NegativeK

9 ms·

91.
by NegativeK 10mo ago
While you and I would love it if password managers would rotate creds, we're not yet at the point where people will use password managers. They're still using CompanynameFall2025!. Next month, they'll dutifully rotate their p
92.
by NegativeK 11mo ago
I've had to inform leadership that stability is a feature, just like anything else, and that you can't just expect it to happen without giving it time. One leader kind of listened. Sort of. I'm pretty sure I was lucky.
93.
by NegativeK 11mo ago
Top commenter's "AFAYK" acronym is covering that. The type that claims they're going to achieve zero known and unknown bugs is also going to be the type to get mad at people for finding bugs.
94.
by NegativeK 11mo ago
I both 100% agree with you and also don't think our opinion matters. The general consumer isn't going to hear "the manufacturer hasn't upstreamed stable drivers to the kernel" and suddenly stop blaming Linux if the
95.
by NegativeK 11mo ago
Now you can pretend you're an enterprise IT environment with arbitrary and ridiculous purchasing constraints! But for real, that sucks. The alternatives -- much older, used RAM -- may not be very attractive, depending on what you'
96.
by NegativeK 11mo ago
It's a vulnerability via pathing, not a worry that the shebang script could be malicious. Someone may have dropped a malicious executable somewhere in the user's path that the shebang calls. The someone shouldn't be able to d
97.
by NegativeK 11mo ago
I obviously can't speak for you, but there's not a freaking chance I'd trust my life to the servers I run. To go maybe too literal: when I'm working on machines that could physically eat me, I don't trust myself wit
98.
by NegativeK 11mo ago
Anubis has been around for almost a year now, but it's also not particularly relevant to the content of the email thread.
99.
by NegativeK 11mo ago
The problem isn't that AI slop is doing something new. Phishing, blogspam, time wasting PRs, website scraping, etc have all existed before. The problem is that AI makes all of that far, far easier. Even using tooling to filter articles
100.
by NegativeK 11mo ago
PR. And pushing forward the idea that "responsible disclosure" doesn't mean the software creator can just sit on a bug for as long as they want and act superior and indignant when the researcher gives up and publishes anyway
101.
by NegativeK 11mo ago
AGPL, with no CLA that lets the owners relicense. Then we'll see if the using corporation fully believes in open source. There's a reason Google turned into year 2000 Microsoft "it's viral!" re. the AGPL. They'
102.
by NegativeK 11mo ago
Vulnerabilities should be publicly disclosed. Both closed and open source software are scrutinized by the good and the bad people; sitting on vulnerabilities isn't good. Consumers of closed source software have a pretty reasonable expe
103.
by NegativeK 11mo ago
The US Supreme Court decided in 1886 [1] that it's the 14th amendment. The general article on Wikipedia [2] has more info about it, and discusses the fact that corporate personhood is an abstraction that represents the rights of the in
104.
by NegativeK 11mo ago
Ruff (I'm sure it's not unique) can yell at you for having a TODO without an associated link to a ticket, which I greatly appreciate.
105.
by NegativeK 1y ago
So why didn't GDPR require Do Not Track to be honored? It was already there, to be expanded on if needed. But I can't imagine copmanies would want that. They benefit from cookie dialogs fatigue, and for some reason people blame GD
106.
by NegativeK 1y ago
In most places I've lived, busses are for poor people. Because anyone else will pay whatever it takes to get a car and avoid something like a _three hour_ round trip for something 10 miles away. I'm not kidding; my work commute is
107.
by NegativeK 1y ago
> How would one adapt to shifting demand, or new materials becoming available, or old materials going out of supply. That's very unlikely. New materials would require the company requesting the part to reengineer it, recertify it, o
108.
by NegativeK 1y ago
This article feels like an opinion piece with an axiom of perfection or nothing.
109.
by NegativeK 1y ago
Are employees aware that they can't trust AI results uncritically, like the article mentions? See: the lawyers who have been disciplined by judges. Or doctors who aren't verifying all conversation transcriptions and medical notes
110.
by NegativeK 1y ago
Using a OTP in your backup strategy adds way more complexity, failure modes, and costs with literally no improvement in your situation.
111.
by NegativeK 1y ago
I've never had a landlord come into an apartment or house I'm renting. (Except when the landlord also lives there.)
112.
by NegativeK 1y ago
It's a code violation, not insurance fraud. I read about this often whenever I'm looking at guidance for one of my hobbies, and often people are dealing with it in their garage. Some jurisdictions are more okay with DIYing than ot
113.
by NegativeK 1y ago
> Human vetting is not much of a defense. The issue I keep seeing with curl and other projects is that people are using AI tools to generate bug reports and submitting them without understanding (that's the vetting) the report. Beca
114.
by NegativeK 1y ago
I know sandboxes for wasm are very advanced, but decades of file formats with built-in scripting are flashing the danger lights at me.
115.
by NegativeK 1y ago
To your point, the large airport I worked at was annoyed at small, slow aircraft landing because it jacked up the spacing and slowed down the customers who paid the vast majority of the bills. But the feds required the airport to allow it f
116.
by NegativeK 1y ago
How do we have political topics in this forum without the discussions devolving into quick quips and rhetoric?
117.
by NegativeK 1y ago
I suspect, strongly, that we disagree on the fundamentals of what DOGE's aim was.
118.
by NegativeK 1y ago
I've seen meatspace communities start to break into factions and have a rise in drama because they've gotten too big; I think that internet communities have the exact same problem. It's worsened by the fact that companies hav
119.
by NegativeK 1y ago
I assume they were referring to outbound. But ideally it'd be blocked and all traffic would go through an internal caching resolver, right? To reduce internal latency and load on outside servers, but also to have records if needed and
120.
by NegativeK 1y ago
I agree with the quoted commenter's point that sometimes shit matters enough to put up with the suck, but I also agree with your point that people need to understand that walking away might be the right thing to do. Finding that balanc

More ›