Kluggy

It is! I've made https://www.simplyrecipes.com/homemade-chili-crisp-recipe-74... recently to great success

State of Connecticut v. Swinton Ruled that admission of digitally enhanced evidence was allowed. This is going to be a long road full of nuance before we land on a largely socially accepted test for how much adjustment is allowed in court cases.

mousse Is the same. Could be meat. Could be chocolate.

Do you have a source for your claim that wallet providers get access to all card transactions? Looking at the wallet, my linked cards only have the data that came though the mobile payment.

some of us hold onto the past. I still have a Zip disk and drive (and a bunch of old media, all the way back to a 8 inch floppy) and I have a fairly large collection of 4k blurays

While I generally agree with you, the claim that trade joes entered into negotiations in bad faith and cost the other brands money be asking them to make changes to recipes is a bit beyond just competition. Presuming that claim is true.

It's absolutely because of inertia. Cutting a tarball is a very public indicator that the software is ready to be used. A git tag or branch doesn't have the clarity of "use this" as a release tarball does.

That said, this is absolutely going to be changing now. We obviously can't keep relying on tarballs anymore. We'll find a new normal that will work for a very long time until some other critical issue arises and the cycle repeats.

It wasn't sloppy. It was just luck that someone noticed a half a second extra latency on the second connection of a newly run sshd process and went down the rabbit hole. Had they just shrugged and moved onto more "important" tasks/deliverables, it would most likely have landed in production across the world.

I'm a tad reminded of https://xkcd.com/705/

We got so lucky here. We won't get lucky every time. We will have a massive breach one of these days.

A wildcard cert is a single cert that is valid for any subdomain. The specific ones you use are not exposed to the CT, just the fact that there is a *.example.com was minted

They actually planned for the three major overtones and the nine minor theme variations from the start. You may disagree with the results, but it wasn't modified due to outside pressure.

So this just reads /sys/class/power_supply/BAT0/energy_now (or charge_now) and /sys/class/power_supply/BAT0/charge_full and outputs it nicely. While the asm is cool, how large would the bash script to do it?

I enjoyed it. I followed it way easier then the books and that was a positive for me.

Louis Rossmann did a video with 107k views so far already https://www.youtube.com/watch?v=2cHDyq5hRk4

I would bet dollars to donuts that they lost a lot more than the replacement cost would have been.

It's difficult, but not impossible to do the recovery yourself. Swap the platters between two drives and clone the data to a fresh drive. I've done it on some 2 tb drives way back when.

> EVGA also encouraged the Reddit poster to make a warranty claim from the drive manufacturer(s) themselves to get his storage drives replaced.

Wow, the drive manufacturer's warranty most certainly wouldn't apply. There was no fault with the drives at all.

Very poor look for EVGA.

If they actually break up apple and google, it’s going to cause so much chaos that it might actually kickstart the venture capital markets into high gear again.

No. The attacker needs to load on a program and then run it against the target program to extract keys. This doesn’t work with anything in the Secure Enclave and things like iCloud don’t expose an endpoint for the attacker program to send data to. Plus you can’t load a program on the device if it’s locked.

In this case, this is a new feature for a new app. They didn't change anything. The setting didn't exist before, nor did the app

It’s a total non issue for the majority of folks. It requires local access and takes hours under very specific conditions that don’t apply to most people. How often do you run a server that will run arbitrary crypto operations on attacker controlled inputs?

Plus all the secrets in the Secure Enclave are immune to this attack, so your FileVault keys and your Apple Pay cards and all that jazz are completely safe.

It sucks that it exists, and crypto libraries that run on the platform outside of the Secure Enclave will get slightly slower, but no one will notice.

Isn't that the entire point of the secure enclave[1]?

https://support.apple.com/guide/security/secure-enclave-sec5...

As people said, a turning machine has infinite memory and program space. Just checking for context and program position doesn’t solve all cases of never halting.

Take for example a program that attempts to calculate the https://en.m.wikipedia.org/wiki/Collatz_conjecture

Some inputs would rapidly get answered. Most won’t. If you can prove it’s halt-able for all inputs, you’ve won a Nobel and will be well off for life.

Good luck.

I wonder if they’ll do free weekly apps.

Deleted emails and junk? Yes. Everything else, no.

I had applied for one job via linked in a few years back and it was entirely a scam to do data collection. They kept asking for more and more info about me. I stopped responding when they wanted to run a credit check and asked me to email them my social security number.

TL;DR

https://old.reddit.com/r/openSUSE/comments/1biunsl/hacked_in... has the smoking gun

> That all said, this is a plasmoid that was written for KDE 5. Maybe some interaction with KDE6 lead to the issue? One issue that could have happened is that property string configPath <SNIP> now uses another StandardPaths.standardLocations due to KDE6. This could lead to configPath looking like somepath / (note the space), which expands to sh save.sh somepath / ..., which will happily remove everything. The whole situation reminds me of the Steam uninstaller, where a single space had some remarkable results.

My guess is that by having AWS build it, they have a deal to then allow it to be used in the spot market when idle, something they wouldn’t be able to do if they ran the platform.

Spot usage could make a decent profit in addition to training anything they want.

I’m a fan of all these EFF projects, but this one’s name is terrible. Why would they put stalker in a name?

I’m gonna email them asking to reconsider the projects name.

The dynamic aspect seems weird to be for a well-known. Are there other well-knows that are similarly dynamic?

Isn’t most games still dominated by single thread performance?

I can’t think of a single case of cyberattacks against cars. Do you know of any?