Viewing profile — znep

I wonder who would be best equipped to see if any of those keys are traceable to individuals involved in special government affairs lately? There have been some good leaks...

Users and (at least before the last run through the meat grinder) moderators.

Does anyone have any insight into if this a respin of the same Threads app from 2019 or just the same name? https://www.androidpolice.com/2019/10/03/threads-instagram-f...

That doesn't make any sense technically and sounds a lot like victim blaming. It is far from certain that any application has such a "steady state", most of the ones I've worked on…

Generally somewhere between terrible and non-existent if you stick with Fire OS. They will drop occasional small patch releases with broken links to non-existent release notes.

True, now they are just used against you in the press when they get released one way or another, legally or not. Then, the entire point for some lawsuits existing is to set the sta…

Even Google can't solve all the downsides of things being in the cloud.

Or they at least want you to think that.

Indeed. I am sure there are lots of things under development, I have little knowledge in the area but I ran across this video the other day which suggests refueling and rearming vi…

Not any more. https://aws.amazon.com/about-aws/whats-new/2022/03/amazon-ec... In theory. But yes, sometimes detaching resources can take a long time on a degraded host.

Spring4Shell is entirely a flaw in Spring, however is somewhat understandable because it was only exploitable due to a new feature in Java (modules) that added new methods to java.…

Ahh, your comment is the first one that made it clear why this is only in 9 and later, because it was actually "introduced" by the introduction of modules in Java 9. That added htt…

I'm not sure what they are using right now, but they currently have the "AWS-LC Cryptographic Module" listed as being in process for validation which may be sufficient for s2n. I k…

For even more fun, try "SELECT pg_cancel_backend(pid) from pg_stat_activity". (DON'T ACTUALLY DO THIS on anything other than a personal test db as it will kill all the connections …

...and almost every time I end up on a mobile link to a tweet in a web browser I have to refresh the page to get anything but an error. Which has been going on for years, or at lea…

This is very true, the costs and performance impacts can be significant if your architecture isn't designed to account for it. And sometimes even if it is. In addition, unless you …

That is concerning and directly contradicts the docs: "You can revert to your previous master password only if the change had taken place within the last 30 days." I guess it is po…

One other thing to note is that by default lastpass allows reverting to your previous password for 30(?) days. The option is in account settings -> advanced -> "Allow master passwo…

Exactly. eg. https://github.com/frohoff/ysoserial#usage Note the classes aren't at fault or doing anything wrong (even though you could imagine other mitigations they could use), t…

While the specific exploit may not be possible in 8u191 and later, I am not convinced they are safe from all RCEs using this vulnerability. It does make it harder to exploit, and h…

Yes, you can specify a port.

Interesting example given you can no longer do that with the latest (v2) version of the AWS CLI, since it isn't published to PyPI due to how big of a nightmare AWS found supporting…

I agree this is a great addition, but FWIW it isn't normal for ^C to not work in psql. Perhaps you are using some other client that doesn't support aborting queries properly, or ha…

No, Athena is built on Presto as AWS documents in numerous places. eg. https://aws.amazon.com/big-data/what-is-presto/

That isn't due to a missing timeout, that is due to not properly communicating aborted requests down the stack which, admittedly, isn't always easy and some clients/languages/etc. …