> Bad secret hygiene—we had secrets sprinkled in source control, in plain text in build systems and available through settings screens in the application
But here's the thing: When an attacker gets privileged access to code that is not normally exposed to untrusted input, they'll be able to gain kernelmode access quite quickly. They're then one option ROM away from persisting on the server and staying dormant for a year or two before going at it again.
Oh sure they're better than for most large sites with complex APIs
Probably because they have a gigantic talent base to draw off of.
But now that SE source code is available underground, it'll make attacks against the network a fair bit easier (because, oddly enough, SE doesn't open source their stuff and allow others to help them fix bugs for free).
Right now I'm using WSL2 because I got a new monitor and couldn't get fractional scaling to work well on Linux. It's probably possible to get it to work, but it didn't when I tried it originally
It is Debian, administered by an in-house team of developers at a company with...quite a lot of Linux machines in its fleet. And yet, my desktop still randomly crashes coming out of suspend.
Suspend is a lottery on Linux, on some hardware it works, on other it just doesn't reliably. I can't blame Linux too much for that, the fault lies mostly with the hardware
I had bluetooth working on my Win10 machine. Then windows did update to improve stuff. Part of the improvement was bluetooth no longer working. Black magic it is.
@Luuklag Our top 3 (even combined) don't beat The Answer Man of Stack Overflow (not who you might think it is) who earns 2.5x+ the maximum daily reputation - every day:
@Rob I't won't be long untill he surpasses Jon, He scores about 150-200 rep more a day. That would only take him about 145K/ 175 = 829 days, as a very conservative estimate
@rene wasn't too bad, my fiber optics was broken. But Tele2 had to call KPN to get it fixed, as they lease their network aparently. But then I should get an SMS with a phonenumber to call to schedule an appointment.
But I didn't get any text message, so I called again, and asked if they could ease me and my wifes mobile internet limit, so we can use our hotspots, and they got that sorted quickly, so now I enjoy a month of unlimited data.
And turned out that I didn't get a text since it appeard to be a problem at the KPN centre in our neighbourhood, to which a mechanic was already on route, and my internet was fixed in the meanwhile
@Luuklag well, I must say that I have pretty lucky with my connection and up-time. But lasttime I had a problem the phoneline (and adsl) were out-of-order for two days).
People can set their own autoflag conditions, and typically posts don't get hit with flags unless they have >~140ish weight and at least 2 or 3 reasons.
With regards to the discussion about "Trenbolone," it was added to the blacklist because of 23 true positives in the past.
So... Just bad luck with choosing a username in this case. We can add 'em to the whitelist so they aren't caught for having a weird username again tho ;D
Yeah, it's messy :( Wish you'd have known earlier that timezones were a thing for this round... on the other hand, I do hope that if there's another one that doesn't mention them, you at least poke some people to see if that's true :P
