Gaelan

6 ms·

1.
by Gaelan 3y ago
Yes (from the Google blog post linked elsewhere in the thread): > CVE-2022-42856, a WebKit remote code execution exploiting a type confusion issue within the JIT compiler (0-day at time of exploitation). Lockdown mode disables the Webkit
2.
by Gaelan 4y ago
Routing numbers aren't, but account numbers are: traditionally in the US it's possible to use a routing+account number to withdraw from someone's account.
3.
by Gaelan 4y ago
Perhaps even more evil: kill -SEGV $1
4.
by Gaelan 4y ago
Looking at the contents of the macOS installer (I haven't tried to run it), it seems to be both. Looks like it's based on https://www.cabbageaudio.com ?
5.
by Gaelan 4y ago
Well yes, but GTK and Qt apps feel about as native on macOS as Electron apps do.
6.
by Gaelan 4y ago
Isn't Edge just Chromium these days? The page you linked says: > Evergreen distribution. Rely on an up-to-date version of Chromium with regular platform updates and security patches.
7.
No Ghosts(blog.sunfishcode.online)
6 points by Gaelan 5y ago|0 comments
8.
by Gaelan 5y ago
> probably prone to issues if you can’t update multiple as part of the same transaction IIRC one of FoundationDB's features is that it does support such transactions, so you can easily implement indexing on top of it.
9.
by Gaelan 5y ago
This is essentially doing that—it would allow browsers to parse and run TypeScript. What it isn't doing is actually having browsers do type checking, for good reason: the TypeScript type checker is a large and complex piece of software
10.
by Gaelan 5y ago
> I am not claiming that running on an OS is the same as dynamically linking with a library In pretty much any case, it literally is: you're dynamically linking against the libc. This is a little fuzzier on Linux (because, as you me
11.
by Gaelan 5y ago
Laptops have batteries, so an AC power failure doesn't mean they immediately crash: they just keep running on battery until the battery gets low, at which point the system cleanly hibernates.
12.
by Gaelan 5y ago
+-----------------------------------------------------------------------------+ | You are entering the operating system shell. By confirming this action in | | the appliance shell you have agreed that THIS ACTION MAY VOID ANY SUP
13.
by Gaelan 5y ago
Surely a reasonable court would say that it's very clear what they meant?
14.
by Gaelan 5y ago
Note that they halved the project size in 2021, so the new project sizes are the original pre-2021 size, and the smaller 2021 size.
15.
by Gaelan 5y ago
I'm not too familiar with this, but my understanding is that the push notification just wakes up the Signal app, then the Signal app gets the encrypted message (either from Signal's servers or the push notification payload, I&#x27
16.
by Gaelan 5y ago
Generally, the idea is that you use a small amount of unsafe code to build a safe abstraction to do what you need, then use that abstraction in many places. So now you only have a few unsafe sections you have to verify for correctness, inst
17.
by Gaelan 5y ago
@dang could you give "world.hey.com/foo" URLs the GitHub/Twitter treatment where it shows the first segment of the path?
18.
by Gaelan 5y ago
> (unless you remapped another key to capslock (why?)) When I first started doing caps-lock-to-control, I mapped my physical control key to caps lock. Eventually, I stopped bothering and kept it as control.
19.
by Gaelan 5y ago
> Thumb adds many additional instruction encodings of variable length, load/store multiple already had pretty arbitrary latency Worth noting that, AFAIK, both of these were removed on aarch64 (and aarch64-only cores do exist, notabl
20.
by Gaelan 5y ago
https://gitlab.com/crev-dev/auto-crev-proofs is an identity that automatically trusts every known reviewer (at level "none"), which is useful for finding reviewers. You can also browse all known reviews onlin
21.
by Gaelan 5y ago
I don't think it was MS that did that, just sloppy third-party developers.
22.
by Gaelan 5y ago
> Skipping the Americas does not sound like a typical Apple move. I know of one place where Apple does this: in China, and only China, you can buy an iPhone with two physical SIM slots. You can do Dual SIM on iPhones elsewhere, but only
23.
by Gaelan 5y ago
Internet access that isn't subject to whatever domestic firewalling is in place, presumably.
24.
by Gaelan 5y ago
Unless you know something about the protocol that I don't (quite possible), it's not silent: all you devices get "new device registered to iMessage" dialog box.
25.
by Gaelan 5y ago
The level up bots should be unaffected by this, as they don’t need to read message contents —they just need to count messages.
26.
by Gaelan 5y ago
Mobile browsers have, since at least the first iPhone, defaulted to showing websites zoomed way out, on the theory that the site might not have been designed for a screen that narrow. Sites that are designed to support a phone screen are su
27.
by Gaelan 5y ago
There's an important point I haven't seen discussed yet: I don't believe it's possible to write secure web apps without a templating engine with safe-by-default XSS handling (i.e. interpolated text is sanitized, unless e
28.
by Gaelan 5y ago
I saw an interesting point (I think it was a scientist quoted in the NYT) that said once a vaccine out in the general public, it gets incredibly hard to get good efficacy numbers, because there are so many things that correlate with vaccine
29.
by Gaelan 5y ago
I'd assume the former.
30.
by Gaelan 5y ago
Wait, so they have the ability to arbitrarily blacklist people from transferring tethers? At this point, is Tether anything other than a weird bank?

More ›