Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
tetrep
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
32 ms
·
271.
▲
by
tetrep
10y ago
> Among those opposed was Beverly Quail... She said there’s no such thing as read-only publication online, thanks to the ease of making electronic copies. And taxpayers should not foot the bill for publishing standards of interest to ver
272.
▲
by
tetrep
10y ago
Why would user security be compromised by NFC access any more than WiFi access or Bluetooth access? Or does Apple not provide APIs at the same abstraction level for WiFi/Bluetooth that the banks are requesting for NFC?
273.
▲
by
tetrep
10y ago
I think this is what most "culture fit" issues amount to. Attempts at politely declining someone's services. I'd prefer a more harsh/rude/straight/direct "we think you're an asshole" but one
274.
▲
by
tetrep
10y ago
I think it's reasonable if only so you can avoid the overhead of needing to deal woth censors. There's also a lot of overlap between open source and free speech, so I can understand a natural distaste for censorship in general. To
275.
▲
by
tetrep
10y ago
While I agree with most of the author's points, I'm not convinced at how possible it would be to have a product that "adopts the market-orientation and ad hoc network of Twitter" in such a way that "harassment would
276.
▲
by
tetrep
10y ago
I think this same logic that is purportedly the reasoning behind this bill would also require us to constantly record all of our vocal communications, as that would be the only way we could ensure that criminals could not have communication
277.
▲
by
tetrep
10y ago
Probably due to the fact that they only have DHE ciphersuites. from Chrome's dev console: www.searx.me/:1 This site requires a DHE-based SSL cipher suite. These are deprecated and will be removed in M52, around July 2016.
278.
▲
by
tetrep
10y ago
Unless you application has a static mapping of input -> output that never changes, you can't properly sanitize input for all potential output contexts. The string ';alert(1) is perfectly safe to drop in between HTML tags, but c
279.
▲
by
tetrep
10y ago
is there something particularly noteworthy about this release? it just looks like some standard big fixes and the ability to get the http version from the api.
280.
▲
by
tetrep
10y ago
~8 hours of work starting at somewhere between 7:30 and 8am (so i don't have to deal with rush hour). lunch is generally 1 hour but sometimes i take less and leave sooner, and other times i take more and leave later. if i'm in the
281.
▲
by
tetrep
10y ago
> ...tamper-proof secure element... It doesn't even need to be held in anything secure, you just need to sign the balance when writing and check the signature when it's used.
282.
▲
by
tetrep
10y ago
If you climb enough elevation, you'll quickly learn to love carbon :)
283.
▲
by
tetrep
10y ago
> Either that or they are using this to attract engineers. On a related note (I can't speak for Dropbox specifically) there are many engineers who desire their work to be open source for their own motivations, and when it's not
284.
▲
by
tetrep
10y ago
> My god, what a bad idea. The concentration of power in controlling what news people see is one of the huge problems of modern times. Which is one of the reasons I do not use Twitter. They wield a great deal of power, including the expl
285.
▲
by
tetrep
10y ago
Render the page invisible, make it viewable with JS and/or just use an XHR to load the content.
286.
▲
by
tetrep
10y ago
I wonder if this extends to sharing your reasoning for a decision with others. It seems like it might be a sort of social cognitive offload, where we feel more sure with our decisions when we expose our reasoning to other, even unqualified,
287.
▲
by
tetrep
10y ago
I don't see "pretend" as being productive. If you're dealing with an app that would otherwise refuse to run without a permission, even if it didn't truly need the permission to function, then it would simply escalat
288.
▲
by
tetrep
10y ago
> Thought experiment: Your product costs $50/month. Let's say you're the only employee. Do you think you could manage selling 100 subscriptions to reach "decent" profitability by yourself? Don't forget suppo
289.
▲
by
tetrep
10y ago
While I don't think scaremongering is needed, I agree that it was a bad idea to just take the skimmer. It does interfere with legitmate police operations and could delay or prevent prosecution of the perpetrators.
290.
▲
by
tetrep
10y ago
Why do I see this post as "[flagged]"?
291.
▲
by
tetrep
10y ago
I think for this it is twofold: 1. They're only doing this because of the community reaction/outrage. I want to be able to trust a company to at least appear to have my interests in mind, I don't want to have to be ever vigil
292.
▲
by
tetrep
10y ago
Legacy code? It can't be very surprising that entities, especially the government, aren't quick to refactor old, "just works" code.
293.
▲
by
tetrep
10y ago
Internships tend to be finite, and usually last 1 summer or semester. A "jr dev" would imply a career path.
294.
▲
by
tetrep
10y ago
I see this as a good thing. Far better to streamline password management than to make it bumpy, encouraging users to use memorable passwords, which most likely will also be painfully weak. It's a good and sane default.
295.
▲
by
tetrep
10y ago
> Now the cynical would point out that standard pen testers would have found that, and maybe they would, but the speed at which a contractor could find these issues and then see the full breadth of the surface compared to pen testers was
296.
▲
by
tetrep
10y ago
Nice. Although I'm still on the fence about bug bounties at their current price, as I can't help but see this as potentially manipulative, like hackathons where a company owns what you make, this guided hacking seems to be taking
297.
▲
by
tetrep
10y ago
I don't want to directly comment on Thiel's actions, but one of the most annoying things in court cases that I care about is when it reaches a settlement, preventing precedent from being set, and allowing other actors to do the
298.
▲
by
tetrep
10y ago
> I think for at least a few years, Cookie+POST data is the only reliable option. Not entirely. If you're willing to set headers you can do so as a trivial anti-CSRF measure. Just setting a header like "X-Totes-Not-CSRF" w
299.
▲
by
tetrep
10y ago
> And in 2011, a Purdue study hammered the final nail in the olestra coffin. It found that olestra incites weight gain by tricking the body into thinking it doesn’t need to metabolize fatty foods. Once your body is accustomed to olestra
300.
▲
by
tetrep
10y ago
Much better article and (bonus points) straight from source: http://spectrum.ieee.org/automaton/robotics/robotics-softwar...
More ›