• 0 Posts
  • 12 Comments
Joined 1 year ago
cake
Cake day: June 19th, 2023

help-circle



  • See, it’s this trying to be overly friendly nonsense I hate about JS. If you need semicolons, demand them. Don’t make it seem like you don’t then make your code break because it hudes that you do. My first orogramming job was at large multinational japanese motor company and they had a hard rule over no in house exe’s or opensource software. So the compromise was doing everything in JS. JS refused to listen to me on doing a single threaded for loop, just run the loop, wait a moment, run the next one, wait a moment…

    JS, don’t help me, just do as I say


  • Ye, it’s a real thing. A quick google search for the term “companies that buy software exploits” lead me to the following real companies that will buy exploits you find; zerodium, offensive cyber, and vupen. In fact, zerodium currently has a $400,000 bounty for an exploit for microsoft outlook. It’s very useful for say something like a government to know about these hacks in case say they want to hack someone. For example stuxnet was written by the US to fuck with Iranian centrifuges.

    Pegasus isn’t just a single exploit. It uses many and every patch to an OS doesn’t fix every single exploit so there’s always another way Pegasus can break into the system. Also, do you think that with every update to iOS the developers are rewriting their entire code base? I’ve written lots of updates for my software and I almost never scrap the entire thing when I need to do rewrites.

    Again, Apple, a 2 TRILLION dollar company, can only fix exploits they know exist.


  • Theres literally a functioning business model of “find zero-day exploits for software X and sell that info to the highest bidder”. There is actively many huge bounties for currently working exploits that you, random dude on the internet, can get if you can show that an unknown bug can be used to gain access to some software. Pegasus is one of the groups buying the exploits and then using it.

    It is a perpetual cat and mouse game. Every time that Apple is made aware of an exploit they patch it asap, but that doesn’t mean they’ve fixed every exploit. You can’t fix a bug unless you know it’s there.







  • Seriously. Another comment pointed out there’s “not enough money” and “enough money” for wages. Depending on which side you’re on money may not be the reason someone quits. My previous job paid me enough, but the business partner was so dangerously incompetent, reckless, agressive, and unwilling to do their own job that I quit out of frustration. I made it very clear to my boss’ boss that it wasn’t about money, and I wasn’t going to tell them what my new compensation was. It isn’t his business. My issue was the business partner. Within a few months a few other people quit working there too for the same reason.