Recent submissions

Comment · 7 years ago
> language injection where you write code and later on you inject a different language.

I (still) work with a Classic ASP code base.

I kid you not, that there are VBScript functions, which call JScript (not JavaScript) functions, which in turn call VBScript functions.

It is a terrifying and glorious mess.

edit:

I also worked with a system at one time that used node.js to create C# files on the file system, then use the C# compiler to create an executable and then run it. It was... not great.

Comment · 7 years ago
Comment · 7 years ago
This isn't all on the non-developers. I've walked into two rooms this week, which contained several senior developers, and when I asked them about non-functional requirements, they had to ask what they were, and why they were important.

I've also seen teams where the Defintion of Done doesn't include any steps at all towards deployment. Done is when someone approves the pull request.

Not surprisingly, it takes longer for those teams to 'complete' a change. In the former case, they are continuously surprised, and angered, by 'requirements' that 'no one' told them about. In the later, they stop halfway, and wonder why everyone is waiting on them, because it's 'development complete'.

Comment · 7 years ago
Comment · 8 years ago
Per that study, "This analysis of 5-y weight-loss maintenance indicates, on average, that obese individuals maintained weight losses of 3.0 kg, representing a reduced weight of 3.2% below initial body weight. These individuals were successfully maintaining a weightloss averaging 23.4% of their initial weight loss at 5y"

Put another way, after 5 years, the average weight loss was ~3kg, with an average weight gain of 78.6% of the original lost weight.

Also, in general, an obese person who is obese before, and after 5 years has a weight that is ~3kg is likely still obese.

So this study basically just says that an average person isn't successful at keeping a large amount of weight, and gains most of it back. The specific statistics stated by the commenter above may not be correct, but the sentiment is definitely true.

That said, the study does confirm that very low energy diets (~800 meal replacement) beat out hypoenergetic balanced diet (~1200-1500 normal food) in long term weight maintence. Which is what the article is suggesting being implemented. So it's still not a great long term solution, but it's the better of the two non-exercise based solutions which this study evaluated.

Comment · 8 years ago
The closing price on Thursday was $168.84. The close yesterday was $162.44. That's a 3.8% decline.

I'm not sure where you got the $219 price from, but the stock price was nowhere near that before the breach.

Comment · 8 years ago
The load could be zero, it could be infinite, or anywhere in between. Infinite universes sending infinite work is inf/inf. It's not possible to know if that's going to tend towards something like 0 or something like positive infinity without having some way to measure. But it's an error to just assume it's zero.
Comment · 8 years ago
Comment · 8 years ago
Comment · 8 years ago
Comment · 8 years ago
Comment · 8 years ago
Comment · 8 years ago
Note that the beginning of the article quickly mentions the new attack that doesn't require the 4-way handshake. Then the rest of the article describes the 4-way handshake attack.

Here is the source for information on the attack that only requires a single EAPOL frame[0].

"This attack was discovered accidentally while looking for new ways to attack the new WPA3 security standard. WPA3 will be much harder to attack because of its modern key establishment protocol called "Simultaneous Authentication of Equals" (SAE).

The main difference from existing attacks is that in this attack, capture of a full EAPOL 4-way handshake is not required. The new attack is performed on the RSN IE (Robust Security Network Information Element) of a single EAPOL frame.

At this time, we do not know for which vendors or for how many routers this technique will work, but we think it will work against all 802.11i/p/q/r networks with roaming functions enabled (most modern routers).

The main advantages of this attack are as follow: No more regular users required - because the attacker directly communicates with the AP (aka "client-less" attack) No more waiting for a complete 4-way handshake between the regular user and the AP No more eventual retransmissions of EAPOL frames (which can lead to uncrackable results) No more eventual invalid passwords sent by the regular user No more lost EAPOL frames when the regular user or the AP is too far away from the attacker No more fixing of nonce and replaycounter values required (resulting in slightly higher speeds)" [0]

[0] - https://hashcat.net/forum/thread-7717.html

Comment · 8 years ago
Party A records every interaction with Party B. Party B records every interaction with Party A.

Who owns what Party A recorded, and who owns what Party B recorded?

Comment · 8 years ago
If I write down every song that I play through Spotify for a year. Does Spotify own that?

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton