zahllos

10 ms·

61.
by zahllos 2y ago
SQL injection? Get parameters can be abused like any parameter. This could be sql, could be directory traversal attempts, brute force username attempts, you name it.
62.
by zahllos 2y ago
Not being standards compliant does not surprise me at all. I've never looked at the cost, but I was told switching to teams is being done to save money. So perhaps not as much money as hoped...
63.
by zahllos 2y ago
That's what I thought as well. On the medication I was on afterwards it only inhibited serotonin reuptake and the dose was lower. I imagine a really high dose would do the same thing as well.
64.
by zahllos 2y ago
This is going to depend on the market. If you consider enterprise I'd argue Microsoft are very much still a monopoly. A client of mine is in the process of removing their existing telephony solution, which has many more features than t
65.
by zahllos 2y ago
I can also confirm brain zaps both when I tapered down and if I missed a dose. It was unpleasant but I put up with it when reducing my dose. I changed from it because it caused insomnia as a side effect badly enough that it was worse than t
66.
by zahllos 2y ago
They had an idea that the internet would be based on a system of federated directories, which would be used to find X.400 addresses for people and send them messages on the information superhighway. This never happened, but parts of X.500 a
67.
by zahllos 2y ago
HSMs support these kinds of scenario (high availability clusters, wrapped keys etc) but I agree. For enterprise use there's no interest or need, and for end users the feature would potentially be confusing. I just use multiple tokens,
68.
by zahllos 2y ago
The proposal is to do exactly this (hybrid schemes using a pre and a post quantum scheme). However in this context the debate is just over the PQ scheme (not the overall system). Also, NSA are not planning to mandate a hybrid system for gov
69.
by zahllos 2y ago
At the time of opening this page this was the top-ranked comment and that is a bit depressing. If you read Matthew Garrett's blog in full, you can learn quite a lot about what went into the process of building out secure boot for Linux
70.
by zahllos 2y ago
This is a bit misinformed. NSA required the use of "Suite B Cryptography" for commercial vendors of government systems, which in its latest revision meant ECC. However, vendors were (and are) slow to adopt ECC from the previously
71.
by zahllos 2y ago
It depends where you draw the line of "enough to get by". There are two cases: case A is where the expectations exceed what you're really being paid for, i.e. those cases you mention where the company culture is long hours. T
72.
by zahllos 2y ago
I agree with the parent poster, the author sounds very bitter. Might not be true, they might be trying at humour and I haven't got it. But I think doing the minimum you can get away with is playing with fire. Your colleagues will resen
73.
by zahllos 2y ago
Correct. In fact since memory access must be aligned (I think Linux uses 4 byte alignment, which is the alignment of instructions) the lower bits of every code pointer can be used for this purpose. ARM as in 32-bit arm already does this. If
74.
by zahllos 2y ago
I have a possible workaround for the "how can I pay for things" part: don't use Goopple wallet, carry a card (and maybe some cash)? Tap to pay is your phone emulating an iso14443 smart card, which is what a contactless bank c
75.
by zahllos 2y ago
There are indeed many cases where errors need to be recovered from and the subject of one angle in secure rust code training was quite literally "don't just panic, don't blindly unwrap or leave errors unhandled because that&#
76.
by zahllos 2y ago
A blue screen of death as caused in this case is also a controlled crash, in fact. The processor has fired an interrupt indicating invalid memory access and piece of windows code does some emergency logic, namely, dump memory so you can may
77.
by zahllos 3y ago
I've gone the other way in my life (native English speaker learning several other languages. I speak one fluently, and two others at a basic level. I live in continental Europe and the country I'm in has 3 official and 4 national
78.
by zahllos 3y ago
Even in Switzerland, one of the most expensive places in Europe, I would consider 150k USD to be a good deal - and I'd have to pay all the tax and social insurance parts out of that too (I have a company). For 125k in almost any other
79.
by zahllos 3y ago
Do you ever boot your machine only into 32-bit mode? Most UEFI firmware I've seen is launching /EFI/BOOT/BOOTX64.EFI, which means your bootloader is in long mode even if you then switch back to 32-bit mode (and UEFI is l
80.
by zahllos 3y ago
For the modern server/desktop and even laptop, that's also no bad thing. It is somewhat ridiculous that UEFI bioses, internally, still boot in 16-bit real mode and have to do all the steps your bios bootloader used to do to set up
81.
by zahllos 3y ago
Exactly this. Or to put it another way we don't actually know how the rules of the universe work. So we can't follow a process of deductive reasoning that "why" follows from this or that implication. Take quantum mechani
82.
by zahllos 3y ago
I didn't quite know how to answer but you've hit the nail on the head. Thanks! I agree. In Switzerland employment law is governed by the code des obligations, or for the parent poster who asked in the first place, Obligationenrech
83.
by zahllos 3y ago
This is very common where I am (Switzerland) and I agree entirely with your conclusion. It's not uncommon to see posts open for over 6 months and it often seems like this is because no candidate is good enough. In the intervening time,
84.
by zahllos 3y ago
I'm a Rust convert, but that needs to be put into context: I do stuff in in cryptography, often on embedded. Prior to Rust I did C and C++ for most of my work. There's also Ada... and it has SPARK, but Ada has never had the level
85.
MiraclePtr: Protecting users from use-after-free on more platforms(security.googleblog.com)
3 points by zahllos 3y ago|0 comments
86.
Context Switching SPRs on PowerPC(sthbrx.github.io)
1 points by zahllos 3y ago|0 comments
87.
by zahllos 3y ago
Yes and probably, but then Google is in the US.
88.
NATO admiral warns of potential all-out war with Russia(thehill.com)
11 points by zahllos 3y ago|0 comments
89.
by zahllos 3y ago
Just want to point out that foreign nationals are apparently sometimes fingerprinted and their DNA swabbed too on entry (according to the travel advice of several governments) - and electronic devices are sometimes searched at the border to
90.
by zahllos 3y ago
Disagree. They can do what they want with the email once it is in their queue but bouncing 'unknown' IPs is an extreme choice especially when they have SPF/dkim/dmarc/mta-sts/... all set up, and are not on any

More ›