I was browsing this page, which redirected me to this vulnerability because I'm a Java developer and I'm aware of the affected library.
Basically the vulnerability says:
It was discovered that Apache Commons FileUpload incorrectly handled
file names with NULL bytes in serialized instances....
explain to me what is Diffie-Hellamn Key Exchange in plain English?
It's asymmetric encryption used to exchange some shared secret (it's assumed that there's some 3rd party passively listening to try to get the secret). Let's say Alice (A) wants to talk to Bob (B) and Eve (E) is listening l...
But he inlined the pictures from Wikipedia (which are accurate) which will make people think his answer is accurate. In reality, his answer is a disaster.
There are many other things wrong with this answer as well in addition to the previous comment. The pictures from Wikipedia are right, but you interpreted them wrong. It appears that you have a mistaken understanding about what DH is, what it does, how it works, why it's used, when it's used, what the result is, and several other key points. — tylerl38 secs ago
This is me tactfully hinting that a user might consider voluntarily deleting his answer.
I'm trying to write a script, part of which is similar to below:
function FooBarMeh ($in,$1,$2)
{
switch($in)
{
$1{'FOO'}
$2{'BAR'}
default{'MEH'}
}
}
$a='A'
$b='B'
$c=read-host
FooBarMeh ($c,$a,$b)
I expect the script to return FOO if I enter A, BAR if I en...
@AviD I have been toying with the idea of using the cmd line version to install wordpress on some of our developer boxes at work. When you dont provide any parameters for the apps you are installing it prompts you for the answers (IP addresses, usernames, passwords, etc), and it records all the input provided to a plain text answer file (which you could use if you had to run the install again).
@AviD The thing is it records EVERYTHING to this plain text answer file - including things like the MySQL root password. Is it just me or is that just plain wrong?
anyway, to the best of my knowledge, it is not intended to be used to distribute software on production boxes, but for pulling down development packages on dev systems.
Once you've answered all the questions it says on the console window "Parameters written to WordPress0.app". Being the curious type, I searched for the file and found it in 'C:\Windows\SysWOW64'. It just lives there forever as far as i can tell, unless you do another install, in which case it overwrites the file.
This question's title might seem a bit odd, but what I had in mind is that the China's territory is rather large and they could place a launch site deep within its territory, flow of information is tightly controlled as it is with the Great Firewall of China in place, and the communist Big Brothe...
I realise this borders on sci-fi, but there's been some interesting demonstrations regarding security of various satellites.
What would be required to hack a satellite (in general terms, any hack really)? Are they all basically connected in the same way, or would I need different equipment, sof...
Actually, @Rory's (both of you), I've posted a question re UK based spaceport too :)
@AviD I have, it's a classic ... but it's not really what I'm asking there. BTW I probably linked to this "hacking a satellite" question about a gazillion times on SEx.SE :D
Urgh, that PowerShell question got me researching my personal pet peeve in PS, the fact that there is no way to enforce mandatory variable declarations.
EG, you cannot protect against this: $myVar = "foo" $myVaz = "bar" write-host $myVariable foo
Was curious as to whether PS 4.0 had addressed this. It has not.
Great - made a mistake in my example!!! That should have been write-host '$myVar'
So I'm reviewing the invoices from my cellphone company (which I happen to love, btw. I am aware how lucky I am to be in the singularly unique position...). I was very impressed with how my wife made good use of her unlimited text messages - over 750. Very nice.
@Iszi That's true, most American shit beers are lagers. They are also mostly pilsners. I also think I misspoke on that one.
@Iszi I find pilsner very bland, boring, and not tasty. They're acceptable on a really hot summer day when I'm thirsty but want something fun inducing.
I remember when mobile phones first came out. How we laughed. Before then I used to drive to my first job of the day and when complete I would use the customers phone to call the office to see if I needed to go somewhere else.
I also remember when rotary dial phones were replaced with these button things. Pah
@scott - a real pilsner can be pretty good. There are just very few.
@RoryAlsop Remeber when you didnt even dial at all, you just asked the operator to connect you directly? And of course she (it was always a she) knew everybody, and how to connect them.
@avid - when we first went to the Falklands we used to raise the handset, twirl the handle and when the operator answered we would ask for the connection by name.
@AviD Oooh - Einar is good! (That was my school house. The other houses in our school were Erlend, Sweyn and something else) Tell your wife I worked at the Highland Park distillery when I was 16 and when I was 22 :-)
@AviD do you get BBC iPlayer over there?
they are all available through that - you may need to spoof your location...
@AviD the best job there was cutting peat for the smoking floors. If it's too sunny the peat gets too dry - so you don't cut peat. If it's too wet the beat turns to mud so you don't cut it...we spent a lot of time playing cards :-)
@AviD I think only UK, but ymmv
(which means I honestly don't know... I have heard USians complain they can't see BBC stuff)
@LucasKauffman Couldn't say. A majority of my answer would be based on who those visitors are.
@AviD The problem is I can't tell you how much I know because I don't know how much I don't know.... if that makes sense. Most of my Linux experience involves Linux Mint yet for a while I had Fedora on my laptop.
@RoryAlsop I get BBC iPlayer here in Ireland, but it's restricted to radio programmes. This is fine, because that's usually what I want. It doesn't work nicely without flash, though, so I generally use it from the command line: get-iplayer "news quiz" --type=radio or similar.
@AviD The British Broadcasting Corporation, I think you'll find.
So I recently returned to a website I'd last visited five years ago. The "forgot password" link e-mailed me out a plain-text copy of my password, which disturbed me a little, but when I logged in, I got this:
Well, it's not exactly hookup. It's just at the less classy end of the scale of dating sites.
@Polynomial There's no damn satisfaction. You get the intro then the build-up and when you're expecting some sort of decent drop, it's the intro with more bass.
see, that's because people don't know about curves of scale
it's a technique applied to every good movie, game, book, etc., but loads of people forget to apply it to music
never try to keep up with that full-on extreme level of awesome. if you do it gets boring. fluctuate it about a bit - you need quieter and slower bits to make the epic bits more epic by comparison
@Polynomial Hence why you leave the intro/outro from times to times when you're mixing tracks. House music has a proper climax where you get satisfaction, which you're not getting from the intro/outro.
good example is Cloverfield. the first 15 minutes are just a bit of slow character introduction, a bit of a fight to set up the group tension angle, then a quiet bit outside, then BOOOM a massive explosion and things kick off at high speed for a bit. if it all just came in with that explosion and everything it'd feel much less exciting.
I think it's why pretty much nobody enjoys hardstyle and techno any more, outside seriously crazy club scenes - it never slows down, and just ends up being samey.
I built something like that a while back using low bucket count FFT and square/triangle synths, using the low-end for partial PWM on the higher channels.
uses FFT on a 120ms scale in the time domain to work out 6 channels of sound, with low and high frequency as square waves, and mids as triangle waves, using the lowest end as PWM control for mid-range.
it needed some tweaking on each track to make it even recognisable, but even then it wasn't particularly musical
don't bother - just use a library to upconvert to raw 16-bit signed PCM
MP3 is horrible to even think about processing. much easier to just grab a standard library that will render your compressed audio into a PCM stream, in memory, with just a couple of calls
and then you can do things like AAC (MPEG-4 standard) too
I need to write (or find) a plugin for VLC that'll do short buffer time volume analysis and pipe out the levels via UDP or named pipe or something
dumping FFT (spectrum analysis) in realtime would be even better
want to build an automated light show for music. I've got some nice 100mW green lasers for the job.
also, with a motor attached to a cube made of mirror glass, you can do some epic scanning laser effects
@RoryAlsop you'd be pleased to hear - I just read (skimmed) an article about how all the Tel Aviv bartenders are growing their movember mo's. And it looks like the female bartenders are drawing it on too....
So, what do usually-bearded men do for movember? Shave it off?
I was browsing this page, which redirected me to this vulnerability because I'm a Java developer and I'm aware of the affected library.
Basically the vulnerability says:
It was discovered that Apache Commons FileUpload incorrectly handled
file names with NULL bytes in serialized instances....
explain to me what is Diffie-Hellamn Key Exchange in plain English?
It's asymmetric encryption used to exchange some shared secret (it's assumed that there's some 3rd party passively listening to try to get the secret). Let's say Alice (A) wants to talk to Bob (B) and Eve (E) is listening l...
I'm trying to write a script, part of which is similar to below:
function FooBarMeh ($in,$1,$2)
{
switch($in)
{
$1{'FOO'}
$2{'BAR'}
default{'MEH'}
}
}
$a='A'
$b='B'
$c=read-host
FooBarMeh ($c,$a,$b)
I expect the script to return FOO if I enter A, BAR if I en...
