SethMLarson

Joined 9 years ago

Karma
1,019
Submissions
169
Member since
Jun 19
Security Developer-in-Residence at the Python Software Foundation, PSF Fellow, Minnesoootan, he/him

https://sethmlarson.dev

View on Hacker News

Recent submissions

Comment · 2 months ago
Author here, that's a good idea. A straightforward way to exploit an implementation differential like this is if you have a software system that contains two different implementations of IDNA 2003 processing user input. One part of the process processes the domain correctly, the other incorrectly, and in this case you can have one part of a system (such as a policy/filter) "see" the data one way and the other part of the system (such as, taking an action as a result of the data) see the data in another way.

Server-side Request Forgery (SSRF) is an example of such an exploit targeting a differential in implementations of URL parsers, which is similar to this implementation difference.

Comment · 5 months ago
pip also supports relative dependency cooldowns starting in v26.1:

~/.config/pip/pip.conf

[install] uploaded-prior-to = P3D

Comment · 6 months ago
Woah, that's awesome!! Enjoy :)
Comment · 6 months ago
You'll have to play to find out ;) haha!
Comment · 9 months ago
Great suggestion, I'll add an example!
Comment · 9 months ago
Great eye to detail! Thank you: ill fix this when I get home :)
Comment · 9 months ago
Maybe I'll do a follow up on this!
Comment · 9 months ago
Oooh! I need to look into this... thanks for the tip.
Comment · 9 months ago
Players that don't know the technical term "billboarding" might use this as a way to say that the images of the food are "flat" unlike the rest of the 3D modeled environment. Just a suspicion!
Comment · 9 months ago
I would love to see a list of inspirations for keeping the food 2D even in a 3D environment! Pacman or Bubble Bobble seem like good places to start.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton