guns
Joined 17 years ago
Karma
562
Submissions
115
Member since
May 22
Recent submissions
Comment · 1 month ago
Rehnquist anticipated but unfortunately did not prevent the abuse of the third party doctrine back in 1983.
“Respondent does not actually quarrel with this analysis, though he expresses the generalized view that the result of the holding sought by the government would be that "twenty-four hour surveillance of any citizen of this country will be possible, without judicial knowledge or supervision." But the fact is that the "reality hardly suggests abuse," If such dragnet-type law enforcement practices as respondent envisions should eventually occur, there will be time enough then to determine whether different constitutional principles may be applicable.” — United States v. Knotts, 460 U.S. 276, 284 (1983)
Comment · 11 months ago
https://github.com/mozilla-firefox/firefox/blob/FIREFOX_143_...
# Use 17 for Ctrl, 18 for Alt, 91 or 224 for Meta, 0 for none.
- name: ui.key.accelKey
type: uint32_t
#ifdef XP_MACOSX
value: 224
#else
value: 17
#endif
// user.js
user_pref("ui.key.accelKey", 91);Comment · 11 months ago
You could use Firefox and then set the accelerator key to Super, changing all application bindings to use Super instead of Control. This is my setup and it’s great.
Comment · 2 years ago
Reminds me of “Flashed face distortion effect”:
https://en.m.wikipedia.org/wiki/Flashed_face_distortion_effe...
Comment · 3 years ago
> People keep forgetting to sanitize inputs, for example. Does that render input sanitization a broken idea?
Possibly. You could prevent careless use of unsanitized inputs with a type system. Fail-safe designs should be more common.
Comment · 3 years ago
This is what Stephen Wolfram concludes in a recent article about ChatGPT:
> The specific engineering of ChatGPT has made it quite compelling. But ultimately (at least until it can use outside tools) ChatGPT is “merely” pulling out some “coherent thread of text” from the “statistics of conventional wisdom” that it’s accumulated. But it’s amazing how human-like the results are. And as I’ve discussed, this suggests something that’s at least scientifically very important: that human language (and the patterns of thinking behind it) are somehow simpler and more “law like” in their structure than we thought.
https://writings.stephenwolfram.com/2023/02/what-is-chatgpt-...
Comment · 3 years ago
This attack also doesn't work if you `exec su lowpriv_user` since there is no parent shell.
Comment · 4 years ago
Essay writing unconsciously reinforces one’s opinion on a topic. This is an excellent tool for intellectual development when the student is free to argue any sensible position. Unfortunately, teachers often require students to choose orthodox positions, and thus essays become a primary tool for indoctrination.
Cheating has no place in an academic institution, but machine generated essays are an interesting way for students to avoid enforced compliance.
Comment · 4 years ago
> Layoffs like this can have a more pronounced impact on
marginalized communities, so we were particularly focused on ensuring our layoffs – while a business necessity today – were carried out through an
Anti-Racist/Anti-Oppression lens.
You are mistaken. The letter is quite clear.
Comment · 4 years ago
> In the above example how is someone going to send traffic to 172.17.0.2:80 through the Docker host from a box on a different network than the Docker host?
The attacker and host will generally need to be on the same network so that the attacker's packets are not dropped because they are addressed to a non-routable private IP address.
You could access the containers at 106.12.52.111 if you were in the same network (e.g. 106.12.52.0/24) and the packets did not have to traverse a router.
> Also is this still exploitable if you reject everything at the iptables level before you start using Docker?
Yes. Docker appends the FORWARD chain with custom rules that explicitly forward traffic to published ports.
Comment · 4 years ago
Docker users on the Mac are not affected by this issue, but they should be aware that the "Automatically allow downloaded signed software to receive incoming connections" option in the firewall settings must be unchecked in order to block incoming connections to container ports published to 0.0.0.0.
This is necessary because Docker Desktop for Mac is presumably signed by Apple.
Comment · 4 years ago
Publishing ports to '*' is commonly done to allow Mac and Windows users to access containers through their browsers.
The macos firewall is able to block connections to these exposed sockets but:
1. The user has to explicitly turn on the firewall since it is off by default
2. The option "Automatically allow downloaded signed software to receive incoming connections" must be unchecked because Docker Desktop is signed by Apple.
I don't use a Mac, but all of the developers that use Macs at my company either did not have their firewall enabled or did not realize that connections to Docker Desktop were whitelisted.
Comment · 4 years ago
Original author of password-store was Jason Donenfeld (of Wireguard fame), and it was indeed well-written.
Comment · 8 years ago
> I am not against conservative people and also not against people with different views. … It becomes a problem when some of those people can't tell the difference between truth and lie.
Perhaps we should create camps that educate these people on political issues.
Comment · 8 years ago
The problem is that most programmers do not bother to make whitespace visible, so tabs-for-indentation-spaces-for-alignment inevitably leads to a mess of mixed tabs and spaces.
I personally use tabs-for-indentation-spaces-for-alignment in my personal code, but I think I'd lose my mind if I tried to mandate it for a public or team project without a standard code formatter like gofmt.
https://github.com/guns
4BC7 2AA6 B1AE 2B5A C7F7 ADCF 9D1A A266 D2BC 9C2D