hannob

9 ms·

91.
Is Sweden's Green Steel Transformation Still on Track?(industrydecarbonization.com)
1 points by hannob 2y ago|0 comments
92.
by hannob 2y ago
The article doesn't really discuss the legality of this, which I'd be curious to hear the opinion of a lawyer. In other cases, it's considered criminal if a company deliberately puts out false information about itself. E.g.,
93.
by hannob 2y ago
It's also how most empirical science operates. If someone collects data and the study outcome is not preregistered, you can assume p-hacking. It would be implausible not to. And in most fields, preregistration is not common. (And even
94.
by hannob 2y ago
What are you talking about? The fix was released today, and FF says they received the report 25 hours before that: https://infosec.exchange/@attackanddefense/11328207943028074...
95.
by hannob 2y ago
> $100 a ton is a round number close to estimates of what it costs to capture > carbon from an oil refinery or coal burning power plant That's a wildly optimistic number, and almost certainly too low for the carbon sources yoU&#
96.
by hannob 2y ago
Not really. While both relate to SHA-1, those are two quite different issues. The Shattered attack was an actual demonstration of a long-known weakness in SHA-1 that allows creating practical collisions. This one is more an exploration of t
97.
From Coal Enabler to the Minimal Green Methanol Economy(industrydecarbonization.com)
1 points by hannob 2y ago|0 comments
98.
by hannob 2y ago
HFCs are amongst the most damaging climate gases. It's a very unfortunate outcome of phasing out CFCs that they have in many instances been replaced by powerful greenhouse gases. HFCs are slowly phased out as well, but there are still
99.
by hannob 2y ago
This is irrelevant nitpicking. For decades to come, we won't have 100% clean energy systems everywhere. Even if you power your AC 100% by solar energy, that solar energy won't be used to displace dirty energy elsewhere. Even if yo
100.
by hannob 2y ago
This is largely historic. I had lengthy discussions about this with expat's maintainer. expat, the xml library underlying python's etree and other xml interfaces, has either mitigated these standard xml vulnerabilities or disables
101.
by hannob 2y ago
I had a quick look into this rule, and I have an entirely different concern. It appears to me Validity is essentially a "pay for good reputation" service. Not sure that aligns with the goals of Spamassassin...
102.
by hannob 2y ago
Author here. If you want more technical details, we've put up a webpage back then, and published a background paper on those vulns: https://nostarttls.secvuln.info/
103.
Why no one wanted to buy the Green Shipping Fuel(industrydecarbonization.com)
2 points by hannob 2y ago|0 comments
104.
by hannob 2y ago
I mean, I somehow understand the motivation behind a phone ban. But Fitbits? I understand there's probably a problem creating a clear separation, but in times where lack of movement and exercise is causing major health problems, we pro
105.
by hannob 2y ago
I like this part: "4. Does this mean CockroachDB is no longer open source? CockroachDB will remain source available under a new license. While the new license is a proprietary enterprise license, the source code will still be available
106.
by hannob 2y ago
What you got now as new standards is already the result of multiple iterations of improvements in key size reductions and performance improvements. But you'll likely not get drop-in replacements for existing public key crypto in post-q
107.
by hannob 2y ago
> Unfortunately it is hard to tell the two apart That's kinda a "you had one job" situation. Yes, it's hard to review security reports, and separate legit ones from bogus ones. But that's what these plattforms ad
108.
by hannob 2y ago
I understand what you write, yet it doesn't have anything to do with NPN. Look, I get it. Deprecating things has tradeoffs. But NPN looks like an incredibly safe thing to deprecate. It has only been used for a very short timeframe. Its
109.
by hannob 2y ago
You have some VMs that talk to old network appliances that require NPN? And if NPN is not supported they don't just fall back to simple HTTP/1.1? I find that sounds extremely unlikely. I am of course well aware of backwards compat
110.
by hannob 2y ago
An interesting aspect of this is that it's a bug in NPN, which is more or less a historic artifact. When SPDY, the precursor of HTTP/2, got introduced, it needed a mechanism to signal that within TLS, a different protocol (SPDY in
111.
by hannob 2y ago
I had learned about this in the Pandemia podcast last year, unfortunately only available in German. But I thought for all the German-speaking HN readers I could share, it's worth listening to: https://superelektrik.de/p
112.
by hannob 2y ago
For clarification, the bug is in a patch applied by red hat, not in openssh itself.
113.
by hannob 2y ago
I had recently written a detailed article about e-methane, including how it compares to other hydrogen derivatives. tl;dr is that there are a lot of doubts whether e-methane makes any sense, as you usually end up either preferring hydrogen
114.
by hannob 2y ago
Nuclear power generation has been more or less flat since ~25 years, with overall growth of electricity generation. Solar and wind on the other hand... Just look at the data: https://ourworldindata.org/grapher/electrici
115.
Is there a place for E-Methane in a Climate-Neutral Future?(industrydecarbonization.com)
1 points by hannob 2y ago|0 comments
116.
by hannob 2y ago
Physics isn't very kind to all these gravity-energy-storage ideas. You need very large objects and substantial height differences to store any meaningful amount of energy. While many ideas about new types of gravity-energy-storage are
117.
by hannob 2y ago
I feel 2/3 of the comments here are missing the point. CSP is a mitigation for XSS vulnerabilities. Yeah, if you always sanitize everything in the right way, you won't have XSS vulnerabilities. CSP was born out of the recognition
118.
by hannob 2y ago
In all cases where you can use SRI, there's a better mitigation: Just host a copy of the file yourself.
119.
by hannob 2y ago
No, unless you count 2009 as "recently", which was the time when the last coal power plant construction in Germany started (GKM 9). And yes, that was a mistake. But it was certainly not "recently". In 2020, the last coal
120.
by hannob 2y ago
That's a pretty clickbaity headline (the one here, not the original one). This is about a special law that allows oil companies to compensate carbon reduction requirements. Which, to be clear, is a big deal, and a major case of fraud.

More ›