News for hackers. Stuff that matters.

figgis

Re:Yes, It's Fascism on Monday January 26, 2026 @03:51AM (#46763297)
This is a really rough spot, giving users the tools to remove visibility from a post will eventually get abused. I would genuinely be interested in some form of anonymized stats on the individual accounts and the posts they are flagging but that's a whole deal.

Am I wrong that there used to be a flagged option on the lists page, or am I missing where that is?

Currently the "discussion of leverage" you are talking about is out of the hands of the leaders who run these programs.

The amount of disrespect you have shown for someone that is just telling you 99% of federal workers have absolutely no leverage says a lot.

I apologize for jumping in this convo with unrelated stuff but I was looking at my history and since I can't message you I just wanted to let you know years later how much your reply here resonates with me now. https://news.ycombinator.com/item?id=18475792
Unsure if anyone has made a game specifically for that. But there are plenty of intentionally unsecure servers (no VAC, or other anti-cheat) in games like counter strike for Hacker vs Hacker.
Re:Amazon acquires MGM for $8.5B on Wednesday May 26, 2021 @02:34PM (#27294343)
Just finished rewatching sg1 as well and in a later episode Carter even makes fun of herself for the absurdity of that first episode gonads comment.
Re:Time.gov was upgraded today on Sunday February 09, 2020 @08:37PM (#22285700)
Worked for me just now. It clicks for a bit than says "US Naval Observatory Master Clock" + the time.
Re:Python Is Eating the World on Tuesday August 13, 2019 @09:14PM (#20691874)
Not the OP but I am very concerned with telling people to pipe anything from curl straight to your shell.
Re:"DigitalOcean Killed Our Company" on Friday May 31, 2019 @10:51PM (#20066901)
I should have been clearer. This is exactly what I meant.
Re:"DigitalOcean Killed Our Company" on Friday May 31, 2019 @04:29PM (#20064688)
Not in my experience they don't. I use OVH and nfoservers and I've had an issue like this exactly once on both hosts.

On OVH one of my servers was hacked and running typical scripts that are run once that happens (port checking, common admin credentials, brute force attempts, etc)

They cut off all internet access to and from the server and sent me an alert stating what was happening and that I needed to VNC into the server, resolve the issue, and let them know how/why it happened and how I resolved the issue. Once that was done they just removed all the blocks on the server and we all went on our merry way.

Edit: To clarify the VNC console is on their site, not a remote connection.

Re:World of Goo Update, 10 Years Later on Wednesday May 01, 2019 @11:54PM (#19804547)
> Epic buys Rocket League publisher, announces Epic Launcher exclusive, and goes silent after backlash

Seems like a better way to put it. They are buying IP left and right and pushing their unfinished, buggy client in a very unhealthy way.

[0] - https://www.eurogamer.net/articles/2019-05-01-epic-acquires-...

Don't know latin in any way shape or form. Just was curious and used this like a small puzzle. Added a bit more context to words that weren't very self explanatory.

    TOTUS - all/whole

    VESTRI - your

    ARCANA - secrets

    NOCTI - night? - 'used in formation of compound words' [0]

    NOBIS - us/we

    EST - to be - "can be translated as 'it is,' 'he/she is,' or simply 'is.' It is the third person singular of the present tense of the verb 'to be'" [1]
Sooo my guess would be something along the lines "All the secrets of the night belong to us?"

If someone knows any better I would love to be corrected.

[0] - https://www.dictionary.com/browse/nocti- [1] - https://study.com/academy/answer/what-does-est-mean-in-latin...

Re:Reddit is raising a huge round near a $3B valuation on Tuesday February 05, 2019 @03:42PM (#19089607)
> This site seems to manage to avoid it.

If we are going to be reasonable a better comparison would be comparing this site to a single heavily moderated subreddit.

As an extreme you have subreddits like https://www.reddit.com/r/AskHistorians/ if you look into the comments you will see a lot of "[ Removed ]" threads. https://i.imgur.com/Q7mXkPd.png

Other subreddits are purposefully not moderated as heavily. It's entirely up to whoever runs it to moderate how they see fit.

Re:CCPA Will Hit Dev Teams Harder Than GDPR on Thursday January 31, 2019 @06:35PM (#19050154)
>So if a random company gets breached, everyone involved from cloud providers to ISPs are also responsible because they facilitated moving and storing the data and they are just hosting code?

ISP's aren't (supposed to be) "storing" that data. They are transferring bits between computers. You on the other hand are hosting a website with some sort of form that people input PII into. You are accepting that PII, whether or not it gets forwarded or not is irrelevant. You are processing it. So do your due diligence, contact your users and let them know what is going on, and speak with a lawyer for more information.

Re:CCPA Will Hit Dev Teams Harder Than GDPR on Thursday January 31, 2019 @06:22PM (#19050058)
> So if I forward all of the data to another company outside of CA, does my company count as processing data?

You are still processing that data. Part of processing that data involves you shipping it off...

> What if the code that forwards that data is written by another company and I'm just hosting it on my site? Everything goes through their code and I'm paid to just setup a website to host their code.

You are as responsible, if not more, in making sure that compliance is met. You are the one hosting the code. The data is moving through your servers.

> Maybe I do collect info in CA but I sell the data for $1, but the company also buys some consulting services for the actual price of that data that I'm selling them?

That's just being a jerk. But better hope you don't pass the 50k mark...

Re:A Harvard Astronomer on the Interstellar Object ‘Oumuamua on Wednesday January 16, 2019 @06:48PM (#18926832)
"likely", "maybe", "possibly" can all be used differently.. Especially if you take it out of context of the rest of the article.

> Man that food sure looks tasty.

> You haven't even tasted it! Why are you saying it's tasty?

There are absolutely no claims that it's an alien artifact. What he is doing is providing reasons for why checking out similar solar visitors is something we need to do.

Re:Star Citizen: The Road to Release, Financials and New Partners on Wednesday December 26, 2018 @10:06PM (#18766930)
You should turn on incognito or use duckduckgo and take a look...
Or, crazy idea, I did my own searching on the guy and came to the conclusion I just posted above.. His twitter alone could be used in a psychology course.
I never heard about the guy until today and spent a little while searching.. I can say I am absolutely stumped why this guy is getting any attention at all.

All the profiles he's written about himself seem extremely conceited. His posts present hyperbole and opinions as fact. And to top it all off, the exact things he is criticizing SC for he has done himself with his most recent game Line of Defense... https://steamcommunity.com/groups/acpreport/discussions/3/48...

Dude has an entire subreddit where a majority of the users seem to be devoted to "calling his crap out": https://www.reddit.com/r/DerekSmart/

And of course encyclopediadramatica has their own page on the guy (of course nothing there should be taken at face value, just found it amusing after reading up on him): https://encyclopediadramatica.rs/Derek_Smart

Re:The FBI of the National Park Service on Tuesday November 27, 2018 @11:55PM (#18549379)
You don't call in SWAT for their domain specific knowledge though. You call them in to clear/pacify/etc a location.
>Python, in all of this, has fallen by the wayside in a way that I'm just annoyed by all of its claims. Notebooks don't make it any easier.

Could you clarify what you mean here?

Re:Qt Design Studio 1.0 on Friday October 26, 2018 @01:42AM (#18307038)
It can abstract away from the platform.

You can use it as a simple gui library just fine. I've been using it in place of Tk for my python stuff for a while now. (Qt.py is a lifesaver) I haven't even tried their options for what I want to do yet, but it is definitely tempting.

Here's a good list of things Qt has stuff for.

https://doc.qt.io/qt-5/modules-cpp.html

Re:Bowler: Safe code refactoring for modern Python on Friday September 14, 2018 @05:25PM (#17991093)
See below
Re:Bowler: Safe code refactoring for modern Python on Friday September 14, 2018 @03:15AM (#17985289)
I apologize but I'm really having trouble understanding what the problem you are referring too. In python syntax that would be written as -

    if ConditionA:
        attr = "foo"
    else:
        attr = "bar"

    if ConditionB:
        obj = A()
    else:
        obj = B()

    if hasattr(attr, obj):
        do_magic()
I haven't tested Bowler yet but I would think something that refactors code would handle that pretty easily?
Please consider generating a log file and create a bug report for them to look at:

https://wiki.lineageos.org/logcat.html

https://jira.lineageos.org/secure/Dashboard.jspa

They do look at them. But I would suggest taking a quick glance at those logs and see if you notice anything familiar. It may be something you recognize.

Re:Building Protocols with HTTP on Thursday July 19, 2018 @04:29PM (#17569968)
Familiarity. I can either work with a protocol that has been around, in some way shape or form, for almost 30 years. That has matured, has a myriad of information relating to edge cases, is familiar to new and old developers, and is quick to develop for.

Or I can create my own protocol which has none of those benefits besides possibly quick development.

Re:Chrome developer tools to master on Monday July 09, 2018 @04:33PM (#17493213)
They didn't make a simple "if you can't use developer tools X way then I'm not hiring you" statement.

>So far, two ways to pass:

Would mean that they understand there are a hundred different paths to solve a simple problem. What is being looked for is familiarity with the tools you are expected to know. And littering a shit ton (not just a simple "Started-HH:MM:SS.mmm" or "Stopped-HH:MM:SS.mmm" with timestamps) of console.log statements when you first start debugging is a pretty fair red flag.

Re:Facebook confirms data sharing with Chinese companies on Wednesday June 06, 2018 @01:21PM (#17249062)
Depends entirely on how they feel and act about it. If they were pushing to make my company the next big surveillance org then yeah. Otherwise I probably wouldn't even think twice about it.
Agreed. Flask or Aiohttp + templating engine of choice + flask-login or aiohttp-security is extremely fast and simple.

Older »