Andrey Andreev

Turns beer into code

[Andrey Andreev @narfbg]

@ahmtbrt07 I got your logic of course and if you'd called it "account takeover" I'd agree, but bypass is a stretch when you're actually obtaining legitimate credentials. The auth mechanism isn't being bypassed (i.e. skipped), you just have the master key for it. :)

[Running With Scissors @RWSstudios]

Steam has a dominant position in the market mostly because it provides a better platform for both the gamers and the developers, not because they do monopolistic tactics like some other alternatives.

Those who come up with these lawsuits don't really care about the gamers/consumers, they only care about making money for themselves. That's why if Valve was to lose one of these ridiculous lawsuits, you as a consumer would not see any financial compensation.

Something to think about.

[Matthew Green @matthew_d_green]

Telegram has launched a pretty intense campaign to malign Signal as insecure, with assistance from Elon Musk. The goal seems to be to get activists to switch away from encrypted Signal to mostly-unencrypted Telegram. I want to talk about this a bit. 1/

[Taylor Hornby 🛡❤️ @DefuseSec]

"Sanitize user input" is bad security advice.

A string can be *escaped* when being inserted into another language like HTML, but correct escaping depends on the target language.

There's no such thing as a "sanitized" input. It's impossible to make a string safe for all uses.

[Andrey Andreev @narfbg]

@DefuseSec And it also irreversibly damages the data. This may be a lesser concern from a security POV, but it could resonate more with developers without such expertise. As a side note, even the famous xkcd about little Bobby tables gets this wrong.

[Andrey Andreev @narfbg]

@mkjadee Хаха, няма нищо.

[Andrey Andreev @narfbg]

@atealein Като изключим, че няма какво да направи за да не е плешив ... окей, очевидно това е грешна позиция, съгласен съм. Това с което имах несъгласие беше туита относно как ни е изградено обществото, написан все едно от жените се очаква всичко, а от мъжете нищо.

[Andrey Andreev @narfbg]

@atealein А мъжете пък щото ни харесвате всякакви и въобще нямаме нужда да си поддържаме външния вид и особено поведението около вас. Айде стига глупости ... Малко са хората, толкова естествено привлекателни, че да не им се налага да полагат други усилия. И от двата пола.

[Andrey Andreev @narfbg]

@atealein Не виждам съгласие с това конкретно твърдение, само няколко отделни потвърждения, че въпросният тип самовлюбени мъже е многоброен. Но точно на ниво общество, публичното и традиционно очакване е мъжа да спечели жената. Реално, сигурно просто зависи кой кого иска повече. :)

[Andrey Andreev @narfbg]

@atealein Аз пък имам тотално обратното впечатление, но от всяка позиция се виждат различни неща.

[Andrey Andreev @narfbg]

@nixanbal Имам, вървеше си с квартирата ... Не съм го включвал и нямам намерение.

[Andrey Andreev @narfbg]

@grigovor Защо? Вече и глезените ли са неприятни? Остана ли нещо дето хората не намират за грозно?

[Jym @JymFox]

OH MY GOD I'd heard about Windows 11 calling a zip file a 'postcode file' in UK English because of really lazy translating but it's ACTUALLY HERE ON MY PC like not even in beta this is actually happening right now in publicly available Windows

[Andrey Andreev @narfbg]

@freekmurze There's room for both. The example shown has *only* variables, but that's rarely the case. Plus, sometimes a string can be a reusable template and sprintf() really shines there. I use string interpolation 95% of the time, but there's always an edge case.

[Andrey Andreev @narfbg]

@afilina @Ocramius I've almost never used strong attacks, while parries and counters are reserved for a select few enemies who you can't mindlessly hit. It's pretty easy then to pick up the rest of the mechanics as they become necessary. Gear and potions usually make up for the occasional mistake.

[Andrey Andreev @narfbg]

@afilina @Ocramius I guess I'll clarify since I've got nothing better to do right now. 😁The turorial tries to teach you everything in small incremental steps, but for most fights you can just cast Quen and/or throw a bomb before engaging, then only use fast attacks and dodging if necessary.

[Andrey Andreev @narfbg]

@fideloper I find it particularly useful to link bug reports that were causes for unintuitive code changes.