TheSwordsman

Joined 14 years ago

Karma
1,839
Submissions
248
Member since
Jun 12
[ my public key: https://keybase.io/theckman; my proof: https://keybase.io/theckman/sigs/sdBoJTtBwPcwi1tpmyge7iA4vooZ1ZmTK_huiHJGylc ]
View on Hacker News

Recent submissions

Comment · 1 year ago
As an American, I regret to inform you that you're trying to use logic to understand a situation where it seems like logic wasn't used (in terms of the economic impact). These are the same fuckwits that tried to claim a trade deficit is the same as a tariff.
Comment · 1 year ago
Yep. The issue is most people I've seen who lean most on these tools do not have that discipline.
Comment · 1 year ago
Hahahaha. That's actually amazing.
Comment · 1 year ago
I'm waiting for the AI apologists to swarm on this post explaining how these are just the results of poorly written prompts, because AI could not make mistakes with proper prompts. Been seeing an increase of this recently on AI-critical content, and it's exhausting.

Sure, with well written prompts you can have some success using AI assistants for things, but also with well-written non-ambiguous prompts you can inexplicably end up with absolute garbage.

Until things become consistent, this sort of generative AI is more akin to a party trick than being able to replace or even supplement junior engineers.

Comment · 1 year ago
Yeah, I'd bet their burnout risks aren't going to go away by just replacing k8s with ECS.

I also hope they have a good support contract with AWS, otherwise they are going to be in for a fun surprise when ECS has some weird behavior or bug.

Comment · 2 years ago
Maybe it's just me, but it was a bit of a disappointing read when the author decided not to provide any details about what's replacing it. Would have loved to hear a bit more about the decision to move.

Although, considering the author mentioned a loan with a partner maybe they were trying to rebuild it in Google Docs or something so they could more-easily see it together.

Comment · 2 years ago
The 11,000 may be limited by the suspension system.

So in terms of comparisons I don't think you're wrong, but it might be better to compare it to the F-150 Lightning for more of an apples to apples comparison. The F-150 Lightning Platinum vs Cybetruck AWD is probably the most fair comparison in terms of specs, but the CT is ~$20,000 cheaper

If we compare the F-150 Lightning Lariat with XR Battery to the Cybertruck AWD, because of price:

F-150:

Range: 320mi

Towing: 7,700lbs

Curb Weight: 6,361lbs

---

CT:

Range: 340mi

Towing: 11,000lbs

Curb Weight: 6,603lbs

---

F-150 Lighting Platinum to CT Cyberbeast, because of price:

F-150:

Range: 300mi

Towing: 8,500lbs

Curb Weight: 6,893lbs

---

CT:

Range: 320mi

Towing: 11,000lbs

Curb Weight: 6,843lbs

Comment · 2 years ago
Comment · 2 years ago
Comment · 2 years ago
So as I mentioned in another comment, it's not entirely security theater. If the site enforces that an MFA token is truly one time use, then this can prevent replay attacks of your credentials being used to create a new session.

If someone compromised your password store, then yeah it's all over. But if the compromise happens elsewhere, it can be a useful layer to the security onion.

Comment · 2 years ago
>I have my password manager and can login with 1 click to all my sites. 2FA is always a pain in the ass and always extra effort on something my password manager already protects me from.

So I think there are a few potential issues with this argument based on assumptions you're making. I'd argue this isn't entirely true because:

1. Many password managers allow you to manually copy the password into your clipboard, which mean you could paste it somewhere that's unsafe / untrusted. Someone could then use this password to authenticate as you. Many sites disallow token reuse, so once used if you accidentally pasted that somewhere as well an attacker couldn't reuse the token.

2. Similarly, if someone has managed to exfiltrate login details you provide without being able to also obtain the session cookie sent back, and the site enforces one time use of MFA tokens, then the MFA token can also avoid a replay attack of your login details.

I'll admit the second one may be a bit contrived, because if they can exfiltrate login details it seems likely they could also just obtain the session cookie. But if said cookie is tied to a certain IP address, then that cookie is useless to them and they wouldn't be able to replay the credentials.

Comment · 2 years ago
Disregarding the other replies for a moment where they rightfully call out that it wouldn't be radar, wouldn't they still need a publicly available API for this data if they wanted to access it outside of their house (e.g., when at the park)? So at that point, why add the additional complexity if there's already someone sharing ADS-B data to OpenSky for your area?
Comment · 3 years ago
In the timeless words of Jay-Z:

    I didn't pass the bar, but I know a little bit. Enough that you won't illegally search my shit.
Comment · 3 years ago
Seems kinda lame that you created a new account just to make this comment. Maybe instead of being mad that a mouse ate your food, get some proper food storage?
Comment · 3 years ago
Dry facial hair.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton