Hacker News Reader

whatcanthisbeeon Postmortem for Malicious Packages Published on July 12th, 2018

> ES6, Typescript, React

NodeJS didn't make those - they'd be around with any nodejs alternative.

btw, nodejs should provide some "isolated" mode (ie run as user "nobody-projectName-userName" - eg. "nobody-react-whatcanthisbee") and do some appropriate group permissions.

basic linux permissions can do a lot...

whatcanthisbeeon Postmortem for Malicious Packages Published on July 12th, 2018

can't nodejs run default as user "node-<project-name>-<username>"? ie. run the process as "node-react-whatcanthisbee"?

(or provide option to do so using "isolated-node" versions/flags/etc)

that way, a lot of malicious stuff can be blocked with unix/linux basic permissions

(though spectre/etc stuff will be much harder to catch...)

whatcanthisbeeon Thermanator Attack Steals Passwords by Reading Thermal Residue on Keyboards

so is the hardware keys the only answer?

whatcanthisbeeon Thermanator Attack Steals Passwords by Reading Thermal Residue on Keyboards

would continuing to type or holding the keys after/before entering my password help?

whatcanthisbeeon Illegal Production and Use of Banned CFC-11 in China's Foam Blowing Industry

> By the end of March 1st, 2015, all reports and reviews about the documentary Under the Dome were withdrawn from online websites

> The reason of banning was said to be the pressure of public perception of smog and the fear of collective action of the people

it's not 'inability to regulate', but reluctant to regulate. Just make those environmental groups shut up.

whatcanthisbeeon Illegal Production and Use of Banned CFC-11 in China's Foam Blowing Industry

agreed. But China's "quality and quantity" effectively is "as long as there isn't a bloody riot all over the place" :(

and speaking of dissidents, why would Chinese police operate "execution vans"? isn't that to hide execution of key people, whose news of execution may stir the public?

whatcanthisbeeon China Begins Production Of x86 Processors Based On AMD's IP

oh thanks for the correction. /s/electorate/gov_officials

whatcanthisbeeon Illegal Production and Use of Banned CFC-11 in China's Foam Blowing Industry

isn't it all because there's no election in China?

without elections, why would a gov. official listen to "the people"?

whatcanthisbeeon Illegal Production and Use of Banned CFC-11 in China's Foam Blowing Industry

I sure hope so. But China's wasting its energy on:

- cracking down dissidents (no election - no real 'authority', officials don't have any incentives to listen to "the people"^TM)

- handling local politics (again, no election - same PRC ppl)

- deporting N.Korean refugees back to N.Korea (continuing just because Chinas has been doing so - just like PRC praising Mao for Cultural Revolution that killed millions)

whatcanthisbeeon China Begins Production Of x86 Processors Based On AMD's IP

but in US, the pressure-flow goes like this:

step1. public pressures on the electorate

step2. electorate pressures on spying agencies

... and step1 is impossible in China

whatcanthisbeeon The Pentagon Is Building a Team of Tech-Savvy Soldiers

is it related to the term "public servants"?

or stories about gov. employees doing nothing but getting paid?

whatcanthisbeeon The controversy over child killing among Amazon tribes in Brazil

"cultural relativity" phrase probably wasn't intended to justify "anything is OK"...

so anything is "OK" as long as it has "tradition"? A mafia mob family with a "tradition" in killing ppl around is OK because it's "tradition"?

What's next? Claiming that Nazi killing was a "cultural thing"?

whatcanthisbeeon The NSA’s Hidden Spy Hubs in Eight U.S. Cities

you're really optimistic...

why would PRC provide a stable "work" and "exercise" routine when it can simply use a death-van?

PRC is wiser to do a quick off-with-their-heads when it wants to shush someone

whatcanthisbeeon The NSA’s Hidden Spy Hubs in Eight U.S. Cities

well good luck trying on those countries!

with PRC operating quick-death-"police"-vans, aren't you telling the intercept reporters to risk their lives?

maybe you should try...?

whatcanthisbeeon Sleepy in Songdo, Korea’s Smartest City

For south koreans, it's all about "can I go to gangnam within 1 hour?"

Most jobs, private tutors for kids, etc - are near/inside gangnam.

Any improvements for this metric (eg. a high-speed train) will fix the issue in no time

See "Gwanggyo new town" for example. It was a ghost-town until "new-bundang-line" (a high-speed train disguised as subway) made the trip to gangnam less than 40 min.

whatcanthisbeeon Gluon – A static, type-inferred and embeddable language written in Rust

another instance where IDEs can help juniors by providing hover-to-show-name/descriptions

whatcanthisbeeon Google Engineers Refused to Build Security Tool to Win Military Contracts

+1 on this...

even on Vietnam war, look at the aftermath of US army giving up - for South Vietnamese: mass concentration camps, shoving inside CONEX boxes, a lot of deaths...

...all of this when the war is over and the communist gov. isn't desperate for anything...

...and US media doesn't cover this because Americans want to think "we lost because we were bad (yay justice!), not because we were stupid/weak/etc"

Of course, US army was too desperate & chose to "shoot/bomb whoever (isn't wearing US army uniforms)" - a combination of stupidity / lack of discipline / common sense

whatcanthisbeeon Gluon – A static, type-inferred and embeddable language written in Rust

standard it might be, but I seriously hope IDEs would give a hint on what to google when a junior sees "<"...

try googling < or "scala <*"...