zbentley

20 ms·

361.
by zbentley 5mo ago
> You have to take scientists at their word. The public is going to have to make a semi-to-un- informed judgement call regardless. If they take scientists at their word, and different groups of scientists are saying different things, the
362.
by zbentley 5mo ago
The number of FISMA-HIGH, ATO’d/RMF’d, security audited government systems I’ve seen with equivalent security issues is…substantially nonzero. I have come to believe that most security audits, even ones conducted through widely-reputed
363.
by zbentley 6mo ago
I don’t disagree with any of that, but I think the brutal truth is that the priority of most businesses was always that approximate, slipshod, business-driven development. The human engineering process was only coincidentally a check back
364.
by zbentley 6mo ago
This. A lot of folks picked it up for that reason when they were young and now are terminal-all-the-things out of sheer inertia.
365.
by zbentley 6mo ago
Tangential, but how is > The robber baron's cruelty may sometimes sleep, his cupidity may at some point be satiated Holding up in 2026? Pretty poorly, I’d say.
366.
by zbentley 6mo ago
That kind of armament, and the staff needed to operate it, is incredibly expensive. Even if scaled down to commercial-audience models. Even when compared to the cost of huge-displacement cargoes. Not saying it’ll never happen, just that it’
367.
by zbentley 6mo ago
There are only two kinds of standards: ones that prioritize stability and backwards compatibility over usefulness and security, and ones nobody uses.
368.
by zbentley 6mo ago
Open source developers got along perfectly well before free GHA compute. It hasn’t been around for that long.
369.
by zbentley 6mo ago
But but but … wE dOnT bREaK uSErsPaCe!
370.
by zbentley 6mo ago
Inelasticity and segmenting "the community" is the problem here, like always. Demand price-point for antibiotics across the community when the average use-case is a road rash? Low. Demand price-point for antibiotics for a communit
371.
by zbentley 6mo ago
Citizens in the developed world have been heavily surveilled for decades. All of them. And the penetration/rate of increase of surveillance has been increasing rapidly. There are plenty of downsides to that, and I don't agree or t
372.
by zbentley 6mo ago
I think the devil's advocate/libertarian reply would be roughly: its efficient to let consumers prefer venues with different pricing schemes. If dynamic pricing is bad, then competitors will differentiate by not doing it, and pric
373.
by zbentley 6mo ago
Yes, but the incentives created by that system lead to insurance adjudicators operating with extreme adversariality towards the insured. Add to that the extreme inelasticity of demand for insured products (e.g. healthcare, or getting access
374.
by zbentley 6mo ago
Not as well as they can reason (or others can google) something as standardized as kubernetes. There’s just less context (in both senses of the term) needed to understand something running on a common substrate versus something bespoke, eve
375.
by zbentley 6mo ago
Shit just gets really weird when your network isn’t split for k8s in an equivalent way to what GCP/AWS expect. Like, if you have other services running on the nodes that you want things inside k8s to talk to, or if the nodes are in a f
376.
by zbentley 6mo ago
That is indeed a weirdly cursed requirement. Why? Black box of legacy stuff? A system that was never designed to be run in multiple does so if all the nodes think they’re the same machine? Defeating a license restriction?
377.
by zbentley 6mo ago
> K8s is well suited to dynamically scaling a SaaS product delivered over the web It’s well suited to other things as well, people are just in denial about some of them. “I need to run more than two containers and have a googleable way t
378.
by zbentley 6mo ago
Hope it helps! One clarification: by "check for deletions" I didn't mean that you need to read back through the filesystem; you can check for deletions for free using fstat(2)'s result. The number of hard links to a file
379.
by zbentley 6mo ago
Very neat! I like this a lot, nice work. After peeking the source, a few possible areas of improvement: - You can use `fstat` and keep a file handle around, likely further improving performance (well, reducing the performance hit to other u
380.
by zbentley 6mo ago
There's more process-based concurrency than you'd expect in shops that use those languages. Cron jobs might need to coordinate with webservers. Even heavily threaded webservers might have some subprocesses/forking to manage c
381.
by zbentley 6mo ago
you kant hack me, I don't use computers
382.
by zbentley 6mo ago
In some specific instances, this approach is clever. Taken as a general philosophy, it’s regrettable, harmful, unethical. https://en.wikipedia.org/wiki/Tragedy_of_the_commons
383.
by zbentley 6mo ago
That's a low-leverage place to intervene. Whether or not the internal admin system was directly OAuth linked to Google, by the time the attacker was trying that, they already had a ton of sensitive/valuable info from the employe
384.
by zbentley 6mo ago
I'm not sure that's necessarily a "problem", though it is fundamental to secrets. We wouldn't say that it's a fundamental problem that doors on houses need a key--that's what the key is for--the problem is
385.
by zbentley 6mo ago
> other things (alcohol) that cause problems and are not being restricted Alcohol is heavily restricted, though. You can't sell it to minors, younger minors can't drink it in public, you can't sell/buy/make it ab
386.
by zbentley 6mo ago
This is a great idea. To slightly sidetrack things: I think updating computer UI text selection behavior to not break click/snap-to-next selectable words on colons without padding spaces in general would be a good thing. "A: B&q
387.
by zbentley 6mo ago
ZFS snapshots can be transmitted over the network, with some diff-only and deduplication gains if the remote destination has an older instance of the same ZFS filesystem. It’s not perfect, and the worst case is still a full copy, but the to
388.
by zbentley 6mo ago
This other front page links to the first party docs: https://news.ycombinator.com/item?id=47835735
389.
by zbentley 6mo ago
Or burglars.
390.
by zbentley 6mo ago
I mean, I'm down to rip on JS/NPM any day of the week, but this specific issue isn't related to any JS/NPM-isms: it's a deserialization library which marshals language-specific objects from bytes using a variant of

More ›