Recent submissions

Comment · 5 years ago
Being the one who decides to pay or not pay bounties in our bug bounty program: trust me when I say that the internal discussion, fact finding, classification, quality control, release planning & the rest exceeds your bounty by a factor 10.

Same goes for the dialogs with unhappy hunters who like 'proof' for the arguments that a bug / vulnerability is not there.

There is literally no financial incentive for me at all to not reward, au contraire actually.

Comment · 5 years ago
THANKS!

Never knew a livestream existed and now I'm clued to my headset.

Comment · 5 years ago
Comment · 5 years ago
Not so much wanting the other to die, but knowing / wishing it will be the only / first opportunity to make a bid / acquire the object.

People have been doing this since forever to buy real estate too.

Comment · 5 years ago
Overtaking is a big word, you maybe meant passing? With the keep your lane doctrine that is something to be expected.

Here in Switzerland we are allowed to PASS traffic on the right hand side to (since Jan.01.2021). But you are NOT allowed to overtake, as in change lanes actively.

Comment · 5 years ago
Take a picture of a tree, have it identified & published with location in / on OpenTrees.
Comment · 5 years ago
Incredible... I am flabbergasted that 1: this data is collected and shared, 2: there is some good soul who figured out how to gather these sources and make it available to the world.

I would love an app that lets me walk my city, picture trees and expand the data set.

Comment · 5 years ago
Comment · 5 years ago
> I wanted to experiment with using Pi's to monitor experimental setups, instead of using full-on PCs as we do now, which would save a ton of money.

Because the costs you think of are but a fraction of the costs that are involved in keeping them accounted for, updated, monitored etc.

I have these discussions with creative individuals far too often :)

Comment · 5 years ago
We are experimenting with a couple of RASP providers, let me tell you that it does help with certain aspects (of finding issues) but it does not replace the other tooling we are already using.

So the costs / resources are not to be underestimated.

Good thing about many RASP solutions is that they integrate easily into our existing developers processes / tooling, so that's a big endorsement.

Comment · 5 years ago
Don't tell the people who are convicted / took a plea deal based on "Telco location" this.

As you can tell from your experiment, these locations are... rough to say it nicely. This is truly helpful for the investigating party, since their counterparts are not aware and they can move / interpret your device's location to that point they would like you to be. The accuracy is however... not so great as they will present it to you / the judge.

Comment · 5 years ago
Well thank you! I never knew I needed this but I seem to have a hidden desire to read & view all these abandoned / retired airfields in the country surrounding me. I will even try to visit some.
Comment · 5 years ago
It is much easier (and more often done) to implement a solution for a static position. Many embassies and other highly sensitive locations have these, commercially available, installations.

We used to build them for fun (no profit) many moons ago.

Basically what you do is place a couple of (1, 2 or whatever) sensors (we used to use these Motorola C123 with osmocom) and just keep taps on signal strength and antenna ID over time, and inspect changes.

Comment · 5 years ago
Comment · 5 years ago

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton