Deimorz

29 ms·

211.
by Deimorz 7y ago
I agree with you; the fines are much too small. But the point is that they're too small for both Equifax and Facebook. Facebook's stock even went up because it was only a $5B fine! The only way things will change is if the fines
212.
by Deimorz 7y ago
Because fines like this are often more about sending a message to the entire industry than simply about reimbursing damage. It's saying, "make sure you take security seriously, or you're risking us taking X% of your revenue&#
213.
by Deimorz 7y ago
I recommend the book "Practical Vim" too: https://pragprog.com/book/dnvim2/practical-vim-second-editio... I remember learning a fair amount from it when I read it a few years ago (and should probably rea
214.
by Deimorz 7y ago
Being a good business tends to involve making money. WeWork lost $1.9 billion in 2018, and expects to lose even more this year. https://www.axios.com/wework-doubled-revenue-loss-2018-eec75...
215.
by Deimorz 7y ago
This newsletter from early last week had some really interesting thoughts about this: https://mattstoller.substack.com/p/the-slow-death-of-hollywo... It quoted a section from an article in The Information: > [Netfli
216.
by Deimorz 7y ago
"Buy this and you will be able to put any code you want into any project that uses Requests and doesn't carefully audit the changes in new versions" is potentially a pretty huge problem, yes. Similar issues have already happe
217.
by Deimorz 7y ago
> Therefore, if you or your organization are open to the idea of monetary exchange for ownership of a repo / pypi project, please email me Am I somehow misinterpreting that, or was that really a blatant attempt to sell the repos and
218.
by Deimorz 7y ago
CCP Games integrated it into Eve Online and says that it significantly reduced the number of players using insecure passwords: > When we first implemented the check, about 19% of logins were greeted with the message that their password w
219.
by Deimorz 7y ago
Probably worth noting that Have I Been Pwned is now up for sale: https://www.troyhunt.com/project-svalbard-the-future-of-have... I've always been a huge fan of the project (and Troy) and understand that it's gotte
220.
by Deimorz 7y ago
January 22, 2008 is when the built-in feature to make self-posts was added: https://www.reddit.com/r/bugs/comments/666ne/testing_self/
221.
by Deimorz 7y ago
A somewhat related story about why text posts on reddit are called "self posts" (copy-pasted from a thread from 5 years ago where someone asked why, linked near the top of the explanation): --- It's actually a bit of a long s
222.
A New Twitter.com(blog.twitter.com)
5 points by Deimorz 7y ago|2 comments
223.
by Deimorz 7y ago
Yes, it's the only way when your product is objectively worse than Steam in practically every way, so the only way to get anyone to use it is to force them. It's not a good approach to competition though, and only hurts users inst
224.
by Deimorz 7y ago
I use this site fairly often for those kind of searches: https://www.lorenzostanco.com/lab/steam/ It won't work for everything (for example, I don't think it'll help with "visually stunning&quo
225.
by Deimorz 7y ago
Imagine you run a very popular website, and you have a policy that says "we will never modify any site data by accessing the database directly", to try to ensure that everything goes through site functionality and can be properly
226.
by Deimorz 7y ago
It's already starting to fail on some of the major sites. Recently it's stopped working on the Wall Street Journal, the New York Times, and a couple of others that I can't remember offhand. Interestingly, the blocking seems t
227.
by Deimorz 7y ago
I don't think disabling the enterprise certs was particularly moral, Facebook and Google were flagrantly violating the terms of the enterprise program. Apple also apparently didn't even notice (or didn't care) until articles
228.
by Deimorz 7y ago
Yeah, I'm quite curious now if Zoom's reversal and decision to remove the server was because Apple informed them they were going to forcibly remove it like this. It looked like they decided to remove the server themselves (or at
229.
by Deimorz 7y ago
It's been really interesting to see how quickly the original Zoom response of "there's nothing wrong with this, everybody does it" ended up being reversed. I wonder if there's a known exploit for the Zoom server spe
230.
by Deimorz 7y ago
It's not always an option, but simply using PyPy can massively reduce memory usage without needing to change your code at all. The PyPy site links to this blog post (from 10 years ago) with some info: https://morepypy.blogsp
231.
by Deimorz 7y ago
According to one of the updates in their response blog post ( https://blog.zoom.us/wordpress/2019/07/08/response-to-video-... ), you need to choose it through the Zoom menu bar: > We’re adding a new opt
232.
by Deimorz 7y ago
I understand the concept, but I don't think the downsides can be so easily passed by. Some quick thoughts/questions: - What happens if Dark-the-company disappears? It doesn't matter how. You're acquired by Google and shu
233.
by Deimorz 7y ago
So anyone using Dark is completely locked-in, to the point that they can't even take their code into an editor other than yours? It's a proprietary language, that can only be edited in a proprietary cloud-based editor, that only r
234.
by Deimorz 7y ago
Blog post too, which seems to be somewhat different: https://blog.zoom.us/wordpress/2019/07/08/response-to-video-...
235.
by Deimorz 7y ago
I don't know how complete it is, but there's a list on MobyGames: https://www.mobygames.com/game-group/games-with-boss-key/off...
236.
by Deimorz 7y ago
This is a great interactive demonstration of this - "The Evolution of Trust": https://ncase.me/trust/ It takes about 20 minutes or so to go through, but I highly, highly recommend it for anyone that hasn&#x27
237.
by Deimorz 7y ago
LA Times published an article earlier today about how yesterday's quake may have increased the strain and could lead to a larger one like this: https://www.latimes.com/local/lanow/la-me-ln-did-california-...
238.
by Deimorz 7y ago
Posted earlier today (no comments there either though): https://news.ycombinator.com/item?id=20360996
239.
by Deimorz 7y ago
Right, but if someone has the ability to run arbitrary commands on your redis server, they can already look at or do whatever they want with your data. We're agreeing: if someone can already run MONITOR, this won't make anything w
240.
by Deimorz 7y ago
MONITOR can only be used through redis-cli or telnet, you already need a very high level of access to the server for that. I'm thinking about more subtle methods of using this info, where a client might be able to get info about the ac

More ›