jesboat

8 ms·

31.
by jesboat 5y ago
> This issue is affecting the global console landing page, which is also hosted in US-EAST-1 Even this little tidbit is a bit of a wtf for me. Why do they consider it ok to have anything hosted in a single region? At a different (unnam
32.
by jesboat 5y ago
I'm curious what your applications' allocation patterns are like. I've worked on a couple projects where switching from CMS to G1 was a pretty big latency win. Most of the were pretty strongly request-response-based. Pretty q
33.
by jesboat 5y ago
To be fair, almost all of the keyword-ish things Java's added have been done such that they rarely can change the meaning of any existing programs. Assuming I didn't miss any, all the keyword-ish things which have been added, ev
34.
by jesboat 5y ago
The problem is (perhaps amusingly) with refcounting. As the processes run, they'll each be doing refcount operations on the same module/class/function/etc objects which causes the memory to be unshared.
35.
by jesboat 5y ago
Same with Facebook.
36.
by jesboat 5y ago
Facebook also has such policies. This would be a pretty clear violation, on multiple ways. If the story holds up (I'm aware of no reason why it wouldn't), there will be enormous internal pressure to remove her, and I'd be pre
37.
by jesboat 5y ago
Ocean Spray. Wikipedia describes it as > Ocean Spray is an American agricultural cooperative of growers of cranberries and grapefruit headquartered in Plymouth County, Massachusetts. It currently has over 700 member growers (in Massachus
38.
by jesboat 5y ago
Amusing this hits the front page the same time as https://en.wikipedia.org/wiki/Euthanasia_Coaster https://news.ycombinator.com/item?id=27970824
39.
by jesboat 5y ago
I guess one way to phrase it would be "the ACLs on the registry files were always overly permissive, but nobody noticed until now because trying to read them the obvious way failed with 'file in use'"
40.
by jesboat 5y ago
There's a video (bleh) which appears to extract the hash and then use a pass-the-hash. I'm not clear on exactly what the preconditions are (are NTLMv1/v2 hashes still stored by default? Does PTH work with newer hashes? Etc) o
41.
by jesboat 5y ago
It does; they're called "name constraints". This page https://systemoverlord.com/2020/06/14/private-ca-with-x-509-... claims they're supported by "all current browsers". x509 ex
42.
by jesboat 5y ago
> users can, in theory, opt to turn off Google Play Services, users of the Covid-19 contact-tracing app in Ireland cannot turn the surveillance off if they want the contact-trac ing app to work. This means the collection and use of this
43.
by jesboat 5y ago
The script isn't being passed over ssh's stdin.
44.
by jesboat 5y ago
There's an extension called "Don't fuck with paste" which disables intercepting paste, not sure how. You have to remember to add sites that you do want to intercept paste (mostly rich text apps) to the whitelist.
45.
by jesboat 5y ago
Elliptic geometry is not a subset of absolute geometry (as absolute geometry is typically formalized). The problem isn't with Euclid's other postulates, it's with things that Euclid didn't formalize, specifically, betwee
46.
by jesboat 5y ago
It varies from state to state, but in the states I'm aware of (at least 3) it's not nearly as hard as you're making it sound. An attorney is not required and, while the non-profit status may take some time to approve, the exi
47.
by jesboat 5y ago
Mind sharing the memo?
48.
by jesboat 5y ago
> Ah OK, this is the part that I feel is maybe always left out of the things I've read on futex(). I guess this is just always implied then that some library implements these semantics correctly? And that library is generally going
49.
by jesboat 6y ago
Facebook wrote a new runtime and has, over time, changed the language rather significantly (eg strong static typing, async/await, generics, overhauled much of the standard library.) It's called Hack. At this point, I don't th
50.
by jesboat 6y ago
https://developers.google.com/search/docs/advanced/crawling/... describes the procedure for checking "is this source Google it". You couldn't fake it just by running on gcp
51.
by jesboat 6y ago
> you're still sending your full password to the server for verification each time, so if the server is compromised for any length of time your password will be as well. The key difference between storing plaintext passwords and has
52.
by jesboat 6y ago
It'd be neat if extension stores could integrate with some CI system(s). The store could just tell the user "built from <source URL>". Best of both worlds.
53.
by jesboat 6y ago
Any sufficiently large data analyzer is going to handle that already. Even if you have reliable delivery of the "session created" event into the analyzer, you'll still occasionally get wonky data from bit flips.
54.
by jesboat 6y ago
> On the one hand, that would be a powerful capability to have, but on the other hand, the risk of exposure and subsequent damage to the US economy, prestige, etc. would be non-zero If I were a three-letter agency, I'd bribe/bl
55.
by jesboat 6y ago
We added a commit hook to block case conflicts.
56.
by jesboat 6y ago
No. Why would it be?
57.
by jesboat 6y ago
The huge data breach a couple years ago was Equifax, not Experian. It does not seem particularly hypocritical for Experian to try to capitalize on it
58.
by jesboat 6y ago
The prototypical quantum attack for symmetric crypto is Grover's algorithm [ https://en.wikipedia.org/wiki/Grover%27s_algorithm ] which finds "the unique input to a black box function that produces a particular
59.
by jesboat 6y ago
The article is describing a different process than Royal assent
60.
by jesboat 6y ago
On many platforms, OpenSSL is the standard TLS library.

More ›