an_account_name

CVE-205BC-00001

Suspect they're talking about Java - a lot of frameworks do exactly create a thread per request.

If they can do a manual review at all, then there isn’t end to end encryption anymore, so I’m missing what the point of client side scanning is.

If it’s in APLCore it’s still running somewhere, you can be sure

I mean out of the Symantec roots...

Ooh, I bet WoSign would do it!

So the mitigation would be to add a check that the generator point in (for example) a CertificateVerify message is the one in the p256 spec (or otherwise the one on the cert, I’m not deep enough to know where it usually lives)?

AWS has a region in Brazil, sa-east-1

As they say it’s not “but”, rather “yes, and” so I agree with that and would add that the likely sentience of whales is a huge factor here.

Some of these applications have been withdrawn, but there are in fact some in flight.

https://www.nrc.gov/reactors/new-reactors/col/new-reactor-ma...

What was the relative scale of the two systems?

Can you elaborate? I don't have any context on this other than taking a Lyft in NYC once.

!fq cockroaches

No, this absolutely checks with my experience - I chase 5 and 10ms improvements all the time because we've measured and know it increases conversion.

But it makes sense, too: if the metric here is average latency, that doesn't mean that some users didn't see a much more dramatic increase. Every tiny bit of frustration removed from the experience adds up.

Plenty of software runs on platforms other than windows. Plenty of industrial control software, too.

It's kind of pedantry to bring up here, though, and distracts from the discussion.

The empirical evidence is there: two crashes.

It sounds a lot like Trump overrode the FAA, more than the FAA changing its mind.

I read through the codebase and can't assert that couldn't happen... wasn't sure if the ngx_http_ssl_certificate callback could be executed after a point where any of the client-controlled variables from [1] are defined.

[1] - https://nginx.org/en/docs/http/ngx_http_ssl_module.html#vari...

Host headers are transmitted after the ssl handshake.

I wish there were some public data on the impact of removing those - app start latency, battery consumption, bandwidth, etc. I bet there are positive impacts for the customers other than just privacy.

The original Kindle has an SD card slot, swappable battery, and is available on eBay for cheap.

Fevers kill. Ibuprofen and acetaminophen reduce fevers.

Wow, the Wikipedia page for Kuru says there’s a mutation of the Kuru prion that confers immunity to Kuru. That’s crazy to me, but makes sense from a selection perspective.

I haven’t heard anything about what Grab is doing beyond Yegge’s post about it; what’s going on there?

I remember there was one that could be triggered just by loading a web page with a specially crafted image file.

Reminder that lack of accessibility causes legal risk:

https://en.m.wikipedia.org/wiki/National_Federation_of_the_B....

I think it’s now the norm to just photocopy off the first envelope a few hundred times.

Pfft Amazon outages are cooler.

Isn’t that only true for free accounts? I think if you pay them like $15 (or use the free trial as grandparent comment suggests) they’ll let you message anyone.

The US is threatening withdrawal from NATO, a member state is withdrawing from the EU, and international trade wars are heating up between the largest economies. I’m not sure I would count those trends as a sure thing, though certainly they probably have a good bit of wear left in them.