blantonl
blantonl on Hacker News
That is incredibly damaging to the trust that coordinated vulnerability disclosure depends upon. The obvious consequence is that Chainguard should never again receive embargoed fixes in advance. You don’t get invited back into the room after demonstrating that you can’t be trusted with the information.
They didn’t get to unilaterally decide that the embargo was inconvenient and publish early.
This single-handedly assures that I will never, ever do business with Chainguard or any member of its C-suite executive team.
6 years ago it was deemed to be too complex to exploit and therefore not as high priority.
I'm seeing more and more organizations that I neither can identify nor pin down now using more and more cloudflare privacy offerings to "hide" their intentions.
I respect customer privacy. But I also need to know who is abusing my platforms as well. The balance here is very difficult to manage, now that we have entire agentic platforms capable of deploying highly technical capable "abuse" platforms.
Why was there a prize attached to this problem then? What does humanity get out of this being proved?
Here I was thinking this was OS/2 Warp…
Exactly. Imagine if Claude Code was a PHP script. Some folks would lose their damn minds
I use a Behringer X32 rack with a couple digital snakes to route audio between 20 or so radios, software defined receivers, online broadcasts and other audio sources, and it's one of the most powerful pieces of technology in my lab/office.
The quality however of the X32 leaves a little bit to be desired. The power supply died in it due to fault capacitors (I was able to replace them myself) and the rotary switches on the rack unit itself no longer work (I remote control the box anyway) but.. I've been able to look past all this because the sheer power of the tech is unbeatable for my use case. Running a single CAT-5 connection from my detached lab/rack to my office in the house with 32 channels of AES audio is amazing stuff for me.
I agree. If this was Oracle I might not have too difficult of a time believing this is all of the story. But I do think in this case there is more to the story.
Or, you need to spend a lot of resources to do the attack even if it's the case that you get that money back when you succeed.There is a word for this. We call it risk.
Ask yourself why so many content hosting platforms utilize CLoudflare's services and then contrast that perspective with your posted one. Might enlighten you a bit to think about that for a second.
Between this and Hertz's new AI damage detection models, we're seeing the enshitification of business travel reaching a new level, and also doing a great job of really ticking off a group of customers (business travelers) who are already irritated enough.
Rest markets itself as a way to "unlock a new revenue stream"
Leave it to the bean counters to see this as an opportunity to generate new revenue streams from customers while simultaneously pissing them off.
BNSF railroad also has an extensive meteor scatter radio system across north america that is similar to SNOtel.
meteor scatter communications were even more crazy and impressive (still in use actually)
I've seen some specialist docs with extensive experience direct commission as an O5
CEOs are more like high ranking general officers, not O-6 level (Navy Captain, Army/Air force full bird colonel)
O-5 (Lt Col, Navy Commander) would be VP / GM level stuff, GS-13 through GS-14 in the federal government
O-6 equivalent in the civilian world equates to a GS-15 in the federal government, and a senior VP in the corporate world
O-7 (brigadier general) would be an EVP level position, C-level large org
O-8 (general) would be CEO
The pay scale isn't really equivalent. For military doctors and dentists the typical lure is they will pay off all your student loans for a specific time commitment to the military.
RTL-SDRs have a typical usable bandwidth only about 2 MHz, so that is going to rule them out of any real usable LTE related decoding and detection
Some of this obscure test equipment is very interesting and amazingly designed.
There are probably only a few electrical engineers in the entire world that actually use this stuff on a day to day basis.
Returning the OTP in the request API response is wild. Like why?
Eh, I've got 13 years to deal with this. No big deal.
The best thing about waiting until the last minute to fix something is it will only take a minute.
Informix is the april fools joke.
Does anyone remember the Informix / Oracle wars? What a time to be alive that was.
This guy's writing style makes him a worldwide treasure, and probably inspired a few young chemists.
I'll always read and re-read his blog posts when they are posted here.
Yes, a number of smaller airports are staffed by contract tower controllers.
If there is one thing I've learned in the past few days, acutely so, is that the vast majority of people do not understand the sheer complexity of what it takes to have an aviation industry.
Here is the ATC audio between the Tower and PAT-25. Helos that transition DCA's airspace use a separate VHF frequency from traffic landing and departing, but talk to the same tower controller.
https://archives.broadcastify.com/44114/20250129/20250129200...
* At 5:41 - 5342 is given instructions for circling to 33.
* At 6:45 - PAT-25 reports Memorial
* At 7:06 - tower gives PAT-25 traffic advisory about 5342 and PAT-25 reports traffic in sight and requests visual separation
* At 8:12 - tower asks PAT-25 if they have the CRJ in sight and tells him to pass behind the CRJ. PAT-25 again reports traffic in sight and again requests visual separation.
* At 8:28 - crash occurs, exclamations, go arounds issued
It’s literally a race to the bottom by “theft of data”
Whatever that means. The legal system right now in shambles and flat footed.
Knowing our current government leadership, I think we’re going to see some brute force action backed up by the United States military.
It’s funny, the Chinese are here innovating on AI, batteries, and fusion, and here in the United States we’ve pivoted to shitcoins and universal tariffs.
At least we have the CyberTruck to highlight American greatness
Otherwise known as a race to the bottom