Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
eterm
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
66 ms
·
961.
▲
by
eterm
9y ago
It has utility for ransomware. Even a niche utility can bootstrap an ecosystem. Add layers and layers of speculation above that kernel and it is a feedback loop. As long as speculators refuse to sell, people need to spend more and more for
962.
▲
by
eterm
9y ago
I'm afraid that like the housing bubble, it'll get "too big to burst" and require intervention to keep those who have previously invested afloat while keeping down those outside the bubble.
963.
▲
by
eterm
9y ago
For optics they could take a cut only when moving money out. Then the consumers never feel taxed, they feel like the producer is getting 100% of the money. If the money then circulates then that's OK. If the money is withdrawn then tak
964.
▲
by
eterm
9y ago
If you produce a list of hashes, you can reverse those hashes simply comparing against the hash. This still isn't private for any URLs in the list, but it does anonymize any URLs which get transmitted in case your white-listing goes ba
965.
▲
by
eterm
9y ago
If you have the whitelist, you compare the hash on the backend to known hashes. That's how "Safebrowsing" things work, no reason why it couldn't work here too.
966.
▲
by
eterm
9y ago
It shouldn't even be returning URLs, it should return URL hashes. Even returning URLs seems like a privacy nightmare.
967.
▲
by
eterm
9y ago
In your advertising material for ode-to-clean you imply that your H2O2 is somehow fundamentally different in the end product to H2O2 manufactured in other ways. You describe it as being "toxin free", and yet also have this paragra
968.
▲
by
eterm
9y ago
I noticed in recent firefox-dev you can now expand XHR requests directly in the console which then pops up a mini network panel. I don't know how long it's been there, I noticed it today but I might have simply had XHR logging off
969.
▲
by
eterm
9y ago
It can be an effect of "Karma Racing". Duplicate submissions count as an upvote to the original post. If you have a source which is known is being popular by the community (i.e. stripe), then there is a race to submit that article
970.
▲
by
eterm
9y ago
Mining is typically something like: Hash(nonce + Hash(chain[including with new transactions])) < value. So in some sense you need the chain but you can pass Hash(chain) to a client and let that just increase nonce and hash it. Without sy
971.
▲
by
eterm
9y ago
Remember when twitter was praised for being part of what helped the Arab Spring? Now both corrupt and moral alike can be clamped down by these rules. Who will be the arbiter of what is considered a "violent organisation" and what
972.
▲
by
eterm
9y ago
It's not exactly make believe, it's about transferring crime to one that may be easier to prove (and therefore easier to prosecute) or which has a harsher sentance. If you didn't have signatures, it would be difficult to prov
973.
▲
by
eterm
9y ago
I've long come to accept that HN is a curated source, the voting is a kind of false-democracy to make it appear more democratic than it is. Yes, likely >90% of the site is done through voting, but a significant amount of pruning and
974.
▲
by
eterm
9y ago
Does anyone know why the page flashes when clicking "Docs" at the top, but not when moving to the "installation" link on the left hand side which is the same url?
975.
▲
Ask HN: Are bug bounties leading to bad outcomes?
8 points
by
eterm
9y ago
|
2 comments
976.
▲
by
eterm
9y ago
I would consider "user input" to be everything coming back from the client, that includes everything down to cookies, HTTP-Headers, form values. Validate everything. Re-check authorisation always. My favourite too was being new in
977.
▲
by
eterm
9y ago
If DOTA is anything like league I'm not sure I agree completely. I think in league there's more 'future prediction' needed, i.e. the current state is less immediate than in star-craft. In star-craft you can quickly see w
978.
▲
by
eterm
9y ago
I found their top 10 really approachable. Of course I knew some of the more common things such as SQL-injection and knew of other things but didn't know their name such as CSRF. It was great to formalise independent knowledge into a co
979.
▲
by
eterm
9y ago
By this point I'm convinced there are bots which auto-upvote anything blockchain related. I'm not sure how else to explain how this is so high with so few comments.
980.
▲
by
eterm
9y ago
Well you've assumed they don't have a vote. US citizens are entitled to a vote while living abroad. https://travel.state.gov/content/passports/en/abroad/legal-m...
981.
▲
by
eterm
9y ago
If that frightens you then you shouldn't sacrifice yourself working expecting some kind of future pay-off. Live around your work, so you are working to enjoy life now, not in the future. That doesn't mean "slack off" or
982.
▲
by
eterm
9y ago
While London does have a lot more surveillance than the rest of the UK, anywhere in the UK has a lot more surveillance than most other comparable countries. It was 13 years ago that the UK's then information commissioner warned we were
983.
▲
by
eterm
9y ago
All this stuff is tracked all the time anyway through cell towers, it's way past where the regularization point is for "state intrusion" in the UK. That might seem weird to an outsider but that's just a culture differenc
984.
▲
by
eterm
9y ago
UUIDs aren't exactly guessable, any hole which lets someone "slip in some code" is way more serious than a persistent login token. It's not great to have a non-revocable login token, but a "UUID that lets anyone log
985.
▲
by
eterm
9y ago
You only need to look at how well PUBG has handled the load of quickly becoming one of the most popular games to see the benefits of AWS. Yeah, their server software itself sucks a bit (low tick-rate, odd "de-sync"), but scaling i
986.
▲
by
eterm
9y ago
The bundling continues, they have now also bundled in "twitch prime" including a free subscription each month. The old twitch prime ('turbo') no longer exists. Am I happy that I suddenly have a free sub? It's nice t
987.
▲
by
eterm
9y ago
And you could do it with a WYSIWYG editor which would output reasonable markup. (dreamweaver) Or more popular, you could do it with a horrible WYSWIG editor which output garbage (Frontpage express).
988.
▲
by
eterm
9y ago
Exactly. In the UK we have a National Insurance number, but it's stated over and over again that: This is not proof of identity . Anywhere it is referenced it is repeated that it should not be used as proof of identity and not given t
989.
▲
by
eterm
9y ago
Isn't hipchat its slack competitor? Where does this leave that project? Hipchat is already suffering from poor support, its windows client is awful since it went to "version 2".
990.
▲
by
eterm
9y ago
That's definitely not true. You need to find better places to work.
More ›