Ankit Pati

@ankitpati
53 Followers
168 Following
1.5K Posts
State. Science. Love.
Websitehttps://ankitpati.in
GitLab, GitHub, Bitbucketankitpati
GPGB8BB CEBC BD6C 4BF0 599C 40F9 360A 9642 9F7A 69DC
Twitter (archived)@nkitpati
Picard diversity tip: The fact that a crewmember looks alien to you does not make them any less of a Starfleet officer.
@ankitpati “reboggles” is a word that I made up to describe the concept independent of platform. after all, if you want to be that pedantic, not all my followers are on mastodon! 😂
okay, y’all passed, it’s been three hours and a hundred reboggles, and no-one has earned a one-way trip to the center of the sun by ever-so-helpfully informing me why the .gitignore isn’t actually literally 48 years old. gold star for mastodon 🌟
@_yossi_ probably what's going to happen is they're going to tell us to start with an internet connection and then disable it when the installation is finished. Which is a complication for us, because the offline machines we have specifically reserved for such offline requirements have been rendered physically and emotionally unable to connect to the internet
@0xabad1dea in the immortal words of Elvis Costello, "Oh, I used to be disgusted, and now I try to be amused."

'water is transparent only within a very narrow band of the electromagnetic spectrum,

so living organisms evolved sensitivity to that band, and that's what we now call "visible light". '

@georgetakei Think about how ignorant the average person is and reflect on the fact that 50% are less informed.
@whitequark Debugging isn't debugging before the "still can't explain the error within this set of axioms, so let's doubt those assumptions too" spiral reaches "Is it me? Am I even real? Who really is perceiving this error? Does my brain have a JTAG port?" levels of unhinged paranoia. The rest is just sparkling spellchecking.

@bagder

Version: latest version from git

ah yes. what a great version specifier

For educational purposes we disclose this recent hackerone report on #curl claiming its sprintf() implementation is bad because it can be made to deref a bad pointer when you use it incorrectly. You know, exactly how all sprintf() implementation work - by design.

This is not the first time we had this "flaw" reported. (I did not check the "AI slop" checkbox on this one)

https://hackerone.com/reports/2990139

curl disclosed on HackerOne: Format string vulnerability,...

## Summary: A vulnerability has been identified in the curl library’s formatted output functions (specifically in curl_msnprintf and its related functions). When a malicious (attacker-controlled) format string containing the %hn conversion specifier is passed, the function incorrectly attempts to write the number of characters printed into a pointer that is not provided by the caller. This...

HackerOne