xyzzy123

18 ms·

301.
by xyzzy123 1y ago
The great thing about calling it "alcohol use disorder" is that it lets you diagnose more people. If you're a nonprofit or advocacy group, "alcoholics" are only going to get you so far in terms of funding, also deal
302.
by xyzzy123 1y ago
I can't point to any evidence. Also I can't think of what direct evidence I could present that would be convincing, short of an actual demonstration? I would like to try to justify my intuition though: Seems like the key question
303.
by xyzzy123 1y ago
I think of it more of an aesthetic preference. While I use gmail today I don't negatively view people who choose to self host. Some people are militant about editors, others are "discerning" (snobbish?) about operating system
304.
by xyzzy123 1y ago
Is defacing the Mona Lisa the same as defacing a train car, in your view? If there is any difference, would it be related to the value of the object? Would you say a random tree in a backyard has the same "value" as an iconic tree
305.
by xyzzy123 1y ago
The writes for a spray are pre exploit, you are going through an allocator to get the space you're writing to. Put another way, its the apps job to write the spray into "free space". Sprays are pretty crashy but the heap setu
306.
by xyzzy123 1y ago
Perl's sweet spots were CGIs & sysadmin. The advantage for sysadmin was easier portability in the days when there were a ton of flavours of UNIX systems. The ergonomics & distribution of Perl in the 90s were unmatched, Ruby, Py
307.
by xyzzy123 1y ago
This is fair - no it won't work in every situation, just didn't see good old air and sunshine mentioned in the thread anywhere. Surely the only scalable solution in a medical context is to get workers to change out of uniform at w
308.
by xyzzy123 1y ago
That's why you dry your clothes on the washing line in the sun?
309.
by xyzzy123 2y ago
Remember when google and apple were reporting aggregate mobility data to the government to assist public health authorities assessing compliance with lockdowns? Location and attendance tracking? Vaccine passports? It's hard to untangle
310.
by xyzzy123 2y ago
The Australian implementation had a lot of problems. Instead of being (something reasonably loophole free like) a tax levied on fossil fuel consumption it was a scheme that applied to the 500 largest emitters. These emitters then (crucially
311.
by xyzzy123 2y ago
> Once the data structures are set the coding is easy. I don't always find this, because there's a lot of "inside baseball" and accidental complexity in modern frameworks and languages. AI assist has been very helpful
312.
by xyzzy123 2y ago
I think it's indirectly relevant in a disturbing way; if you had a perfect "algorithm"[1] to predict (say) recidivism (let's not quibble over how it works or exactly what risk factors it would assess, let's just pos
313.
by xyzzy123 2y ago
Agree, they are not the same thing. Yes, S3 provides much better durability. I just can't afford it. For my use-case I'm OK with un-hedged risk and dollars staying in my pocket.
314.
by xyzzy123 2y ago
S3 or glacier? Glacier is cost competitive with local disk but not very practical for the sorts of things people usually need lots of local disk for (media & disk images). Interested in how you use this! 20TB which u can keep in a 2-bay
315.
by xyzzy123 2y ago
It's cool that we can largely "strike out" link level wiretapping from our threat models but it just means attackers move on to the endpoints. I have a wonderfully private link to google, my bank and my crypto exchange but al
316.
by xyzzy123 2y ago
We used the helm chart but things didn't get updated often enough to keep our container security stuff happy. Helm is a huge pain in the butt if you have mitigation obligations because the overall supply chain for a 1-command install c
317.
by xyzzy123 2y ago
> including attackers that mislead CAs into misissuing a cert. I thought we had CT for this. > CAs used to be able to use WHOIS for DCV. The fact that this option was taken away from everyone is good. Fair. > It's the same wit
318.
by xyzzy123 2y ago
People who care deeply about this can use 30 day certs right now if they want to.
319.
by xyzzy123 2y ago
True. OK I will fess up. The truth is that I don't spend a lot of time in coffee shops but I do have a ton of crap on my LAN that demands high amounts of fiddle faddle so that the other regular people in my house can access stuff witho
320.
by xyzzy123 2y ago
Indeed and the system is practically foolproof because the government cannot take over DNS records, influence CAs, compromise cloud infrastructure / hosting, or rubber hose the counter-party to your communications. Yes I am being snark
321.
by xyzzy123 2y ago
Because TLS doesn't promise you very much about the entity which holds the key. All you really know is that they they control some DNS records. You might be visiting myfavouriteshoes.com (a boutique shoe site you have been visiting for
322.
by xyzzy123 2y ago
> I'm not even sure what "outdated certificate data" could be... Agree. > According to the article: Thanks, I did read that, it's not quite what I meant though. Suppose a security engineer at your company proposes
323.
by xyzzy123 2y ago
Can you point to a specific security problem this change is actually solving? For example, can we attribute any major security compromises in the last 5 years to TLS certificate lifetime? Are the security benefits really worth making anythi
324.
by xyzzy123 2y ago
It seems like the US decided to have the supply chain conflict now rather than wait for an inevitable geopolitical trigger (say, Taiwan) that would kick it off organically. Which, yeah that's likely to be lose-lose economically. You&#x
325.
by xyzzy123 2y ago
I think it's because kids are #1 stickiest reason not to cancel netflix. If there's content your kids love you're going to keep the subscription going. It's a less risky option than youtube which will start feeding your
326.
by xyzzy123 2y ago
Various parts of the energy sector (line maintenance in particular) seem to be hit pretty hard with cost disease & liabilities, plus there are often 2 or 3 companies, a market (being gamed), local authorities (that need a cut and have a
327.
by xyzzy123 2y ago
"Support" is usually a different org, may be outsourced, may be centered in a different country. The userbase is different, in a small saas company you will probably get fairly "high signal" complaints, this is not true
328.
by xyzzy123 2y ago
Are breast cancer treatments considered gender affirming care in your mind? Do you feel the current (or any) administration is against that?
329.
by xyzzy123 2y ago
Or it could be interpreted as putting a higher value on self-sufficiency and domestic production capacity than standard free trade economic theories value those things at ($0). Standard comparative advantage narratives don't really acc
330.
by xyzzy123 2y ago
If exploitation of the "loophole" got to the point where it starts affecting trade balance then presumably the rate would be revised fairly quiclly.

More ›