Hacker News Reader

Calziferon Sudo: Heap-based overflow with small passwords

> Have an administrator `setcap cap_net_bind_service=+ep /your/binary/here` and you can use any port you want.

And remember to do it again every time the binary is updated :/

> chown /etc to nobody:wheel and

Bad idea! nobody is supposed to own no files at all. You run untrusted services (or untrusted users without account; something like anonymous FTP access) as nobody. This would potentially allow the least trusted entity to change your configs.

Apart from that. Since root can read any file anyways there is no reason to change the owner. And some programs may complain if the configuration is not owned by root.

Calziferon Bash one-liner to produce a list of HEX color codes that read like English words

And avoid seek. Pipes are not random access. I once tried to use a python library to convert a file from stdin but it failed on a f.seek(0) the library added 'just in case' in the beginning.

Calziferon URL is also a shell script that executes some malicious(?) code

Because zsh has usually the url-quote-magic feature enabled which automatically escapes all special characters typed or pasted if the current argument is identified as URL.

Calziferon URL is also a shell script that executes some malicious(?) code

No it is not. The single quote example is wrong because the evaluation part $(...) is unquoted. Take a closer look. The first single quote part ends after the first semicolon right before the $(

Calziferon Shelljs – Portable Unix shell commands for Node.js

The great thing with old tools is that it had decades of testing and most even obscure bugs are already found and fixed.

If I run 'cat' in my shell I know it will print/output the file content.

If I run 'shx cat' I get an interpretation of my file content.

One use of 'cat' is to concatenate multiple files into one. Works great with classic cat, not so much with Shelljs.

$ echo -ne "\0xac" > test.dat

$ cat test.dat | xxd

00000000: ac .

$ shx cat test.dat | xxd

00000000: efbf bd ...

Calziferon Elon Musk, master promoter

"incredibly hard real engineering challenges" like building a battery powered car?

A random list of real world innovations I can think of which are imo more impressive:

- Large Hadron Collider

- Multicompter. Had you expected 40 years ago the posibilities and commonness of camera drones or having hundreds of multicompter doing light shows?

- you mention dubious inovations in software world but why dismiss the hardware development. Chips smaller than what people 40 years ago thought is physically possible, stacking chips onto each other, quantum computer, filling hard drives with helium to make them more dense (something many people where skeptial about when it first came up), using heat to make hard drives store even more data, e-ink displays

- jetpacks

- improvements in robotics (most popular Boston Dynamics)

- nuclear fusion

- most recently: flying a helicopter on another planet

- maglev trains (but that kind of strech the 40 years range)

- mRNA-vaccins

- or e-bikes. Electic cars are revolutionary why not electric bicycles or planes. They are far from finished but solar powered planes exist. Is such a plane and the people working on it so much less impressive?

Calziferon The Linux kernel has surpassed one million git commits

Apache had a single SVN repository for all projects in the past. That reached 1889412 commits.

https://svn.apache.org/viewvc