xtrapolate

6 ms·

1.
by xtrapolate 8y ago
> "If even SQLite can have a RCE vulnerability, I'm convinced that it is not feasible for anybody to write safe C code." This has much less to do with C, than it has to do with the fact that sqlite is a huge codebase. Soft
2.
by xtrapolate 8y ago
> "you give Plaid your username and password, and Plaid scrapers on their servers log into your online banking account" So your username and password are just kept in some internal database somewhere? The scrapers probably decr
3.
by xtrapolate 8y ago
The favicon is Apple's logo? https://www.romerogames.ie/favicon.ico
4.
by xtrapolate 8y ago
> "I'm partial to Iran because a multi-lateral treaty was signed. Iran stopped nuclear enrichment. In exchange, western countries pledged to provide economic relief and stop sanctions." Iran stopped its nuclear enrichment
5.
by xtrapolate 8y ago
> "Did you read the entire article? The whole point was that "delay loading" a particular DLL prevents a static analysis in the compiler from inserting hooks to perform expensive operations." I actually have read the
6.
by xtrapolate 8y ago
> "The first fix was to avoid calling CommandLineToArgvW by manually parsing the command-line." > "The second fix was to delay load shell32.dll." If your build pipeline is continuously spawning processes all-over,
7.
by xtrapolate 8y ago
> "SRI has been available for two years and it still isn't being used enough." Two years is relatively fresh. There's probably a significant amount of customers with browsers that don't support this. Can't w
8.
by xtrapolate 8y ago
> "When I was a college instructor I found that when I tried hard - putting a lot of thought into pedagogy, having weekly (open notes) quizzes, assigning challenging but fair homework - I got terrible evaluations, even though the av
9.
by xtrapolate 8y ago
> "isn’t it up to the universities to provide a majority their value in the form of education" I'm not sure how this statement addresses my claims. How do we measure/quantify the quality of education? I claim that the
10.
by xtrapolate 8y ago
> "A teacher (also called a school teacher or, in some contexts, an educator) is a person who helps others to acquire knowledge, competences or values." The target audience is a crucial part of the feedback loop. Removing the s
11.
by xtrapolate 8y ago
> "gene is for CCR5, which currently doesn’t have known function" It's in the article: > "Even if editing worked perfectly, people without normal CCR5 genes face higher risks of getting certain other viruses, such
12.
by xtrapolate 8y ago
> "How does the url http://redacted/ work?" I apologize for the confusion. I used an actual server there (ie. http://somename.com ) but chose to redact the actual URL from this post.
13.
by xtrapolate 8y ago
> "What specifically are your concerns? What about what you've learned will create an exorbitant bill?" Abusing the containers to send large amounts of outgoing traffic would do just that. Downloading files would do that t
14.
by xtrapolate 8y ago
> "I’m confused as to how anyone would think this is alright to do." Could be placeholders from development that ended up going live. I wouldn't jump to conclusion.
15.
by xtrapolate 8y ago
Getting an exorbitant bill from DigitalOcean after someone has abused your "containers" would not concern you then?
16.
by xtrapolate 8y ago
> "He needs to be running a client-side service, not running whatever someone enters on his machine" I would say that for the most part, websites such as this don't actually need a real, full-blown %s-lang compiler/VM
17.
by xtrapolate 8y ago
Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostname")) print(os.system(&qu
18.
by xtrapolate 8y ago
SAP is not paying for the product here. SAP is paying for the long list of customers using and relying on Qualtrics today [1], many of whom are Fortune 500 and government agencies. [1] https://www.qualtrics.com/uk/custo
19.
by xtrapolate 8y ago
Do people actually give away their email address when stumbling across a mysterious non-descriptive landing-page that says nothing about who or what a company is? In other words - what's the point of having "we're in stealt
20.
by xtrapolate 8y ago
This thread is yet another example of "you can't please all the people all of the time". This tool is a useful addition to the Linux toolbox, made freely available by Microsoft, in what would be yet another step towards embra
21.
by xtrapolate 8y ago
> It seems kind of nuts to say array indexing isn't just a fancier version of pointer arithmetic. I agree.
22.
by xtrapolate 8y ago
It's almost as if things aren't really black or white, there's usually plenty of grey in-between. Things like use-cases, scenarios, trade-offs, intricacies. I find it awkward that a security shop would publish an article usin
23.
by xtrapolate 8y ago
> "The other thing that you shouldn't do, even though C/C++ allows it, is pointer arithmetic. Again, it's one of those epiphany things C programmers remember from their early days. It's something they just couldn
24.
by xtrapolate 8y ago
> "Frankly on windows this is AFAIK a mostly-unheard-of technique. No one does mapping." Unheared by you. In a world consumed by Electron apps and Javascript, lots of people couldn't care any less about performant IPC, sha
25.
by xtrapolate 8y ago
> "So it has been almost a decade. How much longer before the whole move semantics addition to the language specification becomes relevant to you?" I'm not debating the usefulness of move semantics. I'm debating the w
26.
by xtrapolate 8y ago
> "Unique_ptr is such a fundamental type that, if one claims to be a c++ programmer, one has to know it and understand how it works." No. Those utilities weren't standardized before C++11. People wrote their own implementa
27.
by xtrapolate 8y ago
You can "test the theory behind ownership semantics" without relying on the intricacies of a C++11 construct (however trivial).
28.
by xtrapolate 8y ago
> "Just xtrapolate from these numbers." They could've simply involved the male population as-well, but for reasons unknown, chose not to.
29.
by xtrapolate 8y ago
> "we helped Callisto send a survey to 125 of the 384 female founders who have participated in YC" Anyone aware of similar efforts to survey the male founders?
30.
by xtrapolate 8y ago
> "It just takes a SCHED_FIFO task with forced CPU affinity. Android does not make it easy to get one." Are you aware of any non-RTOS that "makes it easy to get one"? > "Speaking of this, you can have sub-mill

More ›