alcari

In that case, it's still backwards, because the normal close button on OSX is on the left.

I believe that's referred to as "mail fraud".

> there's no need for special support in the DNS system or other infrastructure

Many TLDs disallow registrations containing punycode. Take a look at Wikipedia's (incomplete?) list of those that do: https://en.wikipedia.org/wiki/List_of_cctlds

Yeah, key signing parties aren't that uncommon in some circles. Everybody gets together and signs pgp keys in person.

It seems a bit disingenuous to advertise "RAID 1" on the main page, when it's only software RAID. If I want software RAID, I'll install it myself. Advertising RAID implies (to me, at least), that there's a hardware RAID card in the box.

Also, you claim to have "a state of the art Denial of Service (DoS) mitigation system", but don't provide any details as to what it is. Is it Arbor TMS or something along those lines?

It'd also be good to detail what, if any, remote management options are available (IPMI?).

> I don't think the attacker could reasonably expect to get you to enter two 2FA in a row.

Just tell the user the first one failed, and ask them to enter another.

FTA:

"In the interest of responsible disclosure I did try and contact the dev multiple ways, I was either ignored or not replied to and I feel users deserve to know what’s happening with their data."

That may be possible, but they also accepted non-passport images, which don't necessarily have such information.

No, let's not "forget" about the NSA. Other groups may be doing bad things too, but that doesn't diminish the badness of the bad things done by the NSA (or anyone else).

As I can no long edit my comment: when I made the parent comment, the title referred to them as _Obscure_ tools.

I don't really think it's fair to call anything that's in a POSIX standard obscure (like xargs).

Most of these are fairly common, and many of the descriptions are terrible, for example: `rsync` doesn't "[Keep] filesystems in sync over SSH"; it's a versatile `cp`-like for dealing with remote systems efficiently that happens to support transfers over SSH.

%-based string interpolation still works in python 3.

If you find yourself often having to manually access the console on a production system, clearly something in your testing and deployment methodology is horribly wrong.

[n.b: I'm used to duck typed languages, where you can get away with far more shenanigans.]

> "Can I guarantee every function that expects T to behave exactly the same way when I pass P (where P is a subclass of T)". Almost always the answer is NO, that's why you subclassed it to begin with! So you shouldn't do it.

The entire point of subclassing is to be able to answer that question "no". By your logic, we should never subclass anything, because it will behave differently!

It seems to me you're not really trying to argue against subclassing here, but rather against making specific container types subclasses of generic containers types with extra logic (that breaks the container's documented guarantees) added, instead of containing the logic and the container as class attributes.

I'm reminded of the basic inheritance examples that show up all over, where Dog inherits from Animal: this makes sense because a Dog is a type of Animal. A Team is neither a type of List<T> nor a type of Set<T>, so it should not inherit from them. A team can, however, contain a roster represented by a List or Set alongside its other data.

> 87% of Airbnb hosts in New York share only the home in which they live

Does this mean they're admitting that 13% of Airbnb hosts in New York are sharing other properties?

I was under the impression that Airbnb strongly denied such people existed.

Adding a single root to locally installed copies of a web browser is only really useful for 2 things: testing an SSL configuration for development, and deploying your own CA to all computers on an intranet to so you can MITM their traffic without throwing up warnings.

For a bit of fun, compare the warnings about a self-signed certificate in Firefox with those triggered by attempting to download a self-signed certificate with the CA:true bit set.

Jonathon Swift would also recommend children: https://en.wikipedia.org/wiki/A_Modest_Proposal

> Microsoft IIS susceptible to CVE-XXXXXXXX. Recommend applying accordingly patch.

> Another almost good finding - but according to the appendix, this host is a RHEL 5.x box. Those sysadmins - finding ways to run IIS on linux!! Brilliant!

I used to see crap like this all the time coming out of PCI compliance audits. The hosts I dealt with ran Apache on RHEL, too. We'd point this out, and they'd "accept" that "fix."

The game's subscription model is actually implemented in such a way that you can have an item (a "Pilot's License Extension", PLEX) that represents a month of account time. PLEX can then be bought and sold by players in-game, at whatever price they're willing to agree to. There's a fairly active market for them, so a USD -> ISK (ingame currency) conversion ratio can be calculated.

Of course, there's no (officially sanctioned) way to convert PLEX back into USD, so such comparisons speak more to CCP's profits than anything else.

There's work being done on making WebKit work[0].

[0]: https://www.haiku-os.org/blog/pulkomandy/2013-12-20_webkit_w...

> I'm no fan of the idea.

It sounds like you're actually not a fan of this implementation, not of the idea of a map of paintings. Would you still be opposed to it if the data was always accurate, the previews were larger, and the site was more responsive?

Russia still controls the .su tld and allows registering new domains under it.

Any method that doesn't open you up to remote code execution exploits is an improvement over that.

Here's a relevant, interesting talk [0] from 24C3 about engineering organisms.

[0] https://www.youtube.com/watch?v=gadBNBJRPr0

It means you get a POSIX interface without GNU- and Linux-specific extensions or the GPL.

That reminds me of Vigil[0], a Python-derived language that defends supreme moral vigilance.

[0] https://github.com/munificent/vigil

> However, the fact that they just threw up their hands and declared that the problem is insolvable shows that our school system is failing the next generation of entrepreneurs.

No, that would've been a great outcome in comparison. Instead, they attempted to answer it using only the information provided, showing a complete lack of reasoning skills.

Segmented sleep and biphasic sleep are distinct terms with very different meanings in this context [0].

[0] https://en.wikipedia.org/wiki/Polyphasic_sleep#Claimed_sleep...

The fact that somebody's built it does not imply that it's generally needed, or even useful.

It's not really optimized. The list comprehension's body gets executed in series, and even if it were threaded, the GIL would forcibly serialize the thread execution while breaking all the code out there that expects in-order processing.