coldpie

Joined 14 years ago

Karma
24,259
Submissions
5,903
Member since
Jun 6
I do software stuff in the computer security space. Former (2009-2022) Wine hacker at CodeWeavers. You can email me on fastmail.com with username coldpie. Personal websites: <https://smokingonabike.com> (video games, gardening, tech); <https://aechairs.com> (woodworking).

Tired of so much AI news on HN? I maintain a browser extension for that: https://github.com/ColdPie1/enough-ai-on-hn

View on Hacker News

Recent submissions

Comment · 5 hours ago
Your NAS is not critical. The plan if your NAS gets compromised is to say "dang" and wipe it and re-download all your movies or whatever. You can connect that to the internet.

Stuff like your town's water, transportation, and medical infrastructure and employee and student data are critical. Your car's drivetrain and safety features are critical. Your home's HVAC can be critical in certain times of year. These things should not be connected to the Internet.

Comment · 7 hours ago
So if someone said "what are they doing?" about someone some distance down the street, you would find that objectionable? I can't really think of a less awkward phrasing. "What is that person doing?" "What is he or she doing?" Those both seem like unnatural ways to phrase the question. What would you say in this scenario?
Comment · 22 hours ago
Comment · 1 day ago
For 50 years, computer security has largely been built on the theory that most targets aren't worth the relatively high effort to compromise, so it's not worth it to spend the money on security. We're now reaching a point where the effort to compromise is dropping close to 0, which means we've got 50 years of insecure software to reckon for.

The advice today is the same as it has ever been, though. Always assume that any networked computer is or may become compromised. Do not do anything critical on a networked computer, because it is or may become compromised. You can still use computers, but assume that a bad actor may take control at any time, and plan for that eventuality.

For example, if you are hooking up a networked computer to your town's water supply system, ask yourself "what would happen if Iran got complete control of this system?" If you're putting your school system's students' mental health data into a networked computer, ask yourself "what would happen if all of this data became public?"

Comment · 2 days ago
No, I'm afraid you really are stuck in a culture war. As the above poster said, "they" truly has been a gender-neutral singular or plural pronoun for hundreds of years.

For example, someone two blocks down the street is doing something weird. "What are they doing?" is a perfectly grammatically normal reaction to seeing this.

Comment · 5 days ago
Comment · 6 days ago
I actually asked about this on HN a long, long time ago: https://news.ycombinator.com/item?id=20704840 My takeaway from the feedback there was that IP lawyers just aren't the sharpest tools in the shed.
Comment · 8 days ago
Don't forget your local library. They've often got decent selection especially if you're in a denser area.
Comment · 8 days ago
It's ok to delete things.
Comment · 9 days ago
Those peons deserve to go to jail just as much as the ringleaders do. Perhaps they can get reduced sentences by testifying against the higher level criminals.
Comment · 9 days ago
I think most of that is true for games shipped on cart, too. Games often ship broken or missing features which are patched in at launch. Official physical media has not been a reliable method for future accessibility for at least a decade now. It's way past time to start using other methods of preservation.
Comment · 9 days ago
I believe that is largely true even if they shipped a game on the cart. Many games ship broken, and they also change many times over the course of their life. I don't think official media can be considered any part of a future accessibility strategy for at least a decade now. Game keycards don't change that fact in any way.
Comment · 9 days ago
> Game keycards keep the appearance of physical ownership without delivering what people expect from a cartridge.

How's that? Can't you buy & resell them on the used market? That seems like the only thing a physical cartridge gets you, and not shipping the outdated-on-day-one bits on the cart saves some money, too. Seems like win-win?

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton