News for hackers. Stuff that matters.

Zr40

Re:Crowdstrike Outage Causing Widespread Issues on Friday July 19, 2024 @04:42AM (#41003652)
Admin privileges aren't the same thing as a kernel-mode driver. Steam does require admin to be installed, but it does not install a kernel-mode driver.
Re:Crowdstrike Outage Causing Widespread Issues on Friday July 19, 2024 @04:09AM (#41003264)
Steam does not have any kernel-mode components.
This would be true if the only alternative to piracy is not using said content or software. If paying is a valid alternative to a nonzero fraction of pirate users if piracy was not an option, then the piracy does affect the creators economically.
Re:Ask HN: Who wants to be hired? (April 2024) on Saturday April 13, 2024 @07:46AM (#40022454)

  Location: Netherlands
  Remote: Yes (occasional travel is OK)
  Willing to relocate: Unlikely
  Technologies: Python, Rust, PostgreSQL, can work with most other tech
  CV: See LinkedIn
  Email: [email protected]
  LinkedIn: https://www.linkedin.com/in/~zr40/
I'm an experienced Python backend developer and PostgreSQL DBA with a bit of SRE on the side. Looking to move into Rust development professionally (please, no Blockchain/Web3), although Python is acceptable too.

I tend to gain an excellent understanding of the systems I work on. This enables me to execute complex tech projects successfully, such as:

  * migrating a large Python 2 project to Python 3
  * implementing strong type checking across the entire project, while fixing pre-existing typing issues
  * tracking down weird bugs, performance problems, and memory leaks, and fixing their root causes
  * removing technical debt
  * increasing productivity for entire teams
  * rapid incident analysis and response
I strongly prefer written communication due to spectrum issues. If you require frequent verbal/in-person communication, I will not be a good match. Brief status calls are fine.
Re:Show HN: Beeper Mini – iMessage Client for Android on Tuesday December 05, 2023 @01:30PM (#38534979)
> a few years ago there was no way to unlink iMessage

Deregistration[1] has been supported since November 2014.

[1]: https://support.apple.com/en-us/HT203042

Re:Fastmail Is Down on Friday June 30, 2023 @01:08PM (#36538547)
> Doesn't work for me in the Netherlands. Down since this morning.

Same for me. It is accessible from my home network (AS206238) and from public transport wifi (AS202189), but not from any other network I can currently access (AS201975, AS50266).

Re:Europe pushing for lunar time zone on Thursday March 02, 2023 @02:48AM (#34993161)
> With timezones:

> * I want to call my friend in Germany. What time is it for her? I guess I'm UTC-7 and she's UTC+1, so she's 8 hours ahead of me. I know that everybody around the world typically wakes up between 6 and 9 AM and goes to sleep between 8 PM and midnight, and she's an early bird, so she should be awake.

> Without timezones:

> * I want to call my friend in Germany. It's the same time here as there. It rises at 13:00 here, but she's a quarter of the way way around the world. I have to look up their typical waking hours. She's an early bird, so is she on the early side of that, likely. What time does the sun rise there? How much does that change over the seasons?

This is actually the same thing. In both cases you have to know or look up that there's an 8 hour difference between the two of you.

The bits about the seasons and being an early bird apply equally to both cases, so it's not really relevant to the comparison.

Re:PHP bug: Password_verify() always return true with some hash on Thursday February 23, 2023 @07:50AM (#34909789)
As described in the CVE[0]:

> In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.

[0] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0567

Re:Hetzner Price Adjustment on Thursday August 11, 2022 @11:01AM (#32426803)
There isn't enough renewable energy yet to cover all consumption. Which means that you paying extra is only an administrative move. You're just swapping places with the party that would otherwise have consumed the renewable energy.
Re:Flask Mega-Tutorial (2017) on Monday May 30, 2022 @05:35AM (#31557126)
In my experience it's quite the opposite. We use Flask for a large-scale webapp in production quite successfully and it's enabled us to reduce application complexity significantly.
Re:Stock Market Returns Are Anything but Average on Friday April 30, 2021 @09:34AM (#26993245)
> Where else are people meant to store money?

Money isn't stored in other assets. It's transferred from the buyer of an asset to the seller. It doesn't cease to exist simply because you traded it for stocks (or gold or anything else). Now the seller has to deal with the consequences of holding the money you previously held. A rational trader factors in the costs of money when they price assets, therefore one doesn't avoid those costs by trading money for other assets.

The domain is different. bbc.com versus bbc.co.uk.
Except that playing Fortnite isn't the thing that's being disallowed. It just happened to contain an in-app purchase system that did not use the Apple-approved method, and Fortnite's developers refused to remove that.

Apple has always clearly stated that this is perfectly fine on websites, just not in apps.

Why would HFT even consider using it? They are located as close as possible to the exchange they operate on, not across states or halfway across the world.
Re:Coinbase Debit Card on Friday April 12, 2019 @04:36AM (#19643091)
Interactive Brokers offers such a debit card to US clients, albeit not by selling assets automatically, but by using the cash balance or a margin loan backed by the assets. You can then decide which assets to sell (and when to sell them) to cover for the payments made.
Re:New notarization requirements from macOS 10.14.5 onward on Thursday April 11, 2019 @04:37AM (#19632134)
No problem, I'll just remove software that requires me to disable notarization.
Re:iCloud was storing cleared browsing histories on Friday February 10, 2017 @08:52AM (#13615315)
The key could be encrypted using the account password.
Re:iPhone 7 on Wednesday September 07, 2016 @04:16PM (#12447141)
Bluetooth audio lag does depend on the buffer size of the audio device. My car also has a two second lag when playing through Bluetooth, but my Bluetooth headphones have nearly no perceptible lag at all.
Re:FTP Must die the technical explanation on Wednesday March 09, 2016 @07:29AM (#11252542)
What makes you think so? Nothing in the FTP protocol makes it faster than, say, HTTP, yet FTP requires more network round-trips to initiate each file transfer.
Re:Announcing SQL Server on Linux on Tuesday March 08, 2016 @06:30AM (#11244675)
No, it's just PostgreSQL and MySQL. Neither has "Server" in its name.
Re:Vanguard's Low Blow on Friday February 12, 2016 @04:51AM (#11086192)
VOO is not synthetic. Quoting the overview page[1]:

> Employs a passively managed, full-replication strategy.

[1]: https://advisors.vanguard.com/VGApp/iip/site/advisor/investm...

Re:Vanguard's Low Blow on Friday February 12, 2016 @04:17AM (#11086085)
I was under the impression that a lot (if not all) of Vanguard's ETFs are physical, not synthetic. Can you name one of these synthetic ETFs?
Re:Optimizing HTTPS performance on Sunday January 31, 2016 @04:15PM (#11008100)
That's probably because the response to this particular https URL is larger; http on this server simply redirects to https and is therefore a smaller response.

Not that this matters here; the top level comment measured requests per second, not bytes per second. If anything, the smaller response for http would give http an advantage in this comparison.

Re:Optimizing HTTPS performance on Sunday January 31, 2016 @02:55PM (#11007760)
wrk[1] does appear to reuse a connection for each request.

[1] https://github.com/wg/wrk

Re:Optimizing HTTPS performance on Sunday January 31, 2016 @02:00PM (#11007483)
How did you measure this?

When measuring on one of my servers that exposes both HTTP and HTTPS, there doesn't appear to be any significant difference.

HTTP:

  % wrk http://hostname
  Running 10s test @ http://hostname
    2 threads and 10 connections
    Thread Stats   Avg      Stdev     Max   +/- Stdev
      Latency     5.11ms    5.42ms  62.85ms   96.08%
      Req/Sec     1.10k   224.03     1.31k    87.04%
    17703 requests in 10.01s, 6.89MB read
  Requests/sec:   1768.57
  Transfer/sec:    704.58KB
HTTPS:

  % wrk https://hostname
  Running 10s test @ https://hostname
    2 threads and 10 connections
    Thread Stats   Avg      Stdev     Max   +/- Stdev
      Latency     4.75ms    4.09ms  50.37ms   96.48%
      Req/Sec     1.10k   228.86     1.34k    79.35%
    17014 requests in 10.01s, 8.39MB read
  Requests/sec:   1700.32
  Transfer/sec:    858.38KB
Re:HFT in the Banana Land on Wednesday January 27, 2016 @03:55AM (#10979007)
"Europe" here refers to the continent, which the lands of the UK clearly are not a part of. It does not refer to the European Union.
Re:OpenSSH: client bug CVE-2016-0777 on Thursday January 14, 2016 @09:52AM (#10901688)
Yes, but it would not apply to other users.
Re:Sideloading f.lux on iOS with Xcode 7 on Monday November 16, 2015 @12:48PM (#10575818)
No, the ability is not blocked. The app is no longer distributed by the developer in response to a request by Apple.
Re:Sideloading f.lux on iOS with Xcode 7 on Monday November 16, 2015 @12:46PM (#10575809)
No, it has not. The ability is still there. Apple only asked the developer to stop distributing the app, which they did.
Re:KLOS: Kernel-Less Operating System Architecture (2005) [pdf] on Saturday November 14, 2015 @03:03PM (#10567012)
Diagram renders fine in Safari; here's a screenshot of the diagram: http://i.imgur.com/GoytjRf.png

Older »