znep

5 ms·

1.
by znep 1y ago
I wonder who would be best equipped to see if any of those keys are traceable to individuals involved in special government affairs lately? There have been some good leaks...
2.
by znep 3y ago
Users and (at least before the last run through the meat grinder) moderators.
3.
by znep 3y ago
Does anyone have any insight into if this a respin of the same Threads app from 2019 or just the same name? https://www.androidpolice.com/2019/10/03/threads-instagram-f...
4.
by znep 3y ago
That doesn't make any sense technically and sounds a lot like victim blaming. It is far from certain that any application has such a "steady state", most of the ones I've worked on sure don't. There are obviously w
5.
by znep 4y ago
Generally somewhere between terrible and non-existent if you stick with Fire OS. They will drop occasional small patch releases with broken links to non-existent release notes.
6.
by znep 4y ago
True, now they are just used against you in the press when they get released one way or another, legally or not. Then, the entire point for some lawsuits existing is to set the stage for that information to come out for no good legal reaso
7.
by znep 4y ago
Even Google can't solve all the downsides of things being in the cloud.
8.
by znep 4y ago
Or they at least want you to think that.
9.
by znep 4y ago
Indeed. I am sure there are lots of things under development, I have little knowledge in the area but I ran across this video the other day which suggests refueling and rearming via drone: https://www.youtube.com/watch?v=hN
10.
by znep 4y ago
Not any more. https://aws.amazon.com/about-aws/whats-new/2022/03/amazon-ec... In theory. But yes, sometimes detaching resources can take a long time on a degraded host.
11.
by znep 4y ago
Spring4Shell is entirely a flaw in Spring, however is somewhat understandable because it was only exploitable due to a new feature in Java (modules) that added new methods to java.lang.Class, which is a very significant change. You could a
12.
by znep 4y ago
Ahh, your comment is the first one that made it clear why this is only in 9 and later, because it was actually "introduced" by the introduction of modules in Java 9. That added https://docs.oracle.com/javase/
13.
by znep 5y ago
I'm not sure what they are using right now, but they currently have the "AWS-LC Cryptographic Module" listed as being in process for validation which may be sufficient for s2n. I know there are other AWS features/service
14.
by znep 5y ago
For even more fun, try "SELECT pg_cancel_backend(pid) from pg_stat_activity". (DON'T ACTUALLY DO THIS on anything other than a personal test db as it will kill all the connections it has permission to kill) Related, postgres
15.
by znep 5y ago
...and almost every time I end up on a mobile link to a tweet in a web browser I have to refresh the page to get anything but an error. Which has been going on for years, or at least seems like it.
16.
by znep 5y ago
This is very true, the costs and performance impacts can be significant if your architecture isn't designed to account for it. And sometimes even if it is. In addition, unless you can cleanly survive an AZ going down, which can take a
17.
by znep 5y ago
That is concerning and directly contradicts the docs: "You can revert to your previous master password only if the change had taken place within the last 30 days." I guess it is possible it is another UX issue and would fail if yo
18.
by znep 5y ago
One other thing to note is that by default lastpass allows reverting to your previous password for 30(?) days. The option is in account settings -> advanced -> "Allow master password changes to be reverted". To be safe you
19.
by znep 5y ago
Exactly. eg. https://github.com/frohoff/ysoserial#usage Note the classes aren't at fault or doing anything wrong (even though you could imagine other mitigations they could use), they are just conveniently ther
20.
by znep 5y ago
While the specific exploit may not be possible in 8u191 and later, I am not convinced they are safe from all RCEs using this vulnerability. It does make it harder to exploit, and hit or miss depending on what is available in the classpath.
21.
by znep 5y ago
Yes, you can specify a port.
22.
by znep 5y ago
Interesting example given you can no longer do that with the latest (v2) version of the AWS CLI, since it isn't published to PyPI due to how big of a nightmare AWS found supporting that to be. There is a very nice comment talking throu
23.
by znep 5y ago
I agree this is a great addition, but FWIW it isn't normal for ^C to not work in psql. Perhaps you are using some other client that doesn't support aborting queries properly, or have something on the network between you and the s
24.
by znep 6y ago
No, Athena is built on Presto as AWS documents in numerous places. eg. https://aws.amazon.com/big-data/what-is-presto/
25.
by znep 6y ago
That isn't due to a missing timeout, that is due to not properly communicating aborted requests down the stack which, admittedly, isn't always easy and some clients/languages/etc. are very bad at. A hardcoded timeout, w
26.
by znep 6y ago
Ahh Silicon Investor. Powered by MS SQL Server stored procedures that essentially returned the entire HTML page. Real fast. Real hard to maintain.
27.
by znep 7y ago
Yes, in the US (and presumably some other countries, I don't know of any offhand). Many other countries such as Canada use Lowest Astronomical Tide. The difference is actually important to know at times when boating between the countr
28.
by znep 7y ago
rubocop is so over the top in pendantics that writing any ruby code that gets nit picked by it is so painful that it makes more sense to just switch languages.
29.
by znep 7y ago
I might be wrong, it was a long time ago, but IIRC a different DNS rebinding attack was actually part of the reason this behavior was introduced to the URL class, to help protect against such attacks in Java Applets.
30.
by znep 7y ago
TL;DR - "Here is a lot of boilerplate code that doesn't seem necessary for what you are doing in this case..." ... "Hey look another tool that can generate a lot of boilerplate code you then have to deal with and makes t

More ›