diafygi

8 ms·

31.
by diafygi 7y ago
Hmmm, on the sliding scale of harmless to life-and-death software, it seems that as time goes many programs and services migrate from being closer to the harmless end to bring closer to the life-and-death end. I feel that migration is often
32.
by diafygi 7y ago
But will they pay millions of dollars for a WiFi firmware stack in energy IoT devices that the grid is increasingly depending on that isn't vulnerable to memory overflows or other hacking vectors? Software is becoming more and more dep
33.
by diafygi 7y ago
That's becoming less true, especially around Houston, where there were several district flips to blue in the last midterms, even with the heavy Republican gerrymandering. https://www.kut.org/post/texas-suburbs-are-
34.
by diafygi 7y ago
Tarrant County (Fort Worth), flipped blue last election. https://www.star-telegram.com/news/politics-government/elect...
35.
by diafygi 7y ago
I feel like political/advocacy/regulatory should be a category. Organizations like Vote Solar, SEIA, Mission:Data, Sierra Club, etc. have most impact fighting climate change because the policies they push through have huge industr
36.
by diafygi 7y ago
blog.domain.com is much better from a security perspective since logged-in session cookies from your main domain won't be sent in blog requests (different origin). That provides protection for if someone manages to get a malicious scri
37.
by diafygi 7y ago
> I still look for two things: a/ great engineers/designers/product folks with deep empathy for problems people have, and b/ a real problem to solve. That... sounds like just regular investing. Rather than trying to s
38.
by diafygi 7y ago
> The world is full of capital, and it's not going to the right people who can solve problems. Hmmmm, isn't being a VC kind of exacerbating this problem? The business model of being a VC is entirely based around moonshots, whic
39.
Abusing YouTube Copyright Claims (Tutorial)(youtube.com)
2 points by diafygi 7y ago|0 comments
40.
by diafygi 7y ago
Crime isn't automated. Someone has to write the script that commits the crime (or I guess ultimately design the AI framework that generates criminal bots). At the end of the line there's still a human.
41.
by diafygi 7y ago
Hmmmm, I think it's a bit of an unreasonable expectation to think technology should prevent companies from breaking the law. Most meatspace laws are expected to be followed despite there being little to no physical barrier to breaking
42.
by diafygi 7y ago
GoAccess doesn't seem to have conversion funnel tracking. Or is available in some sub-feature or plugin?
43.
by diafygi 7y ago
*if you use their app. You don't have to use their app for day-to-day usage via Bluetooth, however, they make it impossible to initially setup noise canceling functionality without the app. I'm extremely grateful that the Bluetoot
44.
by diafygi 7y ago
I love containers as well. Does anyone know when/if they'll be coming to Firefox for Android and iOS? Also, I really wish you would be able to specify which container you want in the Home button when using multiple urls for your d
45.
by diafygi 7y ago
Ah, yes, that's correct. I guess I was assuming that once you issue a new authorization code, the authorization server should invalidate any previously issued access_tokens/refresh_tokens because the new authorization code represe
46.
by diafygi 7y ago
Hmmm, is there guidance saying that you should auto-redirect? The spec says, "If the authorization server observes multiple attempts to exchange an authorization code for an access token, the authorization server SHOULD attempt to re
47.
by diafygi 7y ago
Hmmm, as a user, I guess I would expect the opposite behavior, and I'd think the question should be why wouldn't you want to ask the user to authorize and app they already authorized? A client should usually only redirect the user
48.
by diafygi 7y ago
In the proof of concept[1]: 1. Send an ajax HEAD request, which grants the permissions. 2. However, since the HEAD response doesn't have valid CORS headers, you can't read the 'code' parameter from the HEAD response. 3.
49.
by diafygi 7y ago
So I originally studied chemical engineering, and one of the common catchphrases is, "regulations are written in blood." The reason there's a requirement to put a pressure relief valve on that tank is because at some point a
50.
by diafygi 7y ago
We do something similar, where we just have a branch that is "prod", and the deploy script just checks out that branch, packages up all the things, and deploys them to the servers. If you want to roll back, just force-push the &qu
51.
by diafygi 7y ago
> Not really sure how to fight that. Rather than trying to challenge them on whether they really do have anything to hide, I usually try to challenge their assumption that privacy is an individual right. Privacy isn't an individual
52.
by diafygi 7y ago
Hmmm, so I work in the distributed energy resources sector, and I disagree that people in this space aren't recognizing how hard it will be to deeply decarbonize using intermittent generation. You're completely correct that as we
53.
by diafygi 7y ago
The saying that's now prevalent at utility conferences is, "In the past, we'd forecast load and deploy generation. In the future, we'll forecast generation and deploy load."
54.
by diafygi 7y ago
Hmmmm, I think the difference is that the dip will be ever-increasing to the point where it completely eliminates the need for fossil-based generation. California (and many other places) have 100% carbon-free energy mandates over the next f
55.
by diafygi 7y ago
Hmmmm, yes, probably. However the reasons for deploying millions of lithium batteries instead of a few dozen pumped hydro stations are likely more political and business reasons than technical reasons. First, it's way easier and faster
56.
by diafygi 7y ago
Replying to my own comment with a more meta comment: I'd also like to point out that the Duck Curve is a good example of the class of problem in the energy transition that seem like a major blocker at first and is often pointed to by
57.
by diafygi 7y ago
CAISO has a great live dashboard that you can play around with on the actual real time demand and supply curves. If you switch to previous days, you'll see the "duck curve" is already here and not just speculation anymore. h
58.
by diafygi 7y ago
I wonder what AI tech is being developed around detecting pin code entry on phones using passive CCTV networks. If you process the feeds for public transit security cameras, I wouldn't be surprised if you can read the pin codes for a h
59.
by diafygi 7y ago
Does anyone have a list of self-hosted server-side analytics tools with conversion funnel tracking? The only self-hosted one I can find that has a funnel feature is Matomo.
60.
by diafygi 7y ago
I really like the mockups in this post. It's so rare that you see discussion of authentication UI/UX. Speaking of, are there any UI/UX design resources (books, tutorials, blog posts, etc.) on for modern authentication flows (

More ›