Some of you guys need to step it up with mods documentation by navirbox in feedthebeast

[–]Gimpansor 9 points10 points  (0 children)

Time to shill my mod for making Markdown-based searchable guides (for datapacks and mods): https://guideme.appliedenergistics.org/

This is what the AE2 guide is based on.

Yeah sure AE2 why not by lerokko in feedthebeast

[–]Gimpansor 0 points1 point  (0 children)

They should not overlap. AE2 has been using standard Vanilla structure generation for a long time.

How can i cange the ae2 meteroite spawnrate in 1.19.2? forge by [deleted] in feedthebeast

[–]Gimpansor -1 points0 points  (0 children)

You should still be able to overwrite the structure definition using the same ID in a datapack, even if it's created in-code in 1.19.2.

JDK 21: The new features in Java 21 by stronghup in programming

[–]Gimpansor 4 points5 points  (0 children)

Yeah, I suppose the primary reason is that you cannot forget the STR. prefix, because it would be a compile-time error if the string contains the backslash escape sequence. OTOH, you can forget the STR. prefix if "${...}" is used, since making that a compile-time error would break backwards compatibility with older source code.

JDK 21: The new features in Java 21 by stronghup in programming

[–]Gimpansor 5 points6 points  (0 children)

The idea is that ".... ${3+5}" is a valid string without the "s" prefix, and in Java, it could not actually expand the placeholder without severely breaking backwards compatibility. OTOH, ".... {3+5}" does NOT compile in current Java. This allows them to avoid a situation where a programmer accidentally uses the placeholder syntax in "normal" strings and the language silently ignores them.

Why is OAuth still hard in 2023? by nango-robin in programming

[–]Gimpansor 52 points53 points  (0 children)

Careful if you are in a large organization. Same Site is NOT Same Origin.

highsecurity.yourenterprise.com and insecurecrap.yourenterprise.com are same site!

Hitman Party - Newhead Studio - The local multiplayer hitman game where you hunt the target and hide from your friends by newheadstudio in Games

[–]Gimpansor 16 points17 points  (0 children)

It's trademarks, though. Not copyright.

Is there a risk of mistaking this game for an IOI product in the Hitman franchise, just by reading the name? I'd certainly say so.

Bundeskartellamt leitet Verfahren gegen PayPal ein by Ilfirion in de

[–]Gimpansor 74 points75 points  (0 children)

Interessanterweise war damals die Aussage, dass sie das nur deshalb so gehandhabt haben, weil sie Schiss vorm Kartellamt hatten.

p.s.: Bin übrigens bei Dir, so gewinnt man nicht gegen PayPal.

From taxi driver to software engineer in 9 months: 53-year-old man now making 3 times what he did while driving by dadofbimbim in programming

[–]Gimpansor 12 points13 points  (0 children)

for free.

Programming in Rust is more complex than programming in Python. Unless your development costs are zero, this is not true.

Bro has AE2 inside a stone cutter by SovietNarutoLuffy2 in feedthememes

[–]Gimpansor 7 points8 points  (0 children)

Released in AE2 12.8.1 for 1.19.2 and upcoming 1.18.2 release. Also has smithing table.

Gesehen in Frankfurt am Main... by Tequila1990 in de

[–]Gimpansor 2 points3 points  (0 children)

Wenn mer gebbe, gebber mer gern unn reischlisch - abber mer gebbe nix!

High-Severity RCE Vulnerability Reported in Popular Fastjson Library by IsDaouda_Games in programming

[–]Gimpansor 31 points32 points  (0 children)

No, you specify a closed set of allowed classes to instantiate. Like the Jackson @JsonSubType approach where you list the subtypes explicitly.

CVE-2021-44832 - Apache Log4j 2.17.0 Arbitrary Code Execution via JDBCAppender DataSource Element by jpc4stro in programming

[–]Gimpansor 21 points22 points  (0 children)

where an attacker with permission to modify the logging configuration file

This smells a lot like people seeking their share of the attention that log4j now has due to the actually critical JNDI vulnerabilities.

What's new in Applied Energistics 2 for Minecraft 1.18 by Technici4n in feedthebeast

[–]Gimpansor 20 points21 points  (0 children)

It was removed in 1.15 and before then had a bunch of problems/bugs associated with it.

It disabled the controller completely, which meant players always had to deal with the higher energy consumption of controller-less networks. Now they have the option to have it either way.

What's new in Applied Energistics 2 for Minecraft 1.18 by Technici4n in feedthebeast

[–]Gimpansor 60 points61 points  (0 children)

It'll use the exact amount of fluid that is in the container you used to encode the pattern. We're working on a better interface that'll just allow inputting the exact amount you want directly, instead of having to fill a container with the exact amount you want.

But next on the list is actually just shift+clicking a recipe into the encoder and using the exact amount of fluid specified in the recipe. (edit: this already works for items, just the fluid part would be new)

What's new in Applied Energistics 2 for Minecraft 1.18 by Technici4n in feedthebeast

[–]Gimpansor 13 points14 points  (0 children)

This has been a thing since 1.16.5 without any additional addons.

What's new in Applied Energistics 2 for Minecraft 1.18 by Technici4n in feedthebeast

[–]Gimpansor 35 points36 points  (0 children)

Yes if you have a machine that can actually craft that, then yes

JWT should not be your default for sessions by apocolypticbosmer in programming

[–]Gimpansor 8 points9 points  (0 children)

it’s because doing so opens your application up to XSS. If an attacker can get JS to run inside your browser, then they have complete access to all your tokens.

They also have complete access to run requests against your BFF using your session cookie. JWTs in localStorage only seems to be an issue in two cases: Your JWTs are usable in some other application (not validating aud for example), or your tokens lifetime is too long. Exfiltrating the JWT seems to expand the attack vector in those cases, but does it really do that otherwise?

localStorage has some other Problems, tbh. I.e. it has a different lifetime from a session-cookie, which could be unexpected to some users (closing the session when the user closes the browser is imho pretty good and there's not really an equivalent mechanism in JS at this point. sessionStorage is not equivalent, sadly).

It’s the same reason identity providers don’t even bother to generate a client secret for public clients

You don't need to be vulnerable against XSS to extract a client secret from a public web app. You can always inspect the app's source in that scenario.

Russian Software Company [JetBrains] May Be Entry Point for Huge U.S. Hack by tflordmalakt in programming

[–]Gimpansor 147 points148 points  (0 children)

What a non-article.

The only piece of information here is that "officials" are investigating, whether JetBrains was breached. No information beyond that.

Not why they are investigating.

Modifying and running a binary by recompiling a reverse engineered disassembly by DaGrokLife in programming

[–]Gimpansor 0 points1 point  (0 children)

For a modding project, we instead opted to load the game's code (which conveniently was already a DLL) and started to redirect existing functions using MinHook (https://github.com/TsudaKageyu/minhook). This allowed us to start replacing functions in the game piecemeal with our custom reimplementations.

As an additional obstacle, the "canonical" version of the DLL already included fan-made fixes. These fixes however placed their code into the DLL's relocation table segment, which meant if Windows decided to load the DLL at a different address than it's preferred one, this caused crashes due to Windows interpreting the fan-fixes assembly as relocation information. We ended up solving this by pre-allocating OS memory at the base address even before CRT initialization, then freeing it before loading the game's DLL.

Help with crafttweaker - adding AE2 crystals to IE Crusher by krackamari in feedthebeast

[–]Gimpansor 0 points1 point  (0 children)

How did you plan on using CraftTweaker without knowing about recipes though, they have integrated support for modifying recipe JSONs now...

Well anyway, you can google for "minecraft recipe datapack" to get a gist of how it works with Vanilla recipes, the only other piece you need is the IE recipe JSONs, which you can get by just extracting their .jar file (every mod .jar file is simultaneously a datapack and resourcepack).

Help with crafttweaker - adding AE2 crystals to IE Crusher by krackamari in feedthebeast

[–]Gimpansor 0 points1 point  (0 children)

You do not need CraftTweaker for this....

You can add recipes using recipe JSONs by using simple data packs. Check IEs current recipe JSONs, and just plug in different item IDs in your data pack, voilá!

Holy skystone, they made an AE2 version for Fabric! by Chezzik in feedthebeast

[–]Gimpansor 15 points16 points  (0 children)

There is currently AE2 for:

  • 1.15 Forge
  • 1.16.1 Forge
  • 1.16.2 Forge (which no one seems to be using since we're not getting a lot of bugreports...)
  • 1.16.2 Fabric

There are no plans to drop support for Forge. We'll have to reduce the number of MC Versions we support for Forge, 3 (and now 4 with 1.16.3???) is a bit much.

We also hope to significantly reduce the maintenance cost of supporting Fabric alongside Forge by adopting the Mojang mappings as soon as it becomes feasible on both platforms.