• 0 Posts
  • 21 Comments
Joined 2 years ago
cake
Cake day: July 1st, 2023

help-circle
















  • Check Crowdstrike’s blurb about the 1-10-60 rule.

    You can bet that they have a KPI that says they can deliver a patch in under 15m; that can preclude testing.

    Although that would have caught it, what happened here is that 40k of nuls got signed and delivered as config. Which means that unparseable config on the path from CnC to ring0 could cause a crash and was never covered by a test.

    It’s a hell of a miss, even if you’re prepared to accept the argument about testing on the critical path.

    (There is an argument that in some cases you want security aystems to fail closed; however that’s an extreme case - PoS systems don’t fall into that - and you want to opt into that explicitly, not due to a test omission.)


  • The “why” is that the import system is caching modules in sys.modules.

    The “what to do about it” is “not this”. Use a package layout with explicit names (p1.generic_name etc) instead.

    You can use relative imports under those packages if you prefer (from .generic_name import ...).

    If you want executables on the path look at setup.py or any of the myriad of overlapping modern equivalents that’ll let you specify a command-libe executable to install, then pip install -e . to install it in your venv’s bin dir.



  • Serious answer then: you won’t be fired for being yourself.

    When I had this conversation with a trans mate (who had a fucking awful Daily Heil-reading co-worker with no notion of what was appropriate conversation for the workplace) I said, “hang on a moment, isn’t [being fired over being out] illegal?” He said, “yes, but it doesn’t stop it happening.”

    I believed him - he was living it, he had the experience. Conversations with him involved me getting smacked in the face with my own privilege on a regular basis. You have it easy.