Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
g_p
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
54 ms
·
481.
▲
by
g_p
6y ago
Most operators take a support and maintenance contract. It's also worth remembering that many operators don't have the staff needed to even install radios and other distributed equipment - often the radio vendor can offer that ser
482.
▲
by
g_p
6y ago
> Oh my, your post reads like a bureaucracy horror story, but I fear it is not a work of fiction! Afraid it's not fiction. I see it pretty regularly. > Regarding client-side restrictions: I doubt I'll ever understand why man
483.
▲
by
g_p
6y ago
Indeed, however this approach effectively offers them a carrot - if you understand your problem, you can use this (very effective and well regarded) route to getting your problem fixed. The end result, as you'd expect, is mission-focus
484.
▲
by
g_p
6y ago
> My one question is how security is upheld in what seems like a project maintained by a small number of people. This is a really good question, and one that needs to be asked more. When it comes to distributions, small ones seem to eith
485.
▲
by
g_p
6y ago
This seems to be a known phenomenon - https://stackoverflow.com/questions/197162/ntfs-performance-... That's looking at large numbers of files and folders, but we all know that overheads like these tend to co
486.
▲
by
g_p
6y ago
Of course it doesn't! I've yet to meet a procurement team that actually understands what they are buying. Companies like Microsoft focus heavily on "training" and "awareness" of their products and solutions - p
487.
▲
by
g_p
6y ago
> Unfortunately, nobody's really come up with any reliable process for having the flexibility to get good products for good value, while reliably preventing corruption. I've seen one approach work, but it struggles to scale, as
488.
▲
by
g_p
6y ago
I've seen authorities like this "not consulted" deliberately, on the basis that there's a more expedient need for the product, than for the product to be secure. If the experience of the procuring department is that &quo
489.
▲
by
g_p
6y ago
This is fairly standard, sadly, and is why Government struggles to deliver, especially on IT and similar "intangibles" type contracts. The same issues happen in any other procurement activity that is required to rigorously follow
490.
▲
by
g_p
6y ago
Not sure if it helps, but the UK NCSC has a general government webapp vulnerability reporting form on HackerOne ( https://www.ncsc.gov.uk/information/vulnerability-reporting ). It sounds like Apperta might have been &quo
491.
▲
by
g_p
6y ago
Whatsapp web doesn't seem to update the presence status, as I've seen people ask why others are able to reply without their last-online time updating.
492.
▲
by
g_p
6y ago
The UK implementation of ePD is a pretty strict application, only allowing 2 grounds to use a "cookie" (note that means other identifiers like session identifiers, although everyone says cookie. One grounds is necessity to deliver
493.
▲
by
g_p
6y ago
Still ongoing, and epic are getting some good documents out through discovery, which should help their case, as well as other overseas antitrust investigations.
494.
▲
by
g_p
6y ago
It is manipulation - Facebook were not allowed to disclose transparently the 30% Apple tax. There's now enough antitrust cases against Apple that I'm hopeful they're going to lose in a few serious jurisdictions and be forced
495.
▲
by
g_p
6y ago
If you go Android, definitely take a look at userspace firewall options. I like and use NetGuard, it's open source, and all done through the local VPN API (no traffic leaves device) - gives you control of which apps can go online. If y
496.
▲
by
g_p
6y ago
I think the other key issue around scale is that at FB scale, you simply can't realistically get consistency of moderation - or even a person reading each post. At FB scale their moderation started with "you can hide it if it anno
497.
▲
by
g_p
6y ago
In addition to mail, perhaps they need to modify WebKit to refuse to render any pixels from the open internet that might potentially be NSFW?
498.
▲
by
g_p
6y ago
Apple seems to be unwittingly making Epic's case in their antitrust case, and helping to justify the need for independence and separation of distribution, curation, payment processing, and operating system. I know payments networks can
499.
▲
by
g_p
6y ago
Parental controls on Apple devices already let you set per-app screen time limits. It seems to me you could easily if-gate content loading with a system API call to check that level of content is permitted. This would even make sense for th
500.
▲
by
g_p
6y ago
It amazes me more people don't see this. Virgin in the UK looked into the data and found a bad candidate experience was significantly impacting their bottom line, just in actual candidates cancelling their service within 30 days of a b
501.
▲
by
g_p
6y ago
The operators would argue this is where their "managed service" offering kicks in and gives you value. Most operators haven't figured out their business model for NB-IoT quite yet (at least in Europe) - they're still dab
502.
▲
by
g_p
6y ago
See https://github.com/leoleozhu/android-captive-portal and https://success.tanaza.com/s/article/How-Automatic-Detection... If you could return valid internal DNS entries for these domains, a
503.
▲
by
g_p
6y ago
Yes, phones request a particular (plain http) URL from Google or Apple, which returns a 204 response. If they don't get a response, the network is assumed to have a connectivity issue. If they get redirected due to captive portal, they
504.
▲
by
g_p
6y ago
> The extent to which corporations should be considered private entities does not seem like a settled question to me. Your corporation has no natural right to exist, and therefore does not have the natural right to do business solely as
505.
▲
by
g_p
6y ago
Perhaps this will encourage or lead to more people protecting their privacy and avoiding cross-service linkage? It isn't a given (and certainly would be hugely problematic to assume) that the same human sits behind the same username on
506.
▲
by
g_p
6y ago
In the US, without an inclusive calls plan (i.e. what you call a contract in the UK), both caller and recipient pay - it appears that you pay for "air time" (time in an inbound or outbound call). Most people will be on a contract
507.
▲
by
g_p
6y ago
Most of the problematic parts that make it difficult to support into the future are from third parties like the chipset maker and the camera sensor maker etc. OEMs don't really have what you'd need to make the phone "open&quo
508.
▲
by
g_p
6y ago
It seems the issue with Ubiquiti here has potential wider implied for users of the equipment (signing keys compromised, cloud dependency giving remote management plane access). An individual vulnerability in a device is an issue but it gets
509.
▲
by
g_p
6y ago
I guess the concern here is if your VPN was provided by Ubiquiti then you might have an issue. My approach has been an isolated (read basically no internet) LAN, bridged by a small PC running hardened and locked down Linux. There's no
510.
▲
by
g_p
6y ago
Under GDPR, a failure to know about (detect) a breach (and then report it yourself) is in itself a violation. Likewise, failing to have suitable organisational and technical measures in place to protect the data is a breach. I'd certai
More ›