RyanZAG

56 ms·

391.
by RyanZAG 11y ago
> 6. Prefer battle-tested tools over the “new hotness”. Well, that won't go over well with the HN crowd, I bet! It's also the most important point in my opinion. Just because a new tool solves an old problem doesn't mean
392.
by RyanZAG 11y ago
One more weak spot: if they have full access to the server, they can just dump the ram. This is incredibly simple to do on Linux for example. In a big company though, having that one developer with full keys to the kingdom and is the only w
393.
by RyanZAG 11y ago
Agree completely. To take it a step further - even if you assume that you have all of the above locked down and have inspected all of your servers - someone still has to connect to those servers. Let's assume they are connecting using
394.
by RyanZAG 11y ago
Recover password by email is a business requirement. You also need to be able to send users an email to alert them about numerous things such as credit card expiry or service termination, etc. It sounds like an option, but I don't thin
395.
by RyanZAG 11y ago
As others have said, this appears to be a total dump of the system and not just the database. It looks like the encryption keys were not kept with the database, but all of the SSL keys and everything are included inside the full dump. Seemi
396.
by RyanZAG 11y ago
Yes, the house is burning down! We have a whole lot of gasoline on hand. We can dump it all onto the burning fire to try and put it out. Possible outcomes: 1) We manage to dump enough gasoline on it to starve it of oxygen quickly enough and
397.
by RyanZAG 11y ago
I'd guess the other half is going towards things like localizing text and dealing with getting the device certified for the market, etc. You could say the same about the initial English version and USA certifications - but those are ge
398.
by RyanZAG 11y ago
Android package security (who can send intents to who) is based off of signatures and it's not really possible or desirable to change that. However, a build script to handle it all for you during upload would be a great way to solve it
399.
by RyanZAG 11y ago
Welcome to human psychology! Yes, people are far more affected by losing something than gaining it or even using it. If you give someone $50 and then take it away, they will generally be very angry even though it's not like they really
400.
by RyanZAG 11y ago
Agreed, it's terrible. It's amazing there is no plugin for Gradle that does it all for you, including splitting the app for different dpi and arch. Is there a way and it just isn't publicized? AFAIK Google Play does have an A
401.
by RyanZAG 11y ago
Never looked at the source code for Eclipse, but I'm guessing it does a lot of parsing and linking on source code and reads the same file multiple times while doing random access to other files. So a decent SSD with good random read sp
402.
by RyanZAG 11y ago
Kind of surprised by the comments here regarding speed. Have none of you used Eclipse recently on an SSD? I use Jetbrain's stuff a lot of the time, but the biggest problem Jetbrain's stuff has is how terribly slow it is compared t
403.
by RyanZAG 11y ago
Isn't the humorous part of all this in how the system is running Windows 10 anyway and collecting far, far more data than this poor CustomerFeedback thing is doing?
404.
by RyanZAG 11y ago
> load balancing You'd rather use a dedicated load balancer like Route53 or haproxy. Don't think choosing Apache or Nginx is the right option for those really. Plus something like vert.x is very usable as a load balancer alre
405.
by RyanZAG 11y ago
Are you trying to imply Kaspersky are somehow a victim...? Installing their security product actively decreases your security in this case. That destroys their entire reason for even existing. Kaspersky is no victim here. They've been
406.
by RyanZAG 11y ago
You know that most of the world's population doesn't tip at all? Given that, it seems kind of strange to assume everyone just knows the appropriate tipping etiquette without being told when getting the coupon or sitting down. Plus
407.
by RyanZAG 11y ago
Yeah definitely. It's why I added that 'edit'. You're the type of customer that Groupon needs to be selling on to businesses. They need to identify people like you somehow and offer you coupons, while denying coupons in
408.
by RyanZAG 11y ago
Yeah, was in the $Z I mentioned. It's actually more than just using up normal operations. Most physical businesses have a core group of users that like the 'ambiance'. When you bring in all of these new customers, you break t
409.
by RyanZAG 11y ago
Isn't this the whole problem? You used Groupon to do a bunch of stuff you wouldn't normally do at below cost. That's great for you. It's also exactly the opposite of providing value for a business as you're going to
410.
by RyanZAG 11y ago
It's not always the company. In the case of the USA and their insane tipping customs, a customer coming in with groupon specials is going to end up tipping less. Since the whole service at USA restaurants is based around tipping, the e
411.
by RyanZAG 11y ago
I guess they are saying all of the Gitlab code is MIT and all of the Mattermost code is AGPL. That's perfectly permissable by both MIT and AGPL licenses. In practical terms, you can take the Gitlab/Mattermost distribution and modi
412.
by RyanZAG 11y ago
The idea behind 'only revenue growth matters' is that if you have an exponential growth curve then the actual numbers don't matter as long as they are positive. If you're making tiny margins on every $1 of revenue then y
413.
by RyanZAG 11y ago
According to the linked article, transferring the full game state is too large - such as for SupCom where the game state is huge. Instead, they only pass player input. I guess that says for a Javascript game, you must always pass the full g
414.
by RyanZAG 11y ago
The issue of determinism for games is interesting with many games trying to compile to javascript to run in the browser. Wouldn't this break multiplayer for those kind of games? You're stuck with double precision optimized floatin
415.
by RyanZAG 11y ago
Big Tech is a total monster. But it's not the current Google, Apple, Amazon who are the monsters of Big Tech. It's the company being born today that will be the Big Tech of the future that will be the true monster. I'm not lo
416.
by RyanZAG 11y ago
Wow, one of these days someone needs to make a russian roulette binary that has a 1 in 20 chance to delete your home directory and post it to HN. Bonus points for including a link to the source without the russian roulette so that people ca
417.
by RyanZAG 11y ago
Thanks, this is the real answer I was looking for and not the hand waving about trusting everyone up above. That sounds like a good solution to me.
418.
by RyanZAG 11y ago
Agreed - but by making this a fully automated system you open up an easily testable and repeatable source of attack. I don't think "You have to trust something" is really right in this case, as you're basically saying &q
419.
by RyanZAG 11y ago
Does anybody know if there is any protection built in against MITM or DNS poisoning attacks? It feels like this makes network hop security far more important. If I'm able to insert a MITM or DNS poisoning anywhere between where letsenc
420.
by RyanZAG 11y ago
Don't these already exist? http://www.datomic.com/

More ›