News for hackers. Stuff that matters.

greenleafjacob

Re:Remember QR Codes? They’re More Powerful Than You Think on Friday November 01, 2019 @06:33AM (#21417487)
You are best off buying a “USB condom”, a USB 2.0/3.0 connector with the data pins removed.
Re:What should have been an IMG element became this on Sunday October 20, 2019 @08:40AM (#21303759)
Former Imgur engineer here who worked on the desktop site and helped on mobile when I could. A lot of the code that is loaded supports features that are used by a long tail of users [1]. However, they do serve the javascript with appropriate cache-control headers and serve them from Fastly's CDN so analyzing a cold load is a bit misleading to say the least. Moreover, as other commentators have mentioned, they optimized more for the subsequent images than the initial pageloads (they'd prefetch the next N images).

Keep in mind Imgur is not a large company despite their high traffic, even at their peak of employees the engineering team was pretty small (probably about 12-15 people after series A), and the mobile web team in particular was a handful of people, with a handful of people on iOS and Android, and a handful of people on desktop/backend/API (where I worked).

That said, I think Alan does care about these things. I know at some point they did support NoScript and did care about the experience with JavaScript off (and had code to support uploading images and viewing images with no JavaScript at all). But it's hard to have it as your top priority when Reddit and Instagram are trying to eat your lunch.

I'm sympathetic with the page bloat problem and noscript and I do think more effort should be spent on optimizing this stuff, especially because bandwidth is much of their opex.

[1] Posting, voting, commenting, uploading, accounts, tagging, albums, search. There is even a hidden-ish feature to "auto-browse" in a slideshow-like manner which you can find if you crawl around the source code.

They don't (currently) issue dividends because the expectation is they will buy back their stock or will issue dividends in the future.

If a company never issued dividends and never bought back their own stock, then there would be no reason for investors to buy stocks in the first place. Most investors don't invest out of the goodness of their hearts, they invest to get a return on capital.

Suppose you follow your argument to the conclusion, and no companies issue dividends. What is the point of owning a share of a company then?
Unfortunately Dropbox recently dropped support for certain Linux file systems like XFS, BTRFS, etc.

https://news.ycombinator.com/item?id=17732912

Article is from April 2019.
In that case you would probably still roll back to prevent further data corruption and restore the corrupted records from backups.

There are certainly changes that cannot be rolled back such that the affected users are magically fixed, which is not what I am suggesting. In the context of mission critical systems, mitigation is usually strongly preferred. For example, the Google SRE book says the following:

> Your first response in a major outage may be to start troubleshooting and try to find a root cause as quickly as possible. Ignore that instinct!

> Instead, your course of action should be to make the system work as well as it can under the circumstances. This may entail emergency options, such as diverting traffic from a broken cluster to others that are still working, dropping traffic wholesale to prevent a cascading failure, or disabling subsystems to lighten the load. Stopping the bleeding should be your first priority; you aren’t helping your users if the system dies while you’re root-causing. [...] The highest priority is to resolve the issue at hand quickly.”

I have seen too many incidents (one in the last 2 days in fact) that were prolonged because people dismissed blindly rolling back changes, merely because they thought the changes were not the root cause.

If rollbacks are not safe then you have a change management problem.

If you have a good CM system, you should have a timeline of changes that you can correlate against incidents. Most incidents are caused by changes, so you can narrow down most incidents to a handful of changes.

Then the question is, if you have a handful of changes that you could roll back, and rollbacks are risk free, then does it make sense to delay rolling back any particular change until the root cause is understood?

Private letters have long been acknowledged as covered by the fourth amendment, that is that searching requires at least a warrant based on probable cause. It’s changed over times whether searches of papers are per se unreasonable [1]. Consent can authorize agents to open mail of course, but it might be an interesting question whether it’s an unconstitutional condition to require waiver in order to access the mail services.

[1] https://www.repository.law.indiana.edu/cgi/viewcontent.cgi?r...

Re:Nines are not enough: meaningful metrics for clouds on Wednesday June 19, 2019 @12:57PM (#20224979)
You should return the data in multiple pages for example, or exempt that query from latency SLA.
Re:Nine Charged in Alleged SIM Swapping Ring on Saturday May 11, 2019 @02:48PM (#19887717)
People have programs that scan github uploads for AWS, etc credentials accidentally uploaded by victim and spawn images that mind crypto for the attacker’s.

https://www.theregister.co.uk/2015/01/06/dev_blunder_shows_g...

Why can’t the gas tax be extended to electricity provided to vehicles (ie superchargera) rather than ownership of EV?
Re:Is Conference Room Air Making Us Dumber? on Wednesday May 08, 2019 @01:06PM (#19860862)
It’s increasing at about 1.5 ppm per year.
Sam Gerstenzang (formerly of a16z) runs Umbrella [1]. You should check it out.

[1] https://www.askumbrella.com/

Re:Go 1.13: xerrors on Monday April 29, 2019 @07:03PM (#19783448)
forward compatibility?
Re:Things Developers Want More Than Money (2006) on Sunday April 28, 2019 @04:32AM (#19770026)
I would trade double digit thousands of dollars per year if I had a private office.
Logs tend to be ephemeral with limited retention.
So you can vandalize my car with chalk all you want as long as it doesn’t violate my possessory interest?
Re:Fastly S-1 on Sunday April 21, 2019 @09:41PM (#19715759)
Check out this flow diagram for Varnish 2 [1].

[1] http://www.kalenyuk.com.ua/wp-content/uploads/2009/12/varnis...

Re:Coinbase Debit Card on Friday April 12, 2019 @05:42AM (#19643411)
> the potential ability to avoid third parties taking a cut of all of your digital transactions

Other than mining fees?

Re:Bay Area housing prices drop in tech-heavy counties on Friday March 29, 2019 @09:39PM (#19527042)
> If I were in that situation today, I'd see if I could find someone who would give me money at today's price and get N shares of stock in 6 months (the duration of the lockup period).

Employees are typically prohibited from shorting the stock.

Re:Let’s Destroy Robocalls on Monday March 04, 2019 @05:58PM (#19306515)
I'm currently working on a tool that would force callers to answer a small math problem (similar to a CAPTCHA) before the service would forward the call to you. Effectively robot call screening. https://callshield.io/
Presumably that nation state puts someone in jail.
Re:Instacart and DoorDash’s Tip Policies Are Delivering Outrage on Wednesday February 06, 2019 @04:41PM (#19100319)
Service fees are not charged on tips to drivers [1].

[1] https://www.uber.com/drive/partner-app/how-tips-work/

Not sure if this was intentional but in security, Alice and Bob wre the names in hypotheticals for the attacker and unwitting victim since the RSA paper.

https://en.m.wikipedia.org/wiki/Alice_and_Bob

predict: China will increase their cap on solar production in 2019 to at least 20 GW. https://predictionbook.com/predictions/194304
Re:SQL Is No Excuse to Avoid DevOps on Monday January 07, 2019 @10:50PM (#18852981)
More precisely, if you only select indexed columns you can read only from the index rather than read from index then read the rest of columns from table. Usually the indices are entirely in memory as well, so it's buttery smooth, whereas a read from the table will probably require a disk read.
Re:Audiophiles in Japan Are Installing Their Own Power Poles on Friday December 28, 2018 @11:41PM (#18781874)
Why, and how, would one "tweak" a machine?

Older »