News for hackers. Stuff that matters.

hashimotonomora

Re:NSA Network Infrastructure Security Guidance [pdf] on Sunday March 06, 2022 @09:10AM (#30577695)
- need to know basis.

- strict separation of concerns.

- only outbound hiring.

- no hiring of people who can be blackmailed.

- understand your threat model.

- if you were an enemy and had to break into your org, what would you do? Improve that.

That’s counter intuitive (at least for you) because in modern society it’s customary to think that people are born tabula rasa and then “it’s all a social construct”. Perhaps we are indeed born with innate preferences, biases, and default sexual orientations …
Re:What's the risk from fake Yubikeys? on Sunday March 06, 2022 @08:52AM (#30577601)
Do these keys work well under FreeBSD?
If you are lost in a city would you rather have the wrong map or no map at all?

The person that has the wrong map and thinks that it’s the right map is the one that’s naive.

Regarding insurance companies, you are conflating ensemble probabilities with time probabilities. Insurance companies can estimate the ensemble probability of an event in a group of agents which belong to a certain category and not the time probability of said event on a single agent.

What is an ensemble probability of something that has never occurred and is essentially impossible to model? Have you seen all infinite alternate universes? Probability does not make sense.

Compare the following: What is the probability that you will die today?

What is the probability that you will die today given that you belong to the category of people with A_i characteristics and whose ensemble probability of dying on a given day has been measured?

Re:Tell HN: SWIFT is not a payments transfer system on Tuesday March 01, 2022 @08:13AM (#30513666)
Essentially trust. If your bank does not have relations with a foreign bank in a faraway country, both can use an intermediary bank that both trust and do have relations with.
Re:Namecheap: Russia Service Termination on Monday February 28, 2022 @10:40PM (#30509140)
Is this allowed by ICANN?
Re:Namecheap: Russia Service Termination on Monday February 28, 2022 @06:49PM (#30506903)
Are you following a law or just arbitrarily and unilaterally deciding to do this? I am not Russian myself but I expect a domain name provider to be extremely neutral, unopinionated, and stable. Namecheap is showing to be neither so it can’t be trusted for important domains.
Re:Namecheap: Russia Service Termination on Monday February 28, 2022 @06:48PM (#30506891)
Are they following a law or just arbitrarily and unilaterally deciding to do this? I am not Russian myself but I expect a domain name provider to be extremely neutral, unopinionated, and stable. Namecheap is showing to be neither so it can’t be trusted for important domains.
The fact that it’s difficult or expensive to track does not mean it cannot be. Technically it’s possible to force every cash handling business to scan (just like you scan an UPC) each bill.
How does Walmart compare to that regarding purchases with ill-gotten cash?
Re:Curious lack of sprintf scaling on Friday February 25, 2022 @09:39PM (#30474823)
3141592 thousandths. Integer is beautiful.
Re:Paranoid SQL Execution on Postgres on Friday February 25, 2022 @09:25PM (#30474763)
Can you give a short example? So you don’t trust your own administrator?
The problem (with science in general) is in trying to collapse multivariate and multicausal representations of reality into a single value (cf. Procrustes).
Re:World’s first octopus farm stirs ethical debate on Thursday February 24, 2022 @09:04PM (#30462904)
Cows (actually their genes) have been evolutionarily successful by paradoxically allowing themselves to be slaughtered and eaten by humans.
Re:PostgreSQL Schema Change Guide on Thursday February 24, 2022 @07:25PM (#30462252)
All objects update their reference after a renaming. If you rename a column, foreign keys referencing that column have the name updated.
Care explaining what bizarre mental issues?
Re:Do Not Recommend: User Provided Primary Keys on Wednesday February 23, 2022 @07:52PM (#30448932)
What are some use cases for Int256?
Re:Inside Pornhub on Wednesday February 23, 2022 @07:47PM (#30448895)
It’s a healthy reflex from real life that spills over here.
Re:Do Not Recommend: User Provided Primary Keys on Wednesday February 23, 2022 @06:25AM (#30439981)
In my experience it’s best to work with a surrogate PK and generate a bijective customer-facing natural key.
You’d be surprised to know that people in poor places not only share the same bathroom but also the same room and same bed.
Re:Types of events in event-driven systems on Saturday February 19, 2022 @12:24PM (#30398711)
Could anyone recommend more resources on this for studying?
Re:Types of events in event-driven systems on Saturday February 19, 2022 @12:16PM (#30398660)
Couldn’t that bring inconsistencies eventually? If one commits and the other doesn’t.
Re:Apache Arrow Flight SQL: Accelerating Database Access on Wednesday February 16, 2022 @10:23PM (#30369190)
You don’t have to use those systems. Fundamental systems are still valid and solid. Don’t be afraid to reinvent a wheel which suits your case perfectly.
Re:A new wave of Linux applications on Wednesday February 16, 2022 @05:14PM (#30366528)
sudo apt install
Re:Acute aerobic exercise to recover from mental exhaustion on Wednesday February 16, 2022 @12:29PM (#30362821)
Discipline is developed and matured. Religion and stoicism are beneficial.
Re:How can you be fooled by the U+202E trick? (2013) on Wednesday February 16, 2022 @06:17AM (#30358598)
If I’m writing industrial automation, server-side applications, video rendering codecs, why do I need to make it much more complex with Unicode? I just need and want pure 1 byte ASCII.
We’ll call it… T-virus!
Re:AI is changing chemical discovery on Monday February 14, 2022 @09:21PM (#30341837)
Computer power grows ~N but molecule complexity grows something like ~N!

Older »