vhost-

contrary to what you may believe, some people need to work on content and should not be touching security. it's absurd to expect apple to fire all their non-security related staff and replace them with a whole organization of engineers that only work on basic security.

I do agree that apple has had a ton of problems in this area and needs to work on it, but this example is very played out and boring.

though, I can't remember what thread it was in, I saw this happen yesterday too.

I got rid of facebook in 2010. I never looked back, but I needed a little social fix now and again, so I started using instagram. We all know what happened there. It was so perfect. Now it's ad, line of stories, boomerang, boomerang, ad, boomerang, boomerang, ad, line of stories.

I really do like seeing my friends pictures on occasion and I think the multi-picture feature they released was awesome. Stories really made me hate instagram, though. People I follow story the same thing over and over again. It's really frustrating. But I keep looking. Oh god... I keep looking.

I might just get rid of them all.

Having removed a couple death blocks myself from climbing routes while doing maintenance, I can tell you how scary these things are. They are very heavy, but someone using it as a hand hold can dislodge it very easily.

One block I rapped in on to remove was only being held in place by a stone about half the size of my hand. All I did was push that stone away and then lightly pull with a pry-bar and the entire block plummeted and destroyed the trail I had just performed maintenance on 2 months prior. Better the trail than a belayer or hiker. The block had chalk all over it, so people used it as part of the route. It had to go immediately.

If you are a climber and climb outside often, I highly encourage you to donate some money to the ASCA because they send people who do maintenance new bolts and equipment to make sure routes are safely climbable.

Seeing issues with cloudformation as well.

Sometimes it's not possible to say no. The rip and replace strategy of SV will surely force some people to work more than a 9 to 5.

I've been an arch linux user for a very long time. I very much praise the documentation and it always gets me 90% of the way there when trying to solve a problem or configure something. But when I need that extra 10% I can usually find someone on the forums with a similar issue and the solution is usually a huge rabbit hole of links and some are broken, which gets really frustrating because I have to hope that it was cached by archive.org.

> The current number of 230 employees is already about ten times too many. What the hell do they need the additional staff for?

how so?

> Doesn't need to be because it could be run by ten people living off of donations.

really? really?? how so?

> 2. The death/unit energy misses out the fact that we spend a lot more to keep nuclear safe because we are worried about it. If we spent a fraction of the same amount on other energy, we might get similar safety results.

this seems extremely hard to quantify.

yeah, I don't fully understand this. I've had the least problems with GOPATH than I have with any other language. You literally set GOPATH=${HOME} and it just works.

I started with the GH60, then handwired a broken ducky shine 3 with a teensy 2. I now use a jd40 and I'm waiting for a planck.

I didn't come up with it out of the blue... I think I was asking some IRC friends about dip switches and if there were any keyboards that supported a switch for disabling or remapping caps lock. Someone showed me the mechanical keyboards subreddit and that lead to a massive rabbit hole.

For anyone interested, handwiring an older mechanical keyboard is like the super budget way of getting a programmable keyboard since you don't have to buy switches, PCBs, keycaps, or plates. There's plenty of information online and the leopold and ducky cases are big enough to house everything once you desolder the PCB. Teensy 2 is like $17.

I used to use software to map keys. I religiously want to get rid of caps lock and use it as escape... but I also want control near by.

But let me tell you something; if you are a power user, then relying on software to map keys kind of sucks. I couldn't dual boot windows and linux without everything getting screwed up. I also can't easily switch from mac to linux when I get off work. So I decided to start buying fully programmable keyboards and doing all of it at the firmware. I use QMK (https://github.com/qmk/qmk_firmware) and do very similar things to op. For instance, where my caps lock is, I have set to tap for escape, hold for function layer and where tab is, I have tap for tab and hold for control. There's a ton of other bindings I have, but these are the heavy hitters that have made me very happy.

I killed Karabiner Elements. I removed my software bindings in Widnows and deleted my Xmodmap file in Linux because I can finally just plug a keyboard into a computer and have it behave the same everywhere.

The only drawback is laptop keyboards. I really wish those were programmable (if anyone knows of a way, I would love to hear about it ;)). I have to start Karabiner once in a while when I don't have one of my keyboards handy, or if I'm floating around coffeeshops.

I've heard people complain about print being a function now more than a hand full of times and my response is always "are you really using print that much in your code base?"

I totally agree with this. I hate auto-playing videos too. But I am curious what people's opinions are on youtube auto-playing. when I go to youtube or click on a youtube video, I kind of have the expectation that it will start playing for me when the page loads. What does everyone else think?

The Gogs codebase is pretty good, although it has many uses of package globals, which doesn't sit well with me. I mostly like what's in there: https://github.com/gogits/gogs

You can get vim to prompt you to confirm changes with `:%s/foo/bar/gc` where c is "confirm".

I really like ngrok. I use it a lot. I just really dislike how the TCP tunnels work. With HTTP you get a unique subdomain which makes it harder for people to just scan and connect. With TCP, it's always 0.tcp.ngrok.io, so you can just scan that domain and connect to anything that's open.

Grow using the double bucket method. They are easy to move around and don't take up a lot of space. That's what I do now and it's been fairly successful for peppers (super hots) and tomatoes each year.

I decided to download snapchat and try it a couple months ago to see what all the fuss was about. I might be a black sheep here, but it was really confusing. I had no idea how to use it. And I've been building software for 15 years too.

I can completely understand Instagram, so I was happy they added stories. It's really easy to use and the functionality seems intuitive.

Doesn't this mean the government can basically buy user data through shell corps and bypass warrants all together?

It's the header and it's super frustrating when that happens.

Slowmo Guys actually have a video detailing some of the challenges of filming in high speed (most of which have to do with light - or lack thereof): https://www.youtube.com/watch?v=_lZvF-YyP0s

I got Lemur 14" laptop a while back and absolutely hated the build quality. The keyboard is terrible and the screen has the worst viewing angles of any laptop I've ever owned. I got tired of it after 4 or 5 months and converted it to a home server and it's been super reliable in that mode since 2014. AND it also has the benefit of staying online during power outages.

I had 3 on a brand new macbook years ago and apple wouldn't take it back because it wasn't enough. they were very noticeable.

Me too. I accidentally SSH'd into the wrong data center and ran a for loop restarting every database server once.

Fixed that by putting the DC domain in red on the prompt.

I was young, but I was there and remember it well. That flood was crazy. I remember being boxed in with my uncle and he had to do some crazy stuff to his truck's air intake on the fly just so we could get through a deep puddle and out of the box. In retrospect, we probably shouldn't have driven through deep water.

They are both still produced. Phrack drops randomly ever so often. Last issue was released on 2016-05-06: http://www.phrack.org/issues/69/1.html

I misread this as "Hacker Cracker", which is another nonfiction book about a kid growing up in the bed-stuy and gets into computer hacking.

Another very good read if you are into old-school hacker stories.

You can make use of your configuration management for this. If you use something like Chef or Puppet, you probably have user accounts being created on servers when they are provisioned. We have user configs, like bashrc, tmux.conf, vimrc and all that stored in Puppet so they have those files on every single server. It all goes through code review so we can always see if something is overreaching or dangerous.

If you are creating user accounts on servers by hand in a datacenter, then when that person quits... well, you have other problems I guess.

Not to mention browsers. Many people are surprised to learn iMessage, Chrome and Firefox all use SQLite.