Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
thayne
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
34 ms
·
841.
▲
by
thayne
1y ago
> You can't put a NDA on a Patent. On the patent itself, no. But on design docs, CAD files, source code, circuit diagrams, etc. you can, and it is common practice to require NDAs for anyone who has access to them. And in some cases
842.
▲
by
thayne
1y ago
Not to mention that patents are so (intentionally) difficult to understand that even patented technology is basically trade secrets now anyway. And the useful designs are protected by NDAs.
843.
▲
by
thayne
1y ago
But compression is ambiguous because that could also refer to compressing the video stream to reduce the size of the movie.
844.
▲
by
thayne
1y ago
It is very much a chicken and egg problem. Merchants have no reason to adopt it if there aren't very many customers that use it, and customers have no reason to adopt it unless there are a lot of merchants, or at least some important f
845.
▲
by
thayne
1y ago
Or they want to get more people to use it.
846.
▲
by
thayne
1y ago
> you have to certify OpenSSH running on a particular OS on particular hardware Right, but if you use the certified version of OpenSSH, it will only allow you to use certain algorithms. > ML-KEM is NIST approved and AFAIK NIST is on r
847.
▲
by
thayne
1y ago
For an individual session, the cost is certainly small. But in aggregate it adds up. I don't think the cost is large, and I agree that given the tradeoff, the cost is probably worth it, but there is a cost, and I'm not sure it can
848.
▲
by
thayne
1y ago
Is there a PQC hybrid algorithm available for OpenSSH that is compliant with FIPS 140-3?
849.
▲
by
thayne
1y ago
> It's about tradoffs: It costs almost nothing to switch to PQC methods, It costs: - development time to switch things over - more computation, and thus more energy, because PQC algorithms aren't as efficient as classical ones
850.
▲
by
thayne
1y ago
I don't think json is the right language for this. You can't really have comments, and your scripts have to be in a single line (because json doesn't support multi-line strings).
851.
▲
by
thayne
1y ago
> but unless there is a law against competing with them Ah, but that is why the monopoly uses its considerable resources to lobby passing laws that at least make it more difficult for someone to compete with them.
852.
▲
by
thayne
1y ago
Is it? I can't think of a non-contrived case where this would actually be useful. And in any case where it would be useful, it seems like a better way to optimize would just be to refactor the regex out into a constant.
853.
▲
by
thayne
1y ago
"Everyone else is doing it" doesn't make it right. It also makes it dangerous to become dependent on these services. What if at some point in the future, your provider decides that something you make competes with something t
854.
▲
by
thayne
1y ago
You can absolutely have a pony program deadlock. A simple example is if you get into a situation where two actors are both waiting for the other to send it a message.
855.
▲
by
thayne
1y ago
> Because Pony doesn't use locks, there's no possibility of threads getting stuck waiting for each other to release locks, which is a common cause of deadlocks. It may be a common cause of deadlocks, but it isn't the only
856.
▲
by
thayne
1y ago
> I’m concerned and surprised to see that pumping groundwater is another source of sea-level rise How is that surprising? It seems pretty obvious to me that pumping groundwater would accelerate how quickly that water ends up in the ocean
857.
▲
by
thayne
1y ago
> My mom recently got fooled by a scammer that convinced her to install remote access software. But I bet she didn't install it with curl piped to bash. The point isn't that curl|bash is safe, but that it isn't inherently
858.
▲
by
thayne
1y ago
It's complicated. Reviewing a PR takes time and effort, and the maintainer may not want to do that for a feature that mainly benefits a company that isn't paying the maintenance fee. OTOH, as a maintainer, if a company finds a bug
859.
▲
by
thayne
1y ago
But men can also request to have a doctor or massage therapist of the same gender.
860.
▲
by
thayne
1y ago
For Uber women have the choice to request a driver or passenger of the same gender, but men don't. For TSA, the same gender rule applies to both genders.
861.
▲
by
thayne
1y ago
So why doesn't helm output to json instead of yaml, and avoid all the problems with significant whitespace?
862.
▲
by
thayne
1y ago
It seems to me like this would also be illegal. You are giving one gender an option you aren't giving the other gender. And you are making it so one gender has more potential customers than the other, which is effectively giving them m
863.
▲
by
thayne
1y ago
That's kind of already built in. Women drivers who are willing to drive men will have a larger customer pool than men can get. I would expect this to result in fewer male drivers.
864.
▲
by
thayne
1y ago
I really, really, wish we could move away from yaml for tools like this.
865.
▲
by
thayne
1y ago
> Aurora uses it's own SAN replication layer I don't think that is used for cross region replication
866.
▲
by
thayne
1y ago
> but mandating things like keeping user passwords out of logs is a security improvement. That has nothing to do with FIPS 140. FIPS 140 is just requirements for "cryptographic modules". It specifies which algorithms are allowe
867.
▲
by
thayne
1y ago
I wouldn't say nothing. It is intended to ensure some level of security. And in some ways it can lead to decreased security if you comply with it (for example, if a vulnerability is found in your crypto library, you have to wait for th
868.
▲
by
thayne
1y ago
What do you mean by all of php? This changes the license of the language. That is the interpreter, runtime, and standard library.
869.
▲
by
thayne
1y ago
In American English, "practise" is incorrect. So if the screenshot is taken from a user using the en_US locale it is correct. Perhaps, if your locale is en_GB it will correct "practice" to "practise", but you
870.
▲
by
thayne
1y ago
> And it basically blocks you from doing FFI It doesn't block it. But it does make FFI much more expensive in go than in languages like Rust, because every foreign call needs to set up a c-compatible stack.
More ›