News for hackers. Stuff that matters.

gohbgl

Yes, tutorials should be expected to teach people about security if it is within their scope. But the problem with the tutorials from the article is that the authors seem to be genuinely unaware of the security issues. That may also be the reason why they are trying to do the impossible, that is teaching web authentication to beginners in a 10 minute blog post format. And then they often get positive feedback because people like simple but wrong answers to difficult problems.
Some time ago I found this video series on YouTube about how to build a PHP application from scratch. Ten hours worth of XSS, CSRF, SQL injection, badly coded authentication, you name it. When confronted, the instructor said that he did not want to confuse the beginners with all of that security stuff. I just thought "ok" and moved on.

Now I went back to this guy's YouTube channel and saw that half a year later he finally did upload a bonus episode on how to mitigate SQL injections. One person in the comment section actually thanked him for the much needed video because their site was getting hacked. It is pretty hilarious to see this unfold but I do feel bad for the ~10k people who watched his videos.

Re:EU plans to make Bitcoin transfers more traceable on Wednesday July 21, 2021 @05:27AM (#27904094)
How do you know when you paid enough money for roads and bridges? I mean they don't give you an invoice.
Re:Steve Wozniak speaks on Right to Repair [video] on Thursday July 08, 2021 @03:03PM (#27776364)
I find it hard to believe that there is such a thing as a long lasting natural monopoly. The only monopolies that seem to last are the ones that are rooted in state coercion. Besides that, when I talk about "getting rid of regulation", I of course mean to get rid of barriers to entry. It may be feasible for large companies to set aside a couple of millions for a dedicated compliance department. Small startups do not have those resources. But even in the current market, as imperfect as it is, there are a countless competing electronics manufacturers. How is it that not a single one of them has started to offer a product line that caters to the "repair" crowd? Maybe that is something that's worth looking into?
Re:Steve Wozniak speaks on Right to Repair [video] on Thursday July 08, 2021 @08:55AM (#27771319)
Wow, the voice of reason in the first comment? Am I really on HN? Of course, you are 100% correct. There is nothing stopping one of the big players from offering a more "repairable" product to satisfy all of the supposed demand. Remember, R2R wants to force their ideas upon _everyone_. Doesn't that mean, that there should already be a huge group of people who are willing to buy repairable devices? Instead of making new laws, R2R should be focused on repealing existing bad laws that hinder competition (patent, copyright, regulation, etc).
Re:It's your device, you should be able to repair it on Friday April 30, 2021 @01:11PM (#26996235)
As far as there exist unjust laws that prevent people from repairing their devices, by all means, get rid of them (IP laws especially). But by all means, do not add more regulation.
There are many factors that contribute to appreciation and depreciation. Decay is just one of them. There could be other appreciating factors that outweigh the depreciating ones. Also, if you measure the value of something in a generally depreciating currency, you automatically get rising prices (ceteris paribus).
New browser extension coming in in 3, 2, 1, ...
Re:Why asynchronous Rust doesn't work on Wednesday March 10, 2021 @06:48AM (#26410275)
What is the bug? I don't see it.
Re:Write libraries instead of services, where possible on Tuesday March 09, 2021 @10:24AM (#26399623)
In an IP world you can license it. Otherwise you can crowd fund for new versions, ask for donations, offer support, etc.
Re:Do farmers have the right to repair their own equipment? on Saturday February 27, 2021 @01:31AM (#26283146)
Should farmers have the right to force manufacturers to provide parts, schematics, tools and software?
Re:The Framework Laptop on Friday February 26, 2021 @08:15AM (#26274415)
Well, in the tech space this is very easy to explain: They survive by selling new devices. People will eventually buy new laptops to get access to faster hardware.
Re:The Framework Laptop on Thursday February 25, 2021 @05:44PM (#26269283)
I like the idea, but I will 100% not buy it for these reasons (most important first): 1. Bad keyboard layout: Small arrow keys, lack of dedicated home/end and page up/down. 2. Screen is too small. I need at least 15.6 inch. 3. Replaceable ports are a gimmick. They waste space. Just put the ports there directly. 4. Intel CPU.
Re:TechEmpower Framework Benchmarks: Round 20 on Monday February 08, 2021 @06:14PM (#26071653)
A couple of frameworks use a radix tree for routing, e.g. ASP .NET Core. Sadly, routing isn't even part of the TE benchmarks. There are some applications out there with 500+ routes, so I think it is pretty relevant.
Better yet, post to your own blog and have it get automatically added to dev.to.
Re:PinePhone KDE Community Edition is now available on Tuesday December 01, 2020 @10:09AM (#25265800)
People are paying for negative externalities of burning fossil fuel by paying taxes on gas.
Re:1MB Club on Thursday November 19, 2020 @03:30PM (#25153978)
Probably as enforceable as having "looking at me is prohibited" written on your shirt while walking down the street.
Re:No More Free Work from Marak: Pay Me or Fork This on Monday November 09, 2020 @04:53AM (#25033133)
Doctor ...
A while ago I listened to a podcast [1] where the guest Stephan Kinsella argued that the state justifies taxing and regulating corporations by granting them special rights like limited liability. The guest then continued to explain that this justification is flawed since the these supposed special rights are actually not special at all. The argument made a lot of sense but it only explains the justification and not the reason for corporate taxation. In my opinion the reason is obviously to increase the state's control over us.

[1] http://www.stephankinsella.com/paf-podcast/kol-026-freedomai...

So basically the author does not like it when someone competes with them (who does?) and runs to the government to get a monopoly on the product. Spending money and effort on suing instead of continuous innovation and improvement. What a great system.
I created a stylesheet to remove the censorship for the viewer. https://userstyles.org/styles/190934/hacker-news-top-comment...
Re:They're deleting my channel, but they don't know why? [video] on Wednesday September 23, 2020 @09:29PM (#24574390)
> I don't understand why anyone is up in arms about this.

Because copyright is controversial.

Re:What harm do minimum wages do? on Thursday August 20, 2020 @05:20AM (#24221436)
You should read into Austrian economics and in particular the studies of Ludwig von Mises because it builds on fundamental "tangible" truths. Search for the term praxeology
Re:Amazon’s business model meets Sweden’s labor unions on Wednesday August 12, 2020 @05:34PM (#24137269)
Thanks to strong unions and labor laws Sweden is the worker's paradise and everybody has a great job. If Amazon wants to entice people to work for them then they must make a better offer than all* existing employers. What is there for the unions to negotiate? Please don't bash me for the cynicism. I am trying to figure out the logic behind all of this.

* edit: What meant say is that Amazon must offer a job that's better than the jobs that people currently have for them to switch.

Now they have to find the clown who stole the rifle from a police car in Seattle and got disarmed by Shooter Rughi.

https://www.youtube.com/watch?v=aVAMUejexa0

Re:I won’t buy ebooks anymore on Tuesday May 26, 2020 @08:47PM (#23318238)
I am glad that you are unable to stop people from sharing information on the internet.
Re:No lockdown, please, we’re Swedish on Friday April 03, 2020 @08:14AM (#22768397)
> I don't buy that.

Well now you have a control group to compare against.

Re:New MacBook Air on Wednesday March 18, 2020 @12:56PM (#22618707)
With modern noteboock CPUs the base clock is only a loose indicator for how a CPU will perform. The CPU will still be downclocked and undervolted depending on the load.

Older »