Viewing profile — Gaelan

Yes (from the Google blog post linked elsewhere in the thread): > CVE-2022-42856, a WebKit remote code execution exploiting a type confusion issue within the JIT compiler (0-day at…

Routing numbers aren't, but account numbers are: traditionally in the US it's possible to use a routing+account number to withdraw from someone's account.

Perhaps even more evil: kill -SEGV $1

Looking at the contents of the macOS installer (I haven't tried to run it), it seems to be both. Looks like it's based on https://www.cabbageaudio.com ?

Well yes, but GTK and Qt apps feel about as native on macOS as Electron apps do.

Isn't Edge just Chromium these days? The page you linked says: > Evergreen distribution. Rely on an up-to-date version of Chromium with regular platform updates and security patche…

> probably prone to issues if you can’t update multiple as part of the same transaction IIRC one of FoundationDB's features is that it does support such transactions, so you can ea…

This is essentially doing that—it would allow browsers to parse and run TypeScript. What it isn't doing is actually having browsers do type checking, for good reason: the TypeScrip…

> I am not claiming that running on an OS is the same as dynamically linking with a library In pretty much any case, it literally is: you're dynamically linking against the libc. T…

Laptops have batteries, so an AC power failure doesn't mean they immediately crash: they just keep running on battery until the battery gets low, at which point the system cleanly …

+-----------------------------------------------------------------------------+ | You are entering the operating system shell. By confirming this action in | | the appliance shell …

Surely a reasonable court would say that it's very clear what they meant?

Note that they halved the project size in 2021, so the new project sizes are the original pre-2021 size, and the smaller 2021 size.

I'm not too familiar with this, but my understanding is that the push notification just wakes up the Signal app, then the Signal app gets the encrypted message (either from Signal'…

Generally, the idea is that you use a small amount of unsafe code to build a safe abstraction to do what you need, then use that abstraction in many places. So now you only have a …

@dang could you give "world.hey.com/foo" URLs the GitHub/Twitter treatment where it shows the first segment of the path?

> (unless you remapped another key to capslock (why?)) When I first started doing caps-lock-to-control, I mapped my physical control key to caps lock. Eventually, I stopped botheri…

> Thumb adds many additional instruction encodings of variable length, load/store multiple already had pretty arbitrary latency Worth noting that, AFAIK, both of these were removed…

https://gitlab.com/crev-dev/auto-crev-proofs is an identity that automatically trusts every known reviewer (at level "none"), which is useful for finding reviewers. You can also br…

I don't think it was MS that did that, just sloppy third-party developers.

> Skipping the Americas does not sound like a typical Apple move. I know of one place where Apple does this: in China, and only China, you can buy an iPhone with two physical SIM s…

Internet access that isn't subject to whatever domestic firewalling is in place, presumably.

Unless you know something about the protocol that I don't (quite possible), it's not silent: all you devices get "new device registered to iMessage" dialog box.

The level up bots should be unaffected by this, as they don’t need to read message contents —they just need to count messages.