J-Kuhn

5 ms·

1.
by J-Kuhn 17d ago
https://en.wikipedia.org/wiki/Tragedy_of_the_commons
2.
by J-Kuhn 18d ago
It even works on Windows.
3.
by J-Kuhn 28d ago
> We would prefer the Play Integrity API being banned by regulators but this is good enough for now. Unfortunately, the EU is currently developing their age-verification-app, and it mandates hardware attestation[1], and it seems that the
4.
by J-Kuhn 28d ago
Yeah, its the "well, legally, we have to provide the source code, but we make it as painful and slow for you as we can without it becoming a blatant violation of the GPL."
5.
by J-Kuhn 1mo ago
Alternative Phone Line? You want the bootstrapping problem?
6.
by J-Kuhn 1mo ago
Exactly. You can make it not throw by adding `--add-opens java.base/java.lang=ALL-UNNAMED` or similar to the command line, but breaking things like this is becoming harder.
7.
by J-Kuhn 1mo ago
For me, Nix(OS) solved most of the problems: * Getting a dev env with `nix-shell -E '(import <nixpkgs> {}).somePackage'` where I can edit the source and compile it with the various `runPhase` commands[1]. Yes, a bit cumb
8.
by J-Kuhn 2mo ago
Before openjdk did move to github, they made sure they had a solution for those problems: * Contributors without github accounts * Moving away from github (when needed) * No vendor lock-in for github stuff. I personally think, this is a goo
9.
by J-Kuhn 2mo ago
The problem is not that the array is mutable, but that the size of the array may differ for different strings. (In fact, it usually* does differ if the string length is different). This makes it impossible to flatten - as the VM needs to kn
10.
by J-Kuhn 2mo ago
Such hacks will slowly stop working (without explicitly allowing it from the command line.) In this example, it would throw an IllegalAccessException, because java.base doesn't open java.lang.
11.
by J-Kuhn 2mo ago
I changed the sudo settings to not require a password. Now an application on my computer can obtain root without user interaction. Where is my CVE?
12.
by J-Kuhn 2mo ago
By some logic: * If they want to tell someone personally what to do or not to do, is some form of employment. * If it is not paid, it can be considered slavery. * It is usually possible to quit jobs.
13.
by J-Kuhn 2mo ago
Systemd (part of many major linux distributions) has for example machine-id[1], readable by anyone on the machine under /etc/machine-id. [1]: https://www.freedesktop.org/software/systemd/man/latest&#
14.
by J-Kuhn 3mo ago
Sarcastic view: Doesn't matter - the EU wont listen, then pull a surprised pikachu and make laws to force googles play integrity to attest that other devices are genuine, because obviously, the problem is google, not stupid design deci
15.
by J-Kuhn 3mo ago
You can do GET & POST requests without preflight. The logic behind this is: It was possible to do this before the introduction of those APIs anyway - but you could not read the response. You could send a GET request by, for example, emb
16.
by J-Kuhn 3mo ago
Yes, the EU calls it "digital sovereignty" and is currently "in" with the EU.
17.
by J-Kuhn 3mo ago
To my knowledge, any app can just instruct the installed browser (Google Chrome, Vanadium, Firefox...) to open http[s]://tracker.evil-ad-network.example/?installedId=012345.
18.
by J-Kuhn 3mo ago
Or simply forgetting to renew the domain, at which point an attacker can deliver arbitrary files through correctly signed TLS.
19.
by J-Kuhn 3mo ago
There is also Idris 2 for JVM ( https://github.com/mmhelloworld/idris-jvm ) Frege targets Java source code, which is then compiled by javac - the downside of that approach is you can not preserve the line numbers for deb
20.
by J-Kuhn 3mo ago
At a quick glance, it seems to be missing some hook to resolve class hierarchies - which is needed when merging stacks with different types. Consider var foo = expr ? new Foo() : new Bar(); For such an expression, some superclass o
21.
by J-Kuhn 3mo ago
This information is shown on the site of the breach, as example: https://haveibeenpwned.com/Breach/BakerDistributing
22.
by J-Kuhn 3mo ago
This is a bad idea, for multiple reasons. https://www.troyhunt.com/here-are-all-the-reasons-i-dont-mak...
23.
by J-Kuhn 4mo ago
You assume that the EU acts in a coherent manner. I think that premise is wrong - there are many interest groups, and by luck/lobbying/reaching critical mass/... they manage to put one of their interests into a law.
24.
by J-Kuhn 4mo ago
Fun Fact: When Cookies were introduced into Netscape, you got a browser permission prompt. Then browser vendors set it to allow by default. And then legislation required those consent boxes back, so everyone built their own, instead of dema
25.
by J-Kuhn 4mo ago
Oh, I also got one: https://wiki.archlinux.org/index.php?title=Special:CreateAcc... > To protect the wiki against automated account creation, we kindly ask you to answer the question that appears below (more info): What
26.
by J-Kuhn 4mo ago
Inspired by this, I wrote a quick prototype using MethodHandle combinators: https://gist.github.com/DasBrain/19804df69c78cee257dd0294b00... It doesn't have all the bells and whistles - so no support for annotation
27.
by J-Kuhn 4mo ago
I think they point weird-eye-issue wants to make is: Students attend college to become qualified to work.
28.
by J-Kuhn 4mo ago
In some parallel universe, they may still have it built in.
29.
by J-Kuhn 4mo ago
Still has the same vibe as "she did consent by wearing such a short skirt".
30.
by J-Kuhn 4mo ago
Well, if you are Disney, it turns out you can - by having the law changed just before the thing would go into the public domain.

More ›