ScottEvtuch

I would imagine it's because your distance to the satellites changes more when you move along the ground than when you move up and down the same amount.

I think there are some tricks to ensure a list in pwsh for these sort of operations. I vaguely recall ending variable assignments with a comma to avoid this.

Pretty sure you can only write off gambling losses to offset gambling winnings, which entirely makes sense. That way you only pay taxes on your net winnings for the year.

You can hold down a key (Ctrl I think) to force snapping to the "world grid" now. That makes everything you place line up even halfway across the map.

That doesn't really follow. I have the legal authority to pay a junk yard to smash my car into a tiny cube, but that doesn't mean I shouldn't be protected from auto body shops selling me fake repairs and non-functional parts.

I thought vivid dreaming was an indicator of sleep interruption, not quality sleep. IIRC dreaming happens during our deepest sleep when you would not normally be easily woken up. Remembering your dreams mean you woke during that time.

They are worried about someone copying a mistyped email from the first form field and pasting it into the "confirm email" field, thus making the confirmation field pointless. I would suspect in the real world most people are typing their email by hand and not using a password manager or auto-fill so this becomes an actual problem.

A nice implementation of this would detect that you pasted/auto-filled the original field and not prompt you to confirm unless you typed it slowly by hand.

The remote port forwarding example seems wrong. It's specifying the loopback address which would be pointing to vuln-server (where we are connecting via SSH) and not internal-web, right? How is vuln-server accessing the site hosted on the loopback of internal-web?

Edit: Okay now I see that command is supposed to be run from internal-web and not campfire. I guess you would also have to ProxyJump through vuln-server to internal-web to even run that command!

My local cable company gets around this by strategically pricing everyone towards using their new cable boxes which are essentially digital TV over DOCSIS internet. The prices for the IP TV plans (which they still call "cable") are less than $100 per month, but I was quoted over $300 per month for a traditional cable plan that could use a CableCard.

I hear this defense a lot, but isn't it kind of problematic that a platform makes you go out of your way to tell them you prefer not to see soft-core porn? I didn't even know TikTok had a "Not Interested" button until someone told me in person. It's completely hidden.

I've personally seen this come up on a lot of different social media apps that feature video content. They all initially throw a bunch of vaguely pornographic content at you to start with and continue doing so unless you keep opting out for long enough. I kinda wonder how many users never make it past the initial onslaught and just assume the entire platform is like that.

This is basically the plot of "The Net" starring Sandra Bullock. A group of hackers steals her identity and creates a new one for her in various systems to cause the police to believe she is a wanted felon.

I also live in Chicago and use CityMapper almost exclusively now. It gives way more detailed estimates for multiple transfers between bus and train and generally comes up with more/better routes for weird destinations.

Surely almost everyone does address standardization on user inputted fields, right? You'd be silly not to do this.

I think this is splitting hairs. Would it still be a recall if a mechanic drives to your house to fix a mechanical problem?

If you buy the game on Steam but play using a Quest don't you count as a Steam user? It would launch using SteamVR.

That sounds backwards to me. Don't you mean Y axis is time and X axis is frequency? Otherwise how could it play from bottom to top?

Aren't something like 1 in 20 or so people color blind? I'd hardly consider that as an edge case. That's roughly the odds of being over 6ft tall in the US.

I think some AC to DC transformers bond the AC neutral and the DC negative.

I think the idea of "everything is about half its life" is to account for survivorship bias in longevity. The only units that make it to the 95th percentile lifetimes clearly got luckier with parts and can reasonably be expected to last longer.

For what it's worth most of the "packages" on chocolatey are just instructions for downloading those same installers and executing them in their respective silent modes. No one is repackaging those apps except for maybe some of the ones marked as "portable".

I think the false assumption you are making is that the "average" movie is good. There are a lot of trash movies out there.

The number of parity drives is often fixed, so the odds of the number of failures being higher than the number of parity drives goes up as you increase drive count.

I've been doing "home dir is a repo" for a while now too and I'm always surprised when people think it's weird/dangerous. I wrote a few guides with tricks on how to do it on my blog that all started with "This is probably a horrible idea but here's how to do it anyway!"

Presumably the secret sharing algorithm is more resistant to brute forcing if you have one less than the required pieces. They solve opposite problems

It's kind of a pain, but possible. You have to redirect it as a generic USB device. I wrote a guide here:

https://queensidecastle.com/guides/use-a-yubikey-remotely-ov...

Presumably if they were using an industry term to categorize these young children they were definitely aware of what they were doing. That implies a level of malice on their part and is what I believe people are actually outraged about, not simply the usage of the term.

I was thinking the same thing. This isn't really a viable scam unless maybe Netflix offers multiple ways to reset your password, which isn't addressed in the article. Maybe a text message reset is possible?

The timestamp server is a separate trusted entity that signs the signature asserting the date and time. It's not just metadata, it's effectively a separate signature.

I'm kind of blown away that some of these larger companies aren't using SAML to do their Slack authentication. I guess when you're provided with a super simple turn-key solution to getting employees on the system (corporate email verification) then you're probably inclined to use it. I wonder how diligent these companies are about cleaning up old employee Slack accounts, as it's not like Slack re-verifies periodically that I'm aware of.

I'm curious about the decision to make team names globally unique and unchangeable. It obviously has some trust benefits in that you can't spoof a team if you know the name, but shouldn't the proof of legitimacy be in the membership and signature chain, not the name?

If Keybase popularity grows, then any sufficiently large company will probably have to use "CompanyName-Corp" or something equally vague as their team name would be taken by squatters. A malicious user could invite someone to "CompanyName-Corporate" and most users probably wouldn't even notice.