isotopp

``` for quoting code does not prevent the sd.date_of_delivery problem. It still urlifies, and the DNS parser tokenises wrongly.

Slack does not even scale to corporate size, instance sizes are too limited. Also, they have no corp sales plan to speak of.

Finally, wrong kind of comms - chat is ephemeral, and messenger is only a small part of what is needed or corp facebook offers. And Slack is lacking the necessary controls for a corp environment.

My employer did. And while I was very extremely sceptical at first, I had to eat my hat on this. It's actually one of the best things for facilitation of enterprise cross-department communication and awareness that I have ever experienced in the last 33 years of my working life.

Congratulations. You found the actual exploit.

http://git.savannah.gnu.org/cgit/patch.git/tree/src/pch.c#n2...

patch calls /bin/ed. /bin/ed has a ! command that feeds stuff to /bin/sh. Feeding unreviewed patches to the patch command is actually arbitrary command execution.

This is particularly awesome if patch is being used by other programs (i.e. a CI pipeline or other contexts).

The author fixed it.

That is, TIL that wordpress replaces these things on output, and there is not even a switch to prevent that. I had to install a plugin to fix this.

If you refer to the translation in the lower part of the article: That's a rather free translation of the upper part of the article that was done by me, the original author.

I am a native german speaker.

http://www.slideshare.net/padday/the-real-life-social-networ... looks pretty promising.

Yes, I did not know how to translate that concept properly into US english, because it references Berlin-specific things. Thanks for the help!

This company is part of the Priceline group of companies.

Comparing http://www.wolframalpha.com/input/?i=PCLN+GOOG shows size-related statistics that are about 10% of GOOG, whatever that may mean in reality given the difference of marktes in which they operate.