adql

22 ms·

241.
by adql 4y ago
It's ironic that the latest post on it is now info about tiered paid api access with some absolutely joke limits and pricing.
242.
by adql 4y ago
I don't trust phone security enough to do that.
243.
by adql 4y ago
Nah, just seeing Ubuntu does it makes me want to not touch it.
244.
by adql 4y ago
It also have funny interactions with expired certs, I remember some obscure OSS app page being inacessible via browser because: * author forgot to renew the cert like, day before * author also set up HSTS and both browsers said "nope,
245.
by adql 4y ago
I'd imagine they have logging history somewhere? Then again if you fucked up your internal apps that badly, failure to include auditing is also likely
246.
by adql 4y ago
> - every developer having access to production databases, including people hired yesterday I wonder how that correlates with companies bragging that they only take day or even few hours to have new hire code landing at production &quot
247.
by adql 4y ago
I now feel better about adding additional check to disallow logins from not our domain to our apps even tho technically app setup in azure wouldn't allow that anyway... fuckup can happen at any level
248.
by adql 4y ago
> It is only uninformed HN posters imagining that vulnerabilities are worth millions of dollars on some imaginary black market that are complaining about it. Just like they do with every vulnerability disclosure that mentions the size of
249.
by adql 4y ago
Should've reported every app that got hacked as separate bounty :D
250.
by adql 4y ago
They increased price because everyone else did. They just happened to not be hit by the flu so their production was not hit.
251.
by adql 4y ago
If they didn't raise the prices I'd imagine someone further in the chain would reap same benefits; all it happened here is it seems that they were nearly unaffected by flu while their competition wasn't so lucky
252.
by adql 4y ago
"the user @joeshmoe said he uses xkcd 936 password style, please look for what favourite words he might use, and try to match it with PBKDF2 hash XYZ"
253.
by adql 4y ago
We're talking about packages that don't even come with code > More than half of all new packages that are currently (29 Mar 2023) being submitted to npm are SEO spam. That is - empty packages, with just a single README file tha
254.
by adql 4y ago
With AI it could even be fully working code.... hook some projects to use it as dep and replace with malware 6-12 months in
255.
by adql 4y ago
> What case is there when you want to find a package in NPM, and information about that package, using Google? Coz you might want results not only from docs but stackoverflow and other places ? > Essentially, there is no overlap in th
256.
by adql 4y ago
It's kinda hilarious that current way of "limiting" AI is just a bunch of sentences telling it nicely what to not do.
257.
by adql 4y ago
Now do the same for stock market, the whole chasing for next quarter profits and myth of infinite growth hurt society far more than anything AI could do
258.
by adql 4y ago
Well, open hardware design would have that, but not exactly be the practical one if you can buy actual ready made part for cheaper than CNCing it. Difference is really that the open design could be repeated way before design based on existi
259.
by adql 4y ago
I guess they come to conclusion all proper work gets done with docking station and proper keyboard at the very least
260.
by adql 4y ago
About the last thing security-wise that I want is for http server to control DNS record (which is required to have wildcard certs in LE)
261.
by adql 4y ago
You don't need to control the domain (only for wildcards), ability to serve under .well-known is enough.
262.
by adql 4y ago
> Also, I believe this is yet again one more reason for companies and developers to consider row-level security [0], it simply erases the possibility of a malformed query returning data that shouldn't be accessible altogether. That
263.
by adql 4y ago
Investors more likely. It's good news for RV, even more reasons to ditch ARM
264.
by adql 4y ago
You shouldn't commit unencrypted secrets to git anyway, public or private, on-site or in cloud. There are plenty of tools to either keep them encrypted (we just use simple GPG, but our team is small) or just auto-generate and never sho
265.
by adql 4y ago
Nope, good authors can make perfectly separate fantasy world politics despise their own views. This isn't even politics per se, just feel good activism, the "I'm helping", while doing absolutely nothing that helps in the
266.
by adql 4y ago
I'm sure it makes authors feel really good about themselves, even tho it changes absolutely nothing.
267.
by adql 4y ago
> It was a masterpiece. Apple deleting Dark Sky something I will never forgive them for. Maybe not enough to make me switch phones, but enough to make me look elsewhere when needing peripheral items. "I hate them so I will only give
268.
by adql 4y ago
> Sometimes I'll spend hours trying to figure out how to interface with a single sensor, and while it isn't important or impressive in the scheme of things, I really enjoy it. I found a fake sensor like that once.... was wonder
269.
by adql 4y ago
Well, it is right-sized to run a hub controlling all that little devices. But yeah, especially now with various ESP32 firmwares like ESPHome you can essentially just make a YAML with specification on where to listen and what bit to flip and
270.
by adql 4y ago
I recently used Rust (RTIC) for that and it was relatively pleasant experience, it had "tasks" (that cleverly used unused interrupt handlers for context switching so it was nice and efficient) that could be triggered by various st

More ›