Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
awj
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
22 ms
·
181.
▲
by
awj
12y ago
It may sound small by volume, but it sounds pretty big by potential effect. Especially if we're talking about compounds that can bioaccumulate and move up the food chain. We worry about the mercury content of tuna, what happens when th
182.
▲
by
awj
13y ago
I'll take one responsible author with one harsh-but-knowledgeable critic over a hundred would-be authors without the ability to sift useful content from polemic criticism.
183.
▲
by
awj
13y ago
> PolarSSL condones the practice that makes OpenSSL less secure than any other, which is commercial entities not being obligated to give back. ...it really isn't that simple. Many of the mechanisms for obligating commercial entities
184.
▲
by
awj
13y ago
I can see what you're saying, but ultimately there's no helping people who are doing something they don't really understand. I'm more interested in language features that remind me when I forget to do something I wante
185.
▲
by
awj
13y ago
> Yes, you MUST. That is just how Go does things. If it's something I "must" do, why doesn't the language force it to happen? Silent failure is a really bad default.
186.
▲
by
awj
13y ago
> Interesting point for me is that those who serve over HTTP only are not vulnerable ...yes they are. You don't even need remote private key disclosure to MITM an http-only server. The way HTTP digest is written means you either s
187.
▲
by
awj
13y ago
So "many eyes" means "paid researches at Google and a security firm"? Also, this bug was in place for what, two years? If the many eyes hypothesis has a two year lead time to find bugs this severe, we can stop talking ab
188.
▲
by
awj
13y ago
If Heartbleed is the result of supporting a massive range of architectures and ever-moving standards, the answer is to do less . If OpenSSL can't maintain quality code and architecture support and feature support, the answer is N
189.
▲
by
awj
13y ago
> And then we'd have potential exploits both in the daemon and in the safe language runtime/compiler. That doesn't make the idea futile, especially considering the current alternative. A language runtime focused on safety
190.
▲
by
awj
13y ago
Indeed. The proper thing to do is: write your own malloc, learn an enormous amount from implementing malloc, never ever under any circumstances allow your malloc implementation to enter into production use. Hopefully the act of writing yo
191.
▲
by
awj
13y ago
It went comparatively smooth for us. 2 to 3 was a nightmare, 3 to 4 wasn't too awful. Some of the things that bit us: * Strong parameters means you're going to have to figure out what everything needs for params or break down and
192.
▲
by
awj
13y ago
Yeah, you know you're doing something wrong when even the PlayStation 3 UI is beating you on intuitive use.
193.
▲
by
awj
13y ago
No, there really isn't anything innovative about them. I doubt that will stop HN comments from crying "Won't someone think of the INNOVATION" when confronted with regulations to produce an impediment to something they wa
194.
▲
by
awj
13y ago
Those things are all status quo, do you want clean water or innovation? Because apparently in some people's realities you can't have both.
195.
▲
by
awj
13y ago
> Not to mention it's the eventual result of a competitive market (Econ 101). ...maybe you should have also taken Econ 102? A race to the bottom is only the inescapable result in the silliest of toy market simulations. There's
196.
▲
by
awj
13y ago
> As the US (and the world) moves more to a non-subsidy model I think this disproportionately impacts the iPhone. This is the exact model Apple's computer division deals with, and they're wildly profitable compared to most PC v
197.
▲
by
awj
13y ago
The real drastic solution is to disable HTTP for the entire internet and stop implicitly trusting the identity of servers. Until we decide that is worthwhile we're just going to be patching a leaky boat.
198.
▲
by
awj
13y ago
...and if you actually read the article you'd see that the distance involved is completely inessential to his purpose. Also, you don't know him or how many bagels he's hauling around. I can guarantee you that I can find a b
199.
▲
by
awj
13y ago
Yeah, that could be it too. I'm really just responding to the idea that "a mole" is farfetched. There's a reason that Apple is known for being incredibly paranoid about people leaking business secrets: it happens, often.
200.
▲
by
awj
13y ago
So your version of Occam's Razor is "Amazon hurriedly cut prices on a profitable service without much time for evaluation" over "someone at Amazon told Google about upcoming price changes while Google had time to decide
201.
▲
by
awj
13y ago
If your UI requires that users "be attentive" just to discover the content you're trying to convey , then your UI is awful and the user's failure to see it is entirely your fault.
202.
▲
by
awj
13y ago
Please, point out to me the system that adequately resolves unusual billing situations without human intervention on both sides. I'd like to know what has set your bar so high that it prompted this level of entitled commentary.
203.
▲
by
awj
13y ago
I think it's a legitimate concern about the ability to read examples. Using nonstandard tools to showcase a concept limits the people who are able to follow along. Not everyone has invested the time to learn the ins and outs of CoffeeS
204.
▲
by
awj
13y ago
At that point you're no longer dealing with rays and the math gets way more expensive for a goal of 1/60th of a second per render loop.
205.
▲
by
awj
13y ago
90% of the people who work on a movie couldn't hope to own a million dollar mansion.
206.
▲
by
awj
13y ago
John Carmack took Haskell out for a spin in 2013 and had a good take-away from it. I don't have any sources to link, but I remember quite a few comments from him on twitter about how he got almost nothing but benefits the harder he lea
207.
▲
by
awj
13y ago
Using a reference time to describe the layout is pretty brilliant. Out of curiosity, how would it handle non-time "noise" data that happened to be embedded in the string? Expecting "it'll throw an error, also why would y
208.
▲
by
awj
13y ago
That's a ridiculous argument. If the attacker could do that why would they even bother with XSS attacks based on developer tools?
209.
▲
by
awj
13y ago
When I was a kid I would make something similar out of a (partially) unfolded paperclip. Seeing it on youtube makes it seem much less amusing than I remember. https://www.youtube.com/watch?v=mKaR8cxS4Y4
210.
▲
by
awj
13y ago
Used coffee grounds are great compost, and are good as a scouring agent for pots and pans or to scrub off dead skin and stronger odors (garlic, onion) from your hands. Out of everything that ends up in your trash can, they're one of th
More ›