HackerTrans
TopNewTrendsCommentsPastAskShowJobs

zirak

no profile record

Submissions

React2shell: CVE-2025-55182 Technical Breakdown

miggo.io
1 points·by zirak·7개월 전·0 comments

comments

zirak
·2개월 전·discuss
ok I'll bite - what do you consider good music?

Music is a big part of my life and I've found great joy in discovering new music. To give it a start, here are some suggestions from across genres of good music written after 2010:

    - Classical:
      - David Bruce - Gumboots: https://www.youtube.com/watch?v=rRIDt_4Xloc
      - Anna Clyne - Masquerade: https://www.youtube.com/watch?v=wEOchchAuWk
    - Jazz (one of my personal favourites, and too many subgenres to count):
      - Ai Kuwabara - Bet Up: https://www.youtube.com/watch?v=tgyCpJ9FxCU
      - Brad Mehldau - Everything in Its Right Place: https://www.youtube.com/watch?v=omF16-qbmeM
      - Kamasi Washington - The Magnificent 7: https://www.youtube.com/watch?v=NCnP5Z7Vn1E
    - Prog, metal, & friends:
      - Porcupine Tree - Dignity: https://www.youtube.com/watch?v=Z3UhjiXG5m0
      - Haken - Falling Back to Earth: https://www.youtube.com/watch?v=adHGrSP43QE
      - Tigran Hamasyan - Drip: https://www.youtube.com/watch?v=z7j7bdEPSd0
      - The Ocean - Into the Uncanny: https://www.youtube.com/watch?v=hrpf51-WfH8
      - The Dear Hunter - Magic Beans: https://www.youtube.com/watch?v=N8i19Lsw34M
    - Funk
      - Vulfpeck - Back Pocket: https://www.youtube.com/watch?v=yG96RttfZtM
    - Pop rock
      - Hannah Gil - Austin: https://www.youtube.com/watch?v=vr64XFAMANY
      - Melt - Sour Candy: https://www.youtube.com/watch?v=Z133wUm-WZ0
      - Follies & Vices - Red Wine: https://www.youtube.com/watch?v=PdaU_NkUWBI
      - Sammy Rae & The Friends - Good Life: https://www.youtube.com/watch?v=-vCdmd99Cx8
    - Punk & punk rock:
      - Father of Peace - Enemy: https://www.youtube.com/watch?v=wcfO9ENSYAQ
      - Turnstile - BIRDS: https://www.youtube.com/watch?v=s_qhk_sqr5w
      - Local H - TURN THE BOW: https://www.youtube.com/watch?v=eBtXJbgNCkA
...and uncountable others. What's your groove? I'm sure it can still be found out there!
zirak
·6개월 전·discuss
The US uses them more pervasively it seems, but there's still remnants of it elsewhere.

The UK uses them for post-conviction monitoring in certain offenses: https://www.gov.uk/government/publications/police-crime-sent... ...and there's more than one British polygraph group: BPA and BPS (https://www.britishpolygraphassociation.org/, https://polygraph.org.uk/)

Australia did indeed reject the polygraph for security clearance: https://antipolygraph.org/blog/2006/10/19/australian-securit...

Canada however does seem to use it as part of their intelligence screening: https://www.canada.ca/en/security-intelligence-service/corpo...

> Do I have to go through the polygraph test to join CSIS?

> Yes. All CSIS employees must obtain a Top Secret security clearance and the polygraph is a mandatory part of the process.

Seems to be the same for CSE and to get "Enhanced Top Secret" clearance.

Back to the US, the Department of Labor says that private employers can't force people to undergo a polygraph test: https://www.dol.gov/agencies/whd/polygraph But of course this does not apply to public sector jobs, where it's used more pervasively.
zirak
·3년 전·discuss
A friend who works there reported that there's currently no theremin. It seemed to have been someone's personal theremin, and they took it with them when they left.

However, it sparked an interest in having a theremin - so perhaps it'll make a return!
zirak
·3년 전·discuss
They went from A to B (exact magnitude of change is of course part of the criticism):

         |------------B---A---|
    anti-user              pro-user
Is Mozilla still, currently, a failure at their job?

---

These kinds of discussions are frustrating to me since it feels like we've been dealt a very bad hand. But it's not just this hand, the dealer is firmly set on us only receiving bad hands in any game we play.

Like in a card game, this is the only hand that we'll get. What other corporation do we have to push these kinds of values? What other avenue do we have? It's sad that we've come to this situation, but if the choice is the currently perceived-to-be-failing Mozilla and no Mozilla, I pick the failing Mozilla.
zirak
·3년 전·discuss
How do we define "failure"? Let's say we can measure how much Mozilla fights for the user and put it on a scale:

         |--------------------|
    anti-user              pro-user
Where on the scale is "failure"? Let's say Mozilla is on the M, and Google is on the G:

         |----G-------M-------|
    anti-user              pro-user
Is Mozilla failing?

The sentiment I seem to see is that anything short of perfect is failure.
zirak
·4년 전·discuss
Maybe Linus wants to work on his laptop and not the cloud, because that's just the way he wants to work. And he wants an M1 / M2 because he likes something about them.

That doesn't feel very controversial, someone wanting to work the way they want to and not some other way.
zirak
·4년 전·discuss
The data this article quotes doesn't smell right.

The tables and graphs in "The Performance Problem" section should at least feel a little strange. Looking at the original article[1], we can see the source code for JavaScript [2], Python [3], and .Net [4] shows that...there just isn't much going on here. This isn't a comparison of how fast these are. It's a comparison of how fast this AWS setup could do its thing, and how fast this DynamoDB client library is.

In the "So Why/Not .NET?", there's the "Advisories by package ecosystem and severity"[5] graph. So it doesn't feel a little strange that NuGet is the pinnacle of software engineering, and programs there just have no security vulnerabilities? Or maybe...there's some bias going on here, and NuGet isn't as interesting to look at as PyPI, so there are fewer advisories being published? That's another way to look at it.

When things look too good to be true, maybe they are. I don't care if the author (or anyone else) wants to use .Net, have fun. I do care that we sometimes approach technological issues with hostility and rivalry, accepting random data which seem to support us without looking them through.

[1] https://filia-aleks.medium.com/aws-lambda-battle-2021-perfor... [2] https://github.com/Aleksandr-Filichkin/aws-lambda-runtimes-p... [3] https://github.com/Aleksandr-Filichkin/aws-lambda-runtimes-p... [4] https://github.com/Aleksandr-Filichkin/aws-lambda-runtimes-p... [5] https://octoverse.github.com/static/github-octoverse-2020-se...