Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
Borealid
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
23 ms
·
301.
▲
by
Borealid
4y ago
To describe security benefits, we use threat modeling. If there's a threat that's prevented by system A but not by system B, and all threats prevented by B are covered by A, then A is colloquially "more secure" than B. H
302.
▲
by
Borealid
5y ago
Is there a phrase that describes the process of taking something one thinks is bad - here, Firefox extensions being disabled - and searching for the most egregious possible negative consequence that might have occurred (here, someone being
303.
▲
by
Borealid
5y ago
Making a copy of a copyrighted work (duplication) is one of the fundamental actions that usually requires a license. It is difficult to find a way to take another action with the work without first duplicating it.
304.
▲
by
Borealid
5y ago
Everything you said is correct. I was not sufficiently careful in my... uh... use... of the word "use". I meant "use" in the sense of "allow to form part of your whole work which you then distribute". Anything
305.
▲
by
Borealid
5y ago
The relevant clauses read as follows: b) You must cause any work that you distribute or publish, that in whole or in part contains or is derived from the Program or any part thereof, to be licensed as a whole at no c
306.
▲
by
Borealid
5y ago
I find it difficult to imagine a situation in which you could use the library without copying the library. How would you obtain the code to execute it? Someone must distribute it to you, and/or you must copy it. Those are the governed
307.
▲
by
Borealid
5y ago
I think there's some confusion in the above post. The relevant "derived work" definition for the purpose of linking isn't one stemming from copyright law, it's the one in the GPL itself. This is because the GPL defi
308.
▲
by
Borealid
5y ago
The ability to mix different types of ID in one column or one business data store. When you start with random UUIDs, and then decide you actually wanted per-host-namespaced ones halfway through, if you have allocated zero bits for the versi
309.
▲
by
Borealid
6y ago
I have a ConnectPro UDP2-12AP, and can confirm that systems connected to it do not see the monitor go away on switch. There is an interruption if you press the KVM reset button, but that's not something you should often do.
310.
▲
by
Borealid
6y ago
Let's say USPS has promised to pay for a 20-year-old employee's health care for the next 70 years. Let's say the total price of that health care is going to be $10M over the 70-year course. What should they do that neither in
311.
▲
by
Borealid
6y ago
The Ergodox EZ actually uses a four-connector TRRS connector, not the three-connector TRS connector you use for ordinary stereo headphones.
312.
▲
by
Borealid
6y ago
You cannot add the percentages like that because they may overlap. Some percentage of people can support firing an executive who donates to either campaign.
313.
▲
by
Borealid
6y ago
I have a Ryzen 9 3900X. Officially it doesn't support ECC memory. In practice unregistered ECC DIMMs work fine, and ECC functions properly (single-bit correction, dual-bit detection). I assume the 3950X is the same way. The hardware is
314.
▲
by
Borealid
7y ago
A DVD holds, what? 14GB max? A microSD card can hold 500GB. DVDs (and even blu-rays) are far from "dense". They also require an order of magnitude longer to write, lose their data to bit rot faster than SLC flash, and require devi
315.
▲
by
Borealid
7y ago
I think legally you likely have not "bought" a song, you have licensed it. The license includes the right to listen to the song, but not to redistribute either the music or the lyrics. "Ownership" such as it is for intel
316.
▲
by
Borealid
8y ago
When business hours are off by one hour, there is one hour less to communicate with your neighboring countries during business hours. If you had an eight-hour work day, a one-hour time offset from a neighboring country would mean you overla
317.
▲
by
Borealid
8y ago
Can't you use Javascript to implement challenge-response authentication, which meaningfully improves security by: 1. Preventing interception of passwords on the wire 2. Allowing a tunable "difficulty" parameter which makes br
318.
▲
by
Borealid
8y ago
1. A "good" key safe for the forseeable future would have around 256 effective security bits. To get a key that strong, your password would have to be (speaking VERY generously here) 40 characters long and truly random. 2. When us
319.
▲
by
Borealid
8y ago
Let's describe the attack in detail. You know: - A username In order to gain access to this system, you must supply: - A username - The corresponding password - A TOTP code valid for the time you make the attempt If any piece of inform
320.
▲
by
Borealid
8y ago
If you are attempting a brute force attack against a particular password, you either need to know a single OTP and complete the attack before it changes ("the goalposts move"), or try every password with every possible OTP, or com
321.
▲
by
Borealid
8y ago
I don't think you've understood what has to be guessed. It's not the OTP alone; it's the OTP and the password, together. If the OTP "000000" is correct with 50% probability after 500,000 attempts, you've j
322.
▲
by
Borealid
8y ago
Or a brute-force attack guesses your app password. One of the major benefits of TOTP is that you have only a certain time window (usually, 30 seconds) to guess a password before the thing you're trying to guess changes and you have to
323.
▲
by
Borealid
8y ago
Yes, if the attack vector you're trying to close is a compromised keyboard/network/terminal and not a stolen-while-unlocked device. "Catching" one 2FA code doesn't let you compromise someone's account. Los
324.
▲
by
Borealid
8y ago
The government is allowed to crack open a safe with a warrant. The government is allowed to crack open an iPhone with a warrant. What does either of those things have to do with decrypting things found inside either the safe or the iPhone?
325.
▲
by
Borealid
8y ago
Increased diversity is an outcome. Seeking equal/"better"/"more representative" numbers (percentage-wise) is not an equality-of-opportunity situation; it's about outcomes regardless of how they came about.
326.
▲
by
Borealid
8y ago
Although in theory you could scratch anodized aluminum, the anodized layer is both harder and more abrasion resistant than the underlying raw aluminum. If you're thinking about scratching chrome-plated steel, let me ephasize that it is
327.
▲
by
Borealid
8y ago
Anodized aluminum and titanium don't rust - and if by whatever means you DO allow them to oxidize, the oxygen-bound outer layer forms a protective barrier against further rusting. Neither of those metals becomes structurally weaker in
328.
▲
by
Borealid
8y ago
By the way, HDMI supports an Ethernet channel. Depeding on your setup, it may be possible for the TV to get online without a Wifi password or any cables other than power+HDMI.
329.
▲
by
Borealid
8y ago
Wouldn't it be easier to just raise domain registration /renewal prices, making squatting a poor return on investment?
330.
▲
by
Borealid
9y ago
Is the country with the one-year copyrights a Berne Convention signatory? If so, then it is in violation of the treaty, which sets a minimum term for copyrights. The WIPO may adjudicate and other signatories may take action. If not, then wh
More ›