Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
infotogivenm
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
14 ms
·
61.
▲
by
infotogivenm
4y ago
I have the same dash in my old ford, but with a screen with “Microsoft Sync”. Can’t praise it enough and tell everyone “I will run this truck into the ground” - the screen is almost completely unused; the Nav is.. ok in a pinch, and bluet
62.
▲
by
infotogivenm
4y ago
> acc and lane centering is kinda.... I'm already driving and have hands and feet on controls, I don't need that automated in the first place. Anecdotally: I and a number of friends have held this same opinion for years, but re
63.
▲
by
infotogivenm
4y ago
I think parent’s use of “stupid” is referring to themself going on vacation and immediately forgetting their unlock code. Regaining access to a single device that has been robbed and unlocked at gunpoint is a tough scenario. But I agree tha
64.
▲
by
infotogivenm
4y ago
I saw that vuln categorized as “RCE” and had the same reaction. IIRC it was prototype pollution in an npm package during json deserialization - if you are letting attackers define javascript functions in your nodejs process, you have almost
65.
▲
by
infotogivenm
4y ago
C4 came up with icepanel earlier. I will give one take - C4 is a nice abstraction that is very useful for architects, who spend a bulk of their day presenting things at different levels of the company. When it comes to the engineers deployi
66.
▲
by
infotogivenm
4y ago
Whats up with reuters links? Anytime I click on a story from them I just end up on their homepage. I have to copy/paste the URL into an archive site for it to work. Does this happen to anyone else? iOS/safari user here.
67.
▲
by
infotogivenm
4y ago
> Those let go in November have been kept on the payroll and have been paid their regular salaries for the previous 60 days due to requirements of the federal WARN Act, which mandates companies give a 60-day notice before mass layoffs I’
68.
▲
by
infotogivenm
4y ago
Most tech stocks are not down 56% in the last month . Most large funds, when presented with a high buyout offer in the midst of a down market, would not roll over their investment in a LBO saddling the company with yearly interest payments
69.
▲
Google pixel 2 had a “squeeze” sensor
(theverge.com)
2 points
by
infotogivenm
4y ago
|
3 comments
70.
▲
by
infotogivenm
4y ago
This would be the solution I’d go with. For the first DoH call made by NTP after startup, just ignore expiry timestamps.
71.
▲
by
infotogivenm
4y ago
I haven’t noticed locks/hangups but I have noticed that running/building on x86_64 images on ARM macOS (through Rosetta) is excruciatingly slow. I ended up having to switch us to cross compiling, which works okay but changing all
72.
▲
by
infotogivenm
4y ago
Twitter will go bankrupt but will limp along ala Tumbler. Musk will pretend this was his plan all along, and dip into the fortune 200s. A replacement for journalist microblogging will emerge, I am not ruling out activitypub. Crypto (btc
73.
▲
by
infotogivenm
4y ago
Just out of curiousity, where do you get your news?
74.
▲
by
infotogivenm
4y ago
Only if you don’t pin your cookies to the subdomain and/or are not using HTTPOnly. Even if you screw that up, cookie tossing in general is a rather low risk item; I don’t think its accurate at all to say “if one site gets hacked so doe
75.
▲
by
infotogivenm
4y ago
No disagreement here, that must be why they do it. But most CDNs e.g. S3 handle expiry in their signed URL implementations.
76.
▲
by
infotogivenm
4y ago
I would consider it a “moderate” or “low” severity issue, the same as “session cookie does not expire.” Authentication tokens intended for ephemeral browser sessions should expire, it’s good practice not to hand out infinite-access credenti
77.
▲
by
infotogivenm
4y ago
Please be specific. They have publicly denied shadowbanning but under a very specific and narrow definition.
78.
▲
by
infotogivenm
4y ago
SMIME certs for email are to my knowledge the most relevant analogy for a “web pki for users”. There is no ACME-over-email for SMIME that has made it out of rfc into practice, so that is the first hurdle. Hurdle #2 is there is only relative
79.
▲
by
infotogivenm
4y ago
It took me a while of ruminating but I think I like this answer the best. Fundamentally here some people are upset that something they own would betray them. Which is weird, because it implies anything you used but didn’t buy can and sh
80.
▲
by
infotogivenm
4y ago
You are spied on just as much with or without said client side scanning. The features were almost certainly related to each other given their timeline, even if one did not end up shipping.
81.
▲
by
infotogivenm
4y ago
It’s very true - if we assume words are meaningless we can then assume anything.
82.
▲
by
infotogivenm
4y ago
You’ve just described every photo upload service in America, although my understanding was Apple would use a list of hashes of known bad content, not an “AI” as google does. Everyone scans for CSAM. I am not conjecturing on the ethics of sc
83.
▲
by
infotogivenm
4y ago
My understanding was: it was only ever scanning things on the client that were uploaded to iCloud Photos, in the same exact way they are scanned server-side today but arguably a step more “transparently” for the user (at least if the user i
84.
▲
by
infotogivenm
4y ago
What? They have demonstrably gone toe-to-toe with the FBI to NOT ever have to create “special software updates for the government”. https://en.m.wikipedia.org/wiki/FBI–Apple_encryption_dispute Can you show me another c
85.
▲
by
infotogivenm
4y ago
Sorry mate but you have no idea how anything works. Literally every photo hosting service on the internet will scan your photos against an abuse list and work with LE - otherwise they get to become the “cp-friendly” hoster. When apple relea
86.
▲
by
infotogivenm
4y ago
This is not my understanding at all. Blockchains (speaking broadly) are based on an incentive economy which often historically struggles to support itself via its own transaction volume. What happens when a coin is no longer profitably min
87.
▲
by
infotogivenm
4y ago
No blockchain in the world could store the hash of every post ever in a “retrievable way”. Even Elon understands this. The valid ideas that apply here are global labeling and account subkey ordering. I have never seen a solution for either
88.
▲
by
infotogivenm
4y ago
Ah that makes sense “watermark” is the word I was fumbling for here (I kept coming up with “fingerprint”)
89.
▲
by
infotogivenm
4y ago
Yep. There is even an RFC for SMIME ACME, but I don’t think such CAs have CT at the moment. A email@domain system using something like SXG and the existing server PKI is probably a more tangible idea atm.
90.
▲
by
infotogivenm
4y ago
To add to this a bit - I do think an embedded steganographic-type “signature” of chatgpt output could be enormously valuable - without it we can wave goodbye to the efficacy of things like school assignments. Such a signature is very differ
More ›