albroland

7 ms·

1.
by albroland 3mo ago
I'm sorry but again, I dont see how an 4 byte OOB write will realistically lead to RCE without the custom buffer in the POC that explicitly puts a function pointer directly where the overflow happens, then invokes it. I'm happy to
2.
by albroland 3mo ago
Maybe I'm missing something but the ffmpeg buffer "exploit" involves passing a custom exploited buffer callback to parse a RASC file that presumably has been crafted to contain a packet that can exploit the custom buffer pass
3.
by albroland 8mo ago
Few thoughts: in context it's not nuts at all: - moot was fundraising for his VC backed startup during the years the emails are in, and he was likely connected via mutuals in USV or other firms. These meetings were clearly around him t
4.
by albroland 8mo ago
I believe a lot of this expectation is that as people replace Google searches with LLMs, or even enriched LLM results pushed at the top of Google results, far less click through to the actual sources happens. This is happening across a lot
5.
by albroland 9mo ago
I think this author is comically misguided about the speed at which oil extraction happens in Venezuela. Even if the plan was to pay for everything with Venezuelan crude sales, I don't believe ~$30MM/d is going to move the needle
6.
by albroland 9mo ago
https://www.reddit.com/r/providence/comments/1pnkwoq/comment...
7.
by albroland 2y ago
1. How do you intend to pay for it? 2. How do you intend to enforce it? 3. How do you intend to defend it? How many tanks can you deploy? IFVs? Artillery? How much ammunition can you supply? How many fighters are in service and mission read
8.
by albroland 2y ago
iPhone, most notably.
9.
by albroland 2y ago
musk holds TS clearance but not SCI
10.
by albroland 2y ago
I was in Bishkek last year and I don't see the risk; what concerns would you have aside from food poisoning? Dushanbe I agree with you, but simply because I found Tajikistan rather boring and desolate but in an unimpressive way.
11.
by albroland 2y ago
Yeah, it's quite an exorbitant price for the trip described. It said flights included which I have to hope is the majority of it.
12.
by albroland 2y ago
It's also the most scenic 'stan imo, by a wide margin. Was definitely my favorite of them all and is the only one I'd actually recommend people visit.
13.
by albroland 2y ago
Same, but my Turkmenistan LoI took over 4 years and several attempts to get (us passport holder). It has been by far the most problematic and difficult country for me to gain entry to. DPRK, Iran, etc all were substantially easier. My DPRK
14.
by albroland 2y ago
Not sure if you'll take it as reassuring, or alarming, but having worked with a few PBMs on the insurer side ES was the most tech-competent. Worst probably being CVS Caremark.
15.
by albroland 2y ago
I poked around google/ddg and didn't see any obvious public discussion of it so I can't blame you for missing it. If you have access (or have friends with access) to PitchBook, their file on WeWork would have comprehensive da
16.
by albroland 2y ago
Nice article, but it is wrong about liquidity events at WeWork. The author only discusses a tender offer that fell through at the end of 2019 after the failed IPO and collapse, implying there was nothing ever before. There was a tender offe
17.
by albroland 3y ago
100-125 should give you visual effects you'd expect based on your existing conception of hallucinogens. If you don't care for visual hallucinations, anywhere from 50-75 will give you a lot of the usually pleasant mental effects: h
18.
by albroland 3y ago
Customers too, Especially B2B. If you're buying something from an early stage startup (service or product) you want to believe that they'll be around in a couple years so you haven't wasted the time/effort of onboarding
19.
by albroland 3y ago
https://i.imgur.com/QYcAozd.png
20.
by albroland 3y ago
My favorite so far, the entire product description is chef's kiss : https://www.amazon.com/haillusty-Apologize-fulfill-violates-...
21.
by albroland 3y ago
TIL! Ty, I'll keep this in mind next time my credit card number is inevitably compromised.
22.
by albroland 3y ago
I understand that, I’m curious if reporting fraud activity helps prevent that in some way like the parent comment seems to suggest, if only for a year.
23.
by albroland 3y ago
Correct me if I’m wrong, but I’ve signed up for all 3 bureaus and enabled the credit freeze. My understanding, and experience years later, is that it is still frozen. I had to unfreeze a specific one last year for an auto loan. Is there som
24.
by albroland 3y ago
https://archive.ph/Ahzio
25.
by albroland 3y ago
There already is a company that rents out a system like this called the A-1 Array: https://www.array.cam/ I first saw this at an art installation in Brooklyn in 2017.
26.
by albroland 4y ago
>you must keep the patina or it loses value? That's exactly it, especially among vintage rolex collectors. They have a bunch of slang for describing different ways things have aged eg the tritium paint on the dial having faded into
27.
by albroland 4y ago
I'd say you've heard very wrong. If your concern is maximizing your income I'd highly recommend not going the mainframe route. The only people commanding SF/NYC gargantuan salaries will be old guard who retired to do con
28.
by albroland 4y ago
that's an excellent point/callout.
29.
by albroland 4y ago
My read on the bug is that it'd take quite the combination of factors to be exposed, I don't think it poses a widespread or remotely likely risk. App in question has to allow file upload that writes to local disk. Attacker would h
30.
by albroland 4y ago
Yeah, they continuously try to rewrite history. The original whitepaper directly stated "Each tether issued into circulation will be backed in a one to one ratio with the equivalent amount of corresponding fiat currency held in reserve

More ›