@MechMK1 That's people for you. From the very beginning
As a result, I used to be part of the "Voluntary human extinction" movement. Sadly, I found their plans were not ambitious enough, so I founded "Mad scientists for the involuntary extinction of the human race". We haven't made much progress though because we need a new name that has a catchy acronym.
as there was no such test yet, they weren't sure, and did some math and found that the security factor of the test was 1.6, and anything bellow 1 would indeed ignite the atmosphere
imagine that.. the security factor for a test that could ignite the atmosphere were an order of magnitude or two less than the cables on an elevator
So the way these garages work is that you place your car on a conveyor belt, and the car is then automatically transported into the garage, where it's stored away
I am banging my head against the wall now... our government is stupid! in the middle of the pandemic, government cut fiscal benefits for the import of substances for making the vaccine... and we had an ENTIRE STATE with no hospital oxygen because it's a isolated state, the US offered us a cargo plane to ship oxygen, and the health ministry is studying the proposal for *10 DAYS*
That's about what I remembered. In the case of someone's death you might be required to make a payment, but it will be much less than the cost of healthcare or life-long support of the person's needs if they are disabled. Apparently people like to then bribe judges into ruling it an accident so there are no criminal charges
@ConorMancone Exactly, you don't need to pay if it was an accident
"Toddler ran in front of my car, had no chance to stop in time, how unfortunate. Please disregard this security camera video of me driving over it several times"
Until not long ago, I thought China was a normal country, not really normal, but not too different from other civilized countries anyway. Then I learned that it's not even a democracy, because you can't found your own party. SAY WHAT?!?! If it wasn't for their economy, we would be ignoring it like a third world country, or bombing it like the middle east
Yeah, I heard about a person help an elder woman to get into a bus, the elder one still missed a step and sued (and won) against her kind helper. It made the news. Now, nobody wants to help others in mainland China.
A friend of mine works for a small company, and one of their their largest customer is a chinese company. One day they called and demanded that they must not label Taiwan as an independent country on their website
What did the company do? Of course they obeyed immediately
@A.Hersean You can do anything you want, as long as you have the money
yeah, it it wasn't for that (economical reasons, and maybe nuclear weapons), we would be treating it much differently. But instead, our politicians talk with China, strike deals, negotiate, shake hands.
"You're worse than Hitler, because Hitler at least care about Germany or something"
The people who own the companies who make endless money off chinese slave labour are the same people who own the media companies, who tell people how amazing china is
Also, wanna see how socialist and caring your big tech companies are?
I think the problem isn't the owners, it's the stock holders. These people have way too much money, keep on buying stocks, keep making money, and buy other stocks. So the NWO maybe already exists, in a way, if you consider that some people have way too much power in lots of different areas
BTW, the answers to this question have been bothering me for years, and I finally decided to add an answer to this very old question. This is shameless self-promotion, but would you guys mind reading my answer and upvoting/downvoting as you see fit? The current answers all miss the big picture, so I'd like to have a proper answer on it...
tl/dr: If the server is building the HTML then the server needs to protect against XSS. If the client is building the HTML then the
client needs to protect against XSS.
With changes in the way web applications are built this question deserves a re-visit, since the answer is more than just a ma...
@MechMK1 If people were better then free-market capitalism would be perfectly fine. Then again, if people were better, communism would be find too
@MechMK1 I would still say the same thing. It depends on who is doing the rendering :) If a React app is generating literally 100% of the HTML on the page, then the server needs to send "raw", unescaped data to the client application.
What's wrong with communism? I mean, isn't science, engineering, and technology in general already based on communist theories? For example, by killing a process when it's wasting too much RAM, if other more important processes need it. Isn't that communism?
Daily reminder that the communist death toll is magnitudes higher than that of national socialism, yet people have no problem openly advocating for communism
Huge is an understatement. I actually knew it was Mao right away, and I was trying to decide if it is because I recognized him, or from the context, or because he is literally the only person in the world that people would build a gigantic "golden" statue for
动态网自由门天安门天安门法轮功李洪志Free Tibet 六四天安门事件The Tiananmen Square protests of 1989 天安门大屠杀The Tiananmen Square Massacre 反右派斗争The Anti-Rightist Struggle 大跃进政策The Great Leap Forward 文化大革命The Great Proletarian Cultural Revolution 人权Human Rights 民运Democratization 自由Freedom 独立Independence 多党制Multi-party system 台湾台湾Taiwan Formosa 中华民国Republic of China 西藏土伯特唐古特Tibet 达赖喇嘛Dalai Lama 法轮功Falun Dafa 新疆维吾尔自治区The Xinjiang Uyghur Autonomous Region
There we go <3
You see, I really love this copy pasta, because people don't understand why it exists
@MechMK1 veeery cheap indeed! here our government published the expenses on grocery, and the president's office spent $3M USD in condensed milk last year
I wish that every law passed came with guidelines for measuring success and was then checked after a suitable length of time. Laws that didn't pass "make the bar" would automatically be revoked.
today police busted a group that falsified records and let anyone buy firearms. one guy had 20 firearms and 30 criminal convictions. one conviction would ban him for purchasing guns. he was 10 guns short of one gun per conviction. poor guy, so close to the objective...
ok, I read the differences between socialism and communism, and I realized that when I say "communism" often I actually mean "socialism". However socialism seems too lax for what I have in mind, and communism too strict
Here the most infamous episode was in March/April last year, when a runner/jogger was treated like a terrorist on live TV, followed by an helicopter, with journalists shouting like "Look, look, he's running over there, quick, follow him", and the police saying stuff like "we have alerted the marine forces, etc.". It looked like a movie, and it was just for a runner on the beach. All this of course became viral for its nonsense
It was the period when everybody had to stay at home, and this poor man was running on the beach
a funny Brazilian story: a drug worked for the water treatment plant. his manager had him sent to a drug abuse clinic to treat his addiction, but he ran away. twice. and got back to work. things started to disappear on the depot, and he was the suspect. he stole a company motorcycle and sold to buy drugs, got busted and fired.
workers rights court fined the company, and they had to re-hire him and pay him for firing a drug addict for stealing company property, not showing for work and doing a mess when he did.
now imagine you have a company here, how motivated would you be to hiring anyone without a 100% clean drug test?
you drink? no way, you may end up an alcoholic, stealing from the counter, and I have to keep you forever
In our courts there is always a sign that reads "The law is the same for everybody". It's funny, because it's true, the law is actually the same... it's just the interpretation that is different, LOL
I'd like to ask a question, but I'm afraid it won't be good enough for this site. The question is: how likely are VM-related exploits in the wild? I have to say that I'm not even sure what "in the wild" means exactly.
Anonymous
Probably a little too vague to be asked, but I think you could find a way to get it in if you worked on the title and I for sure would be interested in the answers.
I guess "exploited in the wild" means that it is "exploited in a way that is not meant to be secret", that is, in other words, everybody can potentially get infected (even by just visiting a website). But I'm not sure this is a good definition
the attacker would need to exploit the browser, get a shell, elevate privileges, and exploit the vm interface to reach the hipervisor, and exploit it to reach the host
Not long ago I believed that zero-days weren't likely to be exploited that way (in the wild), but I keep on seeing news that report otherwise. So basically, "keep your software up to date" is not enough (anymore) since zero-days in browsers seem to be exploited "in the wild"
so I suppose, if that is true for browsers, popular apps, etc., why not also for VMs?
Call me crazy or paranoid, but I'm actually afraid of browsing the dark web because I believe it's a bad place full of bad people on both sides of the law: criminals and cops. And I believe those people have zero-days. So I don't go in dark places, I prefer to turn the lights on
@ThoriumBR That's what I used to think too, before I started reading the news. In the last year or so, I've seen lots of news titles reporting "zero-days used in the wild". Whatever that meant. However I'm not experienced enough to understand how serious those attacks were
I think they are not used "at random", for stupid opportunistic attacks, but they are probably part of watering hole attacks... so lots of people end up being infected in the wild, while the true targets are more specific
Plus, another thing I'm afraid of, is that more and more people own bitcoins nowadays. So infecting a large number of people, just to find the few interesting machines where to stole bitcoins from, might be a reasonable kind of attack
it is... but an attacker targetting bitcoin wallets will probably run a file scanner on the victim searching for wallets, not starting a shell on every one and installing additional malware
and if you have a sizable amount of BTC, keep the wallet offline
@reed if it helps, I agree with everything ThoriumBR said above.
The recent solarwinds hack is a great example of that. The attackers gained access to about 15,000 different enterprises, but even out of those they only broke into ~150. Specifically government and high-value industry.
Of course, that's on the extreme end
That was an extremely valuable zero-day and the attackers really went out of their way to use it for as long as possible before discovery
I can guarantee that there was someone high-up choosing each target by hand
Now granted, not every zero day will be quite that "expensive", but the general principle applies. For instance, Google is fairly on top of detecting zero days being exploited "in the wild", and their rapid update cycle means that if you have auto updates turned on the period of time where you might be vulnerable is very low - even lower if someone is trying to hack "the entire internet" with it
(since that will cause a lot of noise and get them caught quickly)
@MechMK1 Sounds fun :)
Is it possible that you get nailed by a zero day? Sure, and probably a bit more likely if you are in the "wild and dangerous" parts of the internet
However, your risk of getting hit by a zero day is much, much lower than your risk of (say) downloading a movie via torrent and finding out afterwards that there was an embedded virus
That is the goal after all. You don't need everyone, just enough people to make it worth the effort
And more on point, you'll probably get enough people for it to be worth the effort, especially compared to the effort of finding, weaponizing, and anonymously making use of a browser (or other) zero day!
I made a bitcoin investment with a company online. The first return sent back to me was fine but the second has issues. They sent me an email like the first time stating that the money was sent but I never received it. I sent them an email to complain, they responded saying that they were investi...
That's the first thing that comes to mind when I hear someone talk about psychedelic stuff. I think of rave parties.
I've never been to a real rave party, but I've been to several parties (in night clubs) where they played electronic music (techno, progressive, trance)
@ThoriumBR I wouldn't doubt it for that reason. There is a theory that scammers try to make their scams obvious so that only the most gullible people even reach out in the first place. It basically let's the people that are most likely to fall for it "self select" into the scam
tl/dr: If the server is building the HTML then the server needs to protect against XSS. If the client is building the HTML then the
client needs to protect against XSS.
With changes in the way web applications are built this question deserves a re-visit, since the answer is more than just a ma...
