111–120 of 140 posts
Replacing ascii with similar-looking unicode characters is an old trick. There's a bunch of these characters out there. You can use it in the code to prank your colleague developers - April 1st is nearing! I even made a vim plugin that highlights these "dangerous" characters: https://github.com/vim-utils/vim-troll-stopper I've never been pranked with unicode characters, but I've had a situation at work where a consul…
A lot of people advise ways of locking down name changes, but this doesn't really solve the problem. I'm sure there's someone out there whose first name is actually Jira. I worked for $company where customer dashboards were set up on a wildcard - https://*.$company.com , e.g. https://foo.$company.com . Guess what happens when someone picks a dashboard slug that conflicts with an actual record, like `www` or `blog`? T…
My partners work has an employee named 'Admin'. IT struggles with what to do thee.
I also worked with a guy whose last name was Null. His email was null@ for a period of time.
I would have thought the answer to this at a corporation was Single Sign On? I don't run IT these days, but when I did...we used to mark them as inactive in Azure Active Directory. They could no longer log in to any Office 365 service, Outlook Teams or whatever, and none of the third party services we had using MS SSO. Wouldn't you join Slack to it too?
Earlier quoted context omitted.
At my previous job, we had an entire system aptly named Pandora whose entire role was keeping track of which ssh keys were permitted to be found on servers. It had a bot that would crawl through every server, and if it found a key not in it's database, it nuked it. Every new person or automation key had to first be registered fomarlly, with an end date. A bit of a hassle but definitely necessary for the space the com…
That’s a good idea although I’d probably be paranoid enough to have a human do the deletions, out of fear of the failure mode where it deletes all the keys everywhere and nobody can log into anything.
I knew an ex-employee back in the day (not me I swear) who created a dialup/ISDN provisioning profile called 'Ringing' in the modem rack controller module (not the Radius server, that would be too obvious), such that a glance at the modem rack status page showed everyone who was connected, and one that was 'Ringing', just like any other incoming call that hadn't been picked up yet. It went completely undetected, yiel…
You got a reference on the CFAA? On the contrary, I found that it was probably not a problem to change a URL parameter "We also note that in order to be guilty of accessing “without authorization, or in excess of authorization” under New Jersey law, the Government needed to prove that Auernheimer or Spitler circumvented a code-or password-based barrier to access. See State v. Riley, 988 A.2d 1252, 1267 (N.J. Super. C…
Earlier quoted context omitted.
> cloaking your account This seems like a bit of strech for “cloaking”. (Like wearing vaguely similar colored t-shirt as employees do) > continuing to access them when you know you're not allowed to This part is rock solid.
What happens if you put on a police costume and go policing? Intentionally deceovit about your identity, in order to obtain access to a something of value that you are forbidden to access, is a clear crime, as it should be.
If I dress up as a Best Buy employee and drag a television out of a loading dock and into the bed of a truck, that's definitely illegal, but I don't think it's any more illegal than if I did it in jeans and a T-shirt.
This reminds me of a glorious day at my consulting company ca. 2016 when we discovered that we could change each other's names on Slack. At one point everyone was just named dad.
... is this still possible? (my college frisbee team is on slack)
This reminds me of a glorious day at my consulting company ca. 2016 when we discovered that we could change each other's names on Slack. At one point everyone was just named dad.
Love it but I will insist on grandad or I will set the girls (grand-daughters) on you ... and they are merciless 8)
I miss whimsy at work. Not in the code, never in the code, but at work absolutely. Nowadays either I'm older, or the environment is different, or people are less funny. Hard to tell.
Earlier quoted context omitted.
Looks like that happened to you in your comment. The em dash doesn’t exist to be aesthetically pleasing, it has a meaning in writing. https://en.wikipedia.org/wiki/Dash#Em_dash What you’re seeing is the result of software being more typographically conscious and replacing the incorrect characters we got used to typing in our keyboards with the correct ones. Same reason why " is replaced with “ and ”. But you’re right…
Heh, I kinda don't like these typing replacements (also, "smart" quotes). If I type `--` it's because I want `--` (or even `-------` but some software† insists on changing that to a sequence of en-dash), especially I can type them easily on macOS: - minus key: minus char - - Option+minus: en dash – - Option+Shift+minus: em dash — Similarly, opening and closing single and double quotes are on bracket keys. † yes there…
“ → “
Shift+“ → ”
Option+“ → "Replacing ascii with similar-looking unicode characters is an old trick. There's a bunch of these characters out there. You can use it in the code to prank your colleague developers - April 1st is nearing! I even made a vim plugin that highlights these "dangerous" characters: https://github.com/vim-utils/vim-troll-stopper I've never been pranked with unicode characters, but I've had a situation at work where a consul…
Lots of apps have helpfully started turning two dashes (—-) into some sort of Unicode long dash that is more aesthetically pleasing, while also breaking command line tools.
I now use Markdown (and store notes on a private server) so commands can readily be replayed.