Viewing profile — chockchocschoir

The problem with giving options regarding security is that sometimes the people who are responsible for setting up those, forget about "convenience versus security", or they get pr…

Presumably most people don't build their own desktop computers (think offices and alike) and those usually use the stock coolers that come with the CPU. At least in my experience.

A company focusing on one thing will always beat a company "focusing" on a hundred things. Noctua basically focuses on various cooling components, and only that sector, meaning the…

I don't like it either. I got good news for you and bad news. The good news is that emoji usage seems higher in open source/side-projects than in professional environments. The bad…

Comparing Java Serialization with $language Serialization, and the usage of both of the languages, does Java have more RCEs per line written than $language? Or is it just a functio…

The "I mean" is added to give an informal tone instead of a "Here is a correction since you are incorrect" tone. Obviously it wasn't enough. > And I don't believe that this kind of…

Java doesn't make exploitable RCEs more or less possible than any other programming language. Or do you have something to back this up beyond the common "Java be bad" trope?

I mean, the stars in this visualization are not real, they are "virtual" in the sense that they are a digital replication of something real in our computers. You're right, it's pro…

One of the emails read: This is a chain letter which I received from Peter Baumbach a little while ago. I know that all of you don't know me, but if you don't then you probably kno…

> Especially the contrast/magic number discussion Speaking about accessibility, who came up with that name "magic number"? It's already an overloaded term with multiple meanings an…

> Why should MS in the US somehow respond to a request from police department in Cuxhafen in Germany? If a non-US company does business in the US, most people would expect the busi…

One could make the same argument of any computer system where the security wasn't as tight as one could hope. "But judge, they never patched their $software to the latest version, …

Naming things is indeed hard, using multiple keywords for searching is not (both Google and DuckDuckGo supports this). "Drift pastebin" turns up two hits that would lead me to this…

I'm not too familiar with YAML, so can't answer to that. But re JSON: > object keys in a different order They can't be "in a different order" as JSON keys are not ordered. They can…

Indeed. One could just do `diff $(jq . $fileOne) $(jq . $fileTwo)` and you'll end up with a "nice enough" diff even if $fileOne and $fileTwo were very differently formatted.

> Makes me wonder if your assertion is more based on the superficial media takes of the day, and not reality. Again, it's based on watching hearings and other media released by my …

I'm not saying because they are "old and experienced" they don't have any value nor wisdom. I'm simply saying that don't trust their opinion on things they don't understand. And if…

I'd expect politicians who don't understand something to bring experts that does understand that thing, not to ignore everything they don't understand.

That's an unusual take on the technical capabilities of the "old and experienced". I agree that it's generally hard to secure, but many "old and experienced" in governments are not…

No, they're the same. Although here used in different contexts (trying to start a sync conversation VS marketing trying to get you to sign up for something), but they are effective…

Another non-confrontational way of dealing with this issue is to engage the first time they do it, and when the conversation is about to end, tell them "hey by the way, in the futu…

Fair presumption but no, I agree it should be fixed. I just don't agree with the authors idea of how important it is to fix it, as it's highly unlikely to be exploitable in the wil…

Even if someone wrote code like that, they'd have to have configured their web server to accept 4GB of input somewhere, which gets passed to that function. That adds another "rare …