Calif.io have access to Mythos Preview which they've used to find a macOS kernel memory corruption exploit on Apple M5: https://blog.calif.io/p/first-public-kernel-memory-corruptio... It's probably the right approach to…
It takes decades to grow the trees that then absorb the CO2 that is emitted from the burning, and the biomass that Drax burns has been (and still is) imported from Canada from felling old-growth forests (some of which…
Your markdown file has an image that links to another server controlled by the attacker and the path/query parameters you're attempting to render contains sensitive data.…
For context, Major Paeta Hess-von Kruedener emailed [1] days before saying that Hezbollah were using his positions and the IDF was being forced to fire on them out of "tactical necessity". This isn't as clear-cut as…
Doesn't matter in this case. An Xbox was ordered that's classed as a "high value" item so requires a OTP being given to the driver to release the package. The package was hand delivered to the customer when the customer…
I'm asking for clarification because whilst there's a strong argument that politicians are performing insider trading (which as you say is widely regarded as something that should be stopped), if an amateur can copy…
Can you clarify what you mean by "this"? Being able to copy the trades of politicians or politicians making trades that are almost instantly profitable?
Poetry is an all-in-one tool that does dependency management using `pyproject.toml` files and its own `poetry.lock` files, as well as package building, virtualenv management, and also has hooks for entrypoints and…
> BUT my problem with this is "where do you draw the line?" Wherever it makes sense for you and your organisation. There's not a list of approved "boring technology" and unapproved "exciting but scary technology". It's…
> I'm surprised Google encourages syncing the codes to the cloud... kind of defeats the purpose Probably so when you upgrade/lose your phone you don't otherwise lose your MFA tokens. Yes, you're meant to note down some…
Using the camera to record video is quite processor intensive, though, and that can cause a good amount of heat build up.
> People saying you can get 10k req/s from Node.js is stupid. No, it's not, for exactly the reason you state: > You're not actually getting that on say, a single low-end instance over the Internet Some languages are, of…
It's a bold move to say the product your company sells is total crap, but not unheard of. https://en.wikipedia.org/wiki/Gerald_Ratner#Career
> manager/hiring manager that just went "eh he's ok let's give him an offer" When you've got plenty of money in the budget it's not beyond poor managers to hire more for no other reason than to grow their "kingdom", as…
You have far too much faith in stupid people.
> My history was mostly JQuery where needed (which was all the time before JS got its act together). htmx should remind you of those times. I certainly has for me - it's just (fundamentally) a fancy and clever wrapper…
It's not a company - it's an open source project. It's not a startup accelerator - it's a part of GitHub's efforts to support open source projects with funding and mentorship.
> And obviously, I'm under no obligation to not voice my concern about that. Except... You are... The guidelines [1] of the site outline that most discussion of politics is off-topic as it most often doesn't gratify…
> It's sort of like saying, instead of taking cars from your corporate fleet to a repair shop when they break, repair them yourself! Just hire some mechanics, build or rent a garage and equipment, and voila! And also,…
There's no such thing as Scottish pounds or English pounds, the UK uses pound sterling (internationally abbreviated to GBP). There are English banknotes and Scottish banknotes, but they're the same currency.
Assuming you're talking about users of your web app, rather than database users. Using the WAL mode [1] you can have truly concurrent reads alongside writes. You can't do truly concurrent writes, however, but the…
> I could go on and on, but I think I've made my point. Indeed. Thank you.
> Security scanners should adopt LESS heuristics and focus more on VALIDATING their perceived findings Aren't you saying the same thing? In the context of the blog post I understood it to mean that an automated scanner,…
But the next largest legitimate repo is going to be something like 20M commits shy of that, so it seems like it's excellent that GH engineers only just started to care. It's entirely possible that such a load test has…
It's this kind of attitude that's why we can't have nice things, though. A service is offered for free, with no documented limits or restrictions, so you push the service to its breaking point... Just to see what…
Calif.io have access to Mythos Preview which they've used to find a macOS kernel memory corruption exploit on Apple M5: https://blog.calif.io/p/first-public-kernel-memory-corruptio... It's probably the right approach to…
It takes decades to grow the trees that then absorb the CO2 that is emitted from the burning, and the biomass that Drax burns has been (and still is) imported from Canada from felling old-growth forests (some of which…
Your markdown file has an image that links to another server controlled by the attacker and the path/query parameters you're attempting to render contains sensitive data.…
For context, Major Paeta Hess-von Kruedener emailed [1] days before saying that Hezbollah were using his positions and the IDF was being forced to fire on them out of "tactical necessity". This isn't as clear-cut as…
Doesn't matter in this case. An Xbox was ordered that's classed as a "high value" item so requires a OTP being given to the driver to release the package. The package was hand delivered to the customer when the customer…
I'm asking for clarification because whilst there's a strong argument that politicians are performing insider trading (which as you say is widely regarded as something that should be stopped), if an amateur can copy…
Can you clarify what you mean by "this"? Being able to copy the trades of politicians or politicians making trades that are almost instantly profitable?
Poetry is an all-in-one tool that does dependency management using `pyproject.toml` files and its own `poetry.lock` files, as well as package building, virtualenv management, and also has hooks for entrypoints and…
> BUT my problem with this is "where do you draw the line?" Wherever it makes sense for you and your organisation. There's not a list of approved "boring technology" and unapproved "exciting but scary technology". It's…
> I'm surprised Google encourages syncing the codes to the cloud... kind of defeats the purpose Probably so when you upgrade/lose your phone you don't otherwise lose your MFA tokens. Yes, you're meant to note down some…
Using the camera to record video is quite processor intensive, though, and that can cause a good amount of heat build up.
> People saying you can get 10k req/s from Node.js is stupid. No, it's not, for exactly the reason you state: > You're not actually getting that on say, a single low-end instance over the Internet Some languages are, of…
It's a bold move to say the product your company sells is total crap, but not unheard of. https://en.wikipedia.org/wiki/Gerald_Ratner#Career
> manager/hiring manager that just went "eh he's ok let's give him an offer" When you've got plenty of money in the budget it's not beyond poor managers to hire more for no other reason than to grow their "kingdom", as…
You have far too much faith in stupid people.
> My history was mostly JQuery where needed (which was all the time before JS got its act together). htmx should remind you of those times. I certainly has for me - it's just (fundamentally) a fancy and clever wrapper…
It's not a company - it's an open source project. It's not a startup accelerator - it's a part of GitHub's efforts to support open source projects with funding and mentorship.
> And obviously, I'm under no obligation to not voice my concern about that. Except... You are... The guidelines [1] of the site outline that most discussion of politics is off-topic as it most often doesn't gratify…
> It's sort of like saying, instead of taking cars from your corporate fleet to a repair shop when they break, repair them yourself! Just hire some mechanics, build or rent a garage and equipment, and voila! And also,…
There's no such thing as Scottish pounds or English pounds, the UK uses pound sterling (internationally abbreviated to GBP). There are English banknotes and Scottish banknotes, but they're the same currency.
Assuming you're talking about users of your web app, rather than database users. Using the WAL mode [1] you can have truly concurrent reads alongside writes. You can't do truly concurrent writes, however, but the…
> I could go on and on, but I think I've made my point. Indeed. Thank you.
> Security scanners should adopt LESS heuristics and focus more on VALIDATING their perceived findings Aren't you saying the same thing? In the context of the blog post I understood it to mean that an automated scanner,…
But the next largest legitimate repo is going to be something like 20M commits shy of that, so it seems like it's excellent that GH engineers only just started to care. It's entirely possible that such a load test has…
It's this kind of attitude that's why we can't have nice things, though. A service is offered for free, with no documented limits or restrictions, so you push the service to its breaking point... Just to see what…