News for hackers. Stuff that matters.

avnigo

Re:Telegram Combolists and 361M Email Addresses on Wednesday June 05, 2024 @12:36PM (#40587047)
That does not and will not include the latest breach [0] because "[HIBP is] just not equipped for this level of parsing" [1].

[0]: https://www.troyhunt.com/telegram-combolists-and-361m-email-...

[1]: https://www.troyhunt.com/telegram-combolists-and-361m-email-...

It doesn't look like it solves the problem.

https://github.com/Mortennn/Dozer/issues/168

Re:Gene Therapy Allows an 11-Year-Old Boy to Hear on Wednesday January 24, 2024 @06:50AM (#39116214)
CODA (2021) is a great film I'd recommend that touches on that (stands for Children of Deaf Adults).

https://en.wikipedia.org/wiki/CODA_(2021_film)

Shout-out to the recent reboot of Connections (1987), Connections with James Burke [0], for threading cabinets of curiosities through museums and finally ending with the internet in episode 3, "In the Net".

[0]: https://curiositystream.com/title/series/787

After speaking with an EU Data Protection Commissioner (IANAL), it is my understanding that in the EU this would not be just your opinion, but also the law. Due to the power imbalance between you and your employer, it is not possible to consent to data collection, unless that data collection is governed by some other law.

A quick search also yielded this:

https://commission.europa.eu/law/law-topic/data-protection/r...

Re:Milk Sad: Weak Entropy in libbitcoin (bc) seed generation on Tuesday August 08, 2023 @07:25PM (#37056812)
That’s excellent! I had the same idea I completed a few weeks ago in python trying to write it with the standard library and have it be easily auditable. You can check it out here if you want:

https://github.com/avnigo/nodice-cli

Here's a short documentary film on bitcoin mining in Texas and Oklahoma, and its effects on the electrical grid and the communities:

https://www.youtube.com/watch?v=oKUBpaXNH_g

I'd like to imagine a future where I can stream fractions of a cent per minute/hour to the video provider or creator in exchange for consumption of that content. That way I only pay for however much I actually consume and the platform doesn't have to serve me ads to be profitable or sustainable. This could even work without needing to register for an account, using the HTTP 402 Payment Required response status code that already exists [0][1], something your browser could handle in the background.

[0]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Status/402

[1]: https://docs.lightning.engineering/the-lightning-network/l40...

Re:Ways to Say No – With Grace and Style on Sunday June 25, 2023 @12:33PM (#36469983)
Absolutely. I've asked this in the past a little differently: "which one do you want me to prioritize first?", only to be left with "both", or "all of them are top priority", effectively wiping their hands clean of the situation, meaning I'd be the one at fault if I couldn't deliver.
Re:GPT4 Can’t Ace MIT on Sunday June 18, 2023 @06:24AM (#36378899)
It's actually quite amusing asking it to give you a list of consonants in which Greek words can end in, and then example words for each. It's pretty much all hallucination and then it tries to gaslight you.
Re:Apple Vision Pro – Hardware Issues on Sunday June 18, 2023 @06:11AM (#36378835)
If the author thought about all this in an essay, you can bet Apple did too in their many years working on this. Whether they managed to come up with proper solutions to these issues is another matter, but I'd be hard-pressed to think they've not been acutely aware of all of this and actively worked on it.
I've had no luck blocking YouTube's consent popup with uBlock Origin. From what I remember, it would randomize the element ID and also add a load delay, and if you managed to block it, it would block comments from loading or break scroll etc. With Consent-O-Matic, it works just fine.
Re:Brave Browser introduces vertical tabs on Friday June 02, 2023 @07:45AM (#36163864)
Agreed! Here's my current `userChrome.css` to hide the tab bar when Sidebery is open, IIRC adapted from their repo because theirs didn't work fully for me. Admittedly this is hacked together, it was mostly just trial and error, but it works!

    #main-window #TabsToolbar {
      height: 40px !important;
      overflow: hidden;
      transition: height 0.2s ease-in 0s !important;
    }
    #main-window[titlepreface*="‏‏‎ ‎"] #TabsToolbar {
      height: 0 !important;
      min-height: 0 !important;
    }
    #main-window[titlepreface*="‏‏‎ ‎"] #tabbrowser-tabs {
      position: fixed;
      z-index: 0 !important;
    }
    #main-window[titlepreface*="‏‏‎ ‎"] .tab-stack {
      visibility: hidden;
    }
    #main-window[titlepreface*="‏‏‎ ‎"] #toolbar {
      min-height: 0;
    }
    #main-window[titlepreface*="‏‏‎ ‎"] #sidebar-header {
      visibility: hidden;
      height: 0px;
      padding: 0px !important;
      border: 0px !important;
    }
    #main-window[titlepreface*="‏‏‎ ‎"] #titlebar {
      visibility: hidden;
      height: 0px;
    }
To make it work only when Sidebery is open, make sure you add a preface value in the Sidebery settings and use the same value in the css above; in my case I just use an invisible character. Couple it with Ctrl-E keybind to toggle the Sidebery panel, and it's been a big quality of life improvement for me.
My main gripe about the Wikipedia mobile site is that text search doesn't work on the collapsed sections, and there's no way to expand all sections at once. The simplest thing left to do is the request/navigate to the desktop site and use your browser's find text feature then.
Re:Pandas vs. Julia – cheat sheet and comparison on Wednesday May 17, 2023 @07:19AM (#35973756)

  mydf = pd.DataFrame({'a' : [1, 2, 3]})
  print(duckdb.query("SELECT SUM(a) FROM mydf").to_df())
I can see the appeal, but if you're working in Python, something doesn't sit right with me when having to write out variable names as strings. E.g., if I want to refactor the code, my LSP or parser won't pick up those references.

> The SQL table name mydf is interpreted as the local Python variable mydf [...] Not only is this process painless, it is highly efficient.

It might be painless and convenient at first, but I feel like this could get you in trouble down the line. Is there a way to avoid this?

> They want people who have done this in an enterprise setting.

This has been a question I've had too. How do you get to show you have experience in enterprise software/tech if you've not been given the chance to work in a setting that uses something like that before?

It's the chicken and egg problem. Companies are often more concerned with the candidate's experience in specific esoteric technologies for their sector, and will not hire anybody who doesn't fit that yet, instead of also hiring people who can definitely learn that tech pretty quickly based on their experience, or having shown they are experienced learners.

Depending on the circumstances, couldn't that be tantamount to constructive dismissal in some countries?
Re:America Faces a Debt Nightmare on Friday May 05, 2023 @06:08AM (#35827237)
That's honestly not too far from the definition of odious debt.
And the kicker is, as other commenters here have pointed out, it now also depends on the card you're using to pay with, straight up pulling a bait and switch after you try to pay: they don't go through with the charge if they see you're using an American card and then ask for more money.
There was a great Darknet Diaries episode [0] on this with some more recent developments from 2020 I came across recently, and I found it fascinating. I feel like this is something I should've known happened but somehow missed completely.

[0]: https://darknetdiaries.com/episode/64/

Re:The Problems with Live Coding Interviews on Wednesday April 26, 2023 @03:59AM (#35710686)
If they're not paid and you still wanna do it, make it into an interesting problem you wanna work on and have it be presentable enough to include in your portfolio.

At least, that way you might get something out of it instead of nothing, although I definitely do agree that being paid for it is the only way to solve the skin in the game problem.

Re:Web fingerprinting is worse than I thought on Tuesday March 21, 2023 @07:52AM (#35244981)
I thought about the noise route, but doesn't that make you more unique? Maybe if many users share the noise, but then that makes it easier to identify what's noise and what's not.
Re:Unicode Roman Numerals and Screen Readers on Friday March 17, 2023 @08:00AM (#35195895)
There's a This American Life episode [0] that mentions this:

> When I was a kid, and I would see the school crossing signs, and there's a picture of the little kids walking, and then it would say "School Xing" And I thought that the "Xing" was a word. And I pronounced it "zing."

[0]: https://www.thisamericanlife.org/605/transcript

But you can have multiple virtual environments in the same directory, which one would it activate? You could also be using an environment that's in a different directory, or have one already loaded.

I like the concept potentially meaning less friction, but the implementation may make things more confusing for beginners when you're not explicitly activating an environment in your shell. I think maybe a flag to enable the behavior at runtime would be better than it'd be opt out.

Older »