rlpb

24 ms·

391.
by rlpb 3y ago
> That's a very very small list of vulnerabilities for such a widely used piece of software. They are schoolboy errors in a relatively trivial piece of software that very well demonstrate the fundamental security flaw in its design.
392.
by rlpb 3y ago
Here's a good list of reasons: https://www.opencve.io/cve?vendor=fail2ban Parsing log files not intended to be read by automation (eg. questionable or nonexistent escaping) to then take actions as root is with great re
393.
by rlpb 3y ago
AIUI, at protocol level, Z-Wave supports multiple controllers and if you have two and one dies then you can switch to the other and replace the first. I can't see consumers arranging that though, and nor do I know how to do it.
394.
by rlpb 3y ago
I had that experience with Z-Wave using openzwave. Then I switched to node-zwave-js and the difference was night and day. All unreliability gone. My impression is that it therefore very much depends on the quality of the controller software
395.
by rlpb 3y ago
> Honestly, I'm kinda shocked that no hub company has shipped a Cheap Zwave/Zigbee integrated HA hub. Samsung SmartThings does both, doesn't it? Source: https://support.smartthings.com/hc/en-us/ar
396.
by rlpb 3y ago
> the case where you controlled the protocol on the machines of a partitioned network (eg., so you release a new version of btc which uses exploitable crytography Such a change would be treated as a "monopoly money" fork by tho
397.
by rlpb 3y ago
Visa's count presumably relates to direct consumer small value transactions though, whereas Bitcoin transactions are typically much larger "clearing" transactions. If Bitcoin is scaled up, that would be the only option - each
398.
by rlpb 3y ago
> can rewrite the history arbitrarily No, you cannot do that. Transactions would still need to be signed by the corresponding owners. All you could do is reorder (and thus invalidate) some transactions, drop some transactions, or add som
399.
by rlpb 3y ago
Knights are prone to getting "trapped". There are limited places a knight can go, so the opponent only has to maintain pressure on those squares. This is the reason why it's generally a bad idea to put a knight near a corner
400.
by rlpb 3y ago
> Gas stations...provide many, many jobs to society However, if they are no longer necessary, then everybody stands to benefit economically because it's an inefficiency that we can eliminate. We can be nostalgic about it and lament
401.
by rlpb 3y ago
> ...before the savings equal the difference in purchase twice. Why twice? Isn't once sufficient? One reason to require the expectation to be better than break even might be due to uncertainty. But EVs seem to have developed into be
402.
by rlpb 3y ago
Batteries tend to degrade to around 80% and then stay there. This is apparently the generally accepted trend now, but my anecdotal evidence matches: my Leaf is now nine years old and still has just over 80% of its capacity left.
403.
by rlpb 3y ago
> If this results in a 500% markup, customers should rightly be outraged. No, it just means that the economics are different than what you think and that you should adjust your expectations accordingly. For example, we can expect most el
404.
by rlpb 3y ago
> Charging, some placed really gouge you - I mostly charge at home (~0.115k/wh), and some local places are 3-5x that; home charging is the cheapest I've found. I wouldn't call it gouging. You're excluding the capex on
405.
by rlpb 3y ago
Speaker for the Dead (1987) has something similar so the idea is much older than that at least.
406.
by rlpb 3y ago
It's great that medicine managed to develop despite the Internet not being available at the time. But the next generation of medicine will only exist because of the Internet, and it will be orders of magnitude more advanced. In the l
407.
by rlpb 3y ago
For this reason open source always lags, but this decade's proprietary cutting edge always* becomes the next decade's open source. * except in niches
408.
by rlpb 3y ago
> I'm not sure if it was a bug or someone remotely changed the account records for her branch... From https://www.theguardian.com/uk-news/2024/jan/09/how-the-post... : > One [bug]...would see t
409.
by rlpb 3y ago
I can't speak for GP, but "safety critical" is the term relevant to this thread I think. Any situation where people die if you screw up, where that includes screwing up at a higher level, such as introducing ill-thought-out p
410.
by rlpb 3y ago
The source ISOs aren't a convenient bundle though. Nobody uses them; everyone uses Ubuntu's sources that are published online instead, including all historical versions. Like: what build would you be trying to reproduce, anyway? T
411.
by rlpb 3y ago
> There are many situations where I’d love to be able to chat with people a few hundred meters away without a network connection It's a shame because the necessary technologies and protocols have all existed for a decade or more: XM
412.
by rlpb 3y ago
> It's a bonus to them that every time they block a smaller host there is a good chance that sender will consider a move to office365 or Google Workspace for their mail. The irony is that a substantial amount of the spam I receive c
413.
by rlpb 3y ago
The original Firefox sync did this "right" (from a privacy and encryption perspective) but required user out-of-band transfer of key material to add a new device. Apparently this was too difficult for users, so they dropped it in
414.
by rlpb 3y ago
I am also invested into Z-Wave with about 50 devices. It works well, doesn't require an Internet connection, degrades gracefully if the hub is unavailable (or indeed any RF) and Z-Wave JS UI is good enough for self-hosting and bridging
415.
by rlpb 3y ago
> Why aren't they writing "when reached for comments, the company sent some generic statement that we won't bother printing"? Because then they'd have to make a subjective judgement about what is substantive and
416.
by rlpb 3y ago
I think any unit that couldn't do that would be useless as it wouldn't have the accuracy required - it would drift within a day otherwise. More interesting would be to understand how much its position drifts over a period of days
417.
by rlpb 3y ago
> It’s about as non-approved as ad hoc shell scripts. That's not a fair comparison. There's a big difference between your own ad hoc shell script (or command line or whatever) that you fully understand, and downloading and runn
418.
by rlpb 3y ago
An organisation that is prepared to write "sabotage" software would have no problem deploying software that is different to the software they submit.
419.
by rlpb 3y ago
Just because it works for you doesn't mean it's fine for everyone, and assuming this without research is...brave? Leaded solder reduces the risk of tin whisker growth which can over time cause shorts - catastrophic in any safety c
420.
by rlpb 3y ago
I agree with this in principle but I also acknowledge that in practice it's not so easy. Changing the "official" local time means that every interaction is changed in a coordinated way. Otherwise you have times specified in c

More ›