Viewing profile — kchr

> Above a certain complexity, there is basically no 100% open-source hardware out there. > > Like none of the Pinephone, Librem, Framework laptops are "open-source" to the bone. As…

One of the points made in that paper is that you can't even trust the compiler, even if you write the code yourself. I think this is one of the stronger points as it shows you it i…

Additionally, a lot of jungle music were produced on Amiga using the same tracker software as many demosceners (OctaMED, ProTracker, etc). Makes me curious of how many junglists we…

From the TIOBE site[0]: > Since there are many questions about the way the TIOBE index is assembled, a special page is devoted to its definition. Basically the calculation comes do…

While I appreciate the flashbacks you just gave me, I don't think the enshittifaction of GUI:s is orthogonal to the evolution in not having to deal with hardware issues any more.

You linked the same file twice, was that intentional?

Even approved and trusted admins can be a liability (disgruntled employee, social engineering). Like OP said, mandatory access control (MAC) implementations like SELinux can be use…

> Interesting, I might need to do some reading, > Does macOS have any form of MAC yet, or do they just rely on sandboxing? Kind of. There is a set of permissions an application can…

> No, you create one account. The root account doesn't have to be created. It's automatically there, built into the system. On Windows, you have to explicitly create two separate a…

I need a rundown of your clients.

It's AI agents all the way down

They seem happy to host media for other conferences as well! <3

Agreed, but they're not being tossed out into nature the same way these disposable vapes are.

Can you elaborate on how this affects the security model?

Speaking of music apps for game consoles, there is also the Korg DS-10 for Nintendo DS: https://en.m.wikipedia.org/wiki/KORG_DS-10

This could probably be fixed by tracking whether the mousedown event was started inside or outside the dialog, and only close the dialog if the mousedown started outside it.

For native documentation, why not just search the official docs at https://docs.python.org/ ? I find it to be very discoverable if you are looking for docs about a specific functio…

Actually, it looks like the feds have sided with the 3rd parties? https://www.theverge.com/2024/3/14/24101023/ftc-doj-comment-...

I believe adding extra components (i.e. custom software) would classify as the "mangling" GP wanted to avoid.

SQL in itself is not the weak point in this case (or any of the other cases of a successful SQLi attack). The problem is the treatment of user-controllable input data and using tha…

I can't decide whether it would be considered an SQL injection or a SSRF attack, actually. I'm leaning towards the latter. Or maybe even a reflected XSS?

The IOCCC[1] (International Obfuscated C Code Contest) often features submissions where the source code is formatted to be works of art in itself. Sometimes the source code is also…

I can see the appeal, but hope they keep it opt-in so that people can choose their preferred workflow without surprises.

Yeah, I realise now that I read your reply my message was just questioning the broad blame on so called "stupid people", without discussing the responsibility part of it. I absolut…

> The consequence is that the cost of stupid, scammed, customers is passed to all customers, including those that do not send money to scammers. What you conveniently left out in t…