smsm42

6 ms·

31.
by smsm42 3mo ago
Not to worry, eventually somebody will file a class action lawsuit, and after mere 12 years of litigation everybody affected will get $2.17 in store credits (in another 5 years).
32.
by smsm42 3mo ago
Many projects have CI setups that run code (Makefile can run any code, for example). Which means, an untrusted third-party contribution would allow that party to run arbitrary code on CI platform. Yes, the solution is to not let untrusted t
33.
by smsm42 3mo ago
Security-wise, there's no such thing as constrained PHP execution, at least with the standard PHP engine. The surface is too wide. You still have OS constraints of the user and capabilities and such, but beyond that if you can run PHP
34.
by smsm42 3mo ago
Yes and no. Yes, theoretically you can initiate ACH transfer with just the account number. But practically, you will need to have a bank that would allow you to do that and agree to be on the hook if the transfer is going to be reversed. Wh
35.
by smsm42 3mo ago
Your SSN had been already stolen in the Equifax breach - unless you're so young or recently arrived that you haven't had SSN by then, in which case it had been stolen in one of a dozens of the breaches since then. And if somehow y
36.
by smsm42 3mo ago
PHP one is at best a moderate-level bug in SOAP client which I don't see any realistic way to exploit (the whole convoluted setup in the POC assumes PHP execution access, which begs the question why bother if you already can execute ar
37.
by smsm42 3mo ago
PHP one appears to be a convoluted way of executing arbitrary code on a local server conditioned on the ability of already executing arbitrary PHP code. In other words, not a security issue at all. The cookie parsing issue might be a bug
38.
by smsm42 3mo ago
I didn't discuss morality. I discuss the fact that if somebody signs a contract, draws a salary and other benefits under that contract, then sign another agreement while leaving, get the cash and benefits under that agreement, and then
39.
by smsm42 3mo ago
Didn't Wynn-Williams sign an NDA before leaving? What's bizzarre in Facebook trying to hold her to what she voluntarily signed?
40.
by smsm42 3mo ago
"We all know people are overpaid for doing nothing, but if we don't talk about it somehow it would continue forever"? Doesn't sound like a smart strategy to be honest. The truth will come out.
41.
by smsm42 3mo ago
> You’re still holding on to the notion that somehow getting rid of people was fine because the company could run well without them Yes? It's not an adult daycare. It's a commercial company. The premise is you are employed beca
42.
by smsm42 3mo ago
I don't think there exists a company (at least in the US, in Asia they do have "lifetime employment" system even though that gets eroded too) that can promise it will never have a layoff. Did you know any such company that wh
43.
by smsm42 3mo ago
No, that's not true. Most companies offer at least HDHP plans either fully covered or at minimal cost. HDHP plans, by nature, have high deductibles and out-of-pocket maximums, but usually well under $10k per year. So for a typical case
44.
by smsm42 3mo ago
They are laid off (with severance) not permanently disabled. They most likely will find other jobs (linkedin is already full of recruiting messages). I don't intend to make light of it - getting fired sucks, a lot. It's a terrible
45.
by smsm42 3mo ago
You also have to add "make no mistakes"!
46.
by smsm42 3mo ago
Understandable, but open disclosure would help. You of all people must know how hard it is to hide things from being discovered, and this is something that will be discovered without any doubt. Just explain it and most reasonable people wil
47.
by smsm42 4mo ago
> that's why everyone abandons that lifestyle as soon as possible. Not everyone, there are still societies doing that. The thing is, it doesn't scale. And the other ways of having a society do. Which, naturally, leads to a situ
48.
by smsm42 4mo ago
Or die from an infection coming from a random splinter. Also a very natural thing.
49.
by smsm42 4mo ago
No, it doesn't have to be all-or-nothing. The flaw in the Graham's argument is that he argues we should prefer "natural" without first proving "natural" means "good". Bubonic plague is very natural, b
50.
by smsm42 4mo ago
> This is a great example of how unions can really work for their members. I think this is way different claim than "unions work for the society". Surely, there are a lot of organizations that work very well for their members.
51.
by smsm42 4mo ago
Yes, but I am not sure I understand how all this gives us monopsony. If there are so many indie projects, how doesn't it contradict the claim of monopsony?
52.
by smsm42 4mo ago
It's just a natural progression. When the company is a startup working on a new exciting tech it's chasing the dream and changing the world. When it's a behemoth employing 200k people, it's impossible for all of them to
53.
by smsm42 4mo ago
> Aviation unions force very high standards and represent a lot of the developments in safety and procedures. Boeing joined the chat.
54.
by smsm42 4mo ago
"Are unions net benefit for the general public" and "whether reforming or abolishing the unions is the best course of action for the general public" are two separate questions. The unions could be beneficial (and still a
55.
by smsm42 4mo ago
I was under impression there were quite a number of independent game studios, is that no longer a case? What is the cause of a monopsony here - the barrier to entry, at least for making a game, doesn't seem too high. Marketing one succ
56.
by smsm42 4mo ago
Maybe the skill set in game dev is less portable to other domains? I'm on backend side, and I interviewed a lot of people over my career, with all variety of backgrounds, and I can hardly recall anybody coming from the gaming industry
57.
by smsm42 4mo ago
No those aren't. ICE is not going around setting stuff on fire. People who call them "thugs", surprisingly, often do. I'd rather sympathize with the non-setting-stuff-on-fire category.
58.
by smsm42 4mo ago
> Go look up Portland ICE protests and you'll see tons of people wearing inflatable costumes Some of them do not need to wear costumes, they do it because they want to. Others are criminals that intend to attack the police and inter
59.
by smsm42 4mo ago
I am old enough to remember a brief period where search engine ads were sometimes helpful because you could search for a thing and get an ad for a thing and click and buy a thing. That went away quickly once the optimizers discovered they c
60.
by smsm42 4mo ago
Selling something to me can occasionally be helpful, because I need things from time to time, and at that moment offering to sell me a thing that I need is helpful. What is annoying is that with all billions upon billions supposedly spent

More ›