herpderperator

phpMyAdmin was (is?) such a great tool and really got me into SQL/MySQL over a decade ago. Not to mention the whole PHP stack was so fun to use and let you iterate quickly and just build stuff with an immediate feedback loop - just reload the page and your updated server-side code is executed.

People can always "just."

If you read the article, no.

Can someone explain to me how this is? It's a company HQ'd in New York, but it's not allowed to do business in the very country it's HQ'd in? What am I missing?

No CPU gets slow after any amount of years. That's not how it works. I think what you're trying to say is: Software gets more resource-intensive.

Sorry to hear. I didn't have that experinece; it's been pleasant for me (there was a billing snafu while they changed their plan structure but it was resolved with a support email) and their monitoring has been very reliable since I signed up a year ago. Their service also seems to be better (4 checks/locations vs Uptrend's 2.)

Anyway, tl;dr is I never had an issue that resulted in not getting alerted about something that I needed to be alerted about, which, above all else, is the point of their offering.

Yeah I thought "dead man's switch" was such a weird name for this.

So... like BetterStack's heartbeat monitor? [0]

[0] https://betterstack.com/docs/uptime/cron-and-heartbeat-monit...

I hope you have ECC memory! :-)

I started watching this and as someone else commented, yeah, things looked doable at the start and then got progressively more impressive and insane. It's clear they know what they're doing. From the extremely intricate tools for each and every specific step, to the screwdriver that tightens only the exact amount when putting things back together, to - what! - CNC milling off an entire component?! I was so impressed. Surely their day job must be in some way related to assembling this phone?

It's kinda crazy hearing Apple mention during their event that they expect FDA approval "very soon", and it actually happening 3 days later. I would have thought that governments can't promise timelines to anyone, especially something like FDA approval.

I'm curious what sort of infrastructure this runs on (hardware-wise), as I'd bet it's not some crazy highly-available complicated distributed system that is often glorified in tech companies and even on HN. If so, it would be a great example of "just go do it" rather than spending weeks and months over-engineering for scale that just isn't needed in 99% of cases.

I'm curious what sort of infrastructure this runs on (hardware-wise), as I'd bet it's not some crazy highly-available complicated distributed system that is often glorified in tech companies and even on here.

It's pretty easy to check if a page is a PHP page: just add a .php suffix, it'll work most of the time depending on where the files are placed in the web directory (also technically depending on how the site implements URL rewrite rules):

* https://spacehey.com/index.php

* https://spacehey.com/browse.php

* https://spacehey.com/reset.php

Here you can see that /help/ is a directory on the filesystem, as it appends a slash at the end:

* https://spacehey.com/help -> goes to https://spacehey.com/help/

and can also be confirmed by trying index.php at that path:

* https://spacehey.com/help/index.php

How does a worn out laser/motor affect how a burned game is read compared to the genuine discs? I don't follow.

Is there any information about the tilting in the demo video? How does that work?

This explains it well: https://wiki.archlinux.org/title/Microcode

> You can still tap to pay using the Google Wallet app.

There were several trades in BRK.A that happened at the $185 price before the halt. I wonder if, now that trading resumed at $631k, whoever purchased at $185 and sold for an immediate $631k gain (multiplied by however many shares) would be able to keep their profits...

Bun is amazing, but I recently tried to make an http/2 server through fastify and was not able to:

     user@host:~/d/temp/server$ bun run index_fastify.js
     14 |   warned.add(feature), console.warn(new NotImplementedError(feature, issue));
     15 | }, $;
     16 |
     17 | class NotImplementedError extends Error {
     18 |   code;
     19 |   constructor(feature, issue) {
                                    ^
     NotImplementedError: node:http2 createServer is not yet implemented in Bun. Track the status & thumbs up the issue: https://github.com/oven-sh/bun/issues/887
      code: "ERR_NOT_IMPLEMENTED"

           at new NotImplementedError (internal:shared:19:27)
           at internal:shared:2:69
           at node:http2:48:53
           at getServerInstance (/Users/user/d/temp/server/node_modules/fastify/lib/server.js:342:16)
           at createServer (/Users/user/d/temp/server/node_modules/fastify/lib/server.js:25:18)
           at fastify (/Users/user/d/temp/server/node_modules/fastify/fastify.js:198:30)
           at /Users/user/d/temp/server/index_fastify.js:4:13

The linked issue is actually about implementing support for http/2 clients, which was already released in v1.0.13 (https://bun.sh/blog/bun-v1.0.13#http2-client-support). The NotImplementedError message should be updated to point to the issue for the server variant: https://github.com/oven-sh/bun/issues/8823

Implementing http/2 server support is in the top few feature requests (https://github.com/oven-sh/bun/issues?q=is%3Aissue+is%3Aopen...). It looks like once they ship this, a lot more people will be able to move over to Bun.

What does this have to do with port knocking?

The thing about port knocking is that if you're on a host where you don't have the ability to port-knock, then you're not able to connect.

This can turn into a footgun: you're away from your usual device, something happens and you desperately need to connect, but now you can't because all the devices in your vicinity don't have the ability to perform $SECURITY_FEATURE_X so that you can connect, and you're screaming at yourself for adding so much security at the expense of convenience.

This could happen as easily as restricting logins to SSH keys only, and not being able to use your SSH key on whatever host you have available at the time, wishing you'd have enabled password authentication.

> Note: successful exploitation does not generate any log entries.

Does this mean, had this exploit gone unnoticed, the attacker could have executed arbitrary commands as root without even a single sshd log entry on the compromised host regarding the 'connection'?

Interesting... I suppose that is because there is no year? What year does it default to? Can you show your exact line of code?

Because that's not YouTube's ad?

> Today we can announce more steps forward - our Encrypted DNS service has also been converted to run from RAM!

Where exactly do services run from if not RAM? The post is very plain with no explanation of what "running from RAM" means. When you execute any binary it gets loaded into RAM as per standard operating system procedures...?

Unfortunately it's the same issue even with that. I wonder why this is happening. It's very frustrating.

Gentoo was my first proper Linux distro that I started using over a decade ago. As the time has gone by and I ended up using other distros for other purposes, I got exposed to the ways the other distros do things... which I often found to be unintuitive or confusing compared to Gentoo. It made realised just how lucky I was that I started off with a distro that pays such close attention to detail to so many things - like the one in the post. Gentoo was definitely one of the main reasons I found so much joy in Linux and resulted in the career that I have today.

I feel like the naming of the bank (Treezor) is slightly unfortunate since it's so close to the "Trezor" bitcoin hardware wallet...

If you read the article, you'll see that the default configuration is not affected.