Freak_NL

Are a few clips or screenshots shown on billboards going to influence people to that extent?

If the goal is to get companies to get their security in order, than showing porn is certainly one of the most effective ways. It'll put political pressure on the company that owns the billboards, for one.

Show a cute picture of Big Bird telling people to eat more pizza, and the company will just reset some passwords. Show a couple of choice scenes from Brazzers and the CEO just got a call from a government minister and suddenly the leaky hardware is getting replaced at breakneck speeds.

Works well too if the goal is just to get people to object to digital billboards.

Which is a valid fallback, but only with lower speeds. If someone made the call to go manual and continue at speeds over 30 km/h…

You don't even have to do it before you have children. You can wait until they are six or so and have the autonomy to pick what they want to watch (under your guidance). For children younger than that, you pick what they watch and when they watch it. Every time.

Do start hoarding the better shows and series you know.

Yeah, the Dutch banks really fucked us over by putting the bank code in the IBAN, so IBANs can't be moved to another bank.

I started reading on the assumption it was posted here because it was interesting, but this paragraph cinched it:

> 1. You finished your last three rewarded ads. Every time a rewarded ad starts, the rule pushes false onto a list and keeps the latest three (lines 174–183). If the ad SDK reports that the reward was earned, it flips that entry to true (191–199). The check needs all three to be exactly true:

Pointlessly spun out prose. Pointless headers everywhere. Pointless lists. Yes, we understand what a list of booleans is, and that the game looks for a state where the last three are true. No need to spell it out like that.

Why do people post crap like this? Why do people post it to Hacker News? There is some merit to dissecting an attention sink ad-driven game, but this article just makes me feel like my attempt to grasp the meaning and writer's views fails every time — like I'm trying to grasp stalks of grain in a field, but my hand keeps passing through them as if they were holograms.

I would very much like to read people's thoughts with a forbearance for awkward prose, bad spelling, or suboptimal outlining, instead of that I get rewarded by text where the human who prompted it is suddenly absent.

Fuck this new AI world.

Anyone looking to get into single player Quake should grab an engine like IronWail and just go through all three Brutalist Jams. These are essentially map packs with contributions from various mappers, linked by a museum like base map (as many jams do). Each successive Brutalist Jam pushes the boundaries of what a thirty year old base game can still do.

Log4Shell required that the attacker be able to generate a log message containing specific parameters. It was a severe exploit, but not one that worked in every Java application with the affected Log4j versions. Attackers had to find calls that logged user submitted text or query paths first. So the list of prerequisites was larger: had to be using Log4j and had to have logging of user generated text.

Still a very large attack surface, but not nearly as ubiquitous as this one.

Scroll down to where they do that under Spatial Efficient.

Iosevka is more of a parfois-serif I guess.

I have no idea why they chose 'ligation' instead of just ligature, but it was jarring every time I encountered it.

I was wondering why it did that. This is really the kind of site where this is not a feature you should use.

NEVER run out of improvements to be made. Rule number one of getting audited.

Always leave an obvious-once-you-see-it, but minor, defect somewhere for the auditor to latch on to. One they can earmark for you to come up with a plan to address the issue before they grant you the certificate (and which you'll be able to write up in no time because you planned for it).

A good auditor and a company actually taking this stuff seriously can benefit from 27001. That probably accounts for 5% of all 27001 certifications out there.

If you're lucky you get an auditor who's just there along for the ride towards early retirement in a few years, and who'll joke with you and eat your lunch. Had one of those once. Doesn't help your security one bit of course, but it makes audit time more relaxed.

ISO 27001 means they have processes in place that proof that risks are monitored and continuous improvements are being made. ISO 27001 means they have policies, and can show those policies to the auditor.

Never assume that having that certification means that shit is actually secure. It just means the company can do the audit dance.