CPython has the unfortunate property that ints aren’t covered by hash randomization, and `hash(x) == x % ((1 << 61) - 1)` always.
https://grapheneos.social/@GrapheneOS/117225731764489295 https://bsky.app/profile/grapheneos.org/post/3muupuvlfbs2v
A Jekyll theme from the same person as this project, yes.
Do you have a source for this practice? I couldn’t find any evidence of it with a search.
> (3) it's provided in an environment variable (no better than before) Even if you take no measures beyond simply using a token that can be exchanged for secrets (and you can – invalidate it, authenticate it, etc.),…
> "The environment" is not "environment variables" and not ".env files" Is there confusion because an extra "not" leaked in?
“actually have ethical beliefs” here → not “virtue signalling”
Combined with “do not mix declarations and code”, this could be a strict C89 compatibility thing (not that I think that these standards are a good idea either, even with that less arbitrary justification).
Slop article generated to promote their game that they also posted yesterday.
Slop article. Good for scam awareness I guess, but the main value of the analysis and advice is comedy. > read process.env directly, which in this app means MONGO_URI, JWT_SECRET, SENDGRID_API_KEY,…
I’m not an expert in RustDesk, but I did take a quick look at the code, and it’s filled with massive red flags like [1], where it appears the general mechanism is SHA256(SHA256(password++salt)++challenge). I can’t even…
Does your journal have cloud sync? That’s what broke on the device in the article.
Sometimes that's true, but sometimes (imo the superior approach) the touchscreen is independent from the cursor. I think touchscreen Chromebooks are like that, for example.
The `formaction` and `formmethod` attributes already exist. https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/...
Correct, it’s a common misconception/sloppy wording.
Digitally rented content is rented. My music via Bandcamp/iTunes, my games from their developers’ websites/itch.io/GOG, and my ebooks are owned (for the purposes of the “owned”/“rented” distinction people are making…
Alternative what? Government?
> How is this different from struct in C#? A struct in C# has identity Since when? I’m pretty sure structs didn’t have identity last time I used C#, and that would be a very surprising thing to add.
and don’t open links like https://tinyurl.com/2s3twstw either, or any other page on the internet that’s able to redirect you to github.dev
This comment is confusing to me on so many levels. What’s with the tangent(?) about a math test your algebra teacher could have generated? Did you bring up an illiterate teacher (extreme outlier) as evidence that the…
Not one window, but one application. Which is, yeah, about the worst of both worlds.
- CSP that allows cdn.jsdelivr.net/unpkg.com (which serve anything on npm, which anyone can publish to) indiscriminately is not effective (and I’m sure some cdnjs script in an Angular-style library executes arbitrary…
> in favor of some unlikely cloak and dagger interception scheme someone who definitely understands how crypto works, describing the most basic possible MITM
I know parameters don’t translate directly like that (and that linear and exponential aren’t the only types of growth) but a doubling as a go-to example of “not exponential growth” is pretty funny.
ASLR is (still[1]) not security by obscurity. [1] https://news.ycombinator.com/item?id=43408079
CPython has the unfortunate property that ints aren’t covered by hash randomization, and `hash(x) == x % ((1 << 61) - 1)` always.
https://grapheneos.social/@GrapheneOS/117225731764489295 https://bsky.app/profile/grapheneos.org/post/3muupuvlfbs2v
A Jekyll theme from the same person as this project, yes.
Do you have a source for this practice? I couldn’t find any evidence of it with a search.
> (3) it's provided in an environment variable (no better than before) Even if you take no measures beyond simply using a token that can be exchanged for secrets (and you can – invalidate it, authenticate it, etc.),…
> "The environment" is not "environment variables" and not ".env files" Is there confusion because an extra "not" leaked in?
“actually have ethical beliefs” here → not “virtue signalling”
Combined with “do not mix declarations and code”, this could be a strict C89 compatibility thing (not that I think that these standards are a good idea either, even with that less arbitrary justification).
Slop article generated to promote their game that they also posted yesterday.
Slop article. Good for scam awareness I guess, but the main value of the analysis and advice is comedy. > read process.env directly, which in this app means MONGO_URI, JWT_SECRET, SENDGRID_API_KEY,…
I’m not an expert in RustDesk, but I did take a quick look at the code, and it’s filled with massive red flags like [1], where it appears the general mechanism is SHA256(SHA256(password++salt)++challenge). I can’t even…
Does your journal have cloud sync? That’s what broke on the device in the article.
Sometimes that's true, but sometimes (imo the superior approach) the touchscreen is independent from the cursor. I think touchscreen Chromebooks are like that, for example.
The `formaction` and `formmethod` attributes already exist. https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/...
Correct, it’s a common misconception/sloppy wording.
Digitally rented content is rented. My music via Bandcamp/iTunes, my games from their developers’ websites/itch.io/GOG, and my ebooks are owned (for the purposes of the “owned”/“rented” distinction people are making…
Alternative what? Government?
> How is this different from struct in C#? A struct in C# has identity Since when? I’m pretty sure structs didn’t have identity last time I used C#, and that would be a very surprising thing to add.
and don’t open links like https://tinyurl.com/2s3twstw either, or any other page on the internet that’s able to redirect you to github.dev
This comment is confusing to me on so many levels. What’s with the tangent(?) about a math test your algebra teacher could have generated? Did you bring up an illiterate teacher (extreme outlier) as evidence that the…
Not one window, but one application. Which is, yeah, about the worst of both worlds.
- CSP that allows cdn.jsdelivr.net/unpkg.com (which serve anything on npm, which anyone can publish to) indiscriminately is not effective (and I’m sure some cdnjs script in an Angular-style library executes arbitrary…
> in favor of some unlikely cloak and dagger interception scheme someone who definitely understands how crypto works, describing the most basic possible MITM
I know parameters don’t translate directly like that (and that linear and exponential aren’t the only types of growth) but a doubling as a go-to example of “not exponential growth” is pretty funny.
ASLR is (still[1]) not security by obscurity. [1] https://news.ycombinator.com/item?id=43408079