Recent submissions

Comment · 18 days ago
I thought it was floss -> mouthwash -> brush, but either way brush was always last because the toothpaste fluoride is what you wanted left on your teeth at the end of the process with the mouthwash serving as a base layer.
Comment · 20 days ago
AF447 wasn't a security breach. You're talking about an entire separate class of human-machine interaction problem that has little relevance to the lack of security around access to OT operational surfaces.
Comment · 21 days ago
For some reason this reminds me of the theory of false vacuum decay, where the universe could exist at a local minima rather than an absolute minima and if something ever disturbed that and decayed out of the local minima the whole universe is obliterated. Fun time.

I guess the relation would be that the useful state of being is somehow not the most stable.

Comment · 29 days ago
ESNI has been replaced by ECH which Cloudflare supports just fine.
Comment · 5 months ago
If you use the typing system (which I do religiously) Python becomes a lot easier to reason about in larger projects it also makes linters and refactoring tools easier to use.
Comment · 7 months ago
Idk how Florida handles it but several states citations issued by red light cameras and those issued by officers are handled entirely differently for the exact reason you mention. Camera citations are entirely civil, you don't get points against your license. If a cop issues the ticket it does become a misdemeanor moving violation.
Comment · 7 months ago
Even if a zip code contains multiple cities, each ZIP has one "preferred" locality name and you can default to that. Any of the locality names within a zip code is deliverable for all addresses in that zip code.
Comment · 8 months ago
Businesses can use deposit management services to spread cash among many banks. Bonus points they also are less impacted by the poor business practices of one bank.

Individuals can do this too with investment brokers or wealth management providers.

Alternatively we could just made FDIC coverage unlimited, but then that creates poor risk taking incentives, which is the whole point of not setting the expectation of the a bailout by making exceptions.

Comment · 8 months ago
It is supposed to be if the amounts are above $250,000. I have no problem with the first $250k being risk free, that is a policy that is well published and that we all "agree" on. Making arbitrary policy decisions that in some cases depositors should be made whole when risky behavior (such as depositing above the insurance limit) bites them is problematic. Stick to the policy or change the policy don't make one off exceptions because that sets weird expectations.

89% of deposits at SVB were uninsured.

Comment · 8 months ago
The privacy issue has two facets, when I show ID to get in to a club or buy alcohol, the entire interaction is transient, the merchant isn't keeping that information and the issuer of the credential doesn't know that happened (i.e. the government).

Just allowing a service provider to receive a third party attestation that you "allowed" still allows the third party to track what you are doing even if the provider can't. That's still unacceptable from a privacy standpoint, I don't want the government, or agents thereof, knowing all the places I've had to show ID.

Comment · 9 months ago
Right, I mean the Roman Republic declined and gave way to Roman Empire for a long time before Rome finally waned. That doesn't feel like it would be a good time for the rest of the world if the United States gave way to the United Empire for next 500 years.
Comment · 9 months ago
Even if 'possibly preface' is interpreted to mean CNAME RRSets should appear first there is still a broken reliance by some resolvers on the order of CNAME RRsets if there is more than one CNAME in the chain. This expectation of ordering is not promised by the relevant RFCs.
Comment · 10 months ago
> It's called a firewall. You want a firewall. IPv6 also has a firewall. NAT is not a firewall. NAT is usually configured as part of your firewall, but is not a firewall.

Expanding on this. NAT as deployed in most soho/residential settings requires a stateful firewall to track connections + port mapping logic.A stateful firewall is also used for IPv6 edge security and using the same basic posture (out allow, in established/related only) except the only difference is it isn't also doing an address mapping. Nobody is out there saying folks should run a wide open IPv6 edge, and as far as I'm aware no one is shipping IPv6 ready consumer routers that do that (but I'm prepared to be proven wrong in the responses).

Comment · 10 months ago
Wouldn't that just be because the construction is common in the training materials, which means it's a common construction in human writing?
Comment · 1 year ago
Just because an imprinter was used doesn't mean the transaction was necessarily "offline". Depending on merchant's policy, the cashier would call their processor, give them some transaction details and receive an auth code for the transaction which would be written on the imprinted ticket, thus authorizing the transaction at the POS just the same way it's done today (except with humans and phones, instead of an electronic handshake).

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton