> For spring boot, the default is actually logback. I did not know this, thanks for letting me know! > I update aggressively on my own projects to stay on top of changes and keep the effort related to mitigating…
Using logging facades means that libraries don't need to update -- which is great -- but libraries were never directly vulnerable anyway. log4j is, to my knowledge, still by far the most common actual implementation of…
Looks like the paper referenced is from May, if you have a subscription to Nature: https://www.nature.com/articles/s41586-020-2278-9
“Third party”. In this case it just means “not Amazon”.
I've worked at Amazon since 2007 and I can confirm it has gotten a lot better over that time, especially more recently. I have, in the deep deep past, experienced serious strife with the older policies, and obviously…
I think it's worth noting that the paper is from 1992, where much of the work you reference (such as widespread use of overloading in Haskell) won't have existed yet. I don't think it's unreasonable to point out that…
Work on the specification stopped in 2010 but it's not been removed from the browsers that supported it.
I think this is mostly answered in the README. This is probably the most relevant section: > The structure validation is simplistic by necessity, as it defers to the type system: a few elements will have one or more…
Isn't the former what Mozilla Persona was trying to provide? A shame that was canned.
If you go to the Privacy section of the iOS app it's mentioned at the bottom with a link to the webpage ("Further customise your privacy..."). Not ideal you can't do it from within the app though.
This isn't the case, he works for Amazon. Unless he also works for Intel but that seems unlikely. Edit: Just to make this clearer you can see his email in the Signed-off-by of the patch under discussion:…
I had a look in Software Update and apparently iOS 11.2 is now available (not as a Beta release). Since people were reporting the Beta didn't have the issue, maybe Apple just released it?
Possibly he was using this poll data: https://twitter.com/DRMacIver/status/746810127584464896 ...but I don't know what the primary source of that is. Edit: Sorry about multiple broken links, I was klutz-editing this on…
> Those languages used to introduce mutable wrappers and not a "to_string()" method. Yes! This is similar to, say, StringBuilder in Java. The difference is that ownership is intertwined with the type here. Strings are…
If you have a string slice (&str) you need to convert it to a String you own before you can mutate it, yes. In some other languages strings are always immutable, and mutating them requires creating a copy. In Rust if…
I think we're running out of good names for things, especially since Spark uses Snappy (compression) itself. It is time to build a tool on top of SnappyData called Spark.
I'm led to believe the Glasgow TMU is pretty lively as well, although I've never been.
Filtering out "bitcoin" should do the job.
I'm finding the fact that almost every page in the CIA site's 6-12 section has the same "classroom" stock photo to be inexplicably unnerving.
> When working with JSON, you must load the whole JSON document before you can start processing it. This is not the case; JSON is every bit as amenable to streaming as XML, in my experience. Fewer implementations…
I think I heard the Amazon-supplied ePub converter can work better sometimes, but I haven't tried it. It may be the one on this page: http://www.amazon.com/gp/feature.html?ie=UTF8&docId=1000...
People focus on these because they are usually exploitable through applets; as such they pose a direct threat to users. The recent issues have been mostly irrelevant to "enterprise systems" since so few use Java's…
So does Subversion :-)
This is true, although I find the default body text size in Bootstrap way too small, and often wonder if others do too. It seems to fit the "text wedged into elements of a Web tool" use-case it originates from better…
There was also http://www.doineedajacket.com/, but that seems to have gone ad-crazy to the point where I can't find the result.
> For spring boot, the default is actually logback. I did not know this, thanks for letting me know! > I update aggressively on my own projects to stay on top of changes and keep the effort related to mitigating…
Using logging facades means that libraries don't need to update -- which is great -- but libraries were never directly vulnerable anyway. log4j is, to my knowledge, still by far the most common actual implementation of…
Looks like the paper referenced is from May, if you have a subscription to Nature: https://www.nature.com/articles/s41586-020-2278-9
“Third party”. In this case it just means “not Amazon”.
I've worked at Amazon since 2007 and I can confirm it has gotten a lot better over that time, especially more recently. I have, in the deep deep past, experienced serious strife with the older policies, and obviously…
I think it's worth noting that the paper is from 1992, where much of the work you reference (such as widespread use of overloading in Haskell) won't have existed yet. I don't think it's unreasonable to point out that…
Work on the specification stopped in 2010 but it's not been removed from the browsers that supported it.
I think this is mostly answered in the README. This is probably the most relevant section: > The structure validation is simplistic by necessity, as it defers to the type system: a few elements will have one or more…
Isn't the former what Mozilla Persona was trying to provide? A shame that was canned.
If you go to the Privacy section of the iOS app it's mentioned at the bottom with a link to the webpage ("Further customise your privacy..."). Not ideal you can't do it from within the app though.
This isn't the case, he works for Amazon. Unless he also works for Intel but that seems unlikely. Edit: Just to make this clearer you can see his email in the Signed-off-by of the patch under discussion:…
I had a look in Software Update and apparently iOS 11.2 is now available (not as a Beta release). Since people were reporting the Beta didn't have the issue, maybe Apple just released it?
Possibly he was using this poll data: https://twitter.com/DRMacIver/status/746810127584464896 ...but I don't know what the primary source of that is. Edit: Sorry about multiple broken links, I was klutz-editing this on…
> Those languages used to introduce mutable wrappers and not a "to_string()" method. Yes! This is similar to, say, StringBuilder in Java. The difference is that ownership is intertwined with the type here. Strings are…
If you have a string slice (&str) you need to convert it to a String you own before you can mutate it, yes. In some other languages strings are always immutable, and mutating them requires creating a copy. In Rust if…
I think we're running out of good names for things, especially since Spark uses Snappy (compression) itself. It is time to build a tool on top of SnappyData called Spark.
I'm led to believe the Glasgow TMU is pretty lively as well, although I've never been.
Filtering out "bitcoin" should do the job.
I'm finding the fact that almost every page in the CIA site's 6-12 section has the same "classroom" stock photo to be inexplicably unnerving.
> When working with JSON, you must load the whole JSON document before you can start processing it. This is not the case; JSON is every bit as amenable to streaming as XML, in my experience. Fewer implementations…
I think I heard the Amazon-supplied ePub converter can work better sometimes, but I haven't tried it. It may be the one on this page: http://www.amazon.com/gp/feature.html?ie=UTF8&docId=1000...
People focus on these because they are usually exploitable through applets; as such they pose a direct threat to users. The recent issues have been mostly irrelevant to "enterprise systems" since so few use Java's…
So does Subversion :-)
This is true, although I find the default body text size in Bootstrap way too small, and often wonder if others do too. It seems to fit the "text wedged into elements of a Web tool" use-case it originates from better…
There was also http://www.doineedajacket.com/, but that seems to have gone ad-crazy to the point where I can't find the result.