Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
hiatus
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
9 ms
·
91.
▲
by
hiatus
1y ago
Today it requires wearing a mask to effectively capture the data. I wonder if we will see this done acoustically or via some other non-intrusive, remote method.
92.
▲
by
hiatus
1y ago
I've used https://github.com/gorilla-co/s3pypi or some variant of it in a few places. Basically cloudfront + s3 instead of a dedicated artifact registry.
93.
▲
by
hiatus
1y ago
It's like redboxing all over again.
94.
▲
by
hiatus
1y ago
There are 3d-printed AR-15 lower receivers (see Hoffman Tactical for an example).
95.
▲
by
hiatus
1y ago
That's not a fix though is it? Git tools are already on the runner. You could checkout code from public repos using cli, and you could hardcode a token into the workflow if you wanted to access a private repo (assuming the malicious in
96.
▲
by
hiatus
1y ago
The problem is not related to tracking every action or version in CI/CD changes. Right now, you can just curl a binary and run that. How is that any different from the exploit here? I guess people may have had a false sense of security
97.
▲
by
hiatus
1y ago
But there is no policy preventing external downloads in general, is there? I can curl a random script from a malicious website, too.
98.
▲
by
hiatus
1y ago
That the policy can be "bypassed" by a code change doesn't seem so severe. If you are not reviewing changes to your CI/CD workflows all hope is lost. Your code could be exfiltrated, secrets stolen, and more.
99.
▲
by
hiatus
1y ago
> which, after using it, fair! It found a zero day Source?
100.
▲
by
hiatus
1y ago
Or they were opportunists, and used the Federalist majority to pass legislation intended to, among other things, silence anti-Federalist publications.
101.
▲
by
hiatus
1y ago
Are not visible pictures encoded data?
102.
▲
by
hiatus
1y ago
> Identity politics isn't the path to corruption. Corrupt politicians like Trump use identity politics to gain power to practice their corruption. These two sentences, taken together, lead me to exactly the opposite conclusion—explo
103.
▲
by
hiatus
1y ago
Parent objected to: > You'd need a custom license where everyone in the world could use the results except for the contributor > That one is incompatible with copyright laws in many countries outside USA. Does authorship confer u
104.
▲
by
hiatus
1y ago
What are you alluding to here?
105.
▲
by
hiatus
1y ago
> That one is incompatible with copyright laws in many countries outside USA. How so? You can't sign away your interest in a copywrighted work?
106.
▲
by
hiatus
1y ago
I don't see anything about revenue here https://commission.europa.eu/law/law-topic/data-protection/r...
107.
▲
by
hiatus
1y ago
This is a legal requirement of GDPR, no? https://gdpr-info.eu/art-20-gdpr/
108.
▲
by
hiatus
1y ago
At the very least, wouldn't the age verification site know the API caller requesting verification? How else would it send a callback indicating that the user was or was not of legal age?
109.
▲
by
hiatus
1y ago
An employee is just a contractor with one client.
110.
▲
by
hiatus
1y ago
Reminds me of the 90s when computer hardware moved so fast. I wonder where the limit is this time around.
111.
▲
by
hiatus
1y ago
This is the outcome when pearls are cast before swine.
112.
▲
by
hiatus
1y ago
> but I'm recently starting to worry that it will do the opposite, by helping the ultra-rich engage in corrupt schemes. The rumors that people bought Trump-coin for the sole purpose of currying favor got to me. How would government
113.
▲
by
hiatus
1y ago
For people who may not know about this, it is in fact law. https://en.m.wikipedia.org/wiki/War_Powers_Resolution
114.
▲
by
hiatus
1y ago
> So do you think it's okay to record someone else's kids in bathing suits at a lake for watching later? I may not like it, but it's their right. Just like I can't control their minds to not think about someone else&#
115.
▲
by
hiatus
1y ago
You are encouraging people to upload medical data yet you do not use HTTPS. This just feels irresponsible.
116.
▲
by
hiatus
1y ago
> for no reason other than “nobody said we can’t”. This is exactly the nature of law though. Everything is allowed unless prohibited. Do you believe you have an expectation of privacy in the public sphere? If not, how could you disagree
117.
▲
by
hiatus
1y ago
Is it? Wouldn't corruption be more likely if policing were generational in a small town?
118.
▲
by
hiatus
1y ago
You have no expectation of privacy in public. How does ALPR violate the 4th amendment if it takes place in public?
119.
▲
by
hiatus
1y ago
I found it surprising that they allow at least one private sale license. https://web.archive.org/web/20171028042531/http://info.nhpr....
120.
▲
by
hiatus
1y ago
I'm screwed because many of the articles in my pocket no longer exist.
More ›