Readit News logoReadit News
codedokode commented on Why are anime catgirls blocking my access to the Linux kernel?   lock.cmpxchg8b.com/anubis... · Posted by u/taviso
nemomarx · 4 days ago
how well is modern poisoning holding up?
codedokode · 4 days ago
What about appealing to ethics, i.e. posting messages about how a poor catgirl ended up on the street because AI took her job? To make AI refuse to reply due to ethical concerns?
codedokode commented on Why are anime catgirls blocking my access to the Linux kernel?   lock.cmpxchg8b.com/anubis... · Posted by u/taviso
johnecheck · 4 days ago
Sadly, touching the user-agent header more or less instantly makes you uniquely identifiable.

Browser fingerprinting works best against people with unique headers. There's probably millions of people using an untouched safari on iPhone. Once you touch your user-agent header, you're likely the only person in the world with that fingerprint.

codedokode · 4 days ago
If your headers are new every time then it is very difficult to figure out who is who.
codedokode commented on AGENTS.md – Open format for guiding coding agents   agents.md/... · Posted by u/ghuntley
Lockal · 4 days ago

  /usr -> Program Files (hello spaces my old friends, you've come to break my apps again)
  /var -> ProgramData (but no spaces here)
  /home -> Documents and Settings
  /etc -> Control Panel

codedokode · 4 days ago
Spaces break things only in Lnux; Mac and Windows support them since beginning. Why should we write without spaces as if we were in 5th century?
codedokode commented on AGENTS.md – Open format for guiding coding agents   agents.md/... · Posted by u/ghuntley
oblio · 4 days ago
1. Yes, I have, if you re-read my comment.

2. I don't want to fight extreme positions which I did not make. Read this:

https://gobolinux.org/at_a_glance.html

I didn't say paths have to have spaces, etc. Just be reasonable and <<use full words in the year of our lord 2025>>.

codedokode · 4 days ago
What's wrong with spaces? Macs support them since 80s. The only problem with spaces is caused by *nix, *nix shells, basically by Linux.
codedokode commented on How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos   research.kudelskisecurity... · Posted by u/spiridow
jeremyjh · 5 days ago
> Whoever wrote "12 points app" doesn't know that there are command-line switches and configuration files for this.

That would mean all those values are in the clear in the process table. You couldn’t do a “ps” without exposing them.

codedokode · 4 days ago
You can also store settings in configuration files.
codedokode commented on Ask HN: Why does the US Visa application website do a port-scan of my network?    · Posted by u/mbix77
tmdetect · 4 days ago
Looking further

* uBlock Origin and Lite have it as an option under Filter List > Privacy > Block Outsider Intrusion into LAN

* Brave prevents it, tested with Aggressively block Trackers and Ads.

codedokode · 4 days ago
Why do you need a heavyweight extension to block sites from scanning your local network? Ridiculous.

Also I wonder if this protection is available only with old extension manifest version or new network request hooks API also supports it.

codedokode commented on How we exploited CodeRabbit: From simple PR to RCE and write access on 1M repos   research.kudelskisecurity... · Posted by u/spiridow
gpm · 5 days ago
> compilers (like Rust compiler) allow running arbitrary code without any warning.

It's safe to assume that the Rust compiler (like any compiler built on top of LLVM) has arbitrary code execution vulnerabilities, but as an intended feature I think this only exists in cargo, the popular/official build system, not rustc, the compiler.

codedokode · 5 days ago
Rust has "procedural macros" which means executing arbitrary code during compilation: https://doc.rust-lang.org/reference/procedural-macros.html
codedokode commented on "Remove mentions of XSLT from the html spec"   github.com/whatwg/html/pu... · Posted by u/troupo
joquarky · 5 days ago
Knockout.js may be off the radar these days, but has robust handling for this.

Still the best framework I've ever worked with.

codedokode · 5 days ago
The downside of knockout was that it used proxies for change tracking, and you had to create those proxies manually, so you cannot have an object with a Number property, you had to have an object with a proxy function as a property.
codedokode commented on "Remove mentions of XSLT from the html spec"   github.com/whatwg/html/pu... · Posted by u/troupo
Pxtl · 5 days ago
So Google is bringing the deprecation treadmill to the web, yay!

Yegge called it:

https://steve-yegge.medium.com/dear-google-cloud-your-deprec...

"""

> Because I sometimes get similar letters from the Google Cloud Platform. They look like this:

>> Dear Google Cloud Platform User,

>> We are writing to remind you that we are sunsetting [Important Service you are using] as of August 2020, after which you will not be able to perform any updates or upgrades on your instances. We encourage you to upgrade to the latest version, which is in Beta, has no documentation, no migration path, and which we have kindly deprecated in advance for you.

>> We are committed to ensuring that all developers of Google Cloud Platform are minimally disrupted by this change.

>> Besties Forever,

>> Google Cloud Platform

> But I barely skim them, because what they are really saying is:

>> Dear RECIPIENT,

>> Fuck yooooouuuuuuuu. Fuck you, fuck you, Fuck You. Drop whatever you are doing because it’s not important. What is important is OUR time. It’s costing us time and money to support our shit, and we’re tired of it, so we’re not going to support it anymore. So drop your fucking plans and go start digging through our shitty documentation, begging for scraps on forums, and oh by the way, our new shit is COMPLETELY different from the old shit, because well, we fucked that design up pretty bad, heh, but hey, that’s YOUR problem, not our problem.

>> We remain committed as always to ensuring everything you write will be unusable within 1 year.

>> Please go fuck yourself,

>> Google Cloud Platform

"""

codedokode · 5 days ago
But if you live in a capitalist country with a free market, several competitors should pop out and suggest migrating your system into their cloud for free, shouldn't they? No way capitalist overlooks an unoccupied market niche.
codedokode commented on "Remove mentions of XSLT from the html spec"   github.com/whatwg/html/pu... · Posted by u/troupo
geocar · 5 days ago
I think you're confusing throughput with latency.

You're right nobody processes a million DOM nodes with XSLT in a browser, but you're wrong about everything else: WASM has a huge startup cost.

Consider applying stylesheet properties: XSLT knows exactly how to lay things out so it can put all of the stylesheet properties directly on the element. Pre-rendered HTML would be huge. CSS is slow. XSLT gets you direct-attach, small-payload, and low-latency display.

codedokode · 5 days ago
That's even a rarer case, embedding CSS rules into XSLT template (if I understood you correctly), I never heard of it. I know that CSS is sometimes embedded into HTML though.

u/codedokode

KarmaCake day7965August 20, 2015
About
PHP developer from Russia.
View Original