enjoytheview

PDF has been an entry point since forever, it is extremely complex and can in some cases even run javascript, it has a huge attack surface.

It is a good idea, that's why there are multiple mature solutions in the market, including free and open source solutions like the one I mentioned

Opengrep, the OSS sucessor to semgrep. There is no sane reason in this world to use this slopfest instead of opengrep.

Answer starting with "You're absolutely right!" means instant ignore

A security project vibe coded by someone who admittedly does not have a security or even software engineering background, what could go wrong!

In my case, I had a lung issue and CT scans are more sensitive to air being where it shouldn't be. At least two of the 5 ct scans could probaly just have been x-rays tho.

So 0.1% extra lifetime risk for every CT scan, I guess I went from 40% lifetime risk to 40.5, I guess I'll keep not drinking, not smoking and not being obese to help with the statistics.

How do you even eat 3 kilograms of cheese in one day?

This guys youtube channel (low byte productions) is an absolute gem if you like low level stuff.

The answer is both. Devs will first try to fix it by correctly emulating the system behavior because like you said, that can also fix other games and because that is the right thing to do. There are occasions where doing that can result in a huge performance penalty or some other underised behavior so they just resort to hacks in the emulator or straight up patching the game.

The other comment on this thread mentions that it also does something else:

>disables all the system calls not explicitly invoked by the program text of a static binary

This means that if the original library didn't have an execve call in it, you would'nt be able to use it even if with ROP. In short, this seems useful to block attackers from using syscalls that were not originally used by the program and nothing else. It can be useful.