idoubtit
Joined 9 years ago
Joined 9 years ago
> Warning. This web server is designed to aid application development. [...] It should not be used on a public network. https://www.php.net/manual/en/features.commandline.webserver...
There are 3 main PHP interfaces (SAPI):
1. mod_php which is obsolete and requires Apache prefork (which should also be avoided)
2. php-fpm (FastCGI) which has been the default for more than a decade.
3. FrankenPHP is a new official interface much more suitable for containers.
There were 2 vulnerabilities.:
1. "OOM corruption". The advisory says there was a proven exploit with mod_php, but only for that obsolete SAPI. "Source analysis therefore supports FPM as a susceptible, though *no complete FPM exploit* has been demonstrated for this SAPI."
2. "stale global state". The advisory is The last PHP release (8.5) was vulnerable when the debug parameter fatal_error_backtraces was on. There was a suspicion that an exploit could exist in the session code for php-fpm, but it was unproven and probably unrealistic.
The "evidence" given at the end of the article seems old news to me. The honeypot was based on Apache-prefork + mod_php. As stated in the CVE, there is a proven exploit for that (obsolete) stack.
From what I've read, the antisemitism during the Weimar Republic was mostly verbal. The government tried to fight it, but it was still growing. The situation changed very quickly in 32-33 when the NSDAP won the elections, built alliances to claim the power, then ended the Weimar Republic. But its first victims were the Communists, before the Jews.
The expression was wrong, but the real meaning was described further in the post. The author meant that sites with passkeys can render unapproved software useless, in contrast to TOTP where any client is compatible.
Are you sure of these values? Because that's different from what I was told, which was that CB was cheaper for transactions of more than 10 €, because their fees were fixed, not rates like Visa and Mastercard.
From what I've just read (not counting the possible extra tax by the bank of the seller):
CB: 0.20% + 0.00117 € ⇒ 0.00317 € for 1 €, 0.20117 for 100 €
Visa: 0.20% + (0.01% to 0.014%) ⇒ up to 0.00214 € for 1 €, 0.214 € for 100 €
Mastercard: 0.20% + (0.15 to 0.17%)
The 0.20% is for the "interchange" described in the article. So it applies only when the seller and the buyer do not have the same bank. The maximal rate is fixed by the UE, and AFAIK everyone use the max value.
Unfortunately, those scores are not reliable. It is a recurring problem with the USA for the PISA studies.
The preliminary chapter explains why data has lower confidence is some places. For the USA, there were many problems, including political reluctance in some states or schools, that lead to uncontrolled biases. Notably, the ratio of unreachable children is 40 %, twice more than their upper limit for valid results.
On my desktop, decompressing with zstd requires 128 MB and 1 s, while bzip3 uses 3.2 GB and 90 s.
Without `-b 511`, bzip3's ratio decreases and decompression requires about the same memory as zstd. But the decompression is still two orders of magnitude slower.
I live in a French town where the default speed limit is 30 km/h instead of the national 50 km/h. In the street where I live, the drivers that willingly (sometimes they can't overtake bikes and slow cars) observe that limit are a tiny minority. Why would they, since there are no automated controls in the city, and police sets manual controls once in a blue moon.
My street was already at 30 km/h in 2016 when the global speed limit was introduced by the city council. I'm pretty sure the mean speed has increased since then, though I don't have hard facts to prove it[^1]. At first I thought that, since all road signs were removed except on the city borders, the drivers needed a constant reminder of a limit that they'd prefer to ignore. Now I just think that people soon saw that there was almost no risk in breaking the law.
[^1]: There was a study, but the methodology was so poor that it was inconclusive. They monitored the speed in a dozen streets before and after the change, but it was done for different lengths of time (one or two weeks), at different times of the year, and with explicitly no attention payed to potential popular events or roadworks. So the average speed was globally lower after the change, but in most streets it had increased!
Just a reminder that may be relevant to your gripe: allowing free speech is perfectly compatible with forbidding abuse and hate speech.
- 57% of A. think the USA contribute to peace in the world a great or a fair amount.
- Republicans and supporter think so at 82%.
- Outside of the USA, the median is at 35%.
On the other side, ancient Egyptian numerals did have a zero, but it was only for nothingness. But they did not have a placeholder zero, because their systems was similar to Greek and Roman numerals.
> Say you’ve found 17 numeric symbols. You might infer that the writing used a base 20 system
Reals numerical systems are much more diverse than that. For instance, Babylon used a base 60 (hence our minutes and hours). But there were much less than 60 numeric symbols, since they had a symbol for 1 and 10. So 2 symbols for a base 60!
> never appears at the beginning of a number, you might infer that is a zero
In the later times Babylonians had a kind of zero, but it was very limited, only used to point the lack of a number between two, i.e. "2∅1" but never "21∅∅" which was written "21" (so numbers were ambiguous if the context didn't give the magnitude).
And Babylonians had floating numbers. So "4" could also mean 4/60.
What I mean is that Babylon had a zero, but it only covered a part of the positional modern zero. They could not write 0 - 3. And if their zero had been fully positional, there would have been numbers beginning with it, i.e. sexagecimals floats.
I tried to visualise a scene with more unfamiliar objects (a box in the street then a flood wave arrives) and I also built the scene from my own memories. But I'm obviously biased after the first test.
With objects that I've never seen myself (e.g. a handgun), I have a hard time imagining them and placing them in my imaginary scenes.
The main presentation of the tool lacks any description of its coverage, but from deep inside the documentation[^1] I gather that AFL++ is only relevant for GCC/LLVM languages. Gleam is not one of those.
[^1]: https://github.com/AFLplusplus/AFLplusplus/blob/stable/docs/...
For me, the major pain was font rendering. I could not find a portable configuration that would work with any screen. And even worse, for some pixel densities, whatever configuration I tried, the result was awful. In some cases, I vaguely remember there was a legacy mode that made text legible, but it had its own problems.