CodeWriter23

ICYMI > users to a private forum on Platform B

Aware of what? Government says a file is illegal? Sounds like a censorship regime to me.

Let’s just say I encrypt illegal.content prior to uploading it to Platform A. And share the public key separately via Platform B. Maybe even refer Platform A users to a private forum on Platform B to obtain the keys. Are both platforms now on the wrong side of the law?

> it’s kind of atrocious, right?

I can’t take an engineering article seriously when it leads in with bias-revealing invectives. Does EVERYTHING have to be politicized?

They’re not “required” to block VPN apps. They are choosing to comply with the regime’s threats, so they can maintain their business. They could, like X has done in Venezuela, choose not to vend their products in that country.

My take: first uses are free. Then we gonna getcha.

CP/M was FCB/Extents not FAT

I think that's an artifact of the problem statement. For example, "length check while receiving or in the process of decompressing" eliminates things like websockets from the equation entirely.

> Paul points out that alternative paths such as WebSockets might bypass limits that are in place for regular HTTP requests <

> The current way to protect against these attacks is to ensure a size limit on incoming requests. This can be more difficult than you may expect - Paul points out that alternative paths such as WebSockets might bypass limits that are in place for regular HTTP requests, plus some servers may apply limits before decompression, allowing an attacker to send a compressed payload that is larger than the configured limit.

Interesting...a security researcher that thinks it's ok to trust the client.

I think this is kind of useless information unless presented with other spheres for humans, structures, animals, plants, forests etc. for comparison. And ants.

Probably about a year.

Already hitting me to the tune of $30/mo. for my family to do laundry.

> Please connect from a laptop or desktop to use postgres.new.

LOL, Next!

@jayd16 - it’s been a few years since I read the Apple Developer Agreement but at that time downloading code and executing it within your app was forbidden by the agreement. A sensible security safeguard IMO.

So whereas authors used to ship a new version, and let people upgrade to that version at a discount, the author now assumes the burden with each new release of maintaining and testing V1 (that’s with all the feature flags turned off) as well as every feature flag between V1 and Vcurrent turned on. One at a time. Sounds like insanity to me.

Interesting. So they’re not looking at those at all.

Regressions are not implied by that statement. A bug doesn’t exist in the human realm until a human observes it.

The thing about CloudFlare is, I'm fairly comfortable expecting one of their executives to appear out here in the next few hours to own and address this in a common sense way.

You just don’t understand the powerful impact of a gas…that occupies…0.04% of our atmosphere.

Best RickRoll ever!

I call it optimizing for the corner cases.

Y’all walk all you want it’s a free country. And stop interfering with my driving.

Never been to Apex. But I sure remember C&H Surplus in Pasadena, which was a smaller facility of similar kind of salvage, and more focused on the Caltech/JPL crowd. Sometimes we would spend a whole Saturday afternoon there just looking at everything and scoring things we could carry on our bicycles.

All I can say is, if you like gear, you gotta visit a place like this.

IANAL either but I doubt Chevron will impact this because it is Legislation. Chevron gives litigants the opportunity to smack back regulations that come through the non-legislative Rule Making process. What we have here is the result of the 2020 PIRATE Act.

Ubiquiti. But I imagine making an 802.1X-authorized AP is possible just using linux.

Doing RADIUS certs with Windows Server is just a pain every time I go to do it. Mostly lack of a good how to that covers the subset of what is needed to use RADIUS to get on the WiFi. The MS docs cover the kitchen sink, the patio and the front yard. And since I’m not a RADIUS practitioner, I’m never certain if I made a secure thing. (I guess the answer is no with the recent RADIUS design flaw disclosure). Perfect space for an appliance IMO, once RADIUS is cleaned up. I think any security-minded SMB will want to stop using WPA2 for WiFi authentication. I know we have one firewalled as a guest network, always getting hammered on from the outside.

Can’t really advise what makes a good MVP for your effort. But if I could buy a box that was set and forget for this function, kept itself patched, complained when it couldn’t and wasn’t too expensive, I could acquire one where I work.

Sounds like you solved a lot of problems. I’d probably give up folding money for a DC with RADIUS solution that didn’t require me to rip hair out to renew the 802.1X certs for our WiFi auth every year.

I can tell.

Knowing how your machine works is the only answer. It’s funny you cite the age of pointer issues as some kind of proof. Pointers themselves are abstractions. I’m not saying avoid abstractions or code everything in assembler, but if you want to be a strong practitioner in this field you better be able to disassemble any code and understand what is happening. And alter your practices accordingly.

IMO in 20 years we’ll be discussing new classes of problems arising from the abstraction methodologies inherent in languages like Rust, Swift etc.