henfredemars
127
7871
henfredemars

@infosec.pub

This is a secondary account that sees the most usage. My first account is listed below. The main will have a list of all the accounts that I use.

henfredemars@lemmy.world

Garbage: Purple quickly jumps candle over whispering galaxy banana chair flute rocks.

henfredemars 77 points 4 days ago

The algae multiplied. Who could have predicted they would do that? It was an entirely novel strategy.

path: 0 24332110, hotness: undefined, score: 77, children: 4
henfredemars 21 points 6 days ago

One has to wonder if he expected Iran to fight back, if he was naïve enough to assume they’d simply roll over.

path: 0 24300186, hotness: undefined, score: 21, children: 5
henfredemars 13 points 6 days ago

Might have thought the Epstein files would have something to do with it.

path: 0 24300270, hotness: undefined, score: 13, children: 1
henfredemars 426 points 2 years ago

Repeat after me: I will not federate with any Meta products.

path: 0 8643054, hotness: undefined, score: 426, children: 60
henfredemars 408 points 2 years ago

Hey guys I know it’s wild but there might be some corruption going on in the Supreme Court.

path: 0 12381133, hotness: undefined, score: 408, children: 27
henfredemars 376 points 2 years ago

You do it because it makes an attacker’s life harder because now I have to find two bugs instead of one.

The entire boot chain of the phone up to the apps you run are verified successively by the component that loads it. A digital signature helps ensure that only trustworthy code ever runs. A bug must be found to bypass these checks to load malware code. For example, a bug in the image code in a web browser might cause loading of code that isn’t checked. This way the malware gets smuggled onto the phone.

This means that if you get hacked via one bug and malware is loaded, the attacker has to work harder to solve the problem of how do I convince the phone to load it again at boot because the code it’s made of isn’t going to be approved code. When you reboot, you are effectively forcing a validation that all the code you have running is authentic, which would exclude the malware. Trick me once sure, can you survive a full pat down? Probably not. It’ll get caught.

Unless I have a second bug to fool the normal code loading systems too, the malware can’t run. You have to go back and trigger the first bug again somehow, which places more strain on the attacker.

path: 0 10376483, hotness: undefined, score: 376, children: 31
henfredemars 326 points 5 months ago

Alex Pretti was murdered.

Say it with me. This was no “shooting.”

And it’s going to keep happening again and again.

path: 0 21746735, hotness: undefined, score: 326, children: 12
henfredemars 311 points a year ago

If your website only works with Chrome, it’s not a website. It’s a Chrome site.

You didn’t design for the web. You designed for Chrome.

path: 0 14693016, hotness: undefined, score: 311, children: 38
henfredemars 307 points 3 years ago

Don't assume ineptitude.

I've been in the position of being asked to implement an anti-feature. I made it take as long as possible to drive up the cost and designed it to be trivially bypassable because I'm not motivated to intentionally trash my own project.

path: 0 4379997 4382319 4384843, hotness: undefined, score: 307, children: 23
henfredemars 291 points 8 months ago

I will continue to enjoy my incredibly straightforward and to the point Linux desktop that’s somehow gained a new AI-free feature by doing nothing.

path: 0 20069379, hotness: undefined, score: 291, children: 31
henfredemars 288 points 3 years ago

What Reddit fails to understand with their decades of industry experience and 2k employees is that without their users, they don't have a product. Moderators work for free. Creators work for free. These people didn't do it for Reddit. They did it for you and me.

And then like three developers in their spare time ate their lunch.

path: 0 1000173, hotness: undefined, score: 288, children: 44
henfredemars 259 points a year ago

In IT it’s called the scream test. You unplug it and see who screams.

path: 0 14844032, hotness: undefined, score: 259, children: 12
henfredemars 257 points 2 years ago

I asked my wife if she thought I was autistic. She was surprised at the question because she specifically sought an autistic spouse and had been operating under the assumption for no less than five years.

path: 0 11050042, hotness: undefined, score: 257, children: 14
henfredemars 256 points 2 years ago

He sucked 100 dicks and with that knowledge and experience in the end he finally chose hers.

Remember that.

path: 0 12575833, hotness: undefined, score: 256, children: 12
henfredemars 251 points a year ago

Do not visit the USA. Just don't. Spend your money elsewhere for your sake and for our sake. It's no good to anybody for you to spend it here right now.

Go visit Canada. Nice people, beautiful country this time of year. And they won't disappear you. I know because the Canadians have always been our good friends. It's very sad how they've been treated.

path: 0 17569360, hotness: undefined, score: 251, children: 1
henfredemars 244 points 8 months ago

I’m deeply proud of Python for standing by its community and making the right decision.

path: 0 20195581, hotness: undefined, score: 244, children: 0
henfredemars 242 points 3 years ago

Nobody here seems to understand the real technical purpose of this feature, so let me try to explain what's really happening.

Android applications and much of the system are written in Java. In the beginning, this decision was made because it provides portability at least in theory and the language was familiar to developers, but this decision wasn't without its disadvantages. This extra layer of the Java virtual machine led to laggy user experiences and increased memory use in the very first versions of Android.

The first attempt to fix this problem was the Dalvik runtime. This first solution incorporates a tracing style just in time compiler that translates Java into native code as it runs. An Android Kitkat, ART or Android runtime was introduced as a developer option and later became the default which offers full compilation to native code at install time. This led to a really long system update process and some complex apps took forever to install, so in Nougat Android moved to a hybrid design that only pre-compiles the most important parts of the application. This saves install time and system update time while still getting good performance by pre-compiling to native, and we fall back to JIT if unexpected code becomes a performance bottleneck when the user is actually using the app.

But which parts do we pre-compile? How do you know what code actually matters to the user experience?

This dialogue in Play is about sharing runtime information about which code was actually executed. Google aggregates this information so that when users install an app they also receive a file describing which parts are most commonly used and actually matter to performance so the system can focus on pre-compiling only this specific subset. Namely, this data is which classes and methods are expected to be hot, with special attention paid to the ones required to initialize the application.

From a technical perspective, I don't really see how this places private user information at risk, and I agree that it needs to be the default for this design to work because most users aren't savvy enough to understand what it actually does. Google tried to simplify it is much as possible in this dialogue, but it's led to a lot of confusion especially for more technical users.

path: 0 5944414, hotness: undefined, score: 242, children: 17
henfredemars 232 points 2 years ago

A moment of silence for the company that once connected hobbyists with affordable hardware. It was never perfect, but the profound impact on makers and industry is undeniable.

I will remember you for what you once were, not what you came to be.

path: 0 10581242, hotness: undefined, score: 232, children: 0
henfredemars 229 points 2 years ago

Valve is a Titan doing incredible work for the open source community and making money while doing so.

Successful open source software business model at work. Way to go.

path: 0 12603916, hotness: undefined, score: 229, children: 94
henfredemars 224 points 2 years ago

Good to hear, but if you weren’t voting to oppose obvious fascism before, you’re not a very good/informed citizen.

path: 0 11357460, hotness: undefined, score: 224, children: 60

thanks for using Leebra!

go to feed...