Recent submissions

Comment · 3 months ago
People are to get rich, startups cut corners. Fuck it ship it.
Comment · 7 months ago
I left a career of 20 years, and good pay, and part of it is AI being slammed down your throat. It is not work, which may be iteresting, on doing your own AI, its just enforcing that you are an end-user of it.

Fuck that, I am AI vegan at the moment, and happy. I may build a machine and find out how to fix the architecual mistakes in this new scene, but thats very different than being an end user of it.

Comment · 1 year ago
Hemp is classified as below .3% THC (compared to old-school weed strains at 15% and modern levels at mid 30%s). Hemp is male and female, and trash in potency, but THC and other products derived from it are fair game in some jurisdictions, or a grey area.

It is certainly a different market than legal, high potency THC, as well as medical.

Comment · 2 years ago
That's not a sign of a good internship program. I've always put a great deal of time coming up with projects that are suitable for the intern, and they always have to be tailored to the individual skill-set after the process. At the end of it we either have something that worked, and we have a good sense of the capabilities and fit with the team dynamic.

I would ensure that you have someone to talk to who can discuss what success looks like for the role (of intern). With that, there is always what you want to get out of it, but if you are looking for a job, you need to have performance and goal conversations reguarly. How are you doing compared to peers or other interns, etc.

Comment · 2 years ago
You may actually be hourly and not salaried. That said, it's not uncommon to be forced to log when you work, especially when there are PTO and things like that involved and that need to be accounted for.

Are you paid for the hours you work in the internship? If so then you are not an exempt salaried employee.

Comment · 2 years ago
I love to work from the office, I prefer it. I hate working from my desk at home, next to my bed. We have two desks in the bedroom. I'm in MGMT. Today I'm working from home as I can't afford the commute time, last week was pre-pandemic 4 days in office.

What I don't like is changing what WFO looked like. If someone had to WFH for personal reasons (e.g. repair, packages, child issues, doctors appt), they just did it. Four days a week was normal, five was never normal. If we are trying to do 3 days and go to four, then everyone needs a dedicated desk. If you aren't willing to put a dedicated desk for people, you don't have a mandate for WFO, you have a mandate for hybrid.

I sit next to an officer who is not ranked highly enough to have a desk. A first year associate should have a dedicated desk.

It took the pandemic and a world in panic to swing the pendulum in this direction. It's going to take as much to get it back, and it may not go back to exactly the same thing.

Comment · 2 years ago
The thing that I keep coming back to, is that if a company is taking an action, it should be about reducing friction to go to and making the office space a better place to work.

If the company is taking an action that makes it less likely for people to come to the office or enjoy it, then it's pretty clear what they are doing.

Comment · 3 years ago
The main reason to know vi inside and out as a Unix administrator has to do with it being the lowest common denominator on Unix and Linux systems.

As a *nix tech I could get a call to work on a QNX system, HP-UX system, SGI Altix supercomputer or a Sun Ultra 2. Linux systems were easy, as they had the package management support for FL/OSS, and would commonly come with Emacs in the base-pack (before nano was mainstream). Sometimes you would have a terminal issue and have a single line to work with, in which case you would need to operate vi without seeing what you are doing (or use sed/awk). So maybe it is those instincts to KISS and force everyone to learn vi, like they had to (I had to).

Certainly it provides no significant surface area of attack to have an editor, but I wouldn't put it past a threat actor to leverage plugin functionality as a persistence mechanism. I presume that these applications operate differently as root, but maybe not as service (daemon) accounts. It's not very well hidden, but there are all grades of threat actors.

Comment · 3 years ago
Comment · 11 years ago
I completely agree. While theoretically possible to do given full packet captures, it does not scale. IDS/IPS systems are not in a place to operate at this level and keep this much state.

It's more likely that it would be detected based on the nature of the injected malicious data.

Comment · 11 years ago
Or they crack or compromise the keys that they need on a per operation bases. Even assuming ubiquitous SSL (or something more decentralized), the keys of a few advertising or web analytics sites would get a lot of coverage.

Creative use of advertising platforms is used you could easily narrow targets down and guarantee that you know exactly what the content is.

Anyways, this is just one gadget.

Comment · 11 years ago
I switched from OpenWRT to pfsense a while back and I am never going back. It runs great in a virtual machine, if that's your thing and you already have a need for VMs.
Comment · 11 years ago
I think that he means per month in electricity costs. ;)
Comment · 11 years ago
I think it may be more scary for code that allows arbitrary execution using command-line arguments. Commands like find or xargs using without defense against this would be a problem. For example, site that does something precious with your uploaded pet pictures.

Defending against this being the use of -- to signal an end of command line arguments.

Comment · 11 years ago

  $ diff -u /tmp/a /tmp/b
  --- /tmp/a	2015-03-24 08:33:00.021919797 -0400
  +++ /tmp/b	2015-03-24 08:33:05.629963015 -0400
  @@ -1,5 +1,5 @@
   #!/usr/bin/env bash
   set -e
   i=0
  -let i++
  +let i++ || true
   echo "i is $i"
  $ /tmp/a
  $ /tmp/b
  i is 1
  $

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton