grey-area

82 ms·

1291.
by grey-area 5y ago
It's easy to imagine a chain of changes, starting from innocuous string substitution with static strings in the code base and gradually building up to downright exploitable network access and multiple substitutions, all based on the pr
1292.
by grey-area 5y ago
This is a false dichotomy (I listed many options, not just self hosting, not many businesses fully self-host these days), and uptime is provably significantly better away from the big hosted services which are constantly churning features,
1293.
Log4j 2 Vulnerability Analysis(randori.com)
3 points by grey-area 5y ago|0 comments
1294.
by grey-area 5y ago
Your choice of straw man here is interesting. Of the options I mentioned, you seem to have picked only self-purchased hardware with no redundancy and no backups (your addition) to compare with, and also throw in manual deployment (why?). Mo
1295.
by grey-area 5y ago
There are many approaches which don't depend on AWS, and not all of them mean hosting your own physical servers, and they certainly don't mean you don't have an off-site backup policy. There are well-understood answers to all
1296.
by grey-area 5y ago
I'm not clear on why you think this is 'impossible'. It's clearly possible to change the rules of a system defined by software, it just requires a majority of those maintaining the chain to go along with it.
1297.
by grey-area 5y ago
It could be changed in bitcoin core, as previous changes to rules have been. It would require agreement from market participants.
1298.
by grey-area 5y ago
The rules about the 21Million which is the only thing that matters here can't be changed. What would stop it being changed? It's been a house waiting to collapse for 12 years now. Tether has only been trading since 2015 and on
1299.
by grey-area 5y ago
Their commercial paper would make them one of the largest players in the global market if their numbers were true, but nobody knows what they have invested in, they say it is in crypto as well (eek!), they've been found guilty of fraud
1300.
by grey-area 5y ago
Sorry, tens of billions of dollars, not trillions, my mistake. They are currently adding 1 billion a day at times, where does that money come from? Does anyone really believe 78,423,306,967 USD are currently invested in Tether?
1301.
by grey-area 5y ago
1. The rules can (and have) been changed by whoever has commit permissions on the repo, they are not immutable. 2. The rules can also be changed with a simple fork if enough users are persuaded to move (Bitcoin Cash) - and somehow the price
1302.
by grey-area 5y ago
Tether inc. claims that tethers are backed by real US dollars They don't claim that any more. They only claim a tiny percentage is held in cash now, the rest is in 'commercial paper' apparently.
1303.
by grey-area 5y ago
all the other assets that can absorb billions of dollars in liquidity are throughly manipulated Bitcoin is thoroughly manipulated. Tether is minting a billion dollars a day now, with zero oversight and close ties to the major exchanges. E
1304.
by grey-area 5y ago
Backed by a large government with huge resources and control over > 300 million people.
1305.
by grey-area 5y ago
It’s the latest problem invented so that cryptocurrencies can fix it, after egold, currencies, payments, micropayments, apps, smart contracts, icos, asset tracking, nfts, now we have communities of bored apes and pudgy penguins who pay some
1306.
by grey-area 5y ago
Sure, here's your reminder that Go supports a wide ecosystem of libraries and middleware that apply to almost any situation.
1307.
by grey-area 5y ago
These are not new developments, and diplomacy has always been war by other means, including using currency as a weapon of war against external and internal enemies. Currency has always been a system of control and has frequently been weapon
1308.
by grey-area 5y ago
Money has always been owned by and manipulated by the powerful. That is not a project decades in the making, it's a natural consequences of our power relations. There are lots of reasons to want a decentralised currency system or at le
1309.
by grey-area 5y ago
European museums are full of looted treasures taken from other countries. Perhaps it seemed a little inappropriate to continue to name them after the looter rather than the place they came from?
1310.
by grey-area 5y ago
None of the sites you mention above would require npm to build. At some stage after you've seen enough 'interesting' dependencies changing the world around your app as you write it you'll realise that boring is good for
1311.
by grey-area 5y ago
Current fees are very high: eth $81!, Bitcoin $2.78 Time to confirmation varies from 300-600 seconds compared with ~ 1-3 seconds on traditional networks. I’m afraid it is neither cheap nor easy.
1312.
by grey-area 5y ago
Other ecosystems are not like JS, that is not to say they don't suffer from vulnerabilities, but vulnerabilities are not endemic and impossible to eradicate like those in the JS ecosystem.
1313.
by grey-area 5y ago
Other ecosystems are not like JS.
1314.
by grey-area 5y ago
Yes using a standard library is better. It is more stable, trustworthy and maintained by a small group of people.
1315.
by grey-area 5y ago
You use a trusted standard library which has crypto functions (and lots of other helpers) and for small things you write your own. Yes you can write your own things like session management, yes that is better than the entire web depending o
1316.
by grey-area 5y ago
They do not, they have capable and trusted standard libraries and it’s quite possible to build a web app in those other languages without any external dependencies whatsoever. JS and its culture of small dependencies that do one thing but i
1317.
by grey-area 5y ago
That's going to be incompatible with writing interesting software on the web Lots of people are writing interesting web software without these problems - the website you’re currently posting on is one example. So I completely disagre
1318.
by grey-area 5y ago
It may require picking a different language with a different culture. JS badly needs a more capable standard library.
1319.
by grey-area 5y ago
Semver will not save you.
1320.
by grey-area 5y ago
This is the direct result of the culture of tiny dependencies in JS and some other languages, but not all ecosystems are like this. If you choose to use node, this is where you end up, but it was a choice. Many languages have a decent stand

More ›