mirashii

39 ms·

391.
by mirashii 8y ago
https://news.ycombinator.com/item?id=12320377 An old thread, but the discussion covers a bit on how Delaware actually has extremely pro-shareholder laws relative to other states, including requiring disclosure of the cap ta
392.
by mirashii 8y ago
> also because people are better at writing code than they were then (even if it doesn't feel that way) Any reference or data to back up this assertion? My intuition would say otherwise, if for no other reason than that because the
393.
by mirashii 8y ago
I was also a customer for quite a while, and also didn't notice any new features or anything. But I also didn't need or desire any new features, and I can honestly say that of all third-party services I've used as a part of i
394.
by mirashii 8y ago
Citation needed. The reality is almost certainly far simpler. PHP started as a suite of tools for writing CGI pages [1], which have the same property mentioned. As with many things, that early design choice has followed through and led to c
395.
by mirashii 8y ago
Are you doing this in a commercial context, or in a university lab or similar? I've seen a few papers come out of universities using this technique but I haven't gotten to look at any commercial gear to see how it works under the
396.
by mirashii 8y ago
FPGAs are indeed commonly used for SDR as well. Ettus has a range of USRPs with FPGAs on-board, and you can find readily available IP cores for anything from Bluetooth to DVB-S.
397.
by mirashii 8y ago
It wasn't a bot, it was an observer. A bot would have it's name appear.
398.
by mirashii 8y ago
I think a better question to ask is not if it is relevant, but what portions of it are relevant. There are certainly many key, important lessons that have been learned in the process of scaling their organization and processes. I'd say
399.
by mirashii 8y ago
A ledger of hashes doesn't prevent someone from publishing a new version of a package with the stolen credentials. What you advocate in this thread is setting aside defense in depth. Could the attacker have used the stolen credentials
400.
by mirashii 8y ago
None of the criticisms of package signing here apply in this case. Package signing does cover this exact issue, which we should describe to be specific: (1) someone has published a package. (2) that package has become well known and used en
401.
by mirashii 8y ago
If 2fa is enforced, having your password doesn't get you anything. Publishing an npm package isn't having a Twitter account, it's one of those things where enforcing 2fa shouldn't even be a usability question.
402.
by mirashii 8y ago
Calling it resolved is worse than doing nothing. If they had done nothing, at least people would know that "If I run npm install now, that's bad". Now they've claimed it is resolved, which tells their users "It&#x27
403.
by mirashii 8y ago
It isn't disproportionate given the yearly advances in understanding and awareness of security issues, or disproportionate given their size and the number of security issues that they have already experienced. Alternatively, we as a co
404.
by mirashii 8y ago
There's also no systemic fix for this issue. Next week, the same thing could happen again. It's time to enforce two-factor authentication for publishing packages. It's time to publish a roadmap towards package signing and ver
405.
by mirashii 8y ago
For one, they've marked the issue as resolved before they've completed any forensic analysis to discover if additional compromised packages were uploaded with stolen credentials during the window in which they weren't revoked
406.
by mirashii 8y ago
I don't think it's useful to use laziness to describe this, as it's needlessly perjorative. It may be that they've decided that the ROI is not there for complying with GDPR, or that the risk of an inadvertant fail is too
407.
by mirashii 8y ago
> Has anyone done research on whether Illumos zones or FreeBSD jails really provide better security than Linux containers? This is an ever changing property of both systems, and a little bit subjective, so a study is both difficult and o
408.
by mirashii 9y ago
[xchg rax,rax] has a collection of interesting snippets. You can either try to reason what they're doing yourself, or there are a variety of writeups out there for each of the snippets.
409.
by mirashii 9y ago
For what it's worth, GPS does work, and can indeed work very well. Applications like GNSS-RO have been done on research and commercial LEO satellites and use GPS to get orbit position estimates down to 10s of centimeters.
410.
by mirashii 9y ago
I think you heavily overstate the difficulty and cost of diverting a spacecraft, especially in the case of cubesats, which in general do not have any propulsion systems to do the delta-v manuevers you state. For collision avoidance for cube
411.
by mirashii 9y ago
A snarky reply like this comes up every time there's discussion of a DDOS, but it ignores the fact that there is some point that has to filter that UDP traffic, and if that point is saturated, the DDOS still worked. Mitigating attacks
412.
by mirashii 9y ago
If making a language compiled is a magic bullet for speed, why isn't every language compiled? Because they have different levels of abstraction that lend their implementation to compilation or interpretation. You're just citing a
413.
by mirashii 9y ago
It is, for a few reasons. For one, you need to be able to detect the period of stillness, and so how certainly you can detect that time window is a function of how long it is. Second, you need to be able to make a number of measurements fro
414.
by mirashii 9y ago
> Teaching these skills in CS curriculum would probably be a good idea. This is the one thing I don't agree with. A better placement for these skills is a generic course required for any degree, or an optional course that anyone cou
415.
by mirashii 9y ago
Maybe it would've made a difference. Your comment was downvoted because it put words into the author's mouth that were obviously not his own, about a topic that's going to be known to be controversial, and followed it up with
416.
by mirashii 9y ago
I also failed to account for slant angle for the distance, which could add a few more milliseconds to each leg in the worst case.
417.
by mirashii 9y ago
It's in the article, but 25-35ms total. For the highest orbit they plan, one way latency is under 5ms, so these goals seem easily within the realm of possibility.
418.
by mirashii 9y ago
Totally agreed, and I personally remind people of the savings aspect quite often. If you target saving a percentage of your salary, like many people do, 20% in the NYC is a lot more savings than 20% in Montreal. This particular article is e
419.
by mirashii 9y ago
That 1GB of RAM per 1TB of disk is a recommendation from the ZFS documentation, but let's remember the audience, and the feature sets enabled when we talk about it. In particular, that suggestion stemmed from running in a configuration
420.
by mirashii 9y ago
A little bit more info can be found here [1]. In particular, site isolation [2] will also assist in protecting against this vulnerability. [1] https://support.google.com/faqs/answer/7622138#chrome [2] http:/

More ›