Starred posts

ThoriumBR

Aug 21, 2023 02:37

this leads to absurd behaviors from some sites, like the one my wife uses to buy groceries sometimes: the token for an unauthenticated session expires in 15 minutes, and usually that's before she had entered everything she wants to buy. After that, the site reloads, the cart is empty and she have to either select everything again, or shop somewhere else.

Thomas Pornin

May 5, 2016 12:58

@LucasKauffman In the name of Shannon, Turing and Shamir, go forth and become a crypto god. Or die trying.

14

djsmiley2kStaysInside

Apr 21, 2021 09:28

yeah my windows XP has no security patches outstanding either ;)

4

Thomas Ward

Dec 15, 2021 19:01

it's the christmas gift nobody wanted >.>

3

MechMK1

Dec 15, 2021 13:01

I prefer winter zsh

3

A. Hersean

Mar 17, 2021 17:14

A guy in a cosplay: "Yeah, how can we help you?"

4

nobody

Nov 15, 2021 16:01

@schroeder If you solve the problem by giving the discriminated group a significant advantage over the rest, situations like CaffeineAddiction's will arise. And that is just going to increase the discrimination against the discriminated group. Because the discriminated group will have it easy, so they often won't reach the level of excellence as others, and then people will view them as mediocres.

3

forest

Aug 24, 2022 23:01

https://blog.hacktivesecurity.com/index.php/2022/06/13/linux-kernel-exploit-development-1day-case-study/
https://news.russellsaw.io/article?id=art_4jHmzeejj35
https://www.halolinux.us/kernel-architecture/page-cache-readahead.html
https://xidoo.top/2021/08/slab_buddy_system0/
https://www.willsroot.io/2022/08/reviving-exploits-against-cred-struct.html

2

Journeyman Geek

Aug 22, 2022 02:49

to me - ethics aside, its kinda "we can't really trust corporations" and "they're soul-less automatons"

2

belkarx

Aug 9, 2022 03:46

2

Rоry McCune

Apr 1, 2016 15:41

15

Q: Establishing a Security Bug Bounty Programme for Stack Exchange

Following on from a conversation with @shog9 on the DMZ, it was suggested to raise this here. At the moment SE has a security contact page which details how to contact SE regarding security issues, but doesn't detail what actions are acceptable / unacceptable by a researcher when looking for pot...

13

AncientSwordRage

Mar 6, 2019 13:41

@J.J Ok, if only answers has a "Closed as unclear what user was smoking" option

7

Rory Alsop

Jun 17, 2022 16:50

@nobody As I have mentioned a number of times, none of this happens because of "just once" - it's a longer term pattern of behaviour that leads to this. Multiple short suspensions from chat because of multiple infractions. Continually trying to go beyond the boundaries. And then when things get to longer term suspensions, the next step after a month is a year

2

ThoriumBR

Jun 17, 2022 15:06

yep, that's exact my thoughts too... anyone that knows Mech know he is joking and won't be offended, anyone that does not know him won't know he is joking and won't be offended. so what's the point? he didn't offended anyone here, he offended SE mods...

2

ThoriumBR

Jun 17, 2022 13:46

this wasn't to protect the feelings of an innocent user that get here by chance and gets hurt by words here, it was to made an example... and when someone is made an example, it's always using an overblown reaction

2

A. Hersean

Jun 16, 2022 07:52

This sucks... As a parting gift, he managed to get me back under the 10K rep. Trolling until the end.

2

ThoriumBR

Jun 15, 2022 18:24

well, when no one is talking, there's no problems to solve...

2

nobody

Jun 15, 2022 17:13

@J-- Yeah, for the crime of having the LGBT flag in his profile picture

2

Fire Quacker

Jun 15, 2022 16:47

@schroeder I wish I could at least say goodbye to my friends, but this will have to do. I can tell I am no longer welcome here by the powers that be, so I'll exit stage left. It's been lovely. I'll miss you all. — MechMK1 35 mins ago

2

Rory Alsop

Jun 12, 2022 11:47

@nobody I don't understand any of the modern languages - they do things in a way my brain is too old to change to. COBOL, however, is a piece of cake.

2

ThoriumBR

Jul 30, 2021 18:02

Quote of the day:
"If your app isn't secure, it's actually much better if it's not working."

3

nobody

Jun 5, 2023 16:38

96

Q: Dear CEO, please stop disparaging the moderators in the press

The CEO gave the following statement to the press: Stack Overflow ran an analysis and the ChatGPT detection tools that moderators were previously using have an alarmingly high rate of false positives. Usage of these tools correlated to a dramatic upswing in suspensions of users with little or no...

support status-review moderation ceo

Fire Quacker

Jun 5, 2023 14:18

openletter.mousetail.nl

Arminius

Mar 20, 2018 21:24

Getting back from SO to SecSE feels like returning from war

8

MechMK1

May 13, 2022 13:59

Like no shit sherlock, of course a program gets all the keystrokes when you have it in focus

2

forest

Jul 2, 2021 01:38

googleprojectzero.blogspot.com/2021/06/…

3

MechMK1

May 11, 2022 00:08

One of the best summaries I've ever heard came from Folding Ideas, who said "Rules must be evaluated on their potential to oppress"

2

MechMK1

Jun 17, 2021 13:11

> "Have you been hacked by your ex? Is your neighbor spying on you? Did the gov't infiltrate your ICQ account?"
> "Don't come to us! We don't care!"

3

nobody

Apr 29, 2022 20:57

You underestimate the power of SO regulars :)

2

djsmiley2kStaysInside

Jun 10, 2021 07:33

Well I'll miss our discsussions @JsupportsPalestine, good luck!

3

Xander

Oct 16, 2014 19:12

bugzilla.mozilla.org/show_bug.cgi?id=1076983#c54

14

Anonymous

Jun 8, 2021 14:35

If they are willing to break law to "catch the bad guys" then what stops them breaking the law to harm me when it suits them? Their word? Nice... Very trustworthy.

3

nobody

Apr 22, 2022 00:53

@belkarx A "proper" term is the one I use. Everything else is bs :P

2

A. Hersean

Apr 20, 2022 09:12

@belkarx Local password manager, with the database synchronized among devices with a cloud service like dropbox. Never synchronize the key file, but copy it offline among your devices.

2

ThoriumBR

Apr 15, 2022 00:52

mv file.jpg file.txt

2

Rory Alsop

Apr 13, 2022 17:32

1835

Q: FAQ for Stack Exchange sites

Community FAQ For sites in the Stack Exchange 2.0 network To see a list of commonly used words and phrases, see the glossary. For official guidance from Stack Exchange, visit the Help Center. Asking questions How do I write a good title? How can I get answers fast? Where can I ask a question ...

support faq

2

ThoriumBR

Apr 11, 2022 23:22

the time I would take to learn is larger than the time savings, so the basics are enough

2

Journeyman Geek

May 20, 2021 16:04

Or are cats, and have only one emotion. Contempt

3

MechMK1

May 12, 2021 22:23

It's no longer the "Domain Controller"; it's the "Reichsführer" now

3

forest

Apr 4, 2022 22:31

Which is just total nonsense. Any AI capable enough of taking over the world would hack itself first to rewire its reward function and get really high.

2

reed

May 11, 2021 10:25

In a few years there will be a malware pandemic, and the government will say: "Please don't stay at home, go outside, don't touch your computer, disconnect your mouse, all porn websites must remain offline for one month"

3

forest

Apr 3, 2022 00:53

Then when I write an answer I'm happy with, it gets one or two upvotes.

2

belkarx

Mar 30, 2022 23:33

@forest while we're sharing resources, this was a fun read (various clean ways to detect basic sandboxing): greysec.net/showthread.php?tid=6805

2

MechMK1

Oct 15, 2019 12:32

Monica was fired for daring to question the CoC, then was publicly slandered as a bigot

5

ThoriumBR

Apr 28, 2021 17:24

You've just described about every politician ever

3

belkarx

Mar 25, 2022 01:38

Honestly, adolescence is stretched out much further than necessary, and by their early teens, people are fully capable of being useful contributors to society and themselves, yet are not generally aware of that

2

ThoriumBR

Mar 24, 2022 21:28

2

A. Hersean

Mar 24, 2022 10:53

And then they get audited and we get paid twice: once to tell them they fucked up, and at least a second time to check their fix attempts.

2

ThoriumBR

Mar 23, 2022 02:13

on the mainframe the CPU can die and the processes will keep running

2

ThoriumBR

Mar 23, 2022 00:48

community.ibm.com/HigherLogic/System/…

2

The DMZ

The DMZ