_qulr

39 ms·

331.
by _qulr 6y ago
My high school friend was accepted to MIT, couldn't afford it, and also went to a state university. So that's 3!
332.
by _qulr 6y ago
I was accepted to Cornell as an undergrad, but my family couldn't afford it, so I had to go to a state university instead, with in-state tuition. My scores didn't even matter without the money.
333.
by _qulr 6y ago
> Which again, has been the case for a very long time. We all seem to be admitting that it's a bad, misleading statistic. So why are we so committed to keeping it around forever? Why not change the definition? People say "for h
334.
by _qulr 6y ago
> I see you are new to politics. Please refrain from violating the Hacker News Guidelines. Your comment is neither accurate nor appropriate.
335.
by _qulr 6y ago
Don't forget about FICA, which is 7.65% that is only taken out of wages (not investment earnings), and only paid on the first ~$140K of wages. I was astonished to discover earlier in my career, after a pay raise, that I got to stop
336.
by _qulr 6y ago
> The Democrats want to address it but cannot focus. What does that mean? Do they have ADHD?
337.
by _qulr 6y ago
> You need that historical baseline to assess the current situation. But what if the historical baseline has always been misleading, and undercounting a problem? > Simply redefine "murder" to mean "persons killed by a w
338.
by _qulr 6y ago
> Consistency in how statistics are measured is important. You can rag on the methods but without consistency it’d be meaningless. Is it meaningless? Isn't it important to get as accurate an assessment as possible of the current sit
339.
by _qulr 6y ago
"By comparison, the October jobless rate stood at 6.9%, down from 14.7% in April as workers regained jobs or gave up searching for work." I love how the hopeless are not counted as jobless.
340.
by _qulr 6y ago
> If you're applying to companies who only get a few applicants per position, then you have leverage and the companies actually have to look for quality. Unfortunately, a lot of smaller companies simply cargo cult on BigCo hiring, a
341.
Safari bugs me: Bugs impeding an extension developer(lapcatsoftware.com)
1 points by _qulr 6y ago|0 comments
342.
by _qulr 6y ago
It appears to be only partly fixed: https://news.ycombinator.com/item?id=25144791
343.
by _qulr 6y ago
It appears to be partly fixed, partly unfixed. Specifically, youtube.com seems to have been fixed in Chrome 86.0.4240.111 on October 20, soon after this went "viral", but google.com remains unfixed in the latest Chrome 87.0.4280.6
344.
by _qulr 6y ago
The notarization check is on first launch of an app, but it doesn't occur on subsequent launches, unlike the certificate revocation check.
345.
by _qulr 6y ago
"Apple explained to iPhone in Canada it has already fixed this performance issue through a server-side update, that will now allow macOS to cache Developer ID OCSP checks for a longer period." I discovered this and blogged about i
346.
by _qulr 6y ago
This article has more detail, because Apple spoke with iPhone in Canada: "Apple also gave some further technical information on the situation to iPhone in Canada."
347.
by _qulr 6y ago
> This is not the case, and the Zoom situation is a clear counterexample. I was talking about MALWARE. As I said before, Zoom is not malware, so no, it's not a counterexample. This is my last reply to you. You're clearly not in
348.
by _qulr 6y ago
The OCSP response has a nextUpdate field: https://www.ietf.org/rfc/rfc2560.txt
349.
by _qulr 6y ago
> using another mechanism > It’s relevant because you argue that there is no value to having the ability to do this. No, I did not. We haven't talked about that other mechanism, so I've said nothing about it here either posi
350.
by _qulr 6y ago
Zoom isn't malware, Apple did not revoke Zoom's Developer ID certificate, and indeed Zoom still exists on the Mac. Zoom had a serious uninstaller bug, but that's all it was, and it's not relevant to the current discussio
351.
by _qulr 6y ago
A caveat to blocking ocsp.apple.com is that I discovered Apple is running more than one service on that domain. http://ocsp.apple.com/ocsp-devid01 is Developer ID, but http://ocsp.apple.com/ocsp03-apevsrsa2g
352.
by _qulr 6y ago
> If you catch malware in the wild you don’t want to wait half a day for the cache to expire. But if you have a cached OCSP response for the cert of a malware author, then you've already launched their app, so it's probably t
353.
by _qulr 6y ago
I don't think the video was intended to explain the technique. It's likely that Wardle is privately reporting the details to Apple Product Security.
354.
by _qulr 6y ago
Historically speaking, OCSP was invented in a world where almost all DNS requests were also in cleartext. So if an attacker can observe DNS requests, then it's already "game over", and the cleartext of the OCSP request is alm
355.
by _qulr 6y ago
This is a related issue but not the same. The previous discussion was about how Big Sur has some built-in exceptions for Apple software. The current discussion is about the discovery that these built-in exceptions can also be abused by non-
356.
by _qulr 6y ago
Pure speculation from me, but my guess is that the intention is check an app on every launch, and the 5 minutes is there just to lower the chances of DoS from an app getting repeatedly launched for some reason.
357.
by _qulr 6y ago
> There is no information on how often the validation happens. I wrote a blog post about this. My analysis indicates that Developer ID OCSP responses were previously cached for 5 minutes, but Apple changed it to half a day after Thursday
358.
by _qulr 6y ago
> However the question I have is given your views, why? I came to the Mac almost 20 years ago. It was very different back then. The first decade of Mac OS X was brilliant. I felt it was the best consumer OS ever made. It was also a fairl
359.
by _qulr 6y ago
> Apple’s restrictions liberate me from having to spend time on fully-liberated computing. This seems to conflate restrictions with defaults. It's reasonable for Apple to configure Macs to be safe "out of the box". But it&
360.
by _qulr 6y ago
> How about examining some of the technical issues instead of ideological rhetoric? Way ahead of you: https://news.ycombinator.com/item?id=25074959 https://news.ycombinator.com/item?id=25076588 > I ha

More ›