codezero

9 ms·

211.
by codezero 2y ago
Before pages the project was hosted on the server of the original maintainer.
212.
by codezero 2y ago
Not if this is one of a few dozen or few hundred similar ongoing operations. The risk is always there, they have to expect some amount of failure. Open source software is constantly being probed for vulnerabilities in every way possible, fr
213.
by codezero 2y ago
That nobody is talking about the person's IP addresses (the xz project was hosted on a personal server of the maintainer), or any details about their actions indicates to me it was a state actor and the original xz maintainer is cooper
214.
by codezero 2y ago
or they are totally nonplussed because they are not even a single individual, and a state actor who is doing this on 10-20 other projects for the past 5-10 years which haven't got the same attention. This is their job, being compromise
215.
by codezero 2y ago
Caltrain officials built those for personal benefit. The article here is about a restoration for public good.
216.
by codezero 2y ago
Shit, that's on point.
217.
by codezero 2y ago
that's unhinged and hilarious, great work.
218.
by codezero 2y ago
This just as easily describes the rise of AOL when I was around that age in the 90s.
219.
by codezero 2y ago
Good point.
220.
by codezero 2y ago
Totally agree about there being exceptions. I never wore a watch, but when my wife got me an Apple Watch it became a huge utility to me to filter notifications to see only important things I cared about and it made me more productive to hav
221.
by codezero 2y ago
I still have my original PalmPilot in a box in the attic. Its existence was a huge life lesson for me. I asked my boss to pay for it (he did) but he said: do you use anything to organize your life and projects right now? If you don't,
222.
by codezero 2y ago
I think back to 2009 and think of the state of opsec back then and I think people could very much use ridiculously traceable names for something like Bitcoin.
223.
by codezero 2y ago
perhaps they collectively generated the private key in a way that gave none of them access to it.
224.
99 Cents stores to close down all 371 locations(npr.org)
3 points by codezero 2y ago|0 comments
225.
by codezero 2y ago
I've been very civil, being flagged doesn't mean I broke the rules, flags are crowdsourced and it's more likely related to your axe grinding and the four downvotes which I'm fine with. If you are implying I broke the rul
226.
by codezero 2y ago
That’s your opinion, but I was clear about the origin of the information which is accessible to anyone, it’s up to others to vet and validate information they find online, and furthermore, what you think is poor form is strictly your person
227.
by codezero 2y ago
I find LLMs to be useful tools like any other piece of software. Prompting to get creative ideas is just like using any other software and coding it to respond with various options by say, pruning a large set of options based on a heuristic
228.
by codezero 2y ago
Maybe but only once in a while, I wonder how much legitimate software relies on the kernel name at runtime (vs compile time)? Also consider it may only trigger if five syscalls to uname come in sequence from the same process. I suspect with
229.
by codezero 2y ago
You can call it what you like but I’ve had plenty of hypothetical conversations with people and we never accused each other of lying. I think you are assuming that I treat GPT like an oracle rather than as a sci-fi author tripping on acid.
230.
by codezero 2y ago
Why not? Most malware utilizes uname to either whitelist or blacklist infection on a system, so an APT may benefit from lying.
231.
by codezero 2y ago
Consider “Jia Tan” started working on xz because they already found a critical vulnerability and wanted to maintain it, or more tin foil, they burned xz to get upstreams to use another compression that is also already backdoored. When deali
232.
by codezero 2y ago
ChatGPT could not provide any, fwiw, but it's an enticing idea.
233.
An unusual 7400-series chip implemented with a gate array(righto.com)
150 points by codezero 2y ago|31 comments
234.
by codezero 2y ago
I’ve heard from a lot of people that this is happening and as a hiring manager myself when I do have an open role I see a lot more good applications than I saw say, five years ago, which means I’m rejecting a lot of people that have great e
235.
by codezero 3y ago
What I wonder is if a radar is watching drones, what is it missing? Could a drone swarm be used to draw attention away from another incursion or are radar systems able to handle slow and low things at the same time as higher and faster obje
236.
by codezero 3y ago
> Yeah, I'm sorry you can't see that. "Fuck over" to me implies malicious intent, if it doesn't to you then that may explain why we have differing points of view. > Apparently you don't need to be to have
237.
by codezero 3y ago
I'm an airplane user, and have already moved our tooling over to retool. Fuck over their customers? I'm sorry, but you have a choice in what tools you acquire, buy, and invest in, if you don't take into account that the compa
238.
by codezero 3y ago
Airplane was a startup in a competitive market, it wasn't Google Reader shutting down. Anyone using it was an early adopter and in my experience, most early adopters understand the risk. Maybe it's possible that folks will be hesi
239.
by codezero 3y ago
I was employee six and didn't know (though I did know there was a history to Heap before it joined YC and there was another cofounder, I just never knew/didn't dig into who)
240.
by codezero 3y ago
In this context, Ravi who became cofounder of Heap certainly didn't take that route. He was and is fantastic and if anything I'm surprised Airplane wasn't even more successful because of his involvement. I don't have all

More ›