wutwutwat

8 ms·

121.
by wutwutwat 2y ago
chronic and cocaine
122.
by wutwutwat 2y ago
Top right of the page it says > About > gumroad.com pretty much sums up the contents of the repo. If someone can't be bothered to check out gumroad.com there's no amount of documentation that will help them.
123.
by wutwutwat 2y ago
maintainer's employment != security audit
124.
by wutwutwat 2y ago
> you can also view the source code easily that way tbh sure thing, just gotta download and execute it.... WAIT A MINUTE. YOU ALMOST GOT ME! YOU SOB > you can also view the source code easily can just as easily throw it on github, if
125.
by wutwutwat 2y ago
fingerprinting is the best case scenario
126.
by wutwutwat 2y ago
> Github makes it extremely difficult to do the right thing here ... it took a lot of effort to make it so that "iff you can see it in Github you can see it in Devlog." The entire experience was beyond frustrating. Do they? You
127.
by wutwutwat 2y ago
> Someone elsewhere suggested a lockfile commit hashes are immutable, and your own commit history can serve as the lock file. but if you're targeting a commit hash directly, it's already locked. Lock files are for mapping a ver
128.
by wutwutwat 2y ago
You just described a supply chain, and the risks that come with them, which is something every dep management system is dealing with, rubygems, npm, etc Again, it all comes down to your risk tolerance. There's a certain level of trust
129.
by wutwutwat 2y ago
I don't think they meant architecture, scalability, or understanding real-world business constraints I think they meant literally web developers, or, aka, frontend folks doing html and css. I've worked on backend systems that run
130.
by wutwutwat 2y ago
I don't grant my camera app location permissions, so the images are never tagged with gps in the first place, but I also will screen shot pictures before sending them anywhere.
131.
by wutwutwat 2y ago
You can target `some/action@commithash` already, that's up to you. You're also free to fork or clone each action you use, vet the code, and consume your fork in your workflows. You can also disable the use of third party acti
132.
by wutwutwat 2y ago
A lot of folks accepting image uploads don't realize they need to remove the exif data from the images, as that often leaks gps coordinates if they were taken using a cell phone. With imagemagick, you can use the `-strip` flag[0] when
133.
by wutwutwat 2y ago
> If your security relies on the attacker not finding it or not knowing how it works, it's not actually secure. Every branch of the military would like to talk to you and inform you that sometimes, the enemy not finding the target,
134.
by wutwutwat 2y ago
Dealing with changing residential ips is nothing new. It's interesting to see how it's still being solved for even in this overly complex k8s landscape we find ourselves in now. Back in the day we'd use free services like ht
135.
by wutwutwat 2y ago
Don't dirty the good name of k-mart's bluelight internet by lumping it in with this nonsense
136.
by wutwutwat 2y ago
sweet, I can't wait to download something that will scan my system's logs looking for specific security signals, and then take action when it sees certain ones! /s Joking aside, as others have said. I've never been shock
137.
by wutwutwat 2y ago
I literally don't understand what makes a death a "sad" death. People are acting like this should be common knowledge, but I've never heard that before. Death is death. What makes one a sad one? If there are sad ones, do
138.
by wutwutwat 2y ago
I don't know why I was downvoted for asking a legit question, but alright. The answers still don't make any sense
139.
by wutwutwat 2y ago
That has what to do with this person saying a death is sad?
140.
by wutwutwat 2y ago
Please describe what makes one's death a "sad death"
141.
by wutwutwat 2y ago
It matters to the person above, which would be why they asked the question. That's generally how question asking goes...
142.
by wutwutwat 2y ago
Yet, my comment remains left intact. Sometimes inaction says just as much as action...
143.
by wutwutwat 2y ago
That's not why I called them an incel. I called them an incel for spouting a hateful opinion as fact that makes women out to be inferior, you know, the thing incels are known for doing.
144.
by wutwutwat 2y ago
Me calling out you for your distorted view of women === I hate men? Solid logic. 100%. Probably the same logic that resulted in your wack determination about rejection. PS. I'm a man. One who doesn't hate women. Or men. Not in gen
145.
by wutwutwat 2y ago
Dating apps are nothing more than window shopping. The lowest effort, most shallow, unlimited options buffet of meat sacks to choose from. When you have unlimited options, and a potentially better one is just a swipe away, people become dis
146.
by wutwutwat 2y ago
Did everyone forget about wireshark, which can totally be ran as non-root? https://blog.wireshark.org/2010/02/running-wireshark-as-you/
147.
by wutwutwat 2y ago
We must be reading different comments
148.
by wutwutwat 2y ago
Did you even read my comment? I literally talk about how to do that, in multiple different ways.
149.
by wutwutwat 2y ago
Yes, and I mentioned redis above. You need a message broker with 2+ servers, be it pg, redis, or distributed erlang. It's still more complex than a single server setup, which was my point. It's easy to say you don't have to t
150.
by wutwutwat 2y ago
I wasn't talking about network switch hops and if you're trying to long polling and don't have control over the web servers going back to your systems then wtf are you trying to do long polling for anyway. I don't try to

More ›