Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
x1798DE
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
108 ms
·
961.
▲
by
x1798DE
12y ago
This just moves the problem down one level and doesn't change anything. If you're a host you only have an incentive to choose a trustworthy CA if by choosing a lesser CA you're risking a significant problems for their users
962.
▲
by
x1798DE
12y ago
Just to push back on this a bit, the fact that the "generation name" part of the name carries some additional semantic information in some ways makes it even more of a name than a "middle name" that is somewhat popular
963.
▲
by
x1798DE
12y ago
I was always curious as to why nearly every Korean person I've met has "two" first names. According to Wikipedia [1], traditionally Korean names were "generation names", where everyone in a specific family of a spec
964.
▲
by
x1798DE
12y ago
Well, that was kinda a big difference between Diginotar and Comodo. Diginotar got hacked, knew about it, then tried to mitigate without telling anyone. Comodo got hacked and disclosed what they knew ASAP. Diginotar was pulled from the trust
965.
▲
by
x1798DE
12y ago
I'm not sure that you actually want to avoid punishing people for choosing crappy CAs. That causes moral hazard, because you're not risking anything yourself by choosing a crappy CA, you're just spreading the risk among eve
966.
▲
by
x1798DE
12y ago
I heartily agree about avoiding being part of a monoculture, there are definite tradeoffs. The weirder your setup, the less likely you are to be swept up in anything bulk, but the more vulnerable you are to anything targeted. Unfortunately,
967.
▲
by
x1798DE
12y ago
Correct that Google has no protection against NSLs, but that's like saying that you should always drive your car because planes are common targets for terrorism. I'm deeply troubled by the activities of the NSA et al, but realisti
968.
▲
by
x1798DE
12y ago
Self-hosting your e-mail is really not much better, from a security point of view, than letting gmail have your e-mail. Google has some of the best security people in the world , if your mail is safe anywhere, it's safe with Google. T
969.
▲
by
x1798DE
12y ago
Obviously. My point was that a show about a spaceship and a company that launches spaceships are close enough that you could imagine it was some kind of marketing tie-in. It's just plausible enough that it wouldn't necessarily be
970.
▲
by
x1798DE
12y ago
I'm shocked that their lawyers even let them call their space company "Firefly". It's probably a sufficiently different field that they could win a trademark case at trial, but I'm not sure it's 100% cut-and-dr
971.
▲
by
x1798DE
12y ago
Frankly I imagine at least I'd find it more pleasant. I'm actually really tired of the bundling of content and presentation. It'd be nice if HTML were more of a set of formatting hints, and we could theme our browsing experie
972.
▲
by
x1798DE
12y ago
It also incorrectly detects me as being logged in to twitter when I selectively allow javascript for the grepular.com domain, but not for twitter.com or facebook.com. Interestingly, it does say (correctly) that I'm not logged in to f
973.
▲
by
x1798DE
12y ago
Well if it's a cookie problem, then what should be done is that third-party cookie policies should be rigorously enforced, then it doesn't even matter what tabs are open, your browser would never present a cookie when the site you
974.
▲
by
x1798DE
12y ago
With third-party cookies turned off, youtube.com definitely shouldn't be able to show your logged-in state from a google.com server. They generally play some fancy footwork with redirects to deliberately break third-party cookie orig
975.
▲
by
x1798DE
12y ago
It's a good point, but my point was that it's not an either/or thing. There's plenty of outrage to go around, and the fact of the matter is that the NSA has enjoyed a very privileged position on the internet that the FSB
976.
▲
by
x1798DE
12y ago
> Blaming it on bureaucracy wrongfully absolves the individuals. I agree with the sentiment, but I think the point of calling it mindless bureaucracy is to emphasize that these systems themselves tend to reward this sort of behavior and
977.
▲
by
x1798DE
12y ago
Any chance you'll make it generally public? I can see reasons for keeping it private and for having a public repository with occasional database dumps, don't know where you fall on that. Of course, anyone who runs an SSH server on
978.
▲
by
x1798DE
12y ago
Should we also let all the murderers and rapists out of jail because they didn't commit genocide? The fact that the US intelligence apparatus is one of the taller pygmies around doesn't make it a giant.
979.
▲
by
x1798DE
12y ago
> but if this guy based a freedom of information request on information that he only knew about due to his access to classified information, then he did in fact mishandle classified information. You are only allowed to use classified inf
980.
▲
by
x1798DE
12y ago
This is my #1 biggest feature request for all map apps. I would also like to select a start and endpoint and search for anything along any of the possible routes. I need to go from X to Y but I'd like to stop for ice cream along the wa
981.
▲
by
x1798DE
12y ago
Obviously not everything that Malcolm Gladwell says is bullshit, that was hyperoble. If he said the sky was blue I wouldn't disbelieve him, but I would check my watch to see if it's sunrise or sunset. It's also ridiculou
982.
▲
by
x1798DE
12y ago
Ah, I am not in the Apple ecosystem, so I think I was mixing up the different types of connectors. Good to know that they make this sort of thing a priority, though.
983.
▲
by
x1798DE
12y ago
Not that it matters (since none of these "security" measures pass anything even close to a cost-benefit analysis anyway), but you could imagine that phones or laptops would make particularly good bomb hiding places for a certain k
984.
▲
by
x1798DE
12y ago
It's not particularly difficult technology to pull off. The actual TSA agents are clearly dumb as rocks, but if you give them a machine that just sucks up data and sends it off to some central repository, they'll have no problem p
985.
▲
by
x1798DE
12y ago
Giving my feedback about the big things I care about: The biggest problem I see is that you have no HTTPS support for this site. There are very good reasons for having HTTPS even if you aren't transmitting something you would consider
986.
▲
by
x1798DE
12y ago
From what I remember, Firewire used to have direct hardware access to the RAM. Does the iOS lightning charger have something similar? I may be paranoid, but I could imagine the TSA offering little charging stations so you can get enough jui
987.
▲
by
x1798DE
12y ago
This is an unintentionally perfect demonstration of the concept of chilling effects. Someone should take a screenshot of this and put it into a textbook. Wikipedia link on chilling effects: https://en.wikipedia.org/wiki/
988.
▲
by
x1798DE
12y ago
The article is about the degree to which deliberate practice helps you in various fields, it's not actually about the specific 10,000 hour rule. The thesis of the article is that, essentially, deliberate practice does not have a large
989.
▲
by
x1798DE
12y ago
I imagine this won't be a popular opinion, but I don't see why it is necessary for this site to populate the list using javascript when server-side scripting would suffice. Maybe they're trying to fool search bots so their si
990.
▲
by
x1798DE
12y ago
I have to say, I often find myself at odds with taking a rights-based approach to this sort of thing first. It may not be possible to be forgotten on today's internet, and whether that's a good or a bad thing, it obviates the ne
More ›