jsiepkes

36 ms·

541.
by jsiepkes 5y ago
Living longer is an excuse that only covers for the increasing of age at which you are allowed to retire. My grandfather retired at 59 (lived to be 89 btw). My retirement age is set to 69. That still leaves problems like not correcting for
542.
by jsiepkes 5y ago
I don't see why working hard and having dreams exempt people from making moral choices. Aside from the fact they have already earned millions. So I don't think it's quite that dramatic.
543.
by jsiepkes 5y ago
Does anyone know how many players have actually declined to play in Qatar because of this modern day slavery? Can't be that many because I haven't seen any news about it.
544.
by jsiepkes 5y ago
Don't forget that pension funds are also share holders. People lose theirs jobs because hedge-funds funded by Dutch pension funds trash companies for share holder value (V&D is a good example, look it up). The biggest irony is unio
545.
by jsiepkes 5y ago
> Since minting such a big project is a race of fast fingers, a lot of people didn’t pay attention to what is going on. Seems to me the thing that was exploited was one of the oldest things in existence to exploit: Human greed.
546.
Discourage use of Mailgun as a mail provider(secure.phabricator.com)
120 points by jsiepkes 5y ago|93 comments
547.
by jsiepkes 5y ago
I don't really see how the Log4J2 issue would have been uncovered by testing. It's not really a bug but more of a design flaw. The reason is that the whole JNDI string interpolation feature by itself opens a door to a whole world
548.
by jsiepkes 5y ago
> But its development has stagnated, and it doesn't offer anything over Log4j2 nowadays. I would say that a logging framework also needs to be boring. I don't understand why string interpolation with access to the JNDI context
549.
by jsiepkes 5y ago
There is even a JEP to remove the SecurityManager all together: https://openjdk.java.net/jeps/411
550.
by jsiepkes 5y ago
Logback has an interesting commit[1]: "disassociate logback from log4j 2.x as much as possible". They also updated their landing page [2]: "Logback is intended as a successor to the popular log4j project, picking up where log
551.
by jsiepkes 5y ago
What adds to the confusion is that log4j2 rebrands itself as log4j. For example the Log4j2 artifact name is: `org.apache.logging.log4j:log4j-api` but it is actually Log4j2, not the original Log4j. There is plenty of stuff out there that sti
552.
by jsiepkes 5y ago
If the data from the camera is just used as a sensor (ie. to see if your staring at a phone) and then disable auto-pilot and no footage is stored I wouldn't see how that would be a privacy concern?
553.
Adyen introduces Android based payment terminals(adyen.com)
2 points by jsiepkes 5y ago|0 comments
554.
by jsiepkes 5y ago
Worth noting that Moderna uses a larger dosis then Pfizer for the first and second shot.
555.
by jsiepkes 5y ago
Since it is only about private persons and there is a whole slew of exceptions about "tweets of public interest, etc." wasn't this already mandated by the GDPR?
556.
by jsiepkes 5y ago
> we found all hard-coded Public keys were using RSA 512 > Next, the data was hashed using a custom hashing algorithm developed by lachongtech. Yeahhhh.....soooo.......
557.
by jsiepkes 5y ago
Yeah, we need DANE [1] or something like it in browsers. AFAIK DANE failed because DNS servers (such as the DNS servers of ISP's) sometimes failed to properly return the record types DANE used. [1] https://en.wikipedia.org&#
558.
by jsiepkes 5y ago
That, and even worse maintaining a custom build with changes and the infrastructure such as maintaining a OTA update server, etc. is a lot of work.
559.
by jsiepkes 5y ago
Plenty of companies could survive without China. They just don't want to part with China's money/market/cheap labor.
560.
by jsiepkes 5y ago
The current situation means I can't even use my own push notifications for company owned devices running company written software. That's just ridiculous.
561.
by jsiepkes 5y ago
Also since demoting people almost never works taking it slow seems in the best interest of both parties. Now obviously they shouldn't keep you there. So if you are really up for it they should promote you and not leave you hanging. But
562.
by jsiepkes 5y ago
> The Beam/Erlang/Elixir model. It's a bit more constraining but it's just so clean and reliable [..] I agree. But I think that only works if you embed it in the language like Erlang did. If you make it optional you g
563.
by jsiepkes 5y ago
> It's just making things needlessly hard for programmers in an attempt to save effort from computers. Well actually it is supposed to make concurrency easier for programmers. What would you say is an "easy" way to deal w
564.
by jsiepkes 5y ago
There is also a actor pattern implementation for Rust: https://actix.rs/ But yeah, the way Erlang embededded the actor pattern in the VM (Beam) and the language itself is great. Tough personally I would have liked it if it
565.
by jsiepkes 5y ago
> Beat their record fine from the EU? None of the others seems like a plausible result. The reason they dare to try is because they know they might even get away with it. I'm definitly not condoning it but the situation is very diff
566.
by jsiepkes 5y ago
Easy is probably an overstatement. iFixit describes it as: > Battery replacements are reasonably well prioritized, if not exactly easy. Overall it gets a 4 out of 10 [1] [1] https://www.ifixit.com/News/54122/mac
567.
by jsiepkes 5y ago
I doubt this is specific to western Europe but the case in all countries. Because in theory you can't "give" anything without paying taxes. Meaning you can't give a gift without paying taxes. There are some exceptions of
568.
by jsiepkes 5y ago
Yeah the story of the Batavia makes the Star Trek mirror universe empire seem like a bunch of boy scouts compared how the VOC ran things. > Cornelisz and several of the major mutineers had both hands chopped off before being hanged. >
569.
by jsiepkes 5y ago
Nice tool! One thing I'm wondering about is that it seems that on every deployment a new private key is generated. That would make it hard to pin the (public) key in the certificate in for example an Android app. Is key pinning not tha
570.
by jsiepkes 5y ago
Wow, thats a blast from the past. I guess the way to the metaverse is paved with predecessors that never caught on (as with so many tech things).

More ›