News for hackers. Stuff that matters.

frenchman99

Re:Xapian Is an Open Source Search Engine Library on Saturday August 17, 2024 @09:24AM (#41274417)
Yes, exactly that.
Re:Xapian Is an Open Source Search Engine Library on Saturday August 17, 2024 @08:54AM (#41274224)
You can always build a small search webservice that you open source and that your proprietary software calls out too, removing the need to open source everything.

Linux is GPL too, didn't hinder companies making trillions on top of it.

Re:Our Audit of Homebrew on Wednesday July 31, 2024 @11:19AM (#41119975)
Surprised too, if that is the fix. Wouldnt a whitelist be better than a blacklist?
Re:Proton launches its own version of Google Docs on Thursday July 04, 2024 @06:02PM (#40878437)
In the spam protection settings, you can choose a protection level of off, standard, aggressive or custom. I choose custom.

Then, I send everything with a score of 5 or more to spam.

I don't delete any spam.

And I mark it all as read.

That cuts down on spam drastically in my inbox while still retaining it all in the spam folder should any legit email end up there.

Re:Proton launches its own version of Google Docs on Thursday July 04, 2024 @05:59PM (#40878416)
This reddit comment makes me thinks it reasonable. Who knows what's true though.

https://www.reddit.com/r/fastmail/comments/1do3ede/comment/l...

Re:Proton launches its own version of Google Docs on Wednesday July 03, 2024 @11:43AM (#40867082)
I'm even more convinced that me being a Fastmail customer is a good thing. Fastmail has been rock solid for years.

Their email, calendar and contacts solutions work well with iOS and android (using the DAVx app).

WebApps work flawlessly on Firefox. They have all sorts of customisation for spam filtering, catch all email addresses, etc.

They don't do all the things (vpn, passwords, drive, what have you). But what they do, they do very well.

That's what happens when you give your project a common name as a name.
Re:Don't Microservice, Do Module on Friday May 24, 2024 @09:51AM (#40466261)
I agree with you. And at the same time, I often feel like it is more difficult being heard when being nuanced. It seems like what gets discussed most are strong opinions.
Open AI not being open means it will be used in ways that will benefit shareholders, not humanity as they initially planned it, unless it so happens that humanity's goals are aligned with shareholders', but I've rarely seen this happen with the big four.
You say yourself that the time data could be tampered. It's trivial to change commit dates in git. So this analysis means nothing by itself, unfortunately.
Not at all. For instance, I don't know what the next steps are, but I run SSH servers behind Wireguard, exactly to prevent them being accessible in the case of such events. Wireguard is simple to setup, even if I lack the expertise to understand exactly how to go forward.
I was thinking about reinstalling, because I'm on Manjaro Linux, which has the version in question.

But it's unclear if earlier versions are also vulnerable.

And if it did nasty things to your machine, how do you make sure that the backups you have do not include ways for the backdoor to reinstate itself?

Totally agree. With things like Dependabot encouraged by GitHub, people now get automated pull requests for dependency updates, increasing the speed of propagation of such vulnerabilities.
Going forward this will require more than a citizens investigation. Law enforcement will surely be granted access. Also, tarballs are still available in package managers if you really want to dig into the code.
Re:Switching from S3 to Tigris on Fly.io on Tuesday February 13, 2024 @02:34PM (#39361780)
> Tigris paid me a small amount to try their beta and write about it, but they didn’t have a say in the content.

Yes, right. People pay for negative reviews all the time. The article can still have merit. But that disclaimer is manipulative. Better just say "Tigris paid me for this content" and nothing else. Also, a "small amount" can be anything, it's all relative to what the author thinks is small.

Why would you assume that?
Re:Finance worker pays out $25M after VC with deepfake CFO on Sunday February 04, 2024 @04:34AM (#39248849)
This should like bad company processes all around. For a sum this high, you need more than just a video call. Get an email (if the tech team setup DMARC correctly, sending phishing from company-domain is near impossible). Talk through company chat (Slack, Teams, etc). Call a couple high ranking on their cell.
Good reminder to always run internal services such as Gitlab behind a VPN which only trusted users have access to.
But dirtier during construction. More difficult to repair most of the time too. Pros and cons. If you keep an EV for a long time, than it is cleaner. But a lot of EVs are thrown out instead of being repaired. The real solution is to share cars and, ride a bicycle, walk or use public transport when possible.
With "an" EV? Like all EVs have the same carbon footprint? That's definitely not true. Furthermore, even an EV has a carbon footprint and its far from 0. The real solution to be greener is to walk, ride a bicycle, or use public transport instead of a private car. And if you use a private car, then try to use car sharing so as to split the carbon footprint of the car's construction between all its users.
Because you think EVs keep the planet alive? They require enormous amounts of raw materials. Unless they are also shared with car sharing or car pooling. Then yes.
Re:Sentry new TOS to use data to train AI with no opt-out on Friday January 05, 2024 @06:18AM (#38877923)
That has nothing to do with AI though. That has to do with security engineering.

Sentry could accidentally leak data without AI just as they could use AI in a secure way.

Re:Sentry new TOS to use data to train AI with no opt-out on Friday January 05, 2024 @06:13AM (#38877891)
I've seen it self-hosted too, worked fine with little to no maintenance.

https://develop.sentry.dev/self-hosted/

Not really. The original title is a bit misleading in that the 6 countries combined have the same population ad the USA alone.
Re:Why Are Things Expensive? on Tuesday December 19, 2023 @01:40AM (#38692592)
Where's that? I live in France.
Re:Why Are Things Expensive? on Tuesday December 19, 2023 @01:34AM (#38692554)
well, no, there are a lot of places where you can get used things (or sometimes even new) for free that still in good condition
Re:Fly Kubernetes on Monday December 18, 2023 @02:16PM (#38686872)
Probably good for people already used to fly or interested in fly for other reasons, that could also use k8s ?

Sometimes you just want to run k8s without thinking too much about it, without having all the requirements that gcp have answers to.

Re:Etsy is laying off 11% of its staff on Wednesday December 13, 2023 @03:00PM (#38633392)
You're disregarding taxation and cost of living. Your numbers on their own mean nothing.

Oh, and USA is one the countries with most inequality, which plays in favor of a minority at the expense of the vast majority. Different story in France, for instance, where solidarity between rich and poor is higher through taxes, although not perfect.

Really depends what you want out of life.

Re:OpenBao – FOSS Fork of HashiCorp Vault on Saturday December 09, 2023 @03:32AM (#38579902)
It's not the same.
Re:Stop building databases on Saturday December 02, 2023 @04:35AM (#38497357)
In that context, I don't understand the word reducer.

Older »