efitz

31 ms·

511.
by efitz 2y ago
Like arguing which level of the OSI model a particular function of a network stack operates at. I’d love to have those hours back from 20’s me.
512.
by efitz 2y ago
Uh, I doubt it. At the companies that would be affected, they would simply divest. Shareholders would not tolerate the destruction of value so new companies would be created, spinning off parts of the original company (products and employe
513.
by efitz 2y ago
I dunno. I have a natural affinity for continuous vs discrete functions. But I also think thresholds cause bad behavior when you are near a threshold; you try to game the system by exceeding the threshold while trying to appear to be belo
514.
by efitz 2y ago
It’s not that scale ruins everything, it’s the pursuit of scale that ruins everything. I have thought a lot about antitrust recently and realized that it’s an overlapping problem with the VC unicorn problem. People get so hung up with bein
515.
by efitz 2y ago
Cost, space, searchability, backup-ability...
516.
by efitz 2y ago
There is a lot of formal research on both authentication and authorization. IIRC Butler Lampson’s Turing Award was based on work he did in that area: https://amturing.acm.org/award_winners/lampson_1142421.cfm
517.
by efitz 2y ago
What people want is authorization. Authentication is a painful activity that must be performed in order to do authorization properly in most cases. Side note: there is a trivial case where authentication is reduced to “whoever is physicall
518.
by efitz 2y ago
Hahahaha good one. I love the idea of passkeys; I hate the experience of passkeys, especially when it comes to having to reach for my phone to log into a desktop web site.
519.
by efitz 2y ago
> Most people will never use a password manager Prediction: in 10 years nearly everyone will be using a password manager; it will come with their OS (Android or iOS) with browser plugins for other OS’s, and the integration with mobile ap
520.
by efitz 2y ago
If the authentication session is long-lived then this is usually not too onerous; one round trip the first time you use it. It’s a nightmare if they also insist on short lived sessions.
521.
by efitz 2y ago
By “auth” do they mean “authn” (authentication) or “authz” (authorization)? It looks like they mean authentication but it would be nice if they were clear.
522.
by efitz 2y ago
> All weapon systems that consist of an expensive vehicle and an expensive-to-train crew are being re-evaluated against drones right now. I don’t think that drones are necessarily the only answer to the “expensive weapons with expensive
523.
by efitz 2y ago
Touching coins is icky.
524.
by efitz 2y ago
Almost all problems with name handling come from two assumptions: 1. Names are identifiers. 2. Names can be used to correlate the same person between two systems. These assumptions are not universally correct, and so programmers and design
525.
by efitz 2y ago
What are humans for, then?
526.
by efitz 2y ago
I am skeptical of the analogy to overfitting, although I understand where the author is coming from and agree with the sentiment. The basic problem is stupid simple. Optimizing a process for one specific output necessarily un-optimizes fo
527.
by efitz 2y ago
Ok that is pretty amazing. I followed the link to the repo of tools and it’s crazy that not only can you use automation to track and identify ships but also look up their cargo manifests. The visualization is beautiful but the time scale i
528.
by efitz 2y ago
Before I started in infosec I was a software tester for a year in the mid-90s. We called this kind of testing “monkey testing” and usually spent some time on it because it turned up lots of bugs, both code bugs and design/usability bu
529.
by efitz 2y ago
Maybe shadows (length and direction) could give a sense of time of day, along with shading of sky and land.
530.
by efitz 2y ago
With government bureaucrats with no penalty for failure and no expertise in software development guiding the design? And “lowest bidder” contractors to implement whatever shitty design the bureaucrats came up with? Hahaha recipe for failur
531.
by efitz 2y ago
Reuters is quoting experts, including lithium battery experts, saying that the explosions were inconsistent with an exploding battery: https://www.reuters.com/world/middle-east/what-we-know-so-fa...
532.
by efitz 2y ago
> a clandestine explosive installation would have resulted in far greater damage and included shrapnel No and not much. The amount of explosion you get is proportional to the amount of explosives used. Small amount of explosives == sma
533.
by efitz 2y ago
Modified firmware that triggers on a receipt of a particular message and/or from a particular number?
534.
by efitz 2y ago
You’re doing it wrong. “Falsehoods programmers believe…” articles are designed to make you THINK about problematic assumptions. They are not like the 10 commandments and they are not decrees of absolute truth.
535.
by efitz 2y ago
No, you need to think like an MBA. It means that they are the most valuable employees, because their productivity per dollar is infinite. It also means that when you sort all the (non-executive, of course!) employees by total comp in prepar
536.
by efitz 2y ago
Go low-tech: call 911, report a noise complaint, and then the police locate the source :-D
537.
by efitz 2y ago
Yes, the link is in the article: https://netflixtechblog.com/announcing-bpftop-streamlining-e...
538.
by efitz 2y ago
Great related thread from yesterday: https://news.ycombinator.com/item?id=41492251
539.
by efitz 2y ago
Ive worked at several huge corporations in IT security, where we care about headers a lot, and they all use headers in a manner similar to CloudFlare. Including using proxies at the edge to strip out internal headers bidirectionally- yes, i
540.
by efitz 2y ago
There is another very active article on HN today about the launch of the new Apple iPhone 16 models. The top discussion thread on that post is about “my old iPhone $version is good enough, why would I upgrade”. It’s funny, if you ask tech p

More ›