xuhu

It's not clear whether the first CVE (crash via OOB read) affects 1.0.1.

Browsers grudgingly support local MITM as an ugly half-ass solution, mostly because banks require it as part of their data loss prevention measures. Since there is no OS-provided API, there is no alternative that makes corporate clients happy.

Depending on the AV vendor, the MITM implementation will "give AV access to your SSL traffic" or "allow everyone to intercept it" (Symantec).

From the article: while the CM1 (which isn’t being obsoleted)

Why not make --with-filename default even for e.g. "rg somestring" ? That seems like it could hinder adoption since grep does it and it's useful when piping to other commands.

Is it enabled when you specify a directory (rg somestring .) ?

Does any of this apply to the way humans run ? The 400m winners seem to keep their core at the same height between steps whereas I needlessly jump up and down at each step, probably wasting a lot of energy while doing this. Maybe I can blame it on the genes.

Find a developer with spare time who uses GIMP and sell this feature to him.

The man from the article attended a common event with the other man who appeared on his friends suggestion list. Maybe facebook has a rule that if the event is small, the attendees can be assumed to have met IRL.

Just google-translated the word for them from my language (dobitoaca) to english, and it came out as 'beast'.

Picture your insurer scrolling through your browser history when you're renewing your health plan.

What's the difference between the 62.9 and the 43.9 groups mentioned in the article ? They're both "on the waiting list".

"After eight years, 76.5 percent of those who received an incompatible kidney were still alive, compared with 62.9 percent who remained on the waiting list or received a deceased donor kidney and 43.9 percent who remained on the waiting list but never got a transplant."

I guess it's time to order an Echo.

DROWN is CVE-2016-0800. There are a lot of CVE's in openssl's advisory released 10 minutes ago: https://www.openssl.org/news/secadv/20160301.txt

None are fixed yet of course in debian. And not in ubuntu either: http://changelogs.ubuntu.com/changelogs/pool/main/o/openssl/...

Jessie has 5 changesets on top of 1.0.1k which fix 14 CVE's:

http://anonscm.debian.org/viewvc/pkg-openssl/openssl/branche...

And similar for the other debian versions.

It was pretty bleak except maybe the last paragraph. "Perhaps this occasional tendency to keep friendships from getting too deep, and being willing to let them go [...] comes from the knowledge of how hard it is to leave people."

Wonder how they figure out the alignment size.

An F-PROT v2 with its virus descriptions running in em-dosbox would be an appropriate addition to those viruses: http://patraulea.com/fprot/

I have no idea what you mean. Doctors have been recommending flossing one's butt since forever. Bi-weekly at the least.

Spoiler: the homebrew solution didn't have WiFi. Unless your LAN is servers-only, how much of an option is no-WiFi these days ?

On a side note, eBPF seems to be the scripting language the kernel would never have, especially with support for compiling programs from C. I wonder why accessing pointers directly is allowed given the verification goals. Why not handles ?

To what degree are the power requirements on their faq still valid for the pi zero ? https://www.raspberrypi.org/help/faqs/#power

The question I really want to ask is, how long will a 1.2A supply last with nothing else attached to it ?

At the point where the author mentions tossing a book after getting halfway through it, I'm wondering whether reading only the first half of books might be a good idea for him.

The checkpointing part is the most expensive and error-prone (what happens to all the fd's that were closed and opened again since the last checkpoint ?).

Is the "flip malloc/synchronization/scheduling knobs" part being actively used in any existing project ? It's probably the most easy part to implement from the whole paper.

Sure Brain, but how much budget will there be for spare parts when these robot worms start producing mating signals in those neurons ? Because they will.

Blind fuzzing from their description (i.e. no coverage information).

Honest question: what guarantees that if the bug reproduced 10 minutes after a snapshot, it will reproduce again if you resume running nondeterminstically after that snapshot ?

I'll try compiling it on qt5/linux as well, thanks for tracking down the phonon issues!

I use this to replace noisy audio on a smartphone recording of dancing lessons with a high-quality version from a youtube video, automatically: http://youtu.be/AVIHpaNQLS0

Honest question: how does "4 weeks" fix it ? You still can't view one week in advance and one week after the start of each month.

Notification about not being to save someone else's scene keeps popping up after I hit Dismiss. I know I can't save but annoying nonetheless. Otherwise feels quite polished and impressive overall.

Blurry in firefox here, not blurry in chrome (win7, desktop lcd).