domenukk

There is also cargo make which, at least in rust land, serves a similar purpose. https://github.com/sagiegurari/cargo-make

I ended up using it over just because it felt easier to use cross platform, and toml seemed like a right choice

FWIW, ArrayList is a List, backed by Arrays.

So List would have been the more Java/Zig way to name it (also Python, etc.)

I've seen projects like this in the past - either you have skilled people and use a strict CSP from the start, or the footguns of dynamiically crafting objects ultimately leads to a bunch of XSS that (probably) wouldn't have happened with mature frameworks

It runs an Android userspace on the host kernel, inside a container

What about flutter apps?

To be fair, a trait gets you 98% there. It can have default implementations for most functions, you just overwrite the ones you want to change. You'll still need to declare the underlying struct though, so a bit of extra code

Machine in the Middle or Malice in the Middle are better options imho

There is afl-rs https://github.com/rust-fuzz/afl.rs also we're working on a fuzzing library that's completely written in rust right now, stay tuned :)

Why not have multiple with different strengths for different users, though? Honggfuzz is also really good. That being said, most distributions replace afl with afl++ these days.

Maintainer here, happy to hear that! Doing our best :) Even Google's own OSS Fuzz switched to afl++ recently (https://google.github.io/oss-fuzz/)

And that solves double frees through ___?

The pie chart's legend in this post is sorted largest number to smallest number, if that helps. Or as table:

Buffer overread: 22 Buffer overflow: 20 Use After Free: 4 Double Free: 3 NULL mistake: 2

And exploits

Bitwarden supports faceunlock -> all apps with pin support face unlock. Solved.

Yes, LTE makes heavy use of ASN.1, too - the parsers are an interesting target indeed (and some of the fuzzed ones referred to in the paper are such parsers). Although these days, ASN.1 usually get auto-generated so the attack vector is not as large anymore. More interesting can be the places where parsed structs then get processed afterward.

Tried to set up a Kubernetes cluster with IPv6 the other day. These hipster tools don't care about IPv6 :(

PSA: In VIM ctrl-c does the same as ESC. No need to remap of you relearn.

Throwing r2 Cutter in the mix..

As opposed to Quantum? https://www.techrepublic.com/article/mozilla-and-qualcomm-un...

This leads to anti-minority laws like Minarett-Verbot (minarets can no longer be built due to this law) etc.

Inbox loads instantly and continues loading, GMail takes up to 10 Seconds in Firefox on a pretty decent machine...

Similar story here. My account wasn't stolen but merely used by a bot to send out spam to my business contacts. Afterwards the account was locked for good... What?

however I would skip j as it is too similar to i. Use k instead.

Also new to MacBook Pro is the Apple T2 chip, first introduced in iMac Pro. With the Apple T2 chip, MacBook Pro now delivers enhanced system security with support for secure boot and on-the-fly encrypted storage, and also brings “Hey Siri” to the Mac for the first time.

Boring security stuff, boring security stuff, oh, and Hey Siri Support! Now that is really what the world has waited for.

Hyper is the only proper terminal emulator on Windows. Time to upgrade.

Have you used it recently? It works pretty well (?)

A paper about N26 Security https://www1.cs.fau.de/filepool/projects/n26/n26-roots.pdf

Hello, our friends at MITRE have assigned CVE-2018-8740 to an issue in SQLite3 that was discovered by OSS-Fuzz working on GDAL. http://seclists.org/oss-sec/2018/q1/244

I used to love https://symless.com/synergy which includes this feature (if I recall correctly) Pretty useful at times.

Esperanto would be nice