Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
danjoc
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
33 ms
·
331.
▲
by
danjoc
9y ago
Or perhaps there's some racial bias and a certain ethnicity tends to be associated with Java and Eclipse.
332.
▲
by
danjoc
9y ago
Apple is an iPhone company, http://static5.businessinsider.com/image/59289f0379474ce7238... Diversification doesn't hurt. Especially if it's at the expense of one of your largest competitors. Especially when
333.
▲
by
danjoc
9y ago
>Apple seems to be the only tech giant adhering to "do no evil." That's such an odd idea. I'm not sure how you arrive at it. Apple, in this case, is simply setting itself up as a gatekeeper for advertising. Just like
334.
▲
by
danjoc
9y ago
1. So that's what you tell your parents? Every snap thread I've ever seen is soliciting nudes found on snap or soliciting usernames to solicit nudes. 3. I don't think we're talking about the same Saudi Arabia. Just talki
335.
▲
by
danjoc
9y ago
>software they take for free Software they were given. More cringe: https://mobile.twitter.com/wesmckinn/status/9098543516944588... It sounds like Wes has given a gift and now expects something in return for it
336.
▲
by
danjoc
9y ago
I read that as, "StackOverflow confirms: Pandas is poorly documented."
337.
▲
by
danjoc
9y ago
https://mobile.twitter.com/wesmckinn/status/9097726525329530... Well that certainly escalated quickly. The anger issues seem misplaced. Not a good way to solicit contributions.
338.
▲
by
danjoc
9y ago
My question isn't why they blocked Al Jazeera. Why doesn't Saudi Arabia block Snap? Snap has a reputation as a nude pictures app. Saudi Arabians are offended by too much ankle showing under the burka. It seems like Snap should be
339.
▲
by
danjoc
9y ago
Of all the thing I would expect the Saudi's to ask Snap to block, Al Jazeera seems pretty far down the list behind nudity. Is nudity effectively blocked on Snap there?
340.
▲
by
danjoc
9y ago
No. Jail + fine >= golden parachute.
341.
▲
by
danjoc
9y ago
>Article makes a false premise: that speed of writing the first version is important. In my experience, project managers care more about how long it's going to take to build than about how maintainable it is. It's literally alw
342.
▲
by
danjoc
9y ago
We definitely do where I work. I'm really, really surprised to hear they do not where you work. A multibillion dollar company like Amazon, who runs half the internet with AWS, does not verify dependencies? Wow. That's breathtaki
343.
▲
by
danjoc
9y ago
>who are the identities behind these signatures? https://maven.apache.org/guides/mini/guide-central-repositor... "we require you to provide PGP signatures for all your artifacts (all files except checksums
344.
▲
by
danjoc
9y ago
>the key difference in Maven Central is a manual review process Lipstick on the pig, still covered in mud. The key difference is the regular occurrence of malware finding its way into PyPi and NPM due to the lack of multilayered security
345.
▲
by
danjoc
9y ago
>Complicating the system further for something that, for practical purposes, does not improve the security of the vast bulk of people is not a trade off we're willing to make. This is the weakest argument. Are Python devs somehow du
346.
▲
by
danjoc
9y ago
Your arguments and exaggerated claims are silly. I can point to Maven Central all day long. They're doing it right. They don't have these problems. You know who does this sort of thing? Politicians. They can't just look at a
347.
▲
by
danjoc
9y ago
>Is there a utility that makes side loading easier? Yeah, it's called "The Play store banned my favorite app." Like youtube downloaders and ad blockers. That's a good way to make users ignore the scary "uncheckin
348.
▲
by
danjoc
9y ago
>you cannot locate said rogue contributor without regularly manually reviewing 117,226 packages. Herd immunity. Someone is out there reviewing it. Most users won't need to lift a finger beyond verifying signatures.
349.
▲
by
danjoc
9y ago
And yet in every typo squatting case, there's multiple projects leading back to a single contributor. It's almost like noticing a little known nobody sneaking to the front of the Pareto distribution would be a huge red flag.
350.
▲
by
danjoc
9y ago
>For example, there may be `urllib3` which is a valid project that must be signed by key X. Someone then comes and registers another project, `urlib3` which must be signed by key Y. Key X is on the company approved key list, key y is not
351.
▲
by
danjoc
9y ago
Gab could use this as an opportunity to build up an app store of their own. Line has an in app store. Gab could too. Encourage users to side load gab, then you have a dedicated core audience who wants to support your platform. In app purcha
352.
▲
by
danjoc
9y ago
Beating a dead horse. Facebook won't change it. That was settled already. This issue is just noise in the React devs' inbox. The devs have no say on company policy. They've already pointed that out.
353.
▲
by
danjoc
9y ago
When I read things like, https://caremad.io/posts/2013/07/packaging-signing-not-holy-... I get the impression they don't care about security at all. They seem like children plugging their ears and shouti
354.
▲
by
danjoc
9y ago
> Customs can do that anyway if you have a password. Allow me to repeat myself, If you can't lock yourself out, it's not secure. For example, some banks have time locks. Nobody gets into the vault, unless it is in a certain win
355.
▲
by
danjoc
9y ago
If ye love wealth better than liberty, the tranquility of servitude than the animated contest of freedom — go home from us in peace. We ask not your counsels or arms. Crouch down and lick the hands which feed you. May your chains sit lightl
356.
▲
by
danjoc
9y ago
>unless you have bizarre constraints that force you to make such concessions Like true software freedom? An ARM chromebook with Coreboot and Linux puts me squarely in Richard Stallman approved territory. Living the dream; No binary blobs
357.
▲
by
danjoc
9y ago
>All biometric security mechanisms are bad They are though, if bad == insecure. Customs can make you unlock with fingerprint or face. If you can't lock yourself out, it's not secure.
358.
▲
by
danjoc
9y ago
NTT Docomo places Qi wireless charging all over Japan. Okudake Juuden. Fujitsu F-10D has wireless charging, waterproof, 13MP camera, on first quad core with LTE in the world, Jan 2012. Wireless charging is built into the removable battery.
359.
▲
by
danjoc
9y ago
>Open source software does not have this, and nowhere does the author suggest that should be the case "the underlying reason is political, and it’s pretty simple: Big corporations have poured large amounts of money into our politica
360.
▲
by
danjoc
9y ago
>If I build an airbag in my garage, and Honda shows up tomorrow and puts it in their car, and it fails because I don't know how to make good airbags, I would not be legally liable for those failures. https://en.wikipedia.
More ›