Viewing profile — beart

I think you're off by about 90 orders of magnitude for the actual heat death

Okay... but when "you" is a junior engineer on your team and now you are suddenly spending your entire weekend dealing with malware, it's kinda on you as well.

Oh yeah that's a good point - two layers of auto executing scripts/binaries.

This doesn't require anyone placing anything deliberately on your machine (as in, needing to exploit it somehow ahead of time). It could be as simple as checking out a branch to re…

A lot of malware was delivered back in the day via Windows AutoPlay feature. Someone plugs a USB drive in and bam, they are immediately exploited. You could say it's always a probl…

It has nothing to do with npm. However, a binary could be configured to extract your git/npm secrets using this exploit, which could then lead to a npm supply chain attack (or pip,…

Joe Arpaio was not removed from office. He was charged with contempt but was never incarcerated. He was pardoned and then lost his next election.

That might be a loophole, but in this case I don't think it matters. The emergency powers let the president do whatever they want at this point. And even if there is a law preventi…

Vermont doesn't allow it either and it remains the most beautiful state IMO

Right, I'm thinking along the same lines as what Zoom offers. Except with the additional feature that the link is custom tailored to a known, pre-configured user. So you also skip …

What would be really awesome is some sort of feature where, once self hosted, I can generate a package or link that will download + install + pre-configure the login. Basically a b…

There is an audience for this, and it's me and my friends. I have a small group of close friends. We are on discord just about every day, but we really don't bother with anyone out…

I had completely forgot MS bought them.

Third party apps used to work fine without an account. They kept track of your settings and filters locally. My usage declined rapidly when reddit killed them.

I agree with your sentiment, but not your conclusion. The new boss is being paid millions to explain that 14 layers of management is a bad idea... I'm sure there are thousands work…

I can share nearly my entire steam library (~23 years worth) with my kids. There is no way in hell Sony or Microsoft will ever allow that. In fact, I've had to re-buy Minecraft bec…

Overwatch released in 2016, but the merger took place in 2008. I feel like overwatch was always more of an Activision game than a Blizzard game. Or at least, pre-World of Warcraft …

> If they need to eat or something they should get a job, presumably. The tone of this comment is quite different from the text of the open letter to which you refer. Specifically …

I have a close friend who is an officer nearing twenty years. He has not had a tendency to criticize his job. However, he has been adamant that vaccines are incredibly important fo…

They did a demo and some discussion in this video. I recall some discussion on safety features www.youtube.com/watch?v=L6_9_HHLOSY

Legacy expectations and requirements. It's not uncommon to see that there is a better way to do something, but be unable to do it because the customer assumes and/or expects the cu…

As slow as Windows is (very), once you start adding the corporate security tools on top of it (Crowdstrike) and have to deal with a slow and buggy corporate DNS system, it just bec…

So this vulnerability isn't directly the result of using Steam, or any of the Steam profile customizations, such as avatars and profile page backgrounds. But rather, it is a vulner…

Does the allow list in package.json pin to the package version, or only to the package name?

The compromise is to defer to a standard formatting tool such as prettier or pip8.