jradd
jradd on Hacker News
magic numbers are vital for filesystem reference in kernel code to distinguish load order of partitions in a disk, and probably used for memory allocation, and permissions. The reason why the magic code exists among code itself seems a little redundant with type checking and garbage collection or proper inheritance.
I cannot fathom how complicated arbitrary code execution could get with multi byte characters that could use shift registers, null bytes and byte order marks with determinism in a NOP slide on a heap spray.
Filtering only printable user input helps but even bit map images can expose a heap to a sensitive registers that will execute some target specific generated shell code.
https://en.m.wikipedia.org/wiki/NOP_slide.
https://en.m.wikipedia.org/wiki/Heap_spraying
no, the fsync call remains the same as it does in ext3 and most filesystems.
However in ext4 there is no need to call sync unless you disable batch processing of synchronous writes.
manpage suggests the article is not mistaken. `max_batch_time=0` disables batch processing synchronous write operations. the default is 15ms.
It seems like a good idea for client filesystem to mount synchronously for data integrity. I'm not aware of i/o being a factor here.
Of course this doesn't prevent applications mishandling of file objects.
chrome potato here. seems approx. 6 seconds for collapsing any that i've clicked.
is this why big–pharma harvest blue bloods? i'm not sure i believe this hoopla about the tree of life.
but i'm interested in the biomedical applications from obscure species that feature bioluminescence, magic pheromones and how to test the quality of Eel I just put on back order.
i loved your italicized block. don't down vote this one.
i just wanted to save this here. good point.
I love how elephant means 'resemble'
uses symbol for 'family' （家）
upper radical 'knife' (刀)
Elephant in the (里的大象)
亻人 (r)en
氵水 shui
手扌 shou (of hands)
忄心 xin
犭犬 quan
豬 zhu
刀刂 dao
到 until
象 elephant
不客气
bu ke qi
[you are] welcome。
xdr was developed by sun, i don't think that is the issue here. I think it is the service that rpc doesn't recognize.
i'm assuming in this case it is rails under ruby or something using ssh or ssl that require secure and non-blocking calls to low order operations.
The issue is in the handling of the connection.
This is the issue i'm having right now with [the] wrapping [of] secure binary streams of [un]trusted data with authentic transport control.
eg tls 1_2 over ssl
good point.
i think 'getting env vars' is the bigger issue here.
It seems like most people here don't see what the root cause here is.
System and user level processes with high order 'actions' for idempotent handling of secure channel operations (session negotiation, out-of-band data) are vulnerable to xss, side-channel attack for 'actions' that use stdout on/at execution of low order operations handling packed binary data that upon execution may contain shell code or encoded instructions.
they will patch a PoC, but how will we know the root cause is patched? the service parameters can be fuzzed by someone to check for injection (if they can).
tldr;
I don't know what the root cause is.
What is a great question. A good one gets a scoff and raises your chin.
You can try setting up a vpn and no tcp/udp is necessary. Pinhole could be accessed over local network.
So I’ve never setup a vpn before, I’ve been trying to decide how to make this simple for windows clients and phones. Must I have a vpn client? I’m using IPSec, ssl, and LDAP on the public end. I don’t want a client app. A gateway/router should suffice I hope.
I wonder if there are any real programmers out there who have decoded GIF by hand. The IETF is clear that the header should be 6 7bit bytes (GIF##a), and the ends with `\x00\x3b`.
without LZW, it should be trivial to append a frame to an image. its so hard... instead of downvoting me, does anyone know of a good/simple example of this in C/python or anything? array2gif[1] is pretty close.
1: https://github.com/tanyaschlusser/array2gif
what conditions are present to make this a constant? just heat and oxygen? moisture?
One will become electrosensitive in a dryer climate.
capacitive touch is derived by galvanic response that can be impacted by pH balance and electrochemistry.
potassium is used to reduce the impacts of gamma radiation
(wrong band, but not irrelevent)
microwaves can be lethal from a distance of 1 km (death ray)
there is so much radiation in the air, to study the affects of one wave length i'd suppose you'd need multiple band pass filters to narrow the band in question and a noise generator for controlled results.
files are an abstraction and reference to objects in memory. The only problem I see is storage life cycle without cache in volatile plus redundant non-volatile memory. Same problem for blocks and segments, no?
what formulae for concrete absorbs sulfur dioxide?
pH balance of water and oxidization/electronegativity of the air could impact the quality of concrete.
When are we going to find a clever trick like the "License plate SQL injection" command [1] to drop database upon scanning the malicious text superimposed on a license plate.
Obviously sql injection wont work, but perhaps some sort of sunglasses, makeup, lipstick, jewelry, or hat could severely confuse the neural net's recognition algorithm, similarly to the way certain colors of faces would confuse emotion detection in camera's a while back.
edit: Don't know if this is authentic or not, but apparently there is a clothing line in Berlin that features patterns [2] meant to confuse these systems.
[1]:https://hackaday.com/2014/04/04/sql-injection-fools-speed-tr...
[2]: https://static.independent.co.uk/s3fs-public/thumbnails/imag...
I read this as: "class of netizens who use iphone, targeted by scandal or bad actor" poignantly titled 'Karma.'
Wrangling 3rd party application access to platform providers' suite (ios, android, browser extensions).
Cookies seem to be the majority of the aggregate identity/behavior data, which you can use various rules in the protocol to limit tracking to some extent.
I've found that opting out on a regular basis of the large adverts for a little extra peace of mind.
uBlock/uMatrix Origin, ghostery, duck.com, dns encryption, vpn, ip6.
removing old wireless access points from history/cache and disabling nfc, blutooth advertisement.
removing duplicate/shared passwords from your various authentication providers and using keypass or a secure password scheme that is easy to remember.
Log out manually of various applications such as facebook, google, microsoft, etc.
Contacts list. Clean em' up.
Keep your phone and hands sanitary at all times :)
They say Stuxnet featured nothing very new or technological but I don’t recall anything else infecting PLC’s and using ambient temperature sensors to define behavior. That is just one techno. aspect I found original. The fact that this wasn’t anything new to Symantec researchers is kinda frightening of itself.
I use Yubi-Nano for email signing as well as authentication/security with gpg-agent for remote SSH. I haven't figured out the problems I'm having with multiple sessions/sockets, but aside from the need to recycle my agent from time to time, this is extremely convenient and exceptionally secure.
I wrote a summary of this setup [1] a while back, that might be helpful, though yubikey has a good writeup [2] already.
[1]: https://blog.jeremyredd.com/
[2]: https://developers.yubico.com/PGP/SSH_authentication/
I didn't realize you could pull 87W from the Macbook Pro adapter using USB-C!
