riskable

88 ms·

931.
by riskable 10y ago
> We should build a new container after each apt-get for security patches, right? Yes. That's the idea. Here's when and why you re-deploy: * A new, updated version of software/a package is out. * You've ma
932.
by riskable 10y ago
Well, Docker containers are really meant to be short-lived. On the order of milliseconds (e.g. run a batch operation) to days (run a web server application). They're also meant to be mostly immutable. So a vulnerability in a parti
933.
by riskable 10y ago
What's interesting is that what you're talking about is computing fundamentals. Stuff that kids should be learning about in high school before they go to college. At the very least they should teach kids what happens when th
934.
by riskable 10y ago
This is a fair point but isn't software development (in general) trending towards this same reality? Consider a job where the plan is to write a straightforward web application that runs inside a custom-built Docker container. What s
935.
by riskable 10y ago
What's funny about your example is that using a set in that situation would be an example of premature optimization. If your entire list of receipts fits into memory users won't notice a difference between a list and a set. Also,
936.
by riskable 10y ago
> Nobody wants to work for a coward. I dunno. There's advantages to having a boss that's a huge pushover... Boss: "We need this done by the end of the week!" Employee: "That's just not possible. These so
937.
by riskable 10y ago
The GPS issues have nothing to do with getting a GPS fix. It's just a plain ol' bug. My GPS is spot-on when using any app other than Pokémon Go which pretty regularly states that the GPS isn't working when I'm holding
938.
by riskable 10y ago
Or how about actually using the augmented reality (AR) portion of the game in a way that isn't just a gimmick: Make it so I can pan around my area with the camera to see where the Pokémon are (or at least provide a "rustling
939.
by riskable 10y ago
I think part of the argument the EFF will make is that section 1201 is inherently in conflict with itself in regards to fair use (an argument which was explicitly not ruled upon in the DeCSS court case) and free speech (to a lesser extent
940.
by riskable 10y ago
I was going to cover this topic (the cost of starting/forking a process) in my original comment but decided it would be a bit tangential since I was able to make my point without it. On Windows the cost of forking a process is high whe
941.
by riskable 10y ago
Is it a "racket"? No. Are the fees "just"? Well, I honestly don't know. It probably varies on a state-by-state basis but here in Florida the title fee is likely outdated and unnecessary considering that it is al
942.
by riskable 10y ago
There's no need to "build" anything for this purpose. Just buy a general-purpose microcontroller like this: http://www.freetronics.com.au/products/leostick ...and stick it inside a generic keyboard (whi
943.
by riskable 10y ago
The trouble with "secure CPUs" is that they really only secure the boot process. It is then up to the OS (as usual) to secure itself which is where most failures of security occur anyway. Consider all the phone "OSes" (
944.
by riskable 10y ago
I'm not a huge fan of PowerShell but you're not really making a good comparison here. Bash is "just a shell" that executes commands with a few bits of syntactic sugar here and there to make it easier to string those com
945.
by riskable 10y ago
Old growth wood is just plain stronger than the type of wood you'd find in modern buildings. How much stronger? About 2-3x depending on the wood. Also, heartwood (from the center of the tree) is stronger than wood from the outer por
946.
by riskable 10y ago
The big cost in these systems is the water since they're placed in locations where land is cheap (read: otherwise worthless). So conquering the spaces between circles really isn't very important. The key is to increase yield-per
947.
by riskable 10y ago
> If they did examine the terms, as you said supply and demand would ensure the terms are fair. Only if all parties have all the information. The person being hired has now idea how desperate the company is for their skills, how much th
948.
by riskable 10y ago
There's degrees of risk associated with the type of construction work you do. I know someone who used to be a pipe fitter. Unless he showed up drunk at the job site (which may have happened a few times, hah) I don't think he w
949.
by riskable 10y ago
I'd put Luck and Nepotism at the top of the list followed by D. But maybe that's just because I work in finance.
950.
by riskable 10y ago
Autotype is a bit risky because it assumes you've got the correct window/element focused. All it takes to expose your passwords is for a pop-up (e.g. instant message) to appear at the right moment. Even if you don't hit the
951.
by riskable 10y ago
There's nothing inherently wrong with exposing SSH on your production servers to the Internet. It is one of the most secure services that can run on any given host. Surely it's more secure than your web server or application dae
952.
by riskable 10y ago
The article talks about all these sophisticated attacks that could hurt the financial system but I think they're not seeing the elephant in the room: What if someone just ran "rm -rf /" on thousands of servers at just
953.
by riskable 10y ago
Using someone's identity is only illegal if you do it without their knowledge/permission. Valets don't need to sign a power of attorney contract in order to use your keys to park your car. It's not really relevant to th
954.
by riskable 10y ago
This is the same argument people are making against this ruling. It sets a very bad precedent. Arguing that an IP address is an identity "for this case" or "this argument" has the same fundamental problem. No, an IP ad
955.
by riskable 10y ago
> Power had a clear signal that it's license to access Facebook's website had been revoked Wait: When did accessing Facebook require a license? Shouldn't the fact that Facebook is publicly-accessible make that argument m
956.
by riskable 10y ago
Actually, there's loads of laws like this! I'd argue that if a user fetches the unencrypted passwords of users from a website that they shouldn't be punished at all because merely obtaining such information isn't harmfu
957.
by riskable 10y ago
This is a good point but a bit of a strawman argument. SQL injection is an intentional attempt at circumventing the security of a website. Performing GET and POST requests to merely use an API is an entirely different category of access
958.
by riskable 10y ago
Reminds me of one of my first Python projects: https://pypi.python.org/pypi/sshpt "SSH Power Tool, Run commands and copy files to multiple servers simultaneously WITHOUT requiring pre-shared authentication keys&qu
959.
by riskable 10y ago
Been working on this for a few months now (spare time) and I've finally decided to share it with the world. I'd love to hear what the folks of HN think. The core of the library handles keyboard events along with some window/
960.
Show HN: HumanInput.js – A library for capturing human input(github.com)
24 points by riskable 10y ago|3 comments

More ›