Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
maltalex
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
50 ms
·
541.
▲
by
maltalex
9y ago
You're right, the system is not fair, and it's FAR from being perfect. The "innocent until proven guilty" part bothers the heck out of me. But the story doesn't end with me or you. Recall that there are actual crimi
542.
▲
by
maltalex
9y ago
> The thing I find funny is that they aren't acknowledging the fact that they used to solve crimes before cell phones existed. What did they do back then? I'm not a big fan of government surveillance, but I find this argument p
543.
▲
by
maltalex
9y ago
I'm sure they would if that's possible. But if microcode can only be updated by the BIOS, you'd need a BIOS update.
544.
▲
by
maltalex
9y ago
Any guesses as to which vulnerabilities they're going to patch? Some of them? All of them?
545.
▲
by
maltalex
9y ago
I don't think that's the case. They're patching the issue in CPU microcode.
546.
▲
by
maltalex
9y ago
Yeah, well, let's not break out the champagne yet. According to your link: > The BIOS (or UEFI) updates the CPU microcode during boot, however most of the time either the motherboard vendor won't issue frequent BIOS/UEFI u
547.
▲
by
maltalex
9y ago
How does one patch a CPU? Does the update come in the form of a BIOS update? If so, then the patch still has to travel through the PC manufacturers, like when Google patches Android. Or can it be somehow applied directly? Edit: Apparently t
548.
▲
by
maltalex
9y ago
I'm all for P2P solutions and a more distributed Internet, but I'd like to add a few items to that list. - Security in a P2P system is harder to get right. The system is distributed and each member has to trust more parties. This
549.
▲
by
maltalex
9y ago
It's a good question and I bet there's going to be a lot of speculation and pointing to documents and people that predicted these issues years ago. But it's important to remember that hindsight is 20/20. All of us probab
550.
▲
OpenNIC – alternative DNS root
(opennic.org)
6 points
by
maltalex
9y ago
|
0 comments
551.
▲
by
maltalex
9y ago
Reading this as someone who writes mostly in statically typed languages, the whole exercise seems odd. Having so much dynamically typed code to maintain that you need to run production code using a separate tool just to figure out the types
552.
▲
by
maltalex
9y ago
> I worry that the "culture" argument has dangerous implications if true, as it can be used to discriminate on so many grounds outside of age: gender ("If I'm with a bunch of my bro's, why mess it up with a girl?
553.
▲
by
maltalex
9y ago
> Exploit him or her with false promises. FTFY. Yeah, there's that too. But let's not even go there and assume that everything is strictly aboveboard. Otherwise we'll derail the discussion, and I think that the cultural as
554.
▲
by
maltalex
9y ago
The discussion here is interesting, but I haven't seen any psychological and sociological aspects of hiring mentioned yet. Not all hiring decisions are rational. First, there's a culture thing - when a company is composed out of 2
555.
▲
by
maltalex
9y ago
It's not just you. Take a look at the google trends data for "iphone slow": https://trends.google.com/trends/explore?date=all&q=iphone%2...
556.
▲
by
maltalex
9y ago
This screams "planned obsolescence". If battery scaling is a feature, then why isn't it mentioned by Apple? Why do we need a Reddit thread and a third party benchmarking tool to figure it out? Also, why does the google search
557.
▲
by
maltalex
9y ago
Related, from three days ago: Tax Bill Would Curb Breaks for Sexual Abuse Settlements ( https://www.nytimes.com/2017/12/16/us/politics/tax-bill-hara... )
558.
▲
by
maltalex
9y ago
Try this: https://www.fakespot.com/
559.
▲
by
maltalex
9y ago
Extra Credits made a video about Sesame Credit a couple of years ago. It's 7.5 minutes long, and well worth the watch: https://www.youtube.com/watch?v=lHcTKWiZ8sI Being a game design channel, they discuss Sesame Credit
560.
▲
by
maltalex
9y ago
> I think governments should regularly perform live tests to check whether their countries' AS's can be hijacked. That's a waste of money and effort. They should just write "yes" on a piece of paper, there's
561.
▲
by
maltalex
9y ago
It's not just the public, it's professionals too. There are probably more brain surgeons on earth than people who understand how BGP works.
562.
▲
by
maltalex
9y ago
> but is hard because you have to identify the bad actors, or paths that lead to them. It's worse than that. There are few truly "bad actors". Many BGP hijacks are performed by completely legitimate networks, which later c
563.
▲
by
maltalex
9y ago
Everyone should be. It's surprising how vulnerable and fragile Internet routing is.
564.
▲
by
maltalex
9y ago
I've asked around the company and unfortunately I can't talk about attacks (and/or suspicious "configuration errors") we've detected. There are legal issues involved, plus some of these cases are currently bein
565.
▲
Nyan Cat painted by smartly managing the routing of 175 /24 prefixes
(labs.ripe.net)
2 points
by
maltalex
9y ago
|
0 comments
566.
▲
by
maltalex
9y ago
Bad idea. These are customers he's talking about. If you want to stay in business, naming and shaming your customers isn't a good strategy.
567.
▲
by
maltalex
9y ago
Yes, but to be honest, it's not just BGP. One of the things that BGPMon won't tell you about since they're in the business of monitoring BGP is that the same attack is often performed by changing forwarding tables i.e. in net
568.
▲
by
maltalex
9y ago
It's not really better today. Possibly even worse. In 1998 there were fewer than 5000 different networks (Autonomous systems) on the Internet. Today that number is over 80K. Network operators used to personally know each other and thei
569.
▲
by
maltalex
9y ago
Sure, it's a reason to blackhole the isp, but this is the Internet we're talking about. So say its upstream providers will backhole it, say even the tier 1 providers do the same. That won't stop it from connecting to smaller
570.
▲
by
maltalex
9y ago
> Is it fair to say BGP in general relies on “good will” trust model? Yes. > I wonder if there exists an authoritative mechanism similar to browser punishing rouge or incompetent CA Not really. Although if you get a reputation for bei
More ›