sk5t

34 ms·

361.
by sk5t 6y ago
WAFs sound pretty darn good for simple, well-understood services with known good inputs. If every valid request to some half-forgotten Perl remnant in /cgi-bin looks like "path\?id=[0-9]{1,10}" then let that allow rule rip!
362.
by sk5t 6y ago
Heaven help Ms. COM1 \\NTDS$\dd if=/dev/scd1
363.
by sk5t 6y ago
Many of WAF's canned rule sets are ridiculously broad. I'm content to use the low-reputation-IP rules, but almost nothing else is advisable, unless you're intent on exposing (and not fixing?) a badly-written service to the w
364.
by sk5t 6y ago
+1 and why must it be an "old recording" - have modern Haitian voodoo drummers lost the way? Seems a bit set-up for shifting goalposts...
365.
by sk5t 6y ago
This makes sense, observing services that rely on IAM/STS very, very routinely--but without changing IAM properties--and no alerts popped up during this outage.
366.
by sk5t 6y ago
Oof, WINS is some super antique stuff. The (traditional) process to find and select a domain controller is known as "DC Locator"--or else search for DsGetDc--and is essentially DNS-based. Caveat, I've been out of the Windows
367.
by sk5t 6y ago
Despite its superficial earnestness, I read this article as unsupported and self-serving, and overall quite full of just-so stories about capitalizing on downturns.
368.
by sk5t 6y ago
Great background info; it reminds me--albeit on a greater scale--of an earlier HN thread to the effect of "how hard could possibly be to show street names on maps at with globally correct-seeming detail at arbitrary zoom level," w
369.
by sk5t 6y ago
TBH it's a bit more verbose and less performant than need be, but hey, if it works, rock on! But don't use 'select *' in production code. Consider next time something like if exists (select from sometable t1
370.
by sk5t 6y ago
The documentation for Postgresql range types describes how to do exactly this. https://www.postgresql.org/docs/11/rangetypes.html#RANGETYPE... Edit: and if you didn't want to use postgres, you could have &quo
371.
by sk5t 6y ago
Kind of a strawman argument by dint of hyper-narrow focus, isn't it? Sure, there are no laws granting the government authority or duty to nurture Java or browsers; however, what Microsoft did more generally was to squash potential com
372.
by sk5t 6y ago
This seems like a really odd take to me. Senior management at a startup with illiquid shares is going to buy those employees' options with what ? Do you imagine the CEO digging into the ol' pocket for $200k to cover an early em
373.
by sk5t 6y ago
Who is using BEA software now? How is Siebel faring against SFDC? (I honestly don't know, wishing to have nothing to do with either.) Peoplesoft was pretty entrenched when Oracle bought it, and the state of other options in that fiel
374.
by sk5t 6y ago
Except in that case, China expects and demands access to virtually everything of any value whatsoever.
375.
by sk5t 6y ago
Perhaps the children's audit problems can be overlooked if they would like to purchase some nearly-usable HR management or accountancy software at this time.
376.
by sk5t 6y ago
At the time, both Java and standards-compliant browsers posed major threats to Microsoft, and Microsoft did a pretty good job of messing up both. Only in distant hindsight do ActiveX and MSFT's hobbled 1.1 JVM seem inconsequential.
377.
by sk5t 6y ago
It sounds like you actually didn't care about the money or risk/reward, yes? Don't you think it's a lot easier to meet your own expectations under such conditions, as compared to the calculus of startup-joiners hoping f
378.
by sk5t 6y ago
> But as much as they enjoy bluster, Americans are afraid [...] Are Americans really afraid? Or is it that Americans feel comfort in having the meanest dog on the block, even if that dog sometimes nips its master?
379.
by sk5t 6y ago
It's much more ergonomic, flexible, testable, and configurable to inject that connection pool thing instead of bodging it together in the static initializer. Classes shouldn't be managing resources of which they are properly only
380.
by sk5t 6y ago
There are ordered sets, immutable sets... infinite sequences, lazy lists, sometimes collections are hairy to test.
381.
by sk5t 6y ago
> not a 200 code that means "request accepted and queued but no data available right now" Properly that would be HTTP 202 Accepted :)
382.
by sk5t 6y ago
It's unrolling the entire system of economic incentives that needs to be fixed. This is going to be monstrously difficult... there is lots of potential to improve healthcare but actually trying to achieve it is a bit Quixotic.
383.
by sk5t 6y ago
Maybe the confounding factor here is that the term "load balance" could be extremely unsuitable for onlyfans' processing logic; e.g. they might preferentially route the risky transactions to one or two processors that won&#x2
384.
by sk5t 6y ago
But... you did this intentionally--when it would have been easier and simpler to not do so? Doesn't really fit the mold of "clean it up later" chores.
385.
by sk5t 6y ago
Because we're talking here about a file that one might possess within one's personal effects and papers--a file, on a PC, with no desire whatsoever to share it with anyone--the comparison to waving a knife around while screaming t
386.
by sk5t 6y ago
A wide diversity of humans can and have learned to speak the pilot/ATC dialect and cadence; and, English is the generally accepted lingua franca for flight. I am not sure how class enters the equation, although it seems to me likely th
387.
by sk5t 6y ago
If you're using postgres (and maybe others?) it can be handy to use the "returning" keyword -- e.g. "update foo set x = y where z returning *" -- to get an immediate look at the updated rows. Maybe not so good thou
388.
by sk5t 6y ago
A “zip bomb” can be merely a very efficiently compressed file. That sound like a crime to you?
389.
by sk5t 6y ago
Only to the extent that the law permits arbitration clauses.
390.
by sk5t 6y ago
I submit that it's not trivial, in that Uber will have to either let drivers set their own rates, or let drivers cherry-pick without penalty the contracts they wish to accept. Either change constitutes a monumental change to the rider

More ›