Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
shkkmo
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
40 ms
·
691.
▲
by
shkkmo
3y ago
Pushing people to unnecessarily reset credentials increases risk. Not only does it increase acute risk, but it also decreases the value of the signal by crying wolf. The argument here is the kind of nonsense cargo cult security that pervade
692.
▲
by
shkkmo
3y ago
> plenty of people writing auth code will take the stance all failures are presented the same as a bad password or non-existing username Those people would be wrong. You can take all unexpected errors and stick them behind a generic erro
693.
▲
by
shkkmo
3y ago
> If that happens to be indistinguishable from a failure to authenticate due to incorrect credentials from the perspective of the login form service, well, here we are. If you can't distinguish those, then that is bad software desig
694.
▲
by
shkkmo
3y ago
You can't plan for every contigency, but you can reserve potentially scary message for situations where you know they are correct. An unpected error state should NOT result in a "invalid credentialiald error".
695.
▲
by
shkkmo
3y ago
That's not precisely accurate. The cascadian subductions zone uas produced magnitude 9 quakes in the past. The results I've seen (from a decade and a half ago) pegged the probability of a magnitude > 9 in the next 50 years at 1
696.
▲
by
shkkmo
3y ago
The same criticisms and solutions apply to web pages. Various organizations provide "archive" services. Relays and/or AppViews can utilize (or be) such a service. Removal from such a service depends on that service's sys
697.
▲
by
shkkmo
3y ago
As the plaform matures so will the blocklist ecosystem. Hopefully blocklists with good appeal mechanisms will win mindshare.
698.
▲
by
shkkmo
3y ago
My understanding is that a PDS instance only hosts data for it's users. Caching can happen at Relays or AppViews and those will presumably need to do something to avoid caching CSAM.
699.
▲
by
shkkmo
3y ago
> If moderation is done globally, and I can't exercise any control over the prioritization of content beyond what is granted to me by the global provider (even though there are more and better choices than 'old social'),
700.
▲
by
shkkmo
3y ago
> Decoupling moderation and hosting means there's no onus to do the moderation that they describe: I'm not sure this follows. There is a similarity to the reddit model of moderation. The host provides some base amount of modera
701.
▲
by
shkkmo
3y ago
It'd be nice to see an updated version of those that describes how those ideas and tools relate to a self/third-party hosting. The best I can tell, this is the model: My understanding is that each host has control over what they h
702.
▲
by
shkkmo
3y ago
A self hosted instance will have whatever moderation the host chooses to implement (such as CSAM monitoring if required by law.) On top of that, user defined moderation will be applied from block and mute lists. Hopefully this will include
703.
▲
by
shkkmo
3y ago
This is entirely by design: > Moderation on Bluesky is not tied to your server, like it is on Mastodon. Defederation, a way of addressing moderation issues in Mastodon by disconnecting servers, is not as relevant on Bluesky because there
704.
▲
by
shkkmo
3y ago
Or just nudge a couple of big asteroids into collision courses
705.
▲
by
shkkmo
3y ago
Infants do have a "diving reflex" but that is very different from knowing how to swim. If you throw a baby in a pool, the baby will drown and die. There are undoubtedly similar reflexes that assist fulmars in learning to fly quick
706.
▲
by
shkkmo
3y ago
Yes, that's useful information to those who aren't familiar with the situation but I would say that the way the Democrats voted in lockstep is a great example of the partisan lack of compromise that a two party system encourages.
707.
▲
by
shkkmo
3y ago
> The more shares you hold, the greater your voice, when it comes to corporate governance. It's not at all the same as the typical idea of democracy as "one person, one vote". "One person, one vote" is not how th
708.
▲
by
shkkmo
3y ago
> I'm not sure what you mean by drawing the distinction between internet use and social media use. They're two different terms that mean different things. Just because something is true for squares doesn't mean that it
709.
▲
by
shkkmo
3y ago
You're aware that all publicly traded companies are run by a democratic system where the voters are shareholders? The only change here is who limiting who allowed to own shares to people work are directly involved.
710.
▲
by
shkkmo
3y ago
I would point out that some of the issues you've called out are particular to a parliamentary system. The USA forms executive governments differenty. The closest analogy would be the speaker of the house, where the USA has already seen
711.
▲
by
shkkmo
3y ago
These laws don't benefit me in anyway. I hate recieving texts from politicians begging for money using a loophole they have written for themselves. I also don't want random people to be able to call me and yell at me about politic
712.
▲
by
shkkmo
3y ago
> To be fair, if you look at statistics around gen z you can see that there definitely are negative consequences of internet access I haven't seen any such data. It's hard to separate generation effects and look purely at the e
713.
▲
by
shkkmo
3y ago
Except it isn't really an argument, so much as a question. In your example, the good created by eliminating polio are blatantly obvious to anyone who knows what polio is. For your analogy to hold, then the answer to the question posed
714.
▲
by
shkkmo
3y ago
https://archive.is/3azGT
715.
▲
by
shkkmo
3y ago
Or the bags could be donated to charity. Allowing profiteer off other people's misfortune is unethical and creates perverse incentives.
716.
▲
by
shkkmo
3y ago
It's pretty important to note that those aren't per bag payouts but per bag liability limits, after you provide documentation for the value of the contents of the bag. Thus allowing a company to buy "lost" bags directly
717.
▲
by
shkkmo
3y ago
> Now if someone has been contacting the airline and the bags cannot be found and the airline continues to sell those bags whilst the customer has been attempting to retrieve them then that's a problem. I would assume that this is t
718.
▲
by
shkkmo
3y ago
That's nonsense. The supreme court has jurisdiction over actions taken by the Isreali government, regardless of where those actions take place.
719.
▲
by
shkkmo
3y ago
Most places that have distracted driving laws ban use of hand-held devices. Some places bam all use based on age. I am not familiar with many places that ban all use for everyone. Given that other large companies offer equivalent functional
720.
▲
by
shkkmo
3y ago
No, it isn't. China officially recognizes the state of Palestine. The Isreali supreme court itself has determined that Gaza is not Isreali territory.
More ›