Fortunately Windows is at least protected from gaining elevated privileges since it still has to go through UAC. I hope nobody discovers some vulnerability called something like “desktop2shell”.

The last time they got into it, Cpl Punishment had to get involved.

Yes, it was a stroke of genius to label their mediocre confectionery as “coffee”, although it can lead to near fatalities when someone who’s only ever had Starbucks encounters real coffee for the first time.

Still, my point stands. That website is like 20% useful content, 40% flair, and 40% wasted space.

That website is atrocious. It’s the web design equivalent of shoving five kilograms of sugar and whipped cream in a cup of coffee.

I might be able to snag that same model with an i5-6500 for around 60€. Could you tell me more about your experience with it? In particular, how are the thermals and the power consumption, can it handle 1Gb/s on both ethernet ports, and have you encountered any compatibility issues with OPNsense?

You. Are. Late. (mongolian throat singing intensifies)

Since your last post here, a new rule has been introduced. You must disclose AI usage in both the title and in the post body.

It’s still used because momentum is a powerful factor. That doesn’t make PHP better, but it can make it a more expedient choice.

PHP is a preprocessor that grew too big for its britches. It’s a monolithic monster that runs only one thread per request in an interpreter. It works well enough if you need to manage the data of an internet forum, but it becomes increasingly unsuitable as the task’s complexity grows. If you need threading or background tasks, or if scalability is important, PHP is not it; just read any number of Nextcloud vs OpenCloud comparisons.

Or, if you spin it another way: you could’ve picked up the skills to develop for and support various frameworks, or get stuck in a rut for 30 years with just a single antiquated server-side language.

Inevitably there would be some incels who claim that speaking to women like normal human beings is an attempt by the matrix to emasculate men.

Fuck me, if my choice is between five flavours of Javascript, I’d rather use PHP. I’m developing a QML application and having to work around that abomination that the clinically insane want to call “arrays” in Javascript makes me want to fucking die. There’s also a QList type implemented by QML. It doesn’t help. Array.isArray(qlist) returns false.

Yes… but no. You probably saw a rendering error.

The private keys in question were only eight bits in length (decimal values 0 to 255). A proper key for the specific encryption should have been 384 bits, or about 116 decimal digits. If a string format function expects a 384 bit number, but only receives 8, it might fill out the missing places with zeroes.

Four… Fucking… Pixels?

The working hypothesis is that this was some sort of debug or test key that was never meant to be used in production, being used in production.

The encryption that SSL/TLS provides (that puts the “secure” in HTTPS) uses a public–private key pair and a specific mathematical function. Generating the key pair requires a cryptographically secure random number that is impossible or very difficult to guess, which must be kept secret at all times. If this random number is leaked or guessed by a malicious actor, the private key can be reconstructed and used to impersonate a website or break the encryption.

The security of the encryption comes from the fact that the function is easy to calculate one way, but difficult to calculate its inverse. To demonstrate: multiplying the prime numbers 88117 and 44543 is easy, but the inverse, factorizing the semiprime 3924995531, is extremely lengthy in comparison.

One of the factors that determine the security of the key is the size of the number, i.e. the number of digits. In this case, a proper key should’ve had a length of 384 bits (or 116 decimal digits). In reality, the keys that eMudhra used had eight bits, which can only represent 256 possible values, and can be easily guessed even by brute force. The specific private keys were the numbers 4, 56, 66, 115, 155, 156, 230, and 237.

Currently having a very fun day at work.

Fortunately our own certificates are unaffected, but it’s the autumn break and most of the staff are absent and incommunicado.

No, we were taught about HTTP, the fundamentals of hypertext and how it gets rendered, how embedded code (Flash at the time; yes, I’m old) runs in the browser, and the concept of the digital footprint. The cybersecurity implications were obvious.

Actually, I have to correct myself. Some of this was taught in the 7th or 8th year of primary school, around ages 12-14. I was fortunate to be born in a country, at the right time, where the public education system was still worth something. My heart bleeds when I hear of what goes on across the ocean.

Not me. Call me old-fashioned, but I prefer organic.

Literally none of that should be surprising for people who have a basic understanding of how the WWW works.

Which, I’m starting to realize, is a depressively low fraction of the general population. I was taught this in middle school, for fuck’s sake.

Blue check mark means the user already drank the kool-aid. No reason to assume they wouldn’t go back for a refill.

They removed almost every basic networking feature with a firmware update. Even in “expert mode”, all I can do is set up the wifi and pick a single /24 network from 192.168.0.0/16. I can’t even pick a goddamn DNS server. Unfortunately the other ISPs that serve my area are at least twice as expensive.