Viewing profile — xtrapolate

> "If even SQLite can have a RCE vulnerability, I'm convinced that it is not feasible for anybody to write safe C code." This has much less to do with C, than it has to do with the…

> "you give Plaid your username and password, and Plaid scrapers on their servers log into your online banking account" So your username and password are just kept in some internal…

The favicon is Apple's logo? https://www.romerogames.ie/favicon.ico

> "I'm partial to Iran because a multi-lateral treaty was signed. Iran stopped nuclear enrichment. In exchange, western countries pledged to provide economic relief and stop sancti…

> "It's hard to tell what, if anything, you are recommending here." I don't think it's that hard to tell, you're simply ignoring what's been clearly written. So I'll quote it again…

> "Did you read the entire article? The whole point was that "delay loading" a particular DLL prevents a static analysis in the compiler from inserting hooks to perform expensive o…

> "The first fix was to avoid calling CommandLineToArgvW by manually parsing the command-line." > "The second fix was to delay load shell32.dll." If your build pipeline is continuo…

> "SRI has been available for two years and it still isn't being used enough." Two years is relatively fresh. There's probably a significant amount of customers with browsers that …

> "When I was a college instructor I found that when I tried hard - putting a lot of thought into pedagogy, having weekly (open notes) quizzes, assigning challenging but fair homew…

> "isn’t it up to the universities to provide a majority their value in the form of education" I'm not sure how this statement addresses my claims. How do we measure/quantify the q…

> "A teacher (also called a school teacher or, in some contexts, an educator) is a person who helps others to acquire knowledge, competences or values." The target audience is a cr…

> "gene is for CCR5, which currently doesn’t have known function" It's in the article: > "Even if editing worked perfectly, people without normal CCR5 genes face higher risks of ge…

> "How does the url http://redacted/ work?" I apologize for the confusion. I used an actual server there (ie. http://somename.com ) but chose to redact the actual URL from this pos…

> "What specifically are your concerns? What about what you've learned will create an exorbitant bill?" Abusing the containers to send large amounts of outgoing traffic would do ju…

> "I’m confused as to how anyone would think this is alright to do." Could be placeholders from development that ended up going live. I wouldn't jump to conclusion.

Getting an exorbitant bill from DigitalOcean after someone has abused your "containers" would not concern you then?

> "He needs to be running a client-side service, not running whatever someone enters on his machine" I would say that for the most part, websites such as this don't actually need a…

Good job. However, I was able to run the following on your machine (on the publicly available demo page): def hello(): import os print(os.system("whoami")) print(os.system("hostnam…

SAP is not paying for the product here. SAP is paying for the long list of customers using and relying on Qualtrics today [1], many of whom are Fortune 500 and government agencies.…

Do people actually give away their email address when stumbling across a mysterious non-descriptive landing-page that says nothing about who or what a company is? In other words - …