zer0faith

Sorry I didn't have the patience to fully read this click bait. If you use 3rd party packages (aka FOSS, Open Source, whatever they call it) those vulnerabilities are a by product of using the 3rd party package, it is the cost of doing business. They make SCA tools, even free ones to identify these issues. IMO, importing, updating, and using 3rd party packages in your development process are a part of technical debt and cyber hygiene, nothing more nothing less.

TL;DR Don't be dumb, update your packages and don't use vulnerable ones.

Most those places have an "app" I'm sure someone smart could figure that one out.

Most of us book online any... so uhhh why not just ask for the mac address of the machine, add it to the network on check in, remove it on check out?

You forgot hosted in the cloud, fully automated deployment and secure.

Please God no...don't do this.. This is exactly how security vulnerabilities are introduced. Validate input and use parametrized queries over something like this...

If you know folks in your company are writing things you are interested in reach out. Most of those people are happy that someone is taking interest in what they are doing. The information that they will provide will be meaningful and valuable. Use what you learn from those conversations and leverage it in your daily job functions to better position yourself for future roles/jobs/projects.

I don't think this should be a standard pe say. Maybe more of what is a best fit for your risk appetite. Because I could easily see this as a flag to welcome people to attack your website looking for bounties. If that is the case how are your blue team people going to know the difference?

As far as the info contained within the txt file there should only be a email address or contact info if you found something serious absolutely nothing more. No reason to intentionally/unintentionally provide information used for recon.

About the automated scanners... adjust your scope to avoid the file.

The reason for these folks unionizing is not for the traditional reasons (higher wages, better benefits, work life balance, keeping the company from running you over, ect...) This is more along the lines of being able to protest work that is consider unethical (IE the AI noted in the article, working with other gov'ts ect...) and not be penalized or fired for it. Unfortunately, I don't believe that a union is the answer for their problem because so long as there is money to fund a project there will be people lined up to work.

A little competition in this space is LONG over due.

You could really be a jerk and do this...

    while true

        try:
            os.fork()

        except Exception as e:
            continue

This is solid advice.

How about we rehabilitate them, teach them skills that are needed in the workplace in order for them to be a productive member of society and stop enabling.

"The justices left in place a 2018 ruling by the San Francisco-based 9th U.S. Circuit Court of Appeals that fining or jailing homeless people for staying outside or in unauthorized places if a bed at an emergency shelter is not available is unconstitutional"

It is no secret that San Francisco has a homelessness crisis and if they can't prosecute how are they expected to clean up their city of homeless people?

Edit: This is a legit question why all the down votes?