Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
dns_snek
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
18 ms
·
331.
▲
by
dns_snek
8mo ago
There's no defense "in depth" here, it's like putting your SSH key in your public webroot and watching the logs to see if anyone's taken your key. That's your only layer of "defense" and you don'
332.
▲
by
dns_snek
8mo ago
What's stopping you? You've always had the option to move somewhere far away from society where you could keep 100% of what you make on your own.
333.
▲
by
dns_snek
8mo ago
Which tax rates? We have dozens. What determines fairness is how the resources in our society are allocated once all is said and done. Income, tax rates, and even money itself is just an abstraction. > if i keep less than half of what i
334.
▲
by
dns_snek
8mo ago
That's approaching the problem from the worst possible angle. If your security depends on you catching 1 message in a sea of output and quickly rotating the credential everywhere before someone has a chance to abuse it then you were ne
335.
▲
by
dns_snek
9mo ago
You can do all of that but you shouldn't have to when using a privacy-focused messenger, and most people won't so they'll be exposed and suffer the consequences if they use Signal expecting a certain level of privacy (and pse
336.
▲
by
dns_snek
9mo ago
Can you support this unfalsifiable reasoning beyond blaming a convenient political scapegoat? Which paragraph of which article of which regulation requires them to deliver low-resolution PDFs in Apple News, for example? What about all the o
337.
▲
by
dns_snek
9mo ago
> HTTP/1.1 alone is a trivial protocol Eh? CWE-444 would beg to differ: https://cwe.mitre.org/data/definitions/444.html https://http1mustdie.com/ > the alternative is trusting the clien
338.
▲
by
dns_snek
9mo ago
> We don't call architects 'vibe architects' even though they copy-paste 4/5th of your next house and use a library of things in their work! Architect's copy-pasting is equivalent to a software developer reusing
339.
▲
by
dns_snek
9mo ago
Remote Code Execution (RCE) is a type of vulnerability. Intentionally running code from a developer you trust is not a vulnerability. An auto-update mechanism only becomes an RCE if it allows unauthorized third parties to execute code on
340.
▲
by
dns_snek
9mo ago
You're completely misunderstanding the impact. If you run AMD's software you're effectively giving root access to your computer to any wifi network you connect to and any person who happens to be on that network.
341.
▲
by
dns_snek
9mo ago
Can anyone rationalize this decision? Sure technically this is outside the stated scope however the severity of this vulnerability is immediately obvious, which should trigger some alarm bells that the scope needs to be reconsidered. If t
342.
▲
by
dns_snek
9mo ago
I didn't say "tech", I said "ad-tech" and "big tech" (meaning ad-tech like Google, not TSMC) which aren't morally neutral like ammunition is. Invasion of privacy and exploitation of private informatio
343.
▲
by
dns_snek
9mo ago
You can avoid coke but approximately every brand in the supermarket is funding ad-tech. And even if you can find brands that don't, your supermarket is likely funding ad-tech to advertise itself so you can't go to there at all. Ma
344.
▲
by
dns_snek
9mo ago
> Cataloguing your fridge requires taking pictures of everything you add and remove which seems... tedious. Just remember what you have? I have ADHD, I forget where I put things down 5 seconds ago and I forget what's in my fridge a
345.
▲
by
dns_snek
9mo ago
No because employees are making the actual thing that inflicts harm while consumers' actions are completely diffused and many steps removed from the harm they cause. That's why ad-tech is so effective in the first place. Consumer
346.
▲
by
dns_snek
9mo ago
How would this situation be any different if BBL printers were open source? The law doesn't care about licensing, there are just 2 groups of printers - those that follow the law and implement effective blocking technology and those tha
347.
▲
by
dns_snek
9mo ago
How much inference are they going to sell a year from now if they stop R&D? Any comparison excluding those costs is either misguided or fraudulent.
348.
▲
by
dns_snek
9mo ago
You can't "remove" costs willy nilly to make a company look profitable. Running an independent ISP is an extremely lucrative business if you gloss over the capex requirements of installing and maintaining the infrastructure.
349.
▲
by
dns_snek
9mo ago
We do still have open source hardware but that's the last line of defense against actions like this, not the first. They'll target distribution which will affect open source and proprietary hardware equally. You need to kill this
350.
▲
by
dns_snek
9mo ago
> reading code is a much more difficult Not inherently, no. Reading it and getting a cursory understanding is easy, truly understanding what it does well, what it does poorly, what the unintended side effects might be, that's the di
351.
▲
by
dns_snek
9mo ago
That's not fair, it's only fascism after you build a death camp with a sign that says "fascist extermination camp" on it! Even then it's just one camp, it's not that bad. Real fascism is when you have hundred
352.
▲
by
dns_snek
9mo ago
> consider The Register, UCLA and Johns Hopkins to be reputable institutions The Register is arguably misrepresenting the story by omission but I don't understand why you're dragging UCLA and John Hopkins into this? The paper i
353.
▲
by
dns_snek
9mo ago
Those "details and nuances of the situation he was called into" become completely irrelevant once one is presented with irrefutable evidence that their actions were completely legal. What matters is his conduct after that happened
354.
▲
by
dns_snek
9mo ago
And this is exactly why nominal $ amount comparisons are completely pointless. Someone who makes $70k in southern or eastern Europe is living like a king (or living at least good life anywhere in Europe) while someone making $70k in expensi
355.
▲
by
dns_snek
9mo ago
Except for the fact that despite popular belief, this doesn't actually happen. Not even among millionaires. https://taxjustice.net/press/millionaire-exodus-did-not-occu...
356.
▲
by
dns_snek
9mo ago
> The kids of the Indian guy who owns the Dunkin’ Donuts down the street aren’t exactly scions of wealth. I don't buy that this is a common scenario. How many of those actually own a franchise and how many of them are drowning in de
357.
▲
by
dns_snek
9mo ago
I think we should put this to the test. The working class stops working for a week/month and we'll see how "productive" the rich capitalists really are.
358.
▲
by
dns_snek
9mo ago
I don't know why this is downvoted, I had a very similar experience a while back. I took 4000 IU/day for about 4 months, insignificant sun exposure and ended up at 60 ng/mL (lab listed normal range as 30-40). My starting leve
359.
▲
by
dns_snek
9mo ago
> you can't interfere or comment effectively on the policies or processes of your water treatment plant Of course you can! You can simply install a well, a water filtration/RO system to make poopy water drinkable, or move to a
360.
▲
by
dns_snek
9mo ago
> My point is that you ask for regulation hoping that it will prevent this type of issue, but the regulation that you actually get will be barely having any effect and it will enforce ID + picture verification, it will enforce downloadin
More ›