MrStonedOne

Nothing on that status page would cover the parts of the website that is down.

No.

Those fucking suck, and some of us use our laptops on our laps, with ethernet connected. Those expanding jacks basically only work while it is on a desk because if the cable bends downwards even a tiny bit it just comes out.

>you can't deny that a black woman has had a vastly difference life experience than a white man

So, where i get stuck, is that you can't actually make this statement about any individual black woman or white man.

The one common theme across all of social justice is that stereotyping is bad. Erasing individuality and forcing people to live in the shadow of their stereotypes is bad.

Yet its apparently allowed here? Because it mostly benefits minorities?

This is the unspoken line the separates identity politics and equality. A focus on minorities vs a focus on ending discrimination and stereotyping, which under equality would include AA.

When (most) people say they are against "woke" culture or "sjws" they generally mean they are against the identity politics flavor of ""equality"". Because identity politics is just a racist sexist dog whistle for discrimination against majorities.

its a plus and a minus.

Verifiably open source packages are a net positive to security because it ensures the code running is the same code that has the public's eye on it.

People keep forgetting this, because they spend most their time thinking about security in the terms of a enterprise system, but for a personal usecase, an app extracting data to their servers that i was not expecting is a info leak security breach.

Its just that acknowledging that fact requires treating most operating systems (ubuntu, (but not debian) android, and ios included) as malware and this is a uncomfortable position.

Secure context has never applied for form data and i see no reason why it would here.

If it's acceptable to send the picture as a file upload over http then i see no reason why it wouldn't be acceptable to send a webcam captured picture.

Why do you think it should or would?

wrong.

Every program that has any need for optimization will quickly turn into a death by a thousand cuts.

There is no right or wrong level of premature optimization, it all comes down to how much time it takes to code it to be more performant. if it takes a tiny amount of time, do so, even if you get little gains. if it takes twice as long to make it more performant, only do so if necessary or results in more than 50% gains.

In college I was told about a case with punchcard mainframes where it would crash around the same time in the process of running a long complicated multi step calculation. The place had under floor wires and tiled flooring. One was lose and a worker feeding data in would walk across it at the same point in the process, generating an emi spike.

In the us, there is an unspoken belief that preventing criminals from ""winning"" is more important than protecting citizens.

This is why police fired into a stolen minivan that had a unrelated child and a shoplifting/carjacking suspect in it, killing both. Protecting the child took a back seat to punishing the prep.

Therefore CP laws very quickly stopped being about protecting the children and more about punishing the pedophiles.

Vindictiveness and spite are the unspoken role models of the US justice system.

Nudity in kids is seen as obscene purely because a pedophile could find it arousing. We are preemptively sexualing children in order to prevent their sexualiztion.

A child was once forced to masturbate in front of a camera by COURT ORDER. Police held them down. All because the child was a victim of child pornography and the court wanted a "comparison image" in a similar arousal state to prove it was a image of that child.

Once again, a child was victimized by the justice system, in order to punish a perp.

Never make the mistake of thinking anybody in the justice system gives a rats ass about protecting anyone.

i handled a 8x increase in traffic to my website from a youtuber reviewing our game, by increasing the cache timer and fixing the wiki creating session table entries for logged out users on a wiki that required accounts to edit it.

we already get multiple millions of page hits a months for this happened.

This server had 8 cores but 5 of them were reserved for the 10tb a month in bandwidth game servers running on the same machine.

If you needed 1,000 physical computers to run your webapp, you fucked up somewhere along the line.

/tg/station, the largest open source multiplayer video game on github, gets cloudheads trying to help us "modernize" the game server for the cloud all the time.

Here's how that breaks down:

The servers (sorry, i mean compute) cost the same (before bandwidth, more on that at the bottom) to host one game server as we pay (amortized) per game server to host 5 game servers on a rented dedicated server. ($175/month for the rented server with 64gb of ram and a 10gbit uplink)

They run twice as slow because high core count slow clock speed servers aren't all they are cracked up to be, and our game engine is single threaded, but even if it wasn't, there is an overhead to multithreading things which combined with most high core count servers also having slow clock speed, rarely squares out to an actual increase in real world performance.

You can get the high clock speed units, they are twice to three times as expensive. And still run 20% slower over windows vms on rented bare metal because the sad fact is enterprise cpus by either intel or amd have slower clock speeds and single threaded performance then their gaming cpu counterparts, and getting gaming cpus for rented servers is piss easy, but next to impossible for cloud servers.

Each game server uses 2tb of bandwidth to host 70 player high pops. This works with 5 servers on 1 machine because our hosting provider gives us 15tb of bandwidth included in the price of the server.

Well now the cloud bill just got a new 0. 10 to 30x more expensive once you remember to price in bandwidth isn't looking too great.

"but it would make it cheaper for small downstreams to start out" until another youtuber mentions our tiny game, and every game server is hitting the 120 hard pop cap, and a bunch of downstreams get a surprise 4 digit bill for what would normally run 2 digits.

The take away from this being that even adding in docker or k8s deployment support to the game server is seen as creating the risk some kid bankrupts themselves trying to host a game server of their favorite game off their mcdonalds paycheck, and we tell such tech "pros" to sod off with their trendy money wasters.

>I don't know where to draw the line but assuming self driving cars are a thing they'll arguably need constant new data and constant updates so unlike most cars to date, they aren't things you'll just be able to buy and the sever your connection with the company you bought it from.

That sounds like an argument against self driving cars.

Proven's comment is dead because they are banned. on hackernews banned users can still comment, but their comments start out [dead] until vouched. (comments that get downvoted and flagged enough also go [dead], as do comments deleted by HN mods)

if you have enough karma, you can vouch for banned user's comments by clicking the vouch button, it only shows on the direct page for the comment, you get by clicking the date of the comment.

I know all of this because I am banned.

>Relying parties (aka online services using FIDO protocols) have a lot of freedom to define exactly how restrictive they want to be by making choices about which devices they accept.

This, in my view, is the problem with FIDO.

They shouldn't be able to make that choice.

None of those things are features of blockchains, they are all features of cryptocurrencies.

Blockchains refer to any time you use a chain of hashes to prove a block of data and any data that came before it, has not been mutated.

The time keeper service that takes out classified ads in the new york times with hash blocks for the documents they timestamped to prove they were timestamped before a certain date, is a blockchain, because they include the previous day's hash.

Git, is a blockchain.

It's just hashes all the way down.

The random entropy driver in linux, is technically a blockchain, with how it works.

There is also the annoying confusion that some attacks involve spoofing the victim's ip to other hosts so the reply goes to the victim while masking the attacker's ip(s).

Yep! Just store your backup key in a safe-deposit box with your bank.

Then go get it every time you sign up for a new account so you can make it the backup for that account

then go store it again.

and again. and again. and again.

oh no! you lost your key! time to go to the bank to get your backup, sign in to all the accounts, remove the old key, register a new backup, oh wait, got to wait for the new backup to ship, so i guess you can't do that yet. hope you don't lose your key in the meantime, anywho, time to spend a few hours painstakingly removing your lost key from all the 9 thousand sites you use.

yay! its a week to a month later, you finally got your new yubikey shipped, time to go log into to 9 thousand websites again to set it up as the backup for all of the sites.

Ok, time to take it down to the bank.

whats this? a cool new app my friend wants to show me, ok, time to go drive to the bank and get my backup key out of storage and sign up for this cool new app.

You know, this whole driving to the bank thing, its kinda inconvenient, maybe i should just store it in my closet safe.

What do you mean the gas line under my house exploded? but both my yubikeys are in there!

----

The above is fiction, and even under fiction it seems ridiculous how this would really go is even worse:

"Go get my backup key to use for this new app my friend showed me? fuck that"

. .

"What do you mean i can't reset my password, but i lost my yubikey!"

"No, i didn't want to get up to grab my backup token when i was registering."

"Oh wait! i bet i still have the recovery codes as a pdf in my downloads folder. its a good thing no viruses ever think to look in there"

----

1password took away the ability to have offline vaults, so i don't know how you can say they didn't compromised on security, since they cut off the most secure way you can store your vault chasing the solving of the tricky problem of monetizing a key value store.

>edit: I personally think the author did a great job finding & publishing it.

Not really.

They seem to be implying they got to running a command as SYSTEM from 7-zip, but, like, don't specify things like what security context 7-zip started as, or how a program running as non-admin got to a system security context, or like, how that's 7zip's fault and not the fault of the OS.

This is all very confusing.

Even if all they did was took that screen shot from process explorer and expanded it to include the user column, it would be like 99% more clear what the fuck is going on.

Can the OSI stop trying justify their existence by finding any excuse to call out "non-osi approved" every chance they get.

Only lawyers in corporations care about that distinction and I hate them more and more the more they try to authority signal using it.

All of these excessive callouts to "OSI approved" or "Not OSI Approved" in every article like they are the gatekeepers to rather or not licenses can be called open source.

Sorry, but you can't name your non-profit after a dictionary word or common usage phrase that existed before you even existed then become the all seeing gatekeeper over what qualifies for those terms.

That's not how language works.

i get ERR_SSL_VERSION_OR_CIPHER_MISMATCH on chrome

> If I swap out my car's engine with a more powerful one

yes, legally required to be covered in the us.

> and screw up the drivetrain will warranty cover it?

No, not legally required to be covered in the us.

The difference is the law specifies the manufacturer can not assume a leads to b, they have to a reason to think b was caused by a.

Not if you need the data to have a different cap and consistency behavior.

it has more detail on the breach then okta's own statement.

Being able to audit the government requires being able to know what the government is doing, not just what the government says it's doing.

I still run windows 7 as the primary os on my daily driver.

> (There's also something to be said for giving users a choice, but unfortunately very few people could actually make an informed choice when it comes to that)

Irrelevant, ethically speaking they still deserve that choice.

They said they disable that content or that user, in relation to that partner, so it seems like if they get told by apple that your nft violate ios guidelines, you may find your nfts stop showing up on the ios app when searching.

I don't see how they have any other choice, and only having the walled garden effect the walled garden is more than a lot of other platforms are willing to do.

Calling my admins underage won't get you unbanned karma.

Our discord got hit by the same shit, targeted at our game admins.

We are the largest open source multiplayer video game on github, so (compromised) discord friends sending admins messages about "games they made" with exes in them was more effective then it should have been until news and announcements went out.

> when they were told by Interim Director of Cardiovascular Service Line Ron Schumaker that ThedaCare would not be making any counteroffer. As he put it, the short term expense of retaining the radiology technologists was not worth the long term expense, because if ThedaCare paid to keep these employees, it would have to offer raises to everyone.

The entire thing is a good read.