Perhyte

joined 1 year ago
[–] [email protected] 3 points 2 months ago (4 children)

I don't think so, no.

Leaving aside the fact that I don't want to do that:

They've quite sensibly vendored my library, so I'd have to hope they pull in updates without checking the code changes: since it's such a tiny library (excluding tests but including fairly extensive comments, it's less than 100 lines of quite readable code) I don't think it'd be easy to get it past their code review system if I tried to sneak in enough code to take down entire companies.

Also, my GitHub account is tied to my real-world identity, so I'd probably be in a lot of trouble if I somehow succeeded.

[–] [email protected] 47 points 2 months ago (10 children)

For MIT, why do you care? That's perfectly fine and explicitly allowed by the license. Same for Apache, but with a few extra requirements (like keeping a list of changes in the source code and preserving licensing information etc.).

As for how I know big corporations are using my code: the fact that a prominent project (publicly used by several tech giants) took a dependency on one of my tiny (permissively licensed) library packages is probably a clue.

[–] [email protected] 15 points 2 months ago* (last edited 2 months ago)

[EDIT: removed now that the original is fixed]

[–] [email protected] 1 points 3 months ago (1 children)

And MATLAB appears to produce 51, wtf idk

The numeric value of the '1' character (the ASCII code / Unicode code point representing the digit) is 49. Add 2 to it and you get 51.

C (and several related languages) will do the same if you evaluate '1' + 2.

[–] [email protected] 3 points 3 months ago

Fun fact: apparently on x86 just MOV all by itself is Turing-complete, without even using it to produce self-modifying code (paper, C compiler).

[–] [email protected] 3 points 3 months ago* (last edited 3 months ago)

It's the right-most one, partially hiding behind the T in HEIMAT.

[–] [email protected] 2 points 3 months ago

If there happens to be some mental TLS handshake RCE that comes up, chances are they are all using the same underlying TLS library so all will be susceptible…

Among common reverse proxies, I know of at least two underlying TLS stacks being used:

  • Nginx uses OpenSSL.
    • This is probably the one you thought everyone was using, as it's essentially considered to be the "default" TLS stack.
  • Caddy uses crypto/tls from the Go standard library (which has its own implementation, it's not just a wrapper around OpenSSL).
    • This is in all likelihood also the case for Traefik (and any other Go-based reverse proxies), though I did not check.
[–] [email protected] 23 points 3 months ago (10 children)
[–] [email protected] 8 points 3 months ago (1 children)

This is probably the only type of rules violation that could be fixed by creating another account, so this was exactly my thought.

[–] [email protected] 6 points 3 months ago

Then they probably wouldn't say it was okay to make another alt though.

[–] [email protected] 3 points 4 months ago (1 children)

No standard abbreviation exists for nautical miles but definitely don’t use nm because newton metres

Since as you mentioned Newtons are N not n, Newton meters are Nm. nm means nanometer.

view more: ‹ prev next ›