archi42

80 ms·

841.
by archi42 7y ago
If it is not too hot, or too cold, or rainy, I take my 25km/h EU-regulated e-bike for my 7km trip to work (40% public road /w bike lane, 30% public road /wo bike lane, 30% forest road; 110m altitude to climb one way, 140m the
842.
by archi42 7y ago
tbh, I think that "engineer at a big company" is not that unimportant: That guy started to fall from a high point, he had already achieved something and, if it wasn't for his addiction, this story wouldn't have happened;
843.
by archi42 7y ago
IANAL, but I am not sure if they're legally selling counterfeits, or if they're even (legally speaking) involved with any crime at all. Maybe (to the law) they're victims as well? Common sense tells me: Yeah, what Amazon is d
844.
by archi42 7y ago
The problem here is Amazon making it ridiculously easy for people outside of our legislatures reach to commit crimes. So, the logical option is to punish Amazon (and similar companies) for distribution of counterfeits. Is it legal what Amaz
845.
by archi42 7y ago
I would not sign that claim as a general truth. It's true under some assumptions, but then, well, just disable -Werror in 5 to 10 years? It's not like THAT is a breaking change. OTOH 5 to 10 years is a good way to accumulate plent
846.
by archi42 7y ago
I think adding the key use a different mechanism - there are two JS interfaces for U2F, and FF only supports one of them. TBH I've added my key to GitHub with chromium, but have since moved to FF; so that might be what you're seei
847.
by archi42 7y ago
Hm, I wonder if the symmetric encryption with a sophisticated cipher is really necessary in this scenario. The aim is require an attacker to read 16Kb of memory in addition to the much smaller key data, e.g. for each bit of the key, the att
848.
by archi42 7y ago
Seems like Firefox U2F is just disabled by default: https://www.yubico.com/2017/11/how-to-navigate-fido-u2f-in-f... (tl;dr: Open about:config, search for u2f, enable) With that done, GitHub prompts me for my key.
849.
by archi42 7y ago
If you don't control the build env (e.g. FOSS work), then of course relying on -Werror might yield unnecessary trouble.
850.
by archi42 7y ago
We use -Wall and -Wextra, and fixed basically all our warnings. Now everyone writes virtually warning-free code (that is, any warning is fixed before committing). And I don't feel limited in what I can do. We could roll -Werror for mos
851.
by archi42 7y ago
By that logic you could get rid of a lot of warnings. TBH, I think getting good warnings is a major feature of modern compilers.
852.
by archi42 7y ago
If python & Qt is an option, then why not (modern) C++ & Qt? Genuine question. QBasic was my first programming language, and I learned C++ only during university. Looking at older code at my job I think I'm lucky to have missed
853.
by archi42 7y ago
At a wine seminar I attended a few years ago we primarily had wine from Bethlehem and the general Palestine region. The importer told us that the wine culture there is some thousand years old (which of course it is, at least there is a tra
854.
by archi42 7y ago
Abstracting this basically yields: "Random stranger X did something that is not right to do, so I'll hurt another random gal/guy Y for that"? Dear god, I hope you live really far away from me.
855.
by archi42 7y ago
My cold storage NAS with 12 old HDDs (400GB to 1TB) acts as my btrfs test-env. It's all old hardware: Disks are salvaged from the company [after being shredded], the system is an Athlon Dual Core 5000+ on some MoBo with 4 SATA ports; n
856.
by archi42 7y ago
That depends on where you put it and how much uptime the machine sees. My cold storage NAS draws 70W idle, but its up time is at most a few hours per week - and I essentially got it for free. Since the 12 disk file server case sits in the b
857.
by archi42 7y ago
No offense, but you're aware you make it sound as if we used to use punch cards until the arrival of docker? You can often run daemons as different users and set appropriate file permissions. You can add ENV variables to your start up
858.
by archi42 7y ago
I often used this when solving assignments and can recommend it to any computer science student.
859.
by archi42 7y ago
There are those philosophers which are as concerned with logic as you'd expect from a pure mathematician ;-) If you're interested, Shapiro's "Thinking about Mathematics: The Philosophy of Mathematics" gives a nice i
860.
by archi42 7y ago
As per the contract the copyright of my work goes to my employer, and I have no copyright to (on?) it. The difference is that I am not allowed to reuse that work somewhere else (e.g. my own project) with my contract, but from what you say t
861.
by archi42 7y ago
Oha, thanks. That's actually repeated in my contract.
862.
by archi42 7y ago
Wow, okay. I honestly didn't believe that was legally possible - and thanks for pointing out that I'm probably wrong. I checked the wording of my contract, and regarding "my employer has ownership of my work" it explicit
863.
by archi42 7y ago
Not the first, and surely not the last time we read about this kind of stuff here. And one of the reasons I prefer either running web things on my own server(s) as much as possible. And can't you set a charge limit on Firebase?
864.
by archi42 7y ago
> a bunch of contract clauses that basically lets the company own all IP while employed. This is default here as well (Germany), but I only interpret this as stuff done during work time. So the stuff I come up with and the code I write a
865.
by archi42 7y ago
I agree that this is quite likely. But there is more subtle evilness in undefined behavior. E.g. for "foo(bar(), baz())", it's not clear whether bar() or baz() is executed first (or maybe it is now, but wasn't in earlier
866.
by archi42 7y ago
Since many commenters on HN don't seem to be aware that 2FA over text messages is inherently insecure. This article outlines how a sophisticated attacker doesn't even need to perform the SIM swapping trick as done here https:&#x2
867.
Criminals Are Tapping into the Phone Network Backbone to Empty Bank Accounts(vice.com)
2 points by archi42 7y ago|1 comments
868.
by archi42 7y ago
Symbolic Execution [SE] is a subset of Abstract Interpretation [AI] (Cousot et Cousot, '70+something), which we use in our product, which is in turn used by industrial customers. While this goes primarily in the safety direction, I&#x2
869.
by archi42 7y ago
"Aversion" is such a strong word... I mean, yes, I try to avoid Google due to privacy concerns. That means no more Chrome, no Google-Search-as-default and not logging in via Google. OTOH, you're totally right about striking a
870.
by archi42 7y ago
Ah, don't take the post as an ad for the HTC 10. I only got it for the great headphone amp (I have Sennheiser HD 650 headphones with 300R impedance). I think there are better supported LOS devices. Especially with other users warning

More ›