richbell

22 ms·

271.
by richbell 3y ago
The speculation seems to be that Sam was being duplicitous and trying to oust a board member he didn't like. Members of the board compared notes and realized he had misrepresented his conversations with other members in an attempt to b
272.
by richbell 3y ago
> I didn’t say it will become cheaper overtime. That's what you implied. ) New technologies are expensive *at the beginning*
273.
by richbell 3y ago
Bitcoin was created ~2009. The cost is only going up, by design.
274.
by richbell 3y ago
This is an ad.
275.
by richbell 3y ago
> eg. customer has a static phone number in one country that they have continuous SMS access to, customer wants to install your extra app, whatever GitHub uses TOTP which does not require SMS, can be used with dozens of apps (because it&
276.
by richbell 3y ago
> forced 2FA bullshit... all this makes long term customers want to self host. An objectively positive security feature makes people want to self host?
277.
by richbell 3y ago
Since v1.21, which wasn't released that long ago.
278.
by richbell 3y ago
That's mostly a facet of frameworks like Spring, not something inherent to Java itself.
279.
by richbell 3y ago
The YouTuber Eddy Burback has a video called "The Deceptive World of Ghost Kitchens" that I'd highly recommend watching. https://youtu.be/KkIkymh5Ayg
280.
by richbell 3y ago
It's referred to as an "Insecure Direct Object Reference" (IDOR) vulnerability. In many cases it is not actually a vulnerability, however, when an application contains sensitive information and lacks authorization or rate-lim
281.
by richbell 3y ago
The maintainer is apparently infamous for lashing out against people trying to report potential vulnerabilities. He had a similar attitude all the way back in 2014: > i'm closing this as its a waste of time. https://githu
282.
by richbell 3y ago
If anyone is wondering why this is posted in a GitHub issue, the author attempted to disclose this privately but was ignored before finally receiving the response "ur a fucking tim.e waster!" https://0xbro.red/disc
283.
by richbell 3y ago
It was eventually fixed in another PR, despite the maintainer's lengthy ranting. https://github.com/opencart/opencart/pull/12951#issuecomment...
284.
by richbell 3y ago
I haven't looked at the implementation yet but HashIds (the former project name) required a salt. It would be weird if they changed that.
285.
by richbell 3y ago
Presumably they mean session cookies.
286.
by richbell 3y ago
> This does not exist currently in the West. WeChat exists because they have a de facto monopoly granted by the government in exchange for widespread surveillance and censorship.
287.
by richbell 3y ago
I wanted to add scanning for my single person hobby projects and was willing to pay. I immediately lost interest when I saw their pricing ($99/mo). https://about.gitlab.com/pricing/
288.
by richbell 3y ago
Trap streets are at least traps — that is, difficult to identify as such. What possible reason is there to copy things like "1 1 1 1" or "RO8O7"? It seeks like Casetify ripped off Dbrand in the laziest way possible.
289.
by richbell 3y ago
The barrage of gambling ads seems unprecedented, at least in my neck of the woods.
290.
by richbell 3y ago
> No, it is context for the sudden interest in a scandal discussed to death in Israel over 10 years ago. Do you have proof that Iran is responsible for the linked post? If not, I wouldn't consider that providing context. > It&#x2
291.
by richbell 3y ago
> This piece is part of an ongoing Iranian campaign to destroy Israel, and make ppl in the west forget about the heinous massacare that happened on Oct 7. Where Hamas terrorists invaded Israel and attacked villages killing whole families
292.
by richbell 3y ago
> ...languages which do not have a reputation of being stable, easy to learn, easy to read and understand, compile quickly, etc. Kotlin is definitely the odd man out in that list.
293.
by richbell 3y ago
Famously something you could learn in a weekend. It allowed you to start being productive right away, even if you were writing terrible insecure code!
294.
by richbell 3y ago
I never said otherwise. My point is that Go is far harder to learn than they're implying. It certainly can't be learned over the weekend — well, maybe it can be, but the code you end up writing will Inevitably be full of resources
295.
by richbell 3y ago
> No it isn't, and yes it does. By definition, the more features I add to something, the more complex it becomes. So yes, Go achieves it's simplicity precisely by leaving out features. More complex for whom? Not having generics
296.
by richbell 3y ago
> I'm sorry but nearly all of them are along the lines of "I came from language X and in X we did it this way, but Go's syntax is different". That's not a footgun. You're right, I meant to link that in refer
297.
by richbell 3y ago
> True, and because of this... This is a false dichotomy. One does not imply the other. Go is also not a simple language. It is deceptively difficult with _many_ footguns that could have easily been avoided had it not ignored decades of
298.
by richbell 3y ago
Sorry, I should clarify that some of those things are _in addition_ to regex. You are correct that it uses Hyperscan to find initial matches, then their first-party patterns go through some additional local processing magic. (This is my und
299.
by richbell 3y ago
You are correct. Though, speaking of regex, they work with partners to create the most accurate regexes possible using non-public information like expected entropy or checksums.
300.
by richbell 3y ago
That was my first thought as well. :) Context, for anyone who hasn't used Amazon in recent years. https://news.ycombinator.com/item?id=32195987

More ›