Viewing profile — J-Kuhn

Alternative Phone Line? You want the bootstrapping problem?

Exactly. You can make it not throw by adding `--add-opens java.base/java.lang=ALL-UNNAMED` or similar to the command line, but breaking things like this is becoming harder.

For me, Nix(OS) solved most of the problems: * Getting a dev env with `nix-shell -E '(import {}).somePackage'` where I can edit the source and compile it with the various `runPhase…

Before openjdk did move to github, they made sure they had a solution for those problems: * Contributors without github accounts * Moving away from github (when needed) * No vendor…

The problem is not that the array is mutable, but that the size of the array may differ for different strings. (In fact, it usually* does differ if the string length is different).…

Such hacks will slowly stop working (without explicitly allowing it from the command line.) In this example, it would throw an IllegalAccessException, because java.base doesn't ope…

I changed the sudo settings to not require a password. Now an application on my computer can obtain root without user interaction. Where is my CVE?

By some logic: * If they want to tell someone personally what to do or not to do, is some form of employment. * If it is not paid, it can be considered slavery. * It is usually pos…

Systemd (part of many major linux distributions) has for example machine-id[1], readable by anyone on the machine under /etc/machine-id. [1]: https://www.freedesktop.org/software/s…

Sarcastic view: Doesn't matter - the EU wont listen, then pull a surprised pikachu and make laws to force googles play integrity to attest that other devices are genuine, because o…

You can do GET & POST requests without preflight. The logic behind this is: It was possible to do this before the introduction of those APIs anyway - but you could not read the res…

Yes, the EU calls it "digital sovereignty" and is currently "in" with the EU.

To my knowledge, any app can just instruct the installed browser (Google Chrome, Vanadium, Firefox...) to open http[s]://tracker.evil-ad-network.example/?installedId=012345.

Or simply forgetting to renew the domain, at which point an attacker can deliver arbitrary files through correctly signed TLS.

There is also Idris 2 for JVM ( https://github.com/mmhelloworld/idris-jvm ) Frege targets Java source code, which is then compiled by javac - the downside of that approach is you c…

At a quick glance, it seems to be missing some hook to resolve class hierarchies - which is needed when merging stacks with different types. Consider var foo = expr ? new Foo() : n…

This information is shown on the site of the breach, as example: https://haveibeenpwned.com/Breach/BakerDistributing

This is a bad idea, for multiple reasons. https://www.troyhunt.com/here-are-all-the-reasons-i-dont-mak...

You assume that the EU acts in a coherent manner. I think that premise is wrong - there are many interest groups, and by luck/lobbying/reaching critical mass/... they manage to put…

Fun Fact: When Cookies were introduced into Netscape, you got a browser permission prompt. Then browser vendors set it to allow by default. And then legislation required those cons…

Oh, I also got one: https://wiki.archlinux.org/index.php?title=Special:CreateAcc... > To protect the wiki against automated account creation, we kindly ask you to answer the questi…

Inspired by this, I wrote a quick prototype using MethodHandle combinators: https://gist.github.com/DasBrain/19804df69c78cee257dd0294b00... It doesn't have all the bells and whistl…

I think they point weird-eye-issue wants to make is: Students attend college to become qualified to work.

In some parallel universe, they may still have it built in.

Still has the same vibe as "she did consent by wearing such a short skirt".