aviCC

Wow if that's true and affects more websites, then it's super cool and huge

And a link, if you want to read the official blog post: https://salt.security/blog/security-flaws-within-chatgpt-ext...

Technical details: "The plugin does not authenticate the request, which means that the attacker can insert another memberId (aka the victim) and get a code that represents the victim. With that code, he can use ChatGPT and access the GitHub of the victim."

Invest money on companies who want to improve our life

https://platform.intervee.io/

Provides practical challenges with guidance for graduates in various subjects including Linux, Network, Security, and more..

Computer Science can sometimes be theoretical and learning from practical example is a must.

Actually, the CVE-2023-283131 vulnerability was published with the full details just two days ago. In April Expo published a short post but without too much technical information. You can find more details about CVE-2023-283131 in the link I shared here:

https://salt.security/blog/a-new-oauth-vulnerability-that-ma....

Thank you for bringing up the distinction, and I agree that OpenID can help address some of the issues, but not all of them...

TLDR: A direct link to the interesting technical information: https://salt.security/blog/a-new-oauth-vulnerability-that-ma...

Original article: https://salt.security/blog/traveling-with-oauth-account-take...

https://salt.security/blog/traveling-with-oauth-account-take...

Video: https://youtu.be/IK_AV1UFS-0

This is the link to the research, you provided a link to Reddit: https://salt.security/blog/traveling-with-oauth-account-take...

Makes sense. They are very useful as a monitor stand.

Lol, absolutely not

I use an 11 years old desktop computer, with a few upgrades (memory, SSD). It is good enough for my virtual machines and other heavy programs.

I don't see a reason to invest in a laptop if 90% of the time you work in the same place. For the other 10% - buy a cheap laptop.

I'm going to add a code design course to: https://platform.intervee.io/courses

with challenges that very similar to the problems you described. But it will take a few weeks to be ready.

For your question: Maybe they undervalue a well design code because it's hard to be measured. At the end of the day, you judge them based on their tasks and not quality. Try to give them a motivation to think like architects. What would happen if you ask them to be reviewed by a team member, before pushing it to your review?

Sounds great for Pool Roofing companies

Sorry, temporary bug with some function, please refresh the page

Advantages of this platform compared to other challenging sites:

1. For hiring: instead of only relying on the final solution, we analyze the entire solution pathway to get visibility similar to a frontal interview. (for example: where the candidate got stuck, how long each step took them, detect cheating using anomaly detection, and more)

2. A new experience: during the challenge, there is a virtual assistant (interviewer) that gives you hints when needed (for example, if it recognizes that you are stuck). This feature has a lot of advantages, both for practice(learning) and also for recruiters who want to give their candidates a full chance.

3. The challenges: most of the challenges are more realistic and simulate real day-to-day skills.

Take for example the challenge "repache" (https://platform.interway.ai/#/get/play_/ch/repache):

You get a web server with a "bug" in the configuration, and you try different ways to tackle it, while the virtual interviewer sees your progress and makes sure you are on the right track.

Thanks. Would appreciate feedback :)

I had this problem too as a team leader. Most of the time employees are aware of this bad decision but still want to make their own engine/library because it's more fun and they think they can get more credit by building their own library.

Instead of telling them what to do (nobody like it) try to give them a clear deadline for the whole project.