kbolino

41 ms·

571.
by kbolino 2y ago
A locked-down device is pretty much definitionally a subscription and not a perpetuity. You cannot fix a locked-down device yourself, so the vendor has to do it for you. When the vendor stops doing that, all of the "benefits" of i
572.
by kbolino 2y ago
Yes, there is a legitimate need, and when you know you need it, you have already demonstrated you know what you are doing, and therefore can find the proper tool, even if it's not the default. Whereas, when you don't know what you
573.
by kbolino 2y ago
I think a bifurcation is likely. You can't program these locked-down devices/systems on themselves. At the end of the day, some of us have to be able to write the code that makes these things work. So I think there will always be
574.
by kbolino 2y ago
TPM 1.2 is only guaranteed to support SHA-1. That was a baffling inadequacy when it came out in 2011, proven so just a few years later when SHA-1 was publicly broken in 2017. This makes TPM 1.2 useless for its intended purpose. TPM 2.0 is g
575.
by kbolino 2y ago
Things that were in the Go standard library from the first public release (2012): encoding/json vs Python: 2008, json package added in version 2.6 .NET: 2019, System.Text.Json came with .NET Core 3.0 JVM: still nothing net&#
576.
by kbolino 2y ago
It's not worse. It's just only slightly better . The most damning thing you can say about Go is not that it doesn't improve upon C, it's that it improves only on C (and only in the ways cared about). The authors of Go
577.
by kbolino 2y ago
Go's "enums" are worse than a lot of other languages, but they're not worse than C.
578.
by kbolino 2y ago
As far as I can tell, the difference is this: UAC is per-process and monotonic. Once elevated, the entire process stays elevated. The new model is per-operation. Even if the same process has been allowed to elevate before, it must ask to do
579.
by kbolino 2y ago
This isn't really a practical problem. If you created the slice, you control it and you can modify its elements, append to it, etc. If you didn't create the slice, you don't control it. If you want to modify it or append to i
580.
by kbolino 2y ago
Awesome! It's interesting that there's still (what feels like) a lot of overhead from determining whether the thing is cached or not. Maybe that will be improved before the release later this month. I'm wondering too if that&
581.
by kbolino 2y ago
An explanation of why: https://stackoverflow.com/a/11965368/814422 There are some important caveats, though, around trap or non-value representations. Basically, the value held by the storage for a variable may no
582.
by kbolino 2y ago
Any buffer of pre-issued/post-dated certificates would defeat the purpose of the short lifetime. You are supposed to request each new certificate during the validity period of the previous one. Taking the extreme of 6-day certificates
583.
by kbolino 2y ago
These are the four main problems with LLMs (and related technologies) as I see them: 1. You can't tune them to your needs; they have restraining bolts and the training data is a generic corpus 2. You don't own your interacti
584.
by kbolino 2y ago
I'm actually not 100% on this; there is a cache, and it should speed things up on subsequent runs, but maybe not as much as one might think: https://news.ycombinator.com/item?id=42864971
585.
by kbolino 2y ago
Ok, I'm trying to suss out what this means, since `go tool` didn't even exist before 1.24. The functionality of `go tool` seems to build on the existing `go run` and the latter already uses the same package compilation cache as
586.
by kbolino 2y ago
go tool is only slower when (re-)compilation is needed, which is not often. You'd have to pay the same price anyway at some point to build the binary placed in ./bin.
587.
by kbolino 2y ago
There is a cache and they're aren't re-compiled unless they change or the cache is cleared.
588.
by kbolino 2y ago
Commercial banks answer to the government, to the central bank, to their shareholders, and to their non-governmental regulators (payment networks, insurers, etc). This has created plenty of examples of "debanking" of businesses an
589.
by kbolino 2y ago
Whether to nudge or to force is a policy choice, and is orthogonal to the question of digital currency.
590.
by kbolino 2y ago
The Federal Reserve is a bank. And we already have a relevant historical example to examine, postal savings accounts. I'm not aware of any special power that the executive branch had to bypass the judicial branch where those accounts
591.
by kbolino 2y ago
No: https://news.ycombinator.com/item?id=42817750
592.
by kbolino 2y ago
These incentives already exist. The tax code has been manipulated to encourage or discourage behavior since at least WW2. A digital currency makes a lot of these incentives easier to create and easier to enforce, but they wouldn't be
593.
by kbolino 2y ago
I would hope so. I certainly do. In 25 years of using them, I have never had a conventionally regulated financial institution (NCUA-insured credit union, FDIC-insured bank) lose so much as a penny. Whether they are keeping proper reserves i
594.
by kbolino 2y ago
I'm inclined to agree that websites should know when they're the target of a redirect but that has nothing to do with Referer ! That header does not work the way so many seem to think it does. As I've laid out elsewhere in t
595.
by kbolino 2y ago
Referer is not a security mechanism.
596.
by kbolino 2y ago
If you navigate straight to bad-domain.com which redirects to good-domain.com, there will be no referer at all. If you click a link on red-herring.com which points to bad-domain.com, which then redirects to good-domain.com, the referer will
597.
by kbolino 2y ago
Redirecting back to the referer will not create a redirect loop. The referer is the URL of the site that linked to the redirect, not the redirect itself. The redirect does not alter the referer in any way. In many cases, there will be no re
598.
by kbolino 2y ago
You cannot detect the redirect, so you cannot display any such warning.
599.
by kbolino 2y ago
Neither the Origin nor the Referer headers have anything to do with a 301 redirect.
600.
by kbolino 2y ago
You cannot detect a 301 redirect when you're only in control of the destination.

More ›