For cryptography it uses the ring-library which still relies on C-Code in many places. Additionally there is no API-stability (still v0.*) and the last official audit was 3 years ago. The project has potential but isn't…
openSSL 1.1.1 is EOL 2023-09-11 which is likely to be the bigger problem for random-distro-XYZ
Why put the commit message there then? You could just use a git-client that adds this text as description for commits. There is generally little use to store automatically generated content in databases, the input for…
Come on :D CVSS of 7.1, Complexity Low, Availability and Confidentiality High. sure...
This made me look up jpeg2000 support. And then that made me sad :D
Mentioning Greenland ice sheet in this context is always a bit of a red herring. It is important to note that in the language of these simulations no "overshoot" is included in the temperature trajectory. A 1.5°C global…
No, the original plot was in MWh. But even for LCOE wikipedia (citing lazard) shows the same 3xfactor between solar/wind and nuclear: https://en.wikipedia.org/wiki/Levelized_cost_of_electricity
Democracy dies in darkness.
"when there's clouds and the wind doesn't blow, what happens?" Meteorologically speaking that won't happen over a large enough area like Europe or USA. When there's clouds there's always wind close by. It's also never…
That is just to show that nuclear isn't a magical always-on power source that some of the pro-nuclear folks make it out to be. Also: we can install twice the capacity in MW for solar and still have money left over to…
Sadly it's missing a native TCP-reassambly. Was caught by suprise by that recently, but there's always pyshark
Got announced 2 weeks ago https://web.archive.org/web/20220225082910/http://ars.userfr...
In-place conversion of NTFS? You either still believe in a god or need to google the price of harddrives these days. Honest question tho, why would anybody do in-place conversion of partitions?
It indeed doesn't cover data processed by "a natural person in the course of a purely personal or household activity" But arguably, as soon as you upload stuff to github.com you already fall outside of that narrow…
No, GDPR applies to everyone. The government is proactively only enforcing GDPR vs organizations, private persons need to sue to get GDPR enforcement against each other. Also - should companies use this list, their…
You would have to ask companies that you called how they shared & used your information. You probably can't reject to the data collection as it's based on legitimate interest (fraud detection) and not consent.
that could still be considered negligent, if it has a CVE and you're using it, you gotta know about it
>>You cannot make another computer do anything. You can only send messages, and the receiver decides how to act on those. By that logic malware doesn't exist. That's the wildest west version of the internet that we…
By sharing data until public relations make change necessary https://www.theverge.com/2021/9/11/22668734/google-user-data...
Are you mitigating supply chain attacks otherwise? If yes, how?
I could see a govermental effort be approriate too. Alot of critical infrastructure is depending on open source too. Agencies like the German BSI should embrace and invest into open-source much more strongly.
At my current job I'm trying to establish the same. Have to say, the recent news are water on my mills!
Imagine they introduced something worse. Could any developer explain to a manager why you needed to import this package? "Why do we need colors there?", "Why can't we make that colored ourself?"
The BPF capability should really only be given to root. I don't think it really gives any new attack surface. All I could see is it giving black-hats an easier interface to "kernel-level-fuckery".
What fans of unsigned integers seem to really want is array access in the form of x[i %mod% LEN]. While signed integers "kind of" give you an error on overflow (Except your unlucky or somebody was malicious). Is there a…
For cryptography it uses the ring-library which still relies on C-Code in many places. Additionally there is no API-stability (still v0.*) and the last official audit was 3 years ago. The project has potential but isn't…
openSSL 1.1.1 is EOL 2023-09-11 which is likely to be the bigger problem for random-distro-XYZ
Why put the commit message there then? You could just use a git-client that adds this text as description for commits. There is generally little use to store automatically generated content in databases, the input for…
Come on :D CVSS of 7.1, Complexity Low, Availability and Confidentiality High. sure...
This made me look up jpeg2000 support. And then that made me sad :D
Mentioning Greenland ice sheet in this context is always a bit of a red herring. It is important to note that in the language of these simulations no "overshoot" is included in the temperature trajectory. A 1.5°C global…
No, the original plot was in MWh. But even for LCOE wikipedia (citing lazard) shows the same 3xfactor between solar/wind and nuclear: https://en.wikipedia.org/wiki/Levelized_cost_of_electricity
Democracy dies in darkness.
"when there's clouds and the wind doesn't blow, what happens?" Meteorologically speaking that won't happen over a large enough area like Europe or USA. When there's clouds there's always wind close by. It's also never…
That is just to show that nuclear isn't a magical always-on power source that some of the pro-nuclear folks make it out to be. Also: we can install twice the capacity in MW for solar and still have money left over to…
Sadly it's missing a native TCP-reassambly. Was caught by suprise by that recently, but there's always pyshark
Got announced 2 weeks ago https://web.archive.org/web/20220225082910/http://ars.userfr...
In-place conversion of NTFS? You either still believe in a god or need to google the price of harddrives these days. Honest question tho, why would anybody do in-place conversion of partitions?
It indeed doesn't cover data processed by "a natural person in the course of a purely personal or household activity" But arguably, as soon as you upload stuff to github.com you already fall outside of that narrow…
No, GDPR applies to everyone. The government is proactively only enforcing GDPR vs organizations, private persons need to sue to get GDPR enforcement against each other. Also - should companies use this list, their…
You would have to ask companies that you called how they shared & used your information. You probably can't reject to the data collection as it's based on legitimate interest (fraud detection) and not consent.
that could still be considered negligent, if it has a CVE and you're using it, you gotta know about it
>>You cannot make another computer do anything. You can only send messages, and the receiver decides how to act on those. By that logic malware doesn't exist. That's the wildest west version of the internet that we…
By sharing data until public relations make change necessary https://www.theverge.com/2021/9/11/22668734/google-user-data...
Are you mitigating supply chain attacks otherwise? If yes, how?
I could see a govermental effort be approriate too. Alot of critical infrastructure is depending on open source too. Agencies like the German BSI should embrace and invest into open-source much more strongly.
At my current job I'm trying to establish the same. Have to say, the recent news are water on my mills!
Imagine they introduced something worse. Could any developer explain to a manager why you needed to import this package? "Why do we need colors there?", "Why can't we make that colored ourself?"
The BPF capability should really only be given to root. I don't think it really gives any new attack surface. All I could see is it giving black-hats an easier interface to "kernel-level-fuckery".
What fans of unsigned integers seem to really want is array access in the form of x[i %mod% LEN]. While signed integers "kind of" give you an error on overflow (Except your unlucky or somebody was malicious). Is there a…