freeqaz

44 ms·

571.
Ask HN: Is funding the actual problem holding back Open Source security?
10 points by freeqaz 5y ago|5 comments
572.
by freeqaz 5y ago
Temporal is awesome. It's definitely not the "easiest" tool to use in the world, but it is very powerful. I threw you over an email. I'd be happy to chat and help share my lessons about this. :)
573.
by freeqaz 5y ago
In this case, our "niche" was Jr. Devs that could write some code but couldn't get something deployed very easily. Kind of like Heroku. The angle of it being "generic" was that it required that you knew how to code.
574.
by freeqaz 5y ago
I found this project last week and I've been using it for a few days. In the past, I've used Trello to manage my tasks but I've always hated having to use a web browser and rely on the Cloud for this stuff. Instead, I tended
575.
A personal task organizer on top of Markdown with Vim-bindings(github.com)
3 points by freeqaz 5y ago|1 comments
576.
by freeqaz 5y ago
How does that work with EOL for a release? Does everything break and you have to re-install? My disk encryption is a little complicated so I'm happy that my rolling release means I only have to re-install when I swap boxes. That was my
577.
by freeqaz 5y ago
I'd definitely recommend checking out Arch or Manjaro if you're a developer btw. Ironically, I've had fewer issues with Linux since swapping. Simple things like being on the newest kernel tends to keep hardware issues at bay.
578.
by freeqaz 5y ago
I ran a startup that I shut down a few years ago that was designed to do something very similar to this. It is dead now but the site is up at https://refinery.io (docs have screenshots) What I figured out is that... it's re
579.
by freeqaz 5y ago
Do you have any additional resources about this model of thought? It's like Redux on steroids lol. I wonder if anybody has done a SQLite-as-the-Store pattern library for front end apps before. I'd use the hell out of that!
580.
by freeqaz 5y ago
I definitely agree with you here. If you aren't doing so hot and you have to raise at a low valuation with an extra $375k to "convert" at that low valuation, then you'll be hit with a ton of dilution. Fortunately, I thin
581.
by freeqaz 5y ago
This was posted yesterday on HN btw (at least the announcement of this problem). https://news.ycombinator.com/item?id=29863672
582.
by freeqaz 5y ago
A SAFE without a cap is nice though for an early company, especially if it's optional. A SAFE like this means that you're effectively raising at a Series A valuation but during your pre-seed stage. The most obvious effect of this
583.
by freeqaz 5y ago
Ah, that totally makes sense. I know that's what "peerDependencies" is used for by many projects. For example, `react-dom` has a peerDependency on `react`. This can either be pinned to an exact version (react-dom@1.1.1 must b
584.
by freeqaz 5y ago
I've used NPM shrinkwrap before back in versions 1-3 of NPM. It's a little confusing that the author of this post calls it "new", so I investigated. Since NPM version ~2 (current is 8), you're allowed to publish a n
585.
by freeqaz 5y ago
You should encrypt your private key with a password. Then you can use ssh-agent to hold a copy of that decrypted key in-memory so that you don't have to type your password in every time you 'git push'
586.
by freeqaz 5y ago
You nerd sniped me with this. At least now I could implement ChaCha from memory... so thanks for that! It's cool to see how simple it is. It's a lot more intuitive than other ciphers are!
587.
by freeqaz 5y ago
I was thinking about this as well. It also looks like Queen Anne's lace lol. If anybody is going to go forage for this, please learn to ID the poisonous relatives first!
588.
by freeqaz 5y ago
I don't mind paying for my subscription, just like I don't mind donating to Firefox and Signal. But I get that I'm probably in the minority for that. I try to put my money where my mouth is, and not the other way around!
589.
by freeqaz 5y ago
In the USA, Consumer Reports exists to help deal with this. It's a yearly fee to subscribe, but it's as unbiased of reviews as you can get!
590.
by freeqaz 5y ago
There are only a handful of species that have been eaten raw enough times to be generally regarded as "safe". Crimini/button mushrooms being among them, as well as king boletes.
591.
by freeqaz 5y ago
You nerd sniped me. Reading about the various famous fossils, their discovery, and restoration was really interesting!
592.
URL Lengthener that makes a URL look sketchy(shadyurl.com)
2 points by freeqaz 5y ago|1 comments
593.
by freeqaz 5y ago
This gave me a kick and with all of the annoying security crap we've all been dealing with recently, I figured I'd share. Happy Friday from Seattle, y'all!
594.
Log4Shell Update: Full bypass found in log4j 2.15.0, enabling RCE again(lunasec.io)
40 points by freeqaz 5y ago|1 comments
595.
by freeqaz 5y ago
We couldn't figure out the actual network bypass for this one, so it's not included in the post (even though it's in the CVE). It's gotta be in this function[0] though, and if you have any notes we'd appreciate if y
596.
by freeqaz 5y ago
Pipewire has made all of my audio issues on Linux go away, at this point. Maybe it's my hardware (a high-end Dell Latitude that is Ubuntu certified) but it just f*cking works! I'm on Arch, so I find I tend to have fewer issues tha
597.
Understanding Log4Shell RCE via writing an Exploit that applies a patch(lunasec.io)
3 points by freeqaz 5y ago|1 comments
598.
by freeqaz 5y ago
This is a technical analysis of the Log4Shell exploit payload that we published the other day. I wanted to use it as a moment to help others understand what this exploit is and how they could build it themselves to hopefully make mitigating
599.
by freeqaz 5y ago
log4j-api isn't actually a problem (directly). It's the usage of log4j-core that has the JndiManager class that's the injection point for RCE. In the case of the transient dependency, it's further complicated because we&
600.
by freeqaz 5y ago
They bill by the millisecond for usage now, which has helped bring down the cost a ton (at least for web services). And if you don't need fancy stuff, they have a cheaper version of API Gateway now too. Lambda also supports Docker and

More ›