Cpoll

60 ms·

721.
by Cpoll 7y ago
Interesting. However, in this case, '10 person company' is more meant to imply the resources (bug bounty budget) available to the company. It's appropriate to categorize it as a 'a massive corporation with millions of us
722.
by Cpoll 7y ago
CoD is the odd one out, as levelling gets you weapons. But I don't think that's the issue, you unlock them all in a few dozen hours, a weekend for the average teenager. The issue is modern matchmaking doesn't have the same co
723.
by Cpoll 7y ago
You can find an isolated incident for anything. When you get your GPS trackers, you'll be able to tell an anecdote about a child who was hiding from a criminal, but was found by a GPS tracker.
724.
by Cpoll 7y ago
> it's possible a WAF issue allowed the remote attacker to query the internal endpoint from an external source But then it's literally a configuration issue, right? WAF is just Rule -> Block/Allow. It doesn't proxy
725.
by Cpoll 7y ago
I spent some time looking through your Google Scholar link. Some of the citations were blanket "nutritionists have studied diet (1-6)" where Price is 4, but I did like this citation: Nevertheless, since Price did not report his or
726.
by Cpoll 7y ago
Indeed, the 'Only' in 'Only Development Community' is missing in the HN title.
727.
by Cpoll 7y ago
I had to do some research to understand the downvotes. For anyone else, the Weston A. Price Foundation and Price's writing has a fair bit of criticism for its weak science (see Quackwatch [1], Science Based Medicine [2], Rational Wiki
728.
by Cpoll 7y ago
> I honestly believe everyone is trustworthy. There's another point to make here: Not giving individuals the keys to the kingdom protects them from being targets.
729.
by Cpoll 7y ago
> Knowing that you just visited Best Buy website 10 minutes ago and searched for a camera is _much_ more relevant to figure out which ad to show you on nytimes.com right now than the content of the article you're reading on nytimes.
730.
by Cpoll 7y ago
> What is the point in memorising a dictionary This isn't too different from quiz shows, I guess, although information from those tend to be more applicable. It's also probably a bit of an oversimplification to call it memorizi
731.
by Cpoll 7y ago
> I imagine I’d feel the same if I’d won the Olympics as silly as that sounds. Ultimately it was a hollow victory. The hundreds of hours, the 185 days of real 24 hour days I put into that single character, I can never get back. I wonder
732.
by Cpoll 7y ago
> The most likely use-case here I'm not so sure. There's a lot of market value in knowing that User 2341423 went to Site A, then Site B, then bought this item, etc.
733.
by Cpoll 7y ago
They're targetting Coinbase employees and users, the logical next step is just to find the wallet file on the machine and steal the coin.
734.
by Cpoll 7y ago
> regular people with kids and families and feelings. This is just an appeal to emotion. No-one is even calling out any individual people. With a company of this scale and responsibility, individuals shouldn't even come into the dis
735.
by Cpoll 7y ago
> Do you work for Verizon's NOC or Network Engineering department then If that's what it takes to be able to decide, then I guess we can safely declare that it wasn't negligence, because no-one that fits that description w
736.
by Cpoll 7y ago
Arthur Conan Doyle was no neuroscientist. Useless facts don't elbow out the useful ones, except perhaps in the time taken to acquire them.
737.
by Cpoll 7y ago
But at most you can prove which camera shot a picture, and its original owner... Kind of, because there's nothing stopping a photo agency from signing the pictures after they're taken, in order to anonymize their contributors. So,
738.
by Cpoll 7y ago
> 2. cameras can hash / sign every other frame or similar - we can build a chain of hardware to image that can be followed - and of an image or video does not have a CA cert chain it should be as mis-trusted as a web site without TL
739.
by Cpoll 7y ago
In Python 3 at least, anything after the * args is a required keyword-only argument: >>> def a(b, *args, c): print(c) >>> a() Traceback (most recent call last): File "<stdin>", line 1, i
740.
by Cpoll 7y ago
Exactly right. I improved the most in Fortnite by just landing in a corner (pre creative mode) and practicing building, editing, build-shooting, the same way I would work on combos in fighting games.
741.
by Cpoll 7y ago
What would you have titled it? I'm not sure that "Instead of putting your phone in rice, open it up, douse it in 90%+ isopropyl and brush it with a toothbrush to remove the water before it dries" is short enough to be an effe
742.
by Cpoll 7y ago
> I stated that what is described is not microservices. You're sliding the definition of microservices over from the obvious one (many small services[1]), that's what's a 'No True Scotsman.' With that said, I don
743.
by Cpoll 7y ago
> It's easy to test if a password algorithm change fails, not so much for CSP. Probably a bad example, because the former is server-side. But why is CSP harder to test than any other client-side change, like rewriting your login pag
744.
by Cpoll 7y ago
> The impact of an incorrect CSP policy, or browser issue could vary from a "Tweet This" button not loading (no big deal), to ads not loading (hurting your income), to stylesheets not loading (basically your whole website is br
745.
by Cpoll 7y ago
I think people have been sufficiently trained in using off buttons that if you give it the right affordances (visibility, an On/Off label, an LED to show it's on), they'll be able to use it without too much friction. After al
746.
by Cpoll 8y ago
You need to get everyone to sort by new.
747.
by Cpoll 8y ago
To be honest, not a lot, they only let you past the building door. So as a thief, I can: A. Scrub through a hypothetical leak of all that data, or B. Tailgate someone (even in security-conscious buildings this isn't much harder than fo
748.
by Cpoll 8y ago
The "it is thought by some that" part is in regards to the circulation spreading pathogens. The OP asserted in definite terms that frogs were injected.
749.
by Cpoll 8y ago
Kind of unrelated to the article, but does the Moore's law joke about the cat constant make any sense? The `-C` constant should be on both sides of the equation (since the formula is future computation _relative to_ current computation
750.
by Cpoll 8y ago
I'd like to add his article 'Is marijuana as safe as we think,' which uses his usual brand of correlation=causation and use of anecdotes to cast doubt on cannabis legalization. If nothing else, it's strange behaviour. If

More ›