mpettitt

UK ones have baskets you put stuff in, but they appear to be using multiple barcode scanners, at least for low value items. I'm guessing there is a cost-benefit trade-off at some point, as well as a potential functional impact problem (hard to put an RFID tag in a solid lump of plastic!). The combination seems to work well though, and is certainly faster than most supermarkets.

I wonder if it would be possible to integrate payment into the mobile apps they've already got in place, thereby meaning that the only time you'd need to go to the checkout at all would be if you were buying restricted goods (e.g. age limited, or items with security tags) - the risks would seem then to be tracking whether someone had paid. Maybe have a QR code shown on screen which security staff can scan if they're suspicious, giving a list of what items were purchased?

It's a DeskMini A300, so not an official "Mini PC", but bunch of bits stuck together. Still has 1.5Tb of disk space though - turns out that you can get 500Gb HDDs for free, since no-one wants them!

I moved from a Pi server to a mini PC with a Ryzen processor and 16Gb RAM after even the Pi4 with 4Gb was starting to struggle with the number of tasks it was running (Unifi controller, Pihole, Home Assistant, etc - none of them are massively power hungry, but together they made it crawl at times). Still have a Pi next to the TV for media display, but it's mostly due to better subtitle support than the TV's built in streaming apps!

There is a similar discussion going on about Just A Minute, since Nicholas Parsons died earlier in the month. Can it even survive without him, since the very few shows without him were, well, sucky...

Susan Stepney, the page owner, has/had a fantastic personal library. As in, extra wings built onto her house just to hold more books. The site is a bit like an old book shop, as in you're never quite sure what you'll find on it!

Not quite true - I'm salaried, but because I earn over a specific amount, and have children, I have to file a tax return. However, this is basically a matter of copying some numbers from one government website to another government website, and doesn't require any particular expertise, just about a hour or so of tedium.

Notepad++ has a bit of a history in releasing versions in support of various campaigns, ranging from a "Je suis Charlie" edition to a "Tiananmen June Fourth Incident" edition.

I remember one edition included an auto-typing feature, where a new tab would be opened, and content start typing into it, which frankly was quite alarming for an update of a piece of software that you've been using for a while...

At a guess, https://github.com/danielmiessler/SecLists/pull/155 ?

It's a McGuffin from the film RED 2 (https://en.wikipedia.org/wiki/Red_2_(film)), among others, too.

I was talking in terms of IoT devices using these chips - more of them are likely to be on home networks, using WPA2 Personal than in offices using the enterprise version. For offices, wired smart devices or higher end wireless devices are more common, which tend to use custom silicon, rather than COTS modules like the ESP ones. Hue bulbs, for example, don't use ESP derived chips (if only because they need Zigbee rather than WiFi), and not does Lutron kit (z-wave), although Lifx bulbs do.

The fake beacon frame issue is the key one here - relatively few people are using Enterprise WPA2, but ESP8266 (or compatible - such as the Tuya TYWE3S) chips are in all kinds of random low cost IoT devices. I've got some smart plugs which use them, as well as a few of the dev boards connected up to various sensors, so looks like will have some patching to do...

Not quite - if someone steals your 1Password (or equivalent) database with TOTP seeds in, they need to crack the password on that, then have full access to everything. If they get the password from the other end (e.g. the site you log into), they can probably log into that specific site (they will have the TOTP seed), but not anything else. In general, there are more attackers looking at the site end than at the client password DB end.

Probably wouldn't be a bad idea to have a distinct password vault for TOTP seeds, although they'll be stored on whatever device you generate codes from anyway (hopefully in a secure way). At the very least, it might be helpful for moving between TOTP devices without needing to do the random steps required by different services!

Ikea bulbs use a 6 on-off cycle to reset, which is pretty simple (no timing), although toddler can do it. Hue bulbs require either a bridge (if it's linked to them, is one click in the interface, if not, you need to get the secret code which is printed on the actual bulb and enter it), or using a remote (press and hold I and O buttons for about 10 seconds, while holding remote next to bulb). The remote also resets other types of bulb, but has a pretty short range, so unless you have a multi-bulb fitting with several bulbs within about 10cm of the remote, it doesn't cause problems. Still a pain to do compared to the Ikea ones!

Ikea smart outlets have a pin hole reset though, and absolutely no buttons other than that, which I've found makes them pretty toddler proof (the fish tank lighting kept getting set to random by our toddler when using a traditional timer outlet...)

The ESP32 boards I have were £6, including postage. Can't find a Pi Zero for less than double that when including postage costs.

They're designed for different things though - if you wanted a battery powered version that updated on a button press else slept, ESP, if you want live updates all the time, Pi is fine!

I have one running pi-hole and Ubiqiti controller (powered by my router's usb port), one sitting under the TV running Kodi connected to a NAS, avoiding the need for discs (big plus when you have small children), one sat next to an old hi-fi which also links to the NAS and lets me stream music to the hi-fi, and a couple of older ones which aren't connected to anything having been replaced with newer models. Oh, and a Zero, which I've never found a use for.

I get about 15% of queries blocked with 3 Windows laptops, 2 Android phones, 1 iPhone, and a smart TV. I do run most of the traffic generated for work through work VPN though, and that tends to be the largest source of traffic (about 80% by data volume), which completely ignores local DNS.

For reference, the actual official site is https://keepass.info/

It is surprisingly difficult to build train tracks given a set of parts, even without taking junctions into account - there is a challenge about it on Stack Overflow's Programming Puzzle site (https://codegolf.stackexchange.com/q/116607/66060) and there is only one answer in the two years it's been there. In some ways, real life engineers have it easier - they don't have to plan routes based on the parts in the box!

There are a few companies which are onto password spraying in this way, and use failed login attempts from a single source (e.g. IP address, ipv6 addresses within the same allocation block, etc) as a trigger state for additional monitoring or verification. That can just mean that the soc gets a notification, or can enable captcha for suspicious sources while the attack is going on.

This does of course fail when an attacker starts using multiple sources for attack traffic. That seems to be the next step in the cat and mouse game though.

Why is there a requirement for optical scanners? In other democratic countries, the counting of ballots is still a manual process (e.g. UK https://theconversation.com/explainer-how-britain-counts-its... or Germany https://www.dw.com/en/german-election-volunteers-organize-th... ), which, while labour intensive, seems to work. Are there particular reasons why it couldn't work in Georgia?

If you trust Gartner's judgement, the only major players are AWS, GCP, Azure, Alibaba Cloud, Oracle Cloud and IBM Cloud. Can read their definition of "innovative" in the Magic Quadrant report at https://www.gartner.com/doc/reprints?id=1-50WJ5CK&ct=180525&...

As you can see, all the players with a global reach are pretty dominant in some industry or another: database software, Chinese e-commerce, and general computing. If you don't need the global reach, though, you get more options.

This seems to be conflating dispersal to multiple star systems and trade/regular interaction with the newly colonized planets. Given that it would take 40 years to get a reply to a message, discussion wouldn't be the normal pattern - by the time you see an insult/aggressive message, there is a reasonable chance that whoever sent it is now either regretful about it, or dead, or, most likely of all, has completely forgotten about it.

Colonized planets in different star systems are effectively alone, able to receive old news, and potentially get deliveries of new colonists or technology every once in a while, should anyone on another planet send some. For anything urgent, it would need to be dealt with without calling back home - whether that is disease, local war (e.g. within the star system), or simply resource shortages - there just isn't a suitable way to top them up from elsewhere.

That same limitation means that taking war to another planet is unfeasible - even if you're just redirecting asteroids, the target planet would be able to see them coming, and, importantly, has had as long as you have had, plus the travel time of the rock, to master manipulating rocks in space. Similarly, while you could target computer systems (interstellar cyber warfare), the most recent details about their computers you have is dependent on the last message you received - computer viruses from 20 years ago don't work on modern computers without quite a bit of effort to make them run, and even if you get them to run, the effects are limited.

Would be interesting to see how it handled REM or Dubstar, both of whom have some really upbeat tunes, with really dark lyrics - "The One I Love", for example, with "a simple prop to occupy mind ", or "Not So Manic Now", a happy bouncy pop song about assault...

From a quick look on eBay, you can pick up a vetinary ultrasound machine for between £800 and £2000. Are these materially different to medical ones, or is the cost difference down to certification?

This is a very important point. When it comes to implementing new software, especially in a critical field like crypto, it takes a long time for acceptance to build.

As alpha software, I'd be shocked if anyone was using it in a production capacity, but it could be useful for early investigations into issues like timing attacks - clearly, it's better to get them sorted before a "final" release. I'd hope that any project planning to adopt this or any) crypto code was first getting it analysed carefully.

On the other hand, quite a bit of existing crypto is there because it was the first implementation on a given platform, despite potentially having issues - think about heartbleed, which was missed for quite a while in very heavily used software. It's not always bad to have fresh alternatives, as long as they are approached cautiously.

There are quite a few people who are looking out for the mistakes too - the population of hacker news includes security testers, lawyers and the like.

At least this company is taking steps to improve things, which is a vast improvement over, say, V-tech, whose initial response to finding data had been taken was to update the terms and conditions stating that they had no responsibility for keeping data safe.

It is scary how much data we send around though, even when you are trying to keep the worst offenders out of your house.

I knew about the continuous flow, but hadn't considered that you wouldn't hear your own pulse as a result. My father in law has an LVAD, which has given him back a lot of freedom following a severe heart infection early last year which damaged his natural heart badly. He's now on the transplant list, so I'll point it out to him as a "hey, this could be weird" thing.

Do they mean that blood pressure is stable too, since you presumably wouldn't have a diastolic reading - no pressure reduction between beats, since there are no beats?

The Windows version has an autotype feature - not sure if that has made it to the ports though. It's also not as smooth a flow as Lastpass, since there is a context switch between browser and password manager (although I seem to remember that there used to be an extension offering Lastpass style access to Keepass for Firefox, possibly called KeeFox, or FoxPass?).

I don't think any distinct software could automatically log out of sites - it would presumably come down to deleting cookies on sleep (or relying on the sites to have sensible session expiry times) - so I'm not sure that the password manager is the right tool for that. A password manager would protect the passwords for your accounts, but that's not the same as sessions for your accounts.

Did you see that Keepass introduced fixes to the issues raised in that paper before it was released, thanks to the responsible disclosure by the authors? http://keepass.info/help/kb/db_headerauth_upg.html