DethNinja

How this exploit would affect the average ssh based system? Would it enable a privilege escalation path for password-less SSH key based accounts?

Also, I thought it was common sense that sensitive data on RAM should be scrambled after use. There are many TLS implementations that scramble data on RAM after use, I thought Linux would’ve already implemented a similar system.

Why no start with C? Then perhaps check C++ and Rust?

If you want to understand internals of programming languages then Go isn’t a great choice because it abstracts away so much stuff.

I think university education or even a masters degree is valuable.

It tells that applicant is capable of at least understanding some high level concepts in terms of logic. However, Software Engineering and Computer Science are quite different than each other.

It is normal that experience overweights a CS education for Software Engineering field.

Netflix needs to nail development of their own tv shows but unfortunately very large quantity of their releases contain such a bad storytelling that it is almost unwatchable.

Is it really that hard for a billion dollar company to find good storytellers and content producers?

It is intended for investors that got suckered into Meta, there is very high chance that most of their VR investments will fail.

All that printed money has to go somewhere though.

So if it is taken out of housing, then either it will go to commodities, stocks or crypto.

I got a feeling that rich people will keep investing on land, so I don’t think a housing market crash will happen but prices might drop a bit.

Do you got any proof about "entire team" being based in China?

It looks like they got developers from bunch of other locations at least according to their Github activity.

Only solution is a webring based federated search engine.

1. You just put /webring.txt to your website. It shows links to other websites with a hard limit of 100 websites.

2. To combat spam and bots, search engine does accept blocklist as an input. So other people can curate the content.

3. People can personally rank the websites they like, so webring of the said website gets ranked higher for that specific user. This can be a community effort too.

4. Search engine itself should be under a commercial license so that other people can keep building it and add ads if they want to commercialise it.

I’m too busy to spend time with this but perhaps one day I can start coding it.

I’m convinced that search engine model of early internet is just dead, webrings are the way forward.

But this isn’t true for everyone. My skills and productive output is increasing each year but life quality and discretionary income just keeps going down.

Why not release it regardless? Many SaaS offerings have competition, you don’t have to aim for a field where competition doesn’t exist. In fact, no competition is usually red flag about the idea.

That email made it clear that Heroku lacks fundamental knowledge about security. I’m sure they lost some enterprise customers, I know I don’t open accounts on websites with silly password complexity requirements.

I'm a small business owner with an online digital platform.

I'm going through the DSA now and it looks like they exempted most of the hard to implement requirements for micro/small businesses.

You can find the full regulation here: https://eur-lex.europa.eu/legal-content/en/TXT/?qid=16081171...

So long as you don't have millions of users, you are exempt from "Section 3" requirements. If you got millions of users, I'm sure such companies can afford implementing the mentioned regulations.

Honestly, it currently doesn't look extremely bad for small/micro businesses but we will see.

There are automated crawlers that track major social media sites for certain topics. Once such topics are found, PR companies engage and try to sway public opinion.

I find such attempts truly pathetic though. One has to be totally brain dead to get swayed by such tactics but these PR companies still manage to sell their services to rich people regardless.

Also I recommend that you don’t built such a startup, unless you are well connected. Such PR companies operate because they got good networking, not good tech.

Past couple of years made me believe that 90% of humanity is actually incapable of critical thinking and actually are not that much different from animals. Most of the humans actually just act on instinct and that’s it.

I honestly lost all respect I had for general populace.

Probably, but I would imagine it would be a lower priority compared to NIC or CPU based backdoors.

Considering that China controls most of the NIC supply, I doubt they would be too concerned about implementing a GPU based backdoor.

I’m surprised that we still don’t have a cheap domestic Data Diode option. It is clear that only way to be secure is to never directly connect to internet.

Change the default ssh port. Most of the attacks are from automated crawlers that try to brute force port 22. Your logs will become much more manageable.

Have you ever considered the following possibility:

Perhaps Lawmakers belong a different class than you and that they are fully aware of what they are doing. Perhaps they actually want to rule over you by removing your rights one by one.

Perhaps past lead usage in fuels will indirectly lead to collapse of the civilisation:

Lead is known to decrease empathy and increase crime.

I don’t want to generalise an entire generation but boomer generation was heavily poisoned by lead and perhaps this made them more selfish and less emphatic. Maybe this is the primary cause of many current problems? I wonder if humans were supposed to be more emphatic in past before all lead poisoning happened.

Do these cloud gaming offerings really make a profit with current hardware costs?

I feel like large companies are pouring money into this with the hope that they will be able to lock users into their cloud offering. However, it is likely they are losing huge amounts of money because of the hardware costs.

How is that different than central bank printing? Print money and hand it to your buddies so that they buy new yachts instead of producing anything of value?

At least with crypto we know where the money is going and potentially how it is spent.

I can’t believe people still argue against cryptocurrencies in 2022 when it has completely proved itself superior to fiat in every way possible, including overall energy usage.

They should mention this in their website: Cryptocurrencies are harmful to the banking system and may weaken the state apparatus. Hence, citizens shouldn’t buy them.

This is nowhere near edgy enough as the nunchuk's response: https://twitter.com/nunchuk_io/status/1494885897577271299

Would compiling image parsers with ASLR and bounds checking prevent these zero-click hacks?

I haven’t researched the exploits in detail but it seems to me Apple can develop better protection against such zero-click exploits.

At the very least, iMessages shouldn’t preview images from unknown contacts.

High inflation rates just after a supply shock will wipe-out the middle class and push most to poverty.

Honestly, I can't believe more people aren't buying Bitcoin at this stage.

Yeah, if you got “deep” connections, you definitely can avoid due diligence.

Where do you think all that printed money during pandemic actually went? Only a minuscule amount was given to plebs, rest goes to shady startups and gets diluted.

Such evaluations also make naive founders believe that they can get a similar amount. If you aren’t in the club, you won’t ever see a dime of this funny money.

I think customers are a bit to blame for such shady companies. So many good alternatives to Adobe ecosystem exists but customers are mostly unwilling to switch to them and as result Adobe doesn’t have to worry about keeping customers satisfied.

There is an awesome movie based on this premise called “Altered States“ but it is more sci-fi than documentary.

Lots of people must’ve already tried it, so I guess nothing extraordinary.

Mismanagement would be good option.

I decided to open my own company just because there is a horrendous management culture in the North America.

Last company I had worked about three years ago had a really bad management culture where managers were total talentless pricks. Now, that might be okay if compensation was crazy high but company also had below average industry wages.

I also figured out that you can pay people really low wages so long as you act decent towards them. I don’t have real employees at the moment but I got some contractors. I pay them insanely low wages, but I frequently praise them and thank for their work. So far I got really good results with this arrangement.

Idea is good but it should be made customisable:

Licensor should be able to list pricing for the large companies upfront. Fair pricing is a troublesome term.

Licensor should be able to remove clause about government organization and classify them as big business as well.

32 days for compliance is troublesome. It would be better if this was converted to an arbitration clause that is favourable for licensor. Big companies will abuse that clause real easily.

If you would like to add some customisation, please check this first: https://docontract.com/

Sublime is still miles ahead of VS Code. Text editors are definitely a business model, I’ve yet to find a better alternative to Sublime and it is a critical piece of software for my workflow.