, and is a non-privileged operation almost everywhere.
255.
by vetrom 14y ago
Source please?
256.
by vetrom 14y ago
Porting 'legacy' QT apps with too much functionality in the QT bits to a browser hosted environment could, I imagine, form a case in favor of simplifying software delivery. (That, or forcing a desktop upgrade to i7's. Think of the kickback
257.
by vetrom 14y ago
RT privilege is not a prerequisite to this exploit, it only makes it 'easier'.