Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
josefx
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
64 ms
·
931.
▲
by
josefx
5y ago
They already make them optional for single nested statements, which causes a gigantic mess when you extend code and forget to add them. if (a) doThis(); andThat(); is interpreted as if(a){ doThis(); }
932.
▲
by
josefx
5y ago
Google is pushing to have the browser itself track your interests and share them with whoever asks. The first attempt FloC backfired rather quickly as it was an all around privacy nightmare. The second attempt Topics promises to fix a lot o
933.
▲
by
josefx
5y ago
Can't find any ads on NoScript.net with uBlock running and uniblue.com seems to have expired. However it is hilarious that the complaint comes from Ad block Plus, their entire business model is build around bypassing EasyList. For a ge
934.
▲
by
josefx
5y ago
I may be a bit jaded, a lot of rich people like to pretend they where poor and that their success is entirely self made. Stories like Theranos reinforce the image that the social circles are mostly static and unchanging no matter what the p
935.
▲
by
josefx
5y ago
> If the CEO of the world's first trillion dollar company can't make a lot of money, then who can? Isn't this completely contradicted by > It's a free market. ? Wouldn't you expect that a company operating on
936.
▲
by
josefx
5y ago
Until you run into a HTTP/2 to HTTP/1 tunneling setup where your HTTP/2 frontend thinks it forwarded one well defined and safe HTTP/1 message to your backend, but the backend sees an additional malformed HTTP/1 head
937.
▲
by
josefx
5y ago
Criminal negligence? Some of the articles linked by other comments indicate that the Post Office ordered all meeting minutes that discussed flaws in the software shredded and in some cases even prohibited note taking to ensure that there we
938.
▲
by
josefx
5y ago
Browsers are also free to use per site caches instead of a global one and sadly we ended up with just that because it turns out you cannot trust the internet with user privacy in any way.
939.
▲
by
josefx
5y ago
If you like to ignore the security implications that come with every switch? Some services use HTTP/2 frontends for their HTTP/1 backend services. This resulted in a large amount of tunneling attacks that the HTTP/2 spec. pre
940.
▲
by
josefx
5y ago
Ah so it encourages people to enter abusive relationships.
941.
▲
by
josefx
5y ago
But it explicitly excludes friends, love and even respect. How do you have a decent relationship with people without any respect?
942.
▲
by
josefx
5y ago
> and you have decent relationships, and you don't have to worry about "am I successful enough?" all the time. " So the correct thing is not to look for love, money, or being well liked. The correct thing is to be wel
943.
▲
by
josefx
5y ago
Modern browsers share a "standard" list of APIs for plugins, that makes it possible to write a plugin that runs in both Chrome and Firefox. Google decided to remove several APIs for "performance" and "privacy"
944.
▲
by
josefx
5y ago
> Yeah they really need a Ko-Fi[0] or Patreon[1] link in the README IMHO. I am quite sure that kind of nonsense lead to the Origin fork. As far as I understand the old uBlock project was taken over by a contributor who offered to manage
945.
▲
by
josefx
5y ago
> No cloud services, no Office 365 or Google Workspace. I think you are overestimating the problem. Before Facebook decided that it wanted the European market we had hundreds of similar services. We will have local replacements the momen
946.
▲
by
josefx
5y ago
As far as I understand buyer and seller still have exchange information for the transaction to happen. The moment the buyer tries to use the stolen bitcoin he will have the police knocking on his door to find out where he got them from. The
947.
▲
by
josefx
5y ago
One could argue that the main problem here was writing from argv into env^1 , so if one wants to break userland APIs to secure this the best start would be to hit the memory region argv resides in with write protection. ^1 We all know that
948.
▲
by
josefx
5y ago
Posix apparently explicitly allows calling programs with an empty argv, so it isn't just a Linux implementation detail Polkit failed to handle.
949.
▲
by
josefx
5y ago
That isn't pragmatic, it silently breaks programs that rely on specified behavior just to fix one of many self inflicted security issues polkit had over the last decade.
950.
▲
by
josefx
5y ago
Only way to completely fix buggy user land is to error on any attempt to execute a program. Before this polkit had an authentication bypass last year, trusted user supplied ids around 2018^1, ... . The list goes on. ^1 which ironically eno
951.
▲
by
josefx
5y ago
> C program will run directly on the OS. Adding a layer of runtime means reduced performance. A C program that isn't compiled in an embedded context has a runtime layer on top of it. The OS doesn't call your main, it runs the i
952.
▲
by
josefx
5y ago
On an untrusted site, where the content is readily available in the source view? No thanks, malware and other cryptominers are still a thing.
953.
▲
by
josefx
5y ago
> And only after the dealer gives it an immediately preceding check? Some dealers are qualified to perform the checks and also offer to perform a pre check for free. However cars checked by a dealer would not end up on a statistic of car
954.
▲
by
josefx
5y ago
> are better maintained, etc. Recent statistics released by TüV^1 show that among relatively new cars Tesla competes with Dacia for the highest failure rate among all cars that go through Germanies mandatory road worthiness tests. ^1 h
955.
▲
by
josefx
5y ago
If you choose to handle PII you have to keep track of where it ends up. Feeding PII into a black box and pretending it isn't there anymore without taking reasonable precautions, especially on something like ML that is known to leak its
956.
▲
by
josefx
5y ago
> it served up a document that contained the reference A document that is expected to be executed by the receiving system. Might as well log in to your companies production server as root and send the completely meaningless string of le
957.
▲
by
josefx
5y ago
I never said that you couldn't tape over any camera you found. Just that your boss can implicitly install cameras and since the topics are subject to change he can install new ones without telling you any time he likes.
958.
▲
by
josefx
5y ago
Controversial counterpoint: If you want any minimum wage job your boss should have the implicit right to install cameras in your bathroom and sell videos of you showering on the internet.
959.
▲
by
josefx
5y ago
Wont work, the moment this lands in Chrome websites will check for it and if your non chrome browser doesn't implement it they will redirect you to an upgrade your browser page. Browsers that fake it will get the same treatment, do not
960.
▲
by
josefx
5y ago
I would rather say be proactive and communicate, preferably in a professional manner. Walking around deliberately unaware with blindfolds on by "assuming" everything is more a skill I would expect from the "go along to get a
More ›