h4ck_th3_pl4n3t

Imagine a worm written in VimL or emacs lisp.

Haha, that would be kinda fun as an experiment :D

It's not the compiler.

It's JavaScript and its fucked up UTF-16 strings.

UTF-16 should have been UTF-8 for a variety of reasons, and I thought we have learned from the Effective power لُلُصّبُلُلصّبُررً ॣ ॣh ॣ ॣ 冗 incident.

Your source described wp_hash_password(), not wp_hash().

As the OP article/PoC is about hashing uploaded files, not passwords btw, I think you should read it again.

Because as I pointed out, wp_hash() is used to check against uploaded files.

Oh, and source: https://developer.wordpress.org/reference/functions/wp_hash/

And as I cannot resist quoting you for trying to smartass while literally not having read the source code the PoC was about:

> As usual, you cannot make a coherent understanding on just about any subject by reading headlines alone. Life would have taught you by now that the devil is in the details.

I wanted to mention that the Pentium 4 (Prescott) that was marketed as the Centrino in laptops had 64bit capabilities, but it was described as 32bit extended mode. I remember buying a laptop in 2005(?) which I first ran with XP 32bit, and then downloading the wrong Ubuntu 64bit Dapper Drake image, and the 64bit kernel was running...and being super confused about it.

Also, for a long while, Intel rebranded the Pentium 4 as Intel Atom, which then usually got an iGPU on top with being a bit higher in clock rates. No idea if this is still the case (post Haswell changes) but I was astonished to buy a CPU 10 years later to have the same kind of oldskool cores in it, just with some modifications, and actually with worse L3 cache than the Centrino variants.

core2duo and core2quad were peak coreboot hacking for me, because at the time the intel ucode blob was still fairly simple and didn't contain all the quirks and errata fixes that more modern cpu generations have.

The answer is likely wordpress, because its default wp_hash algorithm is still MD5.

I think embedding structs would be way more useful if a) there would be properties on interfaces and b) there would be generic methods available.

As long as these two aren't there, embedding structs is literally identical to dispatching methods, and can't be used for anything else due to lack of state management through it. You have to manage the states externally anyways from a memory ownership perspective.

The solution to the warehouse cost problem is pretty easy, you just need to burn them because ashes are more compact, ergo less transportation costs.

You just don't want to realize that this has nothing to do with ethics anymore. It's about control and money.

I dare you to implement this then, where others have failed.

The actual question I have now is: if backup and restore were not working before, why were the keys backed up via Google Play services?

How can an encrypted backup be incremental if it's supposed to be never decrypted on-remote-machines?

Ever thought about that?

Yes, that's what I meant

> Half these issues stem from a relative misunderstanding of exactly where the code is running.

If I take a look at other languages, these kind of multi-threading issues are usually represented by providing a separate context or sync package (that handle mutexes and atomics) in the stdlib.

And I guess that's what's completely missing in nodejs and browser-side JS environments: An stdlib that allows to not fall into these traps, and which is kind of enforced for a better quality of downstream packages and libraries.

The problem's cause really is about _who_ has to pay for the traffic, and currently that's the hosting end. If you turn that model around, suddenly AI web scrapers have to behave and all the issues that we currently have are kind of solved(?), because there is no incentive to scrape datasets anymore that were put together by others, and there automatically will be a payment incentive instead to buy high-quality datasets.

Imagine having the domain cyber[.]threat

Would be kind of cool, most attacked domain on the web, probably

Cute that you think there will be an election. Why do you think have all controlling and independent agencies that are part of the election process or cybersecurity been removed in the first week via executive orders?

Fairphones are also LineageOS and postmarketOS compatible, both options are without tracking and without Google's mandated policies.

LineageOS without gapps is really usable if you set aside the "big" social media apps. WhatsApp can be sourced from their website as an APK. The social apps like facebook, instagram, snap, tiktok and others all require Google Play's tracking services (aka gapps).

For YouTube there's multiple better alternative open source apps available, and mastodon, amethyst and the fediverse apps on f-droid are far superior in terms of performance to the Google Store alternatives.

Thinking that there is such a thing as an infallible hero or idol is a fool's belief. Noam Chomsky can be right in some parts, and wrong in some other parts. Everybody is, that's kind of the point of our species.

What about the Antichrist guy that allegedly took down 4chan because they came after him/her?

Go outside, touch grass and trees.

The internet, smartphones, social media, all want your attention by bombarding you with information. Too much information to process.

You need to go outside in nature, go hiking, do some sports outside, read a book, have a picnic.

Everything in life is about balance, even with technology consumption.

Great! Go make a pull request, that's the power of open source.

Regarding SSL: just make sure you are using macOS 10.9.3, earlier versions (all of them, and I mean, all since the 80s) never had a working SSL implementation.

For more, read about the GOTO FAIL bug: https://nvd.nist.gov/vuln/detail/cve-2014-1266

By definition, transformers can never exceed average.

That is the thing, and what companies pushing LLMs don't seem to realize yet.

I dare you to do the following:

Charge phone to full 100%. Turn it off.

Put it into a faraday cage, e.g. a steel box, for 7 days.

Take it out again and wonder why the battery is empty.

(The faraday cage has the effect of making the modem have to switch bands constantly, which costs more electricity than sleep mode in LTE)

Buy a broadcom smartphone. Turn bluetooth off, and set it to airplane mode. Then Bluepwn your device, with bluetooth turned off.

Funny how airplane mode didn't work.

That's just one of the quirks. Baseband and what qualcomm is tracking is way worse.

I recommend buying an old Motorola Calypso device and fiddling with osmocomBB, you can DIY an IMSI catcher pretty easily. And you'll be mind blown how many class0 SMS you'll receive per day, just for tracking you. Back in the days you could track people's phones remotely but the popularity of HushSMS and other tools made cell providers block class0 SMS not sent by themselves.

This wiki article is a nice overview: https://github.com/CellularPrivacy/Android-IMSI-Catcher-Dete...

While I like the sentiment of the article, I think most people are not aware of how hostile baseband firmwares are implemented on most SoCs that phones come with. Usually the cell tower handshakes that make you trackable can't be put off, meaning the modem will run in sleep mode even when you are in airplane mode (which is kinda funny considering the dangers of air travel, right? Right?).

Are there actually smartphones without an IMEI and with a Wi-Fi card only, preferrably not a Broadcom one?

Our species is called hu-man for a reason, which means "being that forgets".

And this will be the achilles of our future generations.

> Stop spreading terrorist's propaganda.

By your logic, every single human inside a country must be a terrorist. And therr must not be a single exception to the rule, right?

So what, Hamas has a 2 Mio terrorists army?

Are you really this radical? How about just not killing civilians, because they don't have anything to do with the warring parties?

Wait until companies realize that they will have to pay on the double for education soon, because nobody's gonna be able to hire unqualified people from within the US.

I suggest a monster truck derby battle.

And we'll call it "Rehabilitation"

This action assumes that LLMs know what they're coding.

They don't, that's why we need the PR in the first place.