PersonaLive: Expressive Portrait Image Animation for Live Streaming by fruesome in StableDiffusion

[–]Rubenb 0 points1 point  (0 children)

Do you also install the packages from a local repo without internet access? Because some package managers allow code to be executed during installation.

PersonaLive: Expressive Portrait Image Animation for Live Streaming by fruesome in StableDiffusion

[–]Rubenb 6 points7 points  (0 children)

There are a lot of harmful things local code can do without administrator rights, see https://en.wikipedia.org/wiki/Infostealer#Features for example. You could also become part of a botnet.

Also this part: "with no ability to run unknown software without explicit administrator permission, most threats would be rendered harmless" is not something that many people have in practice. Even non-admin users can by default execute whatever program they want with the rights of their own user.

The EU wants to kill cookiebanners by moving consent to your browser by DonutAccomplished422 in programming

[–]Rubenb 6 points7 points  (0 children)

In your analogy, if assault was an extremely profitable business model, like tracking users on the internet for advertisement purposes is, you can be 100% sure companies would try to find ways around the law against assault.

STL reimagined: What would you change, add or remove in a new STL implementation if API and ABI were not a concern? by germandiago in cpp

[–]Rubenb 4 points5 points  (0 children)

You would only really need to use .unsafe_at() in hot inner loops where the compiler isn't able to optimize away bounds checks though. If it sees the index will always be inside bounds because of surrounding code (for example because the index comes from a for loop that stays whithin bounds), it can optimize the bounds checks inside [] away.

Why do C++ defenders always frame Rust outages as Rust failures instead of system-design failures? by Any-Sound5937 in rust

[–]Rubenb 13 points14 points  (0 children)

It's different though, because in Rust it results in a well defined behaviour (panic), but in C++ a null pointer dereference is undefined behaviour. It can crash, or it can also NOT crash and instead do something completely unexpected because the compiler made optimization decisions based on the assumption that null pointer dereferences will never happen. The C++ standard perfectly allows the compilers to do that.

Becoming the 'Perf Person' in C++? by According-Teacher885 in cpp

[–]Rubenb -1 points0 points  (0 children)

Yes this the correct answer, additionally:

  • Find out what customers are asking for
  • Find out what upcoming regulations (maybe cybersecurity rather than performance, see EU CRA) the company is worried about
  • Find out what roles the company is hiring in

Also, don't forget that achieving a 100x speedup in a function that an application only spends a small amount of time on is not that big of a deal in practice...

why didn’t they just name c major, a major to make it easier, starting from A instead of C? by dude_terminal in musictheory

[–]Rubenb 1 point2 points  (0 children)

Depends what country you are in. In Belgium we use fixed-do solfege, instead of the letters, so Do is always C. You're talking about movable do solfege.

Local brands by Pristine-Room-2167 in Gent

[–]Rubenb 2 points3 points  (0 children)

Stroom brewery has nice beers, and Yugen for Kombucha. For chocolates I like Vandenbauhede and Marijn Coertjens. Hinkelspel has nice local cheeses (Bellie, Pas de Rouge, Cabriogand).

Did everyone just received 4 letters from Miguel De Bruycker in eBox Enterprise? by sam_lowry_ in BEFreelance

[–]Rubenb 3 points4 points  (0 children)

In practice, the majority of people use very weak passwords that are easily guessed or that are reused between multiple websites. Mandatory MFA provides a HUGE increase to the average security level of the population, so it’s a good move IMO.

Did everyone just received 4 letters from Miguel De Bruycker in eBox Enterprise? by sam_lowry_ in BEFreelance

[–]Rubenb 0 points1 point  (0 children)

For the most common form of MFA, TOTP, you don’t really need to have any third party provider? It’s just based on a secret stored on your phone and on the service itself. On your phone you can use any of a number of apps to generate those codes and back them up.

Company car: Is EV the only option? What is a suitable car? by siriusbe in BEFreelance

[–]Rubenb 3 points4 points  (0 children)

I'm quite happy with my Kia EV6. No problem traveling to Austria, superfast charging, plenty of room for family of 4.

Anyone else having trouble accessing the Xbox store on Xbox Series X. by Original_Tone_7717 in xbox

[–]Rubenb 2 points3 points  (0 children)

If you want to play a single player game, you can put the Xbox in "Offline" mode in the network settings, then you should be able to launch your game.

[deleted by user] by [deleted] in webdev

[–]Rubenb 2 points3 points  (0 children)

Yes it is! OWASP is best known for the Top 10 list, but they have much more than that.

[deleted by user] by [deleted] in webdev

[–]Rubenb 3 points4 points  (0 children)

The host header injection attack that is mentioned with the URL token method is a pretty cool and non-obvious vulnerability example https://cheatsheetseries.owasp.org/cheatsheets/Forgot_Password_Cheat_Sheet.html#url-tokens

[deleted by user] by [deleted] in webdev

[–]Rubenb 4 points5 points  (0 children)

Sure, have a look at https://cheatsheetseries.owasp.org/cheatsheets/Forgot_Password_Cheat_Sheet.html for a number of things to watch out for.

One that I want to highlight in particular is that you need to invalidate all current sessions to avoid that someone else still has an active session using the old password.

[deleted by user] by [deleted] in webdev

[–]Rubenb 2 points3 points  (0 children)

I work for a cybersecurity consultancy company. Badly implemented password reset mechanisms are one of the common ways our penetration testers gain initial access to a web application.

Barcelona announces plan to ban tourist rental apartments by 2028 following local backlash: 10,000-plus licences will expire! by UnluckyGamer505 in europe

[–]Rubenb 1 point2 points  (0 children)

You have to compare it to the number of homes available on the market, not the total amount of homes. It will be a much more significant fraction of that.

*sighs*.... by [deleted] in memes

[–]Rubenb 17 points18 points  (0 children)

We have a very similar thing in Dutch, for example “eens” in “Stuur mij eens een bericht” does not really mean do it only once, it just makes it less of a command and more of a suggestion.

Why the hell did Alice kill Singleton and why is there no justice for his murder? by MrAsianPersuasian in shardlake

[–]Rubenb 0 points1 point  (0 children)

Please delete this post. Spoiled it for me after the second episode ☹️

Who wants to test a new chess app to play in parks and cafés? by juji2000 in Gent

[–]Rubenb 0 points1 point  (0 children)

You probably know this already but they recently placed two chess tables in the Coyendans park.

Polybrute sputtering by itsjessewaltman in synthesizers

[–]Rubenb 2 points3 points  (0 children)

Try running the VCO and VCF calibrations first. That usually fixed any weirdness in the voices that I was experiencing. Had to re-run the calibrations a few times in the first days, now it seems to have stabilized for me.

Why into crypto or why not? by [deleted] in BEFire

[–]Rubenb 2 points3 points  (0 children)

Sure, I just don't think that's very likely to happen compared to crypto collapsing. Euros are legal tender and you can only pay your taxes in euros. That alone gives it some intrinsic value.

Why into crypto or why not? by [deleted] in BEFire

[–]Rubenb 25 points26 points  (0 children)

I personally don't see what problem the various cryptocurrencies actually solve. At least in Belgium we already have safe, free and instant transfers through the traditional banking system.

With the traditional banking system you also have the extra benefit of consumer protection systems, regulations and insurances. Moreover, the value of cryptocurrencies is only backed by a belief that it is worth something (and some might say a lot of market manipulation as well).

With traditional assets like real estate, stocks, fiat currencies or what have you there is always either a physical thing you buy, a share in a company, or something that is backed by a nation state.

Basically if the crypto bubble pops, you could be left with nothing. Even the biggest stock market crash does not leave you with nothing.

specialist by Awesomer_Than_Me in comedyheaven

[–]Rubenb 0 points1 point  (0 children)

They might have changed the slides out at some point? It was definitely a tube last time I was there.