HNHacker News
TopNewBestAskShowJobs

thenewnewguy

874 karma · joined July 29, 2019

submissionscomments
thenewnewguy··on If the heart is a muscle, why doesn't it ever get tired?
For a vast amount of human history food has been much harder to obtain and less calorie-dense than it is today, so evolution has optimized for energy efficiency rather than raw power.
thenewnewguy··on Tesla Model 3 Vulnerability – Disable Autopilot Notifications, Speedometer, etc.
Where are people getting a few seconds from? The video seems to display the crashed MCU for well over a minute. 30 minutes is unreasonable, but it does seem like the safest thing to do is pull over.
thenewnewguy··on It never makes sense to use foldl on lists in Haskell (2019)
This seems like a weird complaint - basically everywhere in programming two variables/functions/classes/etc with different names are different things. I'd be much more surprised if appending a ' to a function name did nothing in haskell.

> When you could have just called it foldl and moved the old one to the deprecated module.

1. Most people aren't a fan of randomly changing existing library functions

2. The lazy (non-prime) version of foldl isn't useless! There's even a section at the end of the post explaining how this post _only applies to lists_ and that with other data structures foldl and foldr' are actually useful.

thenewnewguy··on AvastSvc.exe contains a full, unsandboxed JavaScript/DOM implementation
There's Windows 10 "in S mode" which does this, but it's not a version of Windows sold at a discount, just a "mode" you can run Windows in. It's possible to (irrevocably) change from S mode to normal Win10.
thenewnewguy··on The History of the URL
> and so do SPA devs

??? - those usually use the URL bar in my experience.

thenewnewguy··on Highest French court reclassifies Uber drivers as employees
Yes, but this is due to the fact that most jobs require your physical presence, Uber does not.
thenewnewguy··on Get Real: no drug or vaccine will avoid a very big coronavirus epidemic
You are downvoted for passing off your uneducated (in the field of health) opinion that her illness was coronavirus as fact, and for implying that antibiotics somehow could help with the coronavirus directly (i.e. in fighting the virus not preventing secondary infections) in any way (they can't).
thenewnewguy··on Get Real: no drug or vaccine will avoid a very big coronavirus epidemic
I have a hard time believing that both a doctor would administer antibiotics for coronaVIRUS and that antibiotics would be of any use there.

Edit: Children comments are pointing out the antibiotics could be for secondary infections. Fair enough, but the parent comment's implication that the antibiotics helped with coronavirus recovery is what's problematic.

thenewnewguy··on Revoking certain certificates on March 4
https://community.letsencrypt.org/c/incidents.rss perhaps?

(Pro tip: you can append .rss to many pages on discourse to get an RSS feed)

thenewnewguy··on Revoking certain certificates on March 4
The misissuences have happened over the last several months (since at least December 2019), but it does seem that it was _discovered_ on Friday.
thenewnewguy··on Revoking certain certificates on March 4
> The real question is why there's so much pass-by-reference in the first place. K looks to be a domain name string -- it's almost certainly faster to copy it than to dereference it everywhere.

I don't program in rust, so my knowledge here is limited to what these words mean in C/C++ - however shouldn't making a copy still require dereferencing the copy?

thenewnewguy··on Revoking certain certificates on March 4
Well, from my understanding, they have no idea of whether or not a given certificate was misissued as long as it meets the baseline criteria for triggering the bug (which seems to be just "issued after X date with more than 1 domain").

So while the number of certificates that should not have been issued due to a blocking CAA record is likely small (or possibly even 0), they have to revoke every cert that could have triggered the bug, as they have no way to travel back in time and find out what the CAA records they didn't check would have been.

thenewnewguy··on WireGuard Gives Linux a Faster, More Secure VPN
> k8s already uses Wireguard for the service mesh internally.

Kubernetes does not use anything for the service mesh internally - as it does not provide a service mesh.

By this I can only assume you mean some popular CNI provider uses wireguard, but out of the ones I know of (flannel, weave, calico, canal, romana) I don't believe any use wireguard.

thenewnewguy··on Let's Encrypt Has Issued a Billion Certificates
It's relevant because Google isn't likely to remove _themselves_ from their browser, which is currently the most popular web browser on the planet.

For this reason alone, having a major browser dev as a CA is not a good idea, regardless of how much or little you trust google.

thenewnewguy··on Defeating a Laptop's BIOS Password
Thieves are probably more likely to know how to bypass a BIO password than the legit owner.
thenewnewguy··on Cloudflare silently deleted my DNS records
1. Cloudflare has only banned large websites, not any "no-name sites".

2. Admittedly anecdotal, but while bans like these do increase _knowledge of_ said websites, I see no evidence they significantly increase their popularity or userbase.

thenewnewguy··on Pwn.college
Cannot connect to https://pwn.college/ (only works on HTTPS with www subdomain) - somewhat of a problem for sharing this website.
thenewnewguy··on Let's Encrypt has turned on stricter validation requirements
Works fine for me, uMatrix with javascript disabled by default.

Edit: Ah, upon testing it breaks if you have 1st party JS allowed but not 3rd party. This is pretty reasonable in my opinion.

thenewnewguy··on Pay up or we’ll make Google ban your ads
The same botnet can back an infinite number of these ransom notices, because when you get one of these ransom notices you have no way of knowing if the ransom notice you got today is the same botnet you paid off last week but with a different name.

Add in the fact that there are botnets available to rent, and you create a near-infinite supply.

thenewnewguy··on A document that the NSA uses for teaching Python
Better link: https://archive.org/details/comp3321/mode/2up
thenewnewguy··on Sweden gives employees unpaid time off to be entrepreneurs (2019)
So, just to be clear, these are your complaints:

- You couldn't fire somebody who went on maternity leave

- You had to provide benefits to your employees, even temporary ones

Seems like the laws are working to protect employees as intended to me.

thenewnewguy··on The US Secret Service mistook a cyberpunk RPG for a hacker's handbook
https://en.wikipedia.org/wiki/GURPS_Cyberpunk

> This raid is often wrongly attributed to Operation Sundevil, a nationwide crackdown on illegal computer hacking activities that was occurring about this time.

thenewnewguy··on Time Machine in macOS 10.15.3 is very slow on first full backup
> I go my first 64-bit mac in 2006. Fourteen years later why should the Mac have to support the older slower way that doesn’t release the potential of the hardware?

Aren't 32bit binaries (when not needing 64bits) slightly faster than 64bit versions due to the smaller pointer size?

thenewnewguy··on Clang vs. other open-source compilers
This is a page about _open source_ compilers.
thenewnewguy··on Migrating to CockroachDB
I am unfamiliar with how setups like these usually work, but it could an active attacker MITM your network?
thenewnewguy··on Wacom tablets track every app you open
> Not so with Nvidia GPUs. The open drivers are awful; the proprietary drivers are good.

Good by comparison to nouveau (the open source driver) perhaps, but definitely not good compared to the open source intel/AMD drivers.

thenewnewguy··on Google tracks individual users per Chrome installation ID
> > and furthermore, even if it did (I see conflicting reports), if you collect IP Address and another pseudonymous ID and don't join them, the ID isn't personal data.

> The transmission of data is already covered by GDPR, you don't have to store the data to be bound by the law.

This cannot be the actual correct interpretation of the GDPR, because under this logic _all_ IP packets on the public internet (made by/to EU citizens) are covered by the GDPR because you are transmitting data alongside an IP address.

thenewnewguy··on Rtty – Access a device’s terminal from anywhere via the web
Basically any attacker that is able to control the certificate store on your device could also just install a keylogger.
thenewnewguy··on Null Values in SQL Queries
> if you attempt to insert an empty sting ("") into a not-nullable column, it will fail

Yes, because it will convert the empty string into a NULL, and fail to insert that NULL into a non-NULLable column.

thenewnewguy··on Libc++'s Implementation of std::string
I don't believe you can ever edit the title of a submission, but the mods can (and typically will).
← PreviousPage 4 of 11Next →