Howard Chu @ Symas

Howard Chu @ Symas's avatar
Howard Chu @ Symas
npub1tt4j...x9ud
CTO Symas Corp., Chief Architect OpenLDAP Project, Musician
Apparently Pinterest fired two engineers for using ldapsearch "Pinterest fired the engineers after they posted instructions showing how to prompt the company’s staff directory to show who was laid off, the employees said. The employees said Pinterest’s claim that the engineers created custom software was inaccurate, and said the directory tool is accessible to anyone in the company." #LDAP
It's strange how we've gone from a world of native apps for a select few platforms, excluding all others, to a world of web apps that supposedly run on everything (as long as they have a supported browser). Going from the choice of native performance or not available, to sluggish performance everywhere - except oh yes, there's only a select few platforms supported by the necessary browser. I don't think it was a good trade.
Haven't looked too far into this, but if your email server also requires an SQL server (like MariaDB or whatever) I'm pretty sure You're Doing It Wrong. I've been an SMTP postmaster since 1986. Still running my own domain continuously since 1996. Wrote my own blacklist/greylist milters for sendmail & postfix. Have never needed SQL in there anywhere.
Linux running inside a PDF (when opened inside a Chromium-based browser). Built on top of Fabrice Bellard's TinyEMU RISC-V emulator, translated from C to javascript by Emscripten. Because of course, when Adobe turned PostScript into PDF they intentionally removed the programmable flexibility from it, so google put it back, using javascript.
Dear bug hunters / fuzz testers: a one-shot command line tool is not a service. As such, feeding an invalid input to such a tool does not trigger a "denial of service". It simply causes a program to exit, that was already going to exit anyway. Categorizing such error-triggered exits as DoS is incorrect and any bug reports you submit to the #OpenLDAP Project categorized as such will be immediately closed as Invalid. Stop wasting our time, thanks.