257 karma · joined June 24, 2021
I read the blogpost and was left waning on the post actually making strong claims. "The biggest starred PoCs on Github are not viable exploits" does little satisfyingly justify "This vulnerability is not a big deal". The kind of malicious actors who would exploit this vulnerability at scale have no incentive to make their own versions public and without the author showing some serious expertise I see little reason to trust them at their word.
>I'd hate to upset all the 'this guy is Keyser Söze' internet detectives, but you've described 90% of posters here (including yourself).
Exactly, it however does not really apply to the actors warning of the exploit, from what I can tell there is at least some track record there.
Its similar with apple, I have the reasonable assumption that whatever I install from the app store is not going to brick my phone, steal my data or be a giant resource hog that just runs in the background.
My Wife comes from a country where getting married and having kids before the age of 20 was very much the norm at the time, which led to a lot of people having children at a time where they were not ready for that responsibility.
My Wifes parents on the other hand might not have grown up but on the other hand they would have divorced way sooner without a child forcing them to stay together
I would not want 23 year old me raising a child, I was way too status and money obsessed then and could not provide my son with the model of what I personally deem a good man.
My wife had (too) young parents and it left lasting damage, they dragged her into interpersonal spats and their worries about money before she had the tools to properly process it.
Surely the (human) author has plenty of in-depth experience with exactly this topic, but without knowing how much of what is in there was cobbled together by the platitudes about the topic from the AI training data its impossible for me to challenge my own biases.
For example my instinct has always been that letting a customer get to a checkout without a sanity check for stock values creates more long-term issues than post-checkout checks solve. This article uses post-checkout checks as a given. It also seems to imply writing orders directly into ERP from the Plattform instead of having an on-platform storage of the order that then gets synced into the ERP. How much of this is the authors real experience in the business versus an AIs assumption of how this process works.
Cats also routinely go into other peoples houses and either get themselves stuck or hunt rats/mice there, also something that humans generally are not allowed to do.
Humans are very good at introducing invasive species (domestic cat, kudzu) and pretty bad at forseeing the impact they have
I would also say they would at least need to be neutered in that case so they dont reproduce with the feral population, but from a predatory perspective that would probably be fine then.
I would still not let our cats go out, my wife is pregnant so toxoplasmosis is very scary and bell or not we would be terrified of them getting lost or getting run over by a car or worse.
I would assume it has got do with the reason pigeons are sometimes called "flying rats", i.e. they can subsist on human trash, can survive in the environment and are not seen as negatively as rats and thus have less pest-control efforts pointed at them.
Our findings suggest that free-ranging cats cause substantially greater wildlife mortality than previously thought and are likely the single greatest source of anthropogenic mortality for US birds and mammals.
I.e. cats might kill more birds and mammals than humans.
For me to personally end up in this situation the bank would need to somehow SEPA out like 2 years worth of mortgages at once in a short timeframe, which is not a realistic scenario.
In that case I'm pretty happy with the situation, our industry rep got in touch with the commission and they were receptive and provided guidance relatively quickly. Really not fair to blame on EU, if my local trade board can bug us about the placement of fire extinguishers they could also bug us about giving an input into industry-affecting legislation.
It was decided that the registration is left to the individual countries (which I personally agree with, at least I think I do). Now the deadline has come and passed and some of the individual countries have not provided easy ways of registering. At what point should which entity done what?
Should I as a SMB been keeping track of the registries for the individual countries and lobbied my government to apply pressure to the other governments to set up the registrations?
Should my representative have lobbied harder to take control away from the individual countries in the union so this issue could not arise? (Should I have done so as an SMB even though I on a personal level agree with the individual registries?)
Because, again, right now we have a law on the books with relatively harsh punishments but nonexistent enforcement, this benefits no one.
As citizen of Germany I cannot really lobby the local polish government, so we are basically barred from that market by EU Regulations.
We are now in some sort of weird limbo where there is some weird language from the EU comission that they discourage punishment until some issues are ironed out so a good portion of our market segment just ignores the rules.
As part of the aquisition I got access to their previous codebase which was some sort of incomprehensible PHP monolith, with the persons who wrote that code long gone. Thanks to LLMs I was actually able to extract the core useful concepts (again, sufficiently deep domain knowledge that I knew exactly what to look for). Without LLMs i would have probably extracted the absolute minimum and let the rest rot.
There is no reason a dev of comparable skill and domain knowledge would not be able to do that for what I built here.