Recent submissions

Comment · 3 years ago
In my company we worked with a platform launched on local machines that had an admin console where you could execute java code. Pair that with almost everyone not turning on the firewall and all engineers connected to the same wifi network, anyone could do whatever they wanted.

I showed a demo how easy it is to read private ssh keys to the head of infrastructure, and after some months people could connect to network only using custom credentials (ldap) which was good, but also asked us to install "spyware" that among other things checked the firewall. I never installed the "spyware" but nobody pushed me. I didn't think I somehow prevented a disaster or did some heroic deed because everyone in the company was professional and nobody would exploit this. But of course I didn't tell about this to anyone except the infra because such information should not be disclosed until is fixed. And once is fixed why disclose it?

I really miss the Mac checkbox to enable the firewall. On linux I use nftables which is really powerful, but with so many possibilities it is easy to miss something during configuration.

I observed a lot of senior engineers don't have sufficient network knowledge. A lot of people on linux don't use the firewall which is really bad if you work on shared wifi.

Also when running docker images, if you map a port when using docker run (ex. docker run -p 80:80), docker will automatically add firewall rules and bypass the enabled firewall, exposing that port publicly.

Comment · 3 years ago
good management would fire half the org
Comment · 3 years ago
Comment · 3 years ago
Apple gets the hate because almost everybody has an iphone, and because they are one of the worst offenders (making critical parts unavailable and parts pairing).

Of course there are other companies that have similar approach, but if you want to make a change, I am guessing Apple would be the best company to try to force into more nature and consumer friendly practices.

Comment · 3 years ago
Apple could simply trigger a warning in the settings menu instead of making the part unusable. Or a similar solution. People are so naive defending these horrible practices, I don't know if it's because of apple cult or masochism.
Comment · 3 years ago
Hopefully such hostile practices from apple and other companies will end. Everybody agrees it's bad. They have absolutely no reason to be allowed to continue doing part pairing and making components unavailable. It's evil for consumers and for nature as well.
Comment · 3 years ago
>and that's simply not going to work in the modern era

It was working until Elon bought twitter.

Comment · 3 years ago
If you are working within a code base that uses fd and fp, then it's expected to preserve the style. However if it's a new project I would use filePointer and fileDescriptor to have consistent naming scheme along all variables.
Comment · 3 years ago
I looked at nand2tetris a while ago briefly and I have the impression that it focuses too much on making complex circuits.

The target audience for nand2tetris are people that want to understand how the CPU works, and nand2tetris focuses too much on how to make logic using nand gates leaving other areas uncovered.

I recommend the Ben Eater youtube chamnel, he has a series of videos about building an 8bit computer, that in my opinion is much more informative for a curious person.

Comment · 3 years ago
no idea why you need a dedicated person for dealing with the advertisers. it seemed to be just pressure from adl to scare the advertisers away, or otherwise adl will generate controversy

a very slimy and backwards model

Comment · 3 years ago
But why can't he express his opinion? Is it illegal to think a state is dirty?
Comment · 3 years ago
put aperture, iso, focus, shutter speed on auto (if it's not a manual lens) and you will get good pictures
Comment · 3 years ago
A local hosting company ddosed local bussineses that had IT infrastructure and then advertised their hosting solution with ddos protection.
Comment · 5 years ago
So it's ok to call it U.K. coronavirus strain, but Wuhan it's not ok
Comment · 5 years ago
The stuff they are doing to trans people - hormones to change the traits, cutting off genitals is very strange, and the people who enable that are sick.

https://i.imgur.com/p1AFgjL.png not sure if this is real, but might be.

The same sick people are giving orphan kids for adoption to pedophile parents in Germany https://www.dw.com/en/berlin-authorities-placed-children-wit...

All this stuff is used to confuse people into submission to nonsense, and after some years when the trans narrative is worn out something new will have to appear, and looks like pedophilia is a good candidate.

I also think we will have implanted cips in the future. Everybody ridicules people that say that Bill Gates wants to cip people because it's too ridiculous. But I think we are not too far away from that (maybe 20 years). Social Credit Score is doing well in China, and there is https://id2020.org/ by Microsoft and Gavi The Vaccine Alliance. When I read the website I can't not laugh. They present the idea in a nice way but if you look trough it is actually just enabling government to have maximum control over you. Also there is this phrase: But doing digital ID right means protecting civil liberties and putting control over personal data back where it belongs...in the hands of the individual.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton