Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
eeZi
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
20 ms
·
151.
▲
by
eeZi
11y ago
I fully agree. Python 3 makes life much, much easier with non-ASCII languages and prevents the annoying Unicode conversion bugs you see in most Python 2 code bases. It's also very intuitive, which is great for teaching - I've alwa
152.
▲
by
eeZi
11y ago
Those are vintage screenshots. It appears to look like this nowadays: https://play.freeciv.org/webclient/?action=new
153.
▲
by
eeZi
11y ago
Well, the CEO stepped down and multiple managers were suspended. New management might actually want to know, not find someone to blame.
154.
▲
by
eeZi
11y ago
Mitigation: use Chrome? None of the recent Flash exploits were able to break out of the sandbox, at least not on Linux.
155.
▲
by
eeZi
11y ago
Lynx actually had its fair share of vulnerabilities due to bugs in the parsing code. Ain't that easy.
156.
▲
by
eeZi
11y ago
CDPATH alone works pretty well already
157.
▲
by
eeZi
11y ago
The dev team?
158.
▲
by
eeZi
11y ago
Simple OOB authentication is much better than nothing, and I agree with you that most users aren't going to buy an U2F key unless it's subsidized and/or required by a service (look at Github - they're running a $5 U2F Yu
159.
▲
by
eeZi
11y ago
I've seen PCI auditors accept code-to-the-phone as proper two-factor auth many times. Not that you aren't right...
160.
▲
by
eeZi
11y ago
How does this example protect against phishing? Since the user believes that he's actually authenticating with WellsFargo.com, he would confirm. That's what U2F protects against.
161.
▲
by
eeZi
11y ago
Mission statement was always the same. It's just no longer a default. Note that user who signed up before the default change took place still have the old defaults!
162.
▲
by
eeZi
11y ago
https://github.com/jitsi/jitsi-meet
163.
▲
by
eeZi
11y ago
The RethinkDB Python driver works exceptionally well with asyncio.
164.
▲
by
eeZi
11y ago
> Personally, the idea of putting a device with a camera and microphone behind a two-way mirror just feels a bit too much like a telescreen for me. Tape over the camera, break microphone? But yeah.
165.
▲
by
eeZi
11y ago
iPython Notebook makes for a nice terminal emulator: http://jeroenjanssens.com/2015/02/19/ibash-notebook.html (inline images!). It lacks readline support, though, and does not implement all VT100 control char
166.
▲
by
eeZi
11y ago
They'd just have to "sudo -l". No logging of executed commands either, that way.
167.
▲
by
eeZi
11y ago
IPSec still has forward secrecy even with pre-shared keys.
168.
▲
by
eeZi
11y ago
That's what I thought as well. It's impossible to expire old backups that way since all backups sets depend on each other.
169.
▲
by
eeZi
11y ago
rundll32.exe! Cool stuff. Reminds me of iPython and xonsh. http://ipython.org/ http://xonsh.org/
170.
▲
by
eeZi
11y ago
I agree with you that cgroups protect against denial of service attacks, and that the device whitelist provides some additional security (I actually did not know about the latter, so thanks! TIL). Thinking about it, if you exclusively use b
171.
▲
by
eeZi
11y ago
I read both links, and the "isolation" provided by cgroups alone will not prevent exploitation of this bug (or any other, for that matter).
172.
▲
by
eeZi
11y ago
qemu-kvm is vulnerable too.
173.
▲
by
eeZi
11y ago
But cgroups do not provide isolation, just better resource management.
174.
▲
by
eeZi
11y ago
How likely is exploitation, given that the QEMU binaries are compiled with all available mitigations/hardening flags?
175.
▲
by
eeZi
11y ago
> All the time if you use libvirt. Does it? Afaik libvirt requires AppArmor/SELinux for this.
176.
▲
by
eeZi
11y ago
Docker is not great for multi-tenant environments. But Intel is trying to solve this with Clear Containers.
177.
▲
by
eeZi
11y ago
Lack of APIs, maybe?
178.
▲
by
eeZi
11y ago
Same for my country. If it's a commercial site, valid contact information is required.
179.
▲
by
eeZi
11y ago
https://www.python.org/dev/peps/pep-0484/
180.
▲
by
eeZi
11y ago
> maybe one day we'll have browsers that come with several languages' runtimes baked in asm.js/WebAssembly takes care of that.
More ›