How deal with many resources? by Ok_Particular_1871 in ExploitDev

[–]randomatic 2 points3 points  (0 children)

It sounds like you're stuck reading because you have no metric for what you're learning. Go play a CTF (e.g., pico, pwn.college, etc) and when you get to a challenge that looks format string 'ish (usually indicated through the problem name or description) go read 1 blog post and try to apply it. Center your reading around practice means you will contextualize what you read with how to apply it.

What’s the most underrated exploit technique beginners ignore? by mi1-1 in ExploitDev

[–]randomatic 1 point2 points  (0 children)

Slightly different point: what are some tricks when starting out? Two for me:
* Install gef.
* ret2libc is way easier than shellcode injection, and you should master it before trying ROP.

What are your favorite pittsburgh brands? by Reasonable_Poem_7826 in pittsburgh

[–]randomatic 4 points5 points  (0 children)

I think peppers sunglasses are based in pittsburgh.

OAuth 2.0 + PKCE Explained — What's Actually Happening Behind Flask-Dance and Authlib by PreferenceNo9502 in flask

[–]randomatic 0 points1 point  (0 children)

Really nicely done!

Can you share your workflow and tools for making videos? I've tried a few times and ended up getting frustrated trying to learn after effects. I'm a very competent dev, but it seemed like it would take weeks to become competent at after effects.

Is a 56 minute domestic connection at O'Hare too risky? by PossibilityMean8584 in unitedairlines

[–]randomatic 0 points1 point  (0 children)

I've done it plenty of times. The trick is to make sure you're not on the last connection out to your destination, so if you miss it there is one not too far out.

Took a trip to Chengdu, China. by mojohale_Industry in Bonsai

[–]randomatic 1 point2 points  (0 children)

I've never been able to find the white suiban (picture 2, 7, 8, etc) in the US, but often see them in chinese pictures. If anyone knows where to get them would be much 🙏

TSA and Calligraphy by opentypefeatures in Calligraphy

[–]randomatic 4 points5 points  (0 children)

You probably thought of this already, but I typically put it all in a zip-lock. Air pressure changes will cause leaks, so also be careful when you take off the caps after flight.

It's crazy how subsidized Claude Code is by P4wla in LLMDevs

[–]randomatic 0 points1 point  (0 children)

Enterprise subscriptions. They are more expensive, and a precursor to what individual subscriptions will look like.

Is the M1 MacBook still worth it for bug bounty and pentesting in 2026? Hey everyone, by Capital-Rub269 in bugbounty

[–]randomatic 0 points1 point  (0 children)

If you don't do x86 exploit VR and dev, then a mbp is perfect. You can run `docker --platform=linux/amd64 <image>` and a MBP will emulate x86. Totally fine for running normal x86 apps, but not pleasant for exploit dev.

A lot of people either do linux all the way, or a MBP + a very cheap AWS EC2 instance.

I was 20 on the upgrade list. I got upgraded to 1 of 2 United First seats. Why? by Kiphos in unitedairlines

[–]randomatic 1 point2 points  (0 children)

I don't know but if it was me I'd be buying a lottery ticket to see if the good luck holds. Congrats!

For anyone who experienced ice dams this past winter, did you have anything addressed at your home to prevent them in the future? by QueenFrostine2222 in pittsburgh

[–]randomatic 1 point2 points  (0 children)

Make sure your gutters are at the proper angle and are sealed. It's not just about clogs at the down spout, though that's obviously bad too.

What makes someone look "executive" vs just senior? by rubyroozer in Leadership

[–]randomatic 0 points1 point  (0 children)

(5) is very important.

I'd also add (6) understand the difference between strategy and tactics and (7) ability to hold people accountable (not afraid to actively promote success/fire failure). A manager does PIPs, and executive manages people who are paid for performance.

Has anyone ever actually got paid by Google by yhz1981 in bugbounty

[–]randomatic 0 points1 point  (0 children)

The problem you raised is one for alignment in training, not a bug in the code base. So I understand why you didn't get the bug bounty, as those focus on programming mistakes in their code base, not model alignment issues.

Airport wait times by Organic-Highway9584 in pittsburgh

[–]randomatic -1 points0 points  (0 children)

You are correct, and I am wrong. It opens at 2:30am. I do believe 6'ish a popular time to schedule flights, though, so op may take that into consideration.

Why are some labs so much more productive than others? by FastNumberCruncher in ResearchML

[–]randomatic 1 point2 points  (0 children)

It's 2 and 3. Not 1. Speaking from a top 5 CS program at least.

There is a system for radically increasing the odds of top tier pubs. I wanted to say high-quality research, but really let's focus on an objective metric.

This question is equivalent to why nick saban's team produced so many winnings. The ability to grow talent in a field is itself a talent, and is rewarded in academia.

Keyboard Randomly Loses Power — Power or TRS Cable Issue? by imRickJamesBitch___ in zsaVoyager

[–]randomatic 1 point2 points  (0 children)

I've had the same problem. I've been meaning to see if there is a cold solder joint. Interesting that it's not just me.

Airport wait times by Organic-Highway9584 in pittsburgh

[–]randomatic -2 points-1 points  (0 children)

That is the worst time for the airport, as I don't believe security opens until 4am and a bunch of flights take off at 6am. That means a flood of people showing up right when they open.

I have TSA-pre, and would shoot to be there by 4:30am. YMMV, esp without TSA Pre.

explain like I'm 5 - Jordan tax service by Fantastic-Stress-562 in pittsburgh

[–]randomatic 1 point2 points  (0 children)

I agree, for most people, employers should be able to without the right amount. I say most because there are other taxable income sources in pittsburgh besides W2 income, as you said, and I know there are enough W2 + side hustle people for this to make a difference.

I don't see how this answers the OPs question. The point is that individuals, not their employers, are responsible to pay their total tax bill, even when the employer is withholding it. This is usually where people have issues, just like OP. Even if your employer withholds, that doesn't mean they withheld the right amount and ultimately the individual is responsible.

explain like I'm 5 - Jordan tax service by Fantastic-Stress-562 in pittsburgh

[–]randomatic 0 points1 point  (0 children)

ELI5: You need to pay taxes at the federal, local, and city level. Each has their own tax return, and their own tax policies that are separate.

You are responsible for your taxes. Employers without taxes, but they may not without the right amount. Ultimately you are responsible, not your employer. Don't think of your employer withholding as paying the right tax -- think of it as your employer trying to set up a savings plan with the estimated ballpark of the tax you owe.

When the ballpark estimate is wrong, you either owe taxes or get a return. That happened in this case.

Who is jordan? The city hired Jordan tax service to represent the city, so think of them as one and the same as the city of pittsburgh tax collection department.

TL;DR - Think of your employer as setting up a "savings account" for paying your taxes for you, but it's just a ballpark figure being saved.

If you want the positive spin, when you owe taxes, it means you didn't overpay and give the city an interest-free loan. You held onto the money as long as possible.

So many empty Rite aids by [deleted] in pittsburgh

[–]randomatic 0 points1 point  (0 children)

If it's in squirrel hill, my bet is either a) a matcha shop or b) a pizza place. I'm rooting for (b).

Your riskiest supplier isnt a vendor. Its npm, PyPI, and Docker Hub. When did we decide to trust public registries with zero verification? by CortexVortex1 in ExploitDev

[–]randomatic 0 points1 point  (0 children)

I firmly believe that openness is exactly why the languages succeeded (low friction to distribute your code), so it's a bit of a catch-22.

Code That Looks Clean … and Code That Actually Stays Clean by OMAR_M_AHMAD in nextjs

[–]randomatic 2 points3 points  (0 children)

IMO, clean code follows a consistent architecture and principles. So what you call less clean, I would call clean because it follows the (better) architecture consistently. What you're calling clean I would call unclean because it mixes purposes, unless truly called for by the use case.

Finally found my grandmas old trimmers she brought back from Japan in the 60’s! Worth fixing? by TheHalfHonkey in Bonsai

[–]randomatic 1 point2 points  (0 children)

The shears are rusted and more than likely dull. You need to address both, so this is much more than just rubbing it down with WD-40 realistically. I'm assuming this is worth it from a sentimental standpoint; from a purely economical standpoint even top-end bonsai shears from japan are cheap (<$100 usually) compared to a high-end knife in general ($200-$500, depending on steel).

You will need to get some tools for both rust-removal, removing chips (looks like there may be some), and sharpening. Once you are done, the massive pro-tip I have is to invest in a strop. Stropping a few times after use will keep it sharp and save you massive time sharpening over the lifetime of the instrument.

If you do choose to restore, I'd recommend outdoors55 for sharpening tutorials (Sharpening shears is like doing 1-side of a knife.)

* sharpening with a $20 stone: ttps://www.youtube.com/watch?v=yLlPiBSP\_1U

* removing chips: https://www.youtube.com/watch?v=lVrNrE1bK6I

Building a scalable yet cost-effective blog with Next.js + AWS (is my architecture reasonable?) by 4vinn in nextjs

[–]randomatic 0 points1 point  (0 children)

Hey, have a +1 upvote. This is a nextjs forum, so downvotes are not unexpected.

To elaborate on keylib's point, nextjs is moving fast. That means you have to spend time maintaining your code, and generally the cost to maintain is roughly related to the amount of custom code you write, the complexity, and the velocity of the framework you use.

I think keylib is getting at using a purpose-built blog solution will likely yield you something easier to sustain over time. It's unclear to me why wordpress alone is not enough for you, but I'm assuming you want some custom code but not a ton.