hannob

83 ms·

961.
by hannob 6y ago
> We have a pretty solid roadmap to fusion power plants. ITER and DEMO don't have tremendous risks attached to them. The costs of ITER have grown to be more than 4x as much as what was planned (and it is still in early stages so tha
962.
by hannob 6y ago
Frankly I don't buy that. There has actually been something like this during the swine flu pandemic. There was a vaccine that is believed to have caused some cases of narcolepsy. This was a real, bad sideeffect with a vaccine that was
963.
by hannob 6y ago
The first thing I usually do in a Hotel room is to unplug the TV. What drives me really crazy is that lately there seems to be a trend to have smoke detectors with regularly blinking LEDs above the bed in Hotel rooms. I make sure I always h
964.
by hannob 6y ago
Isn't this more an example of "fail-open design is bad, use fail-close"? Or in other words "make an allowlist, not a blocklist"? I mean look at those variables, this seems like a loosing battle. PERLLIB, PERL5LIB et
965.
by hannob 6y ago
Totally agree. Hosting assets like fonts or javascript on the same host is not only better for privacy, it's also more secure (no thirdparty can mess with your content) and contrary to popular belief also faster in a modern web environ
966.
by hannob 6y ago
In Copenhagen or Amsterdam that's just the case. (Not literally every road, they don't have bike lanes in residential areas, but almost every major road with significant traffic has a bike lane in these cities.)
967.
by hannob 6y ago
There's a background article on Drilled news that's worth reading: https://www.drillednews.com/post/computer-aided-destruction-...
968.
by hannob 6y ago
The ability to fork and gain control if necessary is one of the main reasons one wants open source in the first place. So fork it. Other than that: I find the microdependency / mass dependency trend in NPM very irritating. As a rule of
969.
by hannob 6y ago
GNU has their own code and project management plattform called Savannah. If you've ever interacted with it you know why this is happening. It's horrible in every way. I remember once trying to make some suggestions to get some bas
970.
by hannob 6y ago
The counterexample is Australia. We can say with high certainty that the great barrier reef will die unless some miracle happens and the world limits warming to 1.5°. And even then most of the reef will be gone. Yet Australia is a country t
971.
by hannob 6y ago
The validity time is part of a process where browser vendors have tightened rules for CAs over time. We got plenty of gradual improvements over time. Validity time does not stop incidents, but it makes the impact smaller and allows ecosyste
972.
by hannob 6y ago
Yeah those good old times when Comodo was hacked and issued certificates for gmail.com and nobody really cared. Or when some shady CAs sold intermediate certificates in devices so you could man in the middle all your network connections (an
973.
by hannob 6y ago
> Honestly, my main issue is not even the price, it's that devices cannot be stand-alone anymore. I'm wondering where the impression fo" not any more" comes from. Really the situation hasn't changed much. You can
974.
by hannob 6y ago
> Heck, why not just start when you are 25? The answer to that is almost certainly that balancing the pros and cons of preventive screenings is a surprisingly complicated science. Screenings can cause harms by causing unnecessary treatme
975.
by hannob 6y ago
I feel this is one of those articles where lots of important information is missing. Do they have any expectations on how expensive this process will be? Is there a chance that it's cheaper than existing processes or will it cost more?
976.
by hannob 6y ago
The wet bulb temperature is when your body can no longer cool with sweat. This is the same for everyone and is a relation between humidity and temperature. This is basically a physical thing and is the same for everyone. It means your body
977.
by hannob 6y ago
The "fun fact" here is that TLS version negotiation does not really work. Which is why in TLS 1.3 it still technically is using a TLS 1.2 handshake with an extension adding the new version. But appart from that: Having the ability
978.
by hannob 6y ago
There are good reasons why agility is bad. It never works the way people imagine. The fantasy is people think "in case of a sudden algorithm break we can quickly switch to a better algorithm". This is wrong because: a) there are n
979.
by hannob 6y ago
This was pointed out to Linus right at the beginning of GIt development [1]. SHA-256 was available and SHA-1 weaknesses were known. Unfortunately he chose to ignore it. [1] https://www.metzdowd.com/pipermail/cryptograph
980.
by hannob 6y ago
> Apparently TLS already concatenates MD5 and SHA1 [2][3]. Luckily TLS no longer does such things. This was a bad workaround in old versions of TLS. Which they then replaced by a "you can use secure or insecure hash functions, you c
981.
by hannob 6y ago
Hash security is a complicated beast. There were some research results that concatenating multiple hash functions isn't much more secure than the best of the concatenated functions. It's not a good way to produce more secure hashe
982.
by hannob 6y ago
We never got confirmation that it was effective. All the early studies that indicated some effectiveness were basically garbage. The french study that caused most hype was flawed in multiple ways. The fact that a study showing its ineffecti
983.
by hannob 6y ago
> Edit: I was checking how common was it to give corticosteroids before the trial (pretty common as I suspected) but it's almost amusing that the WHO was recommending not to use it[0]. I wonder if this will be yet another miss for t
984.
by hannob 6y ago
> Would this be considered anti-competitive today? Disallowing a technology that is controlled by one company in favor of a technology that is standardized and can be and is implemented by many companies? I can't see how you even be
985.
by hannob 6y ago
> If we trust DNS to publish the SNI public keys, why don't we trust it for the website certificate in the first place? These are two very different things. The SNI public keys are only used to encrypt the hostname, i.e. the goal he
986.
by hannob 6y ago
> I think this is something a lot of people miss and I'm not sure why sequestration as a whole is a controversial subject One of the major reasons it's controversial is that it has been used as a distraction and a false promise
987.
by hannob 6y ago
Not sure if I'm missing something, but have they interviewed two people who were extremely influential in cryptography and a third guy who... once worked at Bell Labs and is the CEO of a startup company?
988.
by hannob 6y ago
Mistrust about the vietnam numbers comes up every time this is discussed. But I have not yet seen any evidence that they're forged. I admit I find it hard to believe that a country bordering china could handle this so well. But I am mo
989.
by hannob 6y ago
> Since taking a basic multi-vitamin is good anyway, it seems wise to do that. There is no evidence that taking a basic mulit-vitamin has any benefit for average people. Depending on the composition of vitamins it can be harmful [1]. [1]
990.
by hannob 6y ago
It's an observational study, which by definition is not randomized. It's pure association, it may very well be pure confounding. In favor of the authors: The only thing they really claim is that an RCT should be done. Which I gues

More ›