News for hackers. Stuff that matters.

hsdropout

Re:Book Recommendations from Hacker News? on Wednesday October 07, 2026 @10:46PM (#50001386)
The Death Ship B. Traven https://app.thestorygraph.com/books/a4ebe2f2-14d3-4da3-a865-...

One Man's Wilderness, 50th Anniversary Edition: An Alaskan Odyssey https://app.thestorygraph.com/books/44f995ae-fa5a-4641-a696-...

The Experience of Insight: A Simple & Direct Guide to Buddhist Meditation Ram Dass, Robert Hall, Joseph Goldstein https://app.thestorygraph.com/books/7588c259-a0c0-4481-81ed-...

A Briefer History of Time Stephen Hawking, Leonard Mlodinow https://app.thestorygraph.com/books/c10780bc-8dcb-4620-9193-...

Code: The Hidden Language of Computer Hardware and Software Charles Petzold https://app.thestorygraph.com/books/92559554-10f1-4cdf-8a9b-...

The Code Book: The Science of Secrecy from Ancient Egypt to Quantum Cryptography Simon Singh https://app.thestorygraph.com/books/6dd5c507-7098-4aef-b0de-...

It seems we generally have trouble removing emdashes and phrases like "load bearing", even when we're looking for them. Identifying and removing subtle contractions, or less visible nuances will be tough, especially if they change to avoid detection.
Re:Bitwarden SDK relicensed from proprietary to GPLv3 on Friday October 25, 2024 @02:43AM (#41942823)
That's not 2FA, that's two of the same factor.

The factors are:

- Something you know

- Something you have

- Something you are (biometrics)

Aha good point, my bad.
This has been in their guidance since at least 2017.

"Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator"

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.S...

Also worth pointing out that NIST doesn't set policy, so unfortunately this doesn't directly "forbid" anything, though many other policies reference 800-63.

Do non tech people run Linux? I've not seen this.
Agreed. This is also a feature of Microsoft's Purview product:

https://learn.microsoft.com/en-us/purview/insider-risk-manag...

Re:A Collection of Free Public APIs That Is Tested Daily on Tuesday August 27, 2024 @03:23PM (#41371780)
I'm glad to see https://isevenapi.xyz/ made the list.
This was recently decided by the US Supreme Court.

https://apnews.com/article/supreme-court-social-media-biden-...

1. Don’t smoke

2. Try to maintain a healthy weight

3. Reduce your meat intake

4. Avoid ultra-processed foods

5. Drink less alcohol

6. If you notice anything you are worried about, see a doctor

7. Keep up to date with screenings

8. Get physical

9. Wear sunscreen

10. Manage stress

11. Look into genetic risk

12. When faced with a diagnosis, knowledge is power

13. Don’t fear treatment

14. Talk about it

15. Live life to the full

I sometimes use these in Windows when I expand characters with FormD[0] as part of username validation.

If the expanded count doesn't match, a diacritic might be present.

[0] https://learn.microsoft.com/en-us/dotnet/api/system.text.nor...

And the other 50% is concentrated power of will.
Re:OpenAI requires NDA for employees to keep equity on Friday May 17, 2024 @09:09PM (#40395723)
Are you referring to the first amendment? If so, this allows you to speak against the government. It doesn't prevent you from entering optional contracts.

I'm not making any statement about the morality, just that this is not a 1a issue.

Re:Microsoft CTO: Thoughts on OpenAI (2019) on Sunday May 05, 2024 @11:44PM (#40270950)
Apparently I phrased my response poorly. I was responding to the narrow context of the idea that devs aren't using Azure VMs instead of Macs. I was not disputing the popularity of Azure.
Re:Microsoft CTO: Thoughts on OpenAI (2019) on Sunday May 05, 2024 @03:40PM (#40267562)
Previous submission from 4 days ago:

https://news.ycombinator.com/item?id=40226114

Re:Microsoft CTO: Thoughts on OpenAI (2019) on Sunday May 05, 2024 @03:36PM (#40267527)
>Windows on Azure

Lol, citation needed if you actually believe this.

>or Microsoft oriented stacks.

is a very complicated way to say Windows desktop.

Re:Bringing Exchange Support to Thunderbird on Saturday April 20, 2024 @08:19PM (#40102204)
Of the organizations that have Exchange Server on premises, I'd bet the lions share are hybrid, with regular user mailboxes in the cloud, using the server(s) for application relays, etc.
Re:NIST Releases Version 2.0 of Landmark Cybersecurity Framework on Wednesday February 28, 2024 @05:28PM (#39544293)
Not sure if I'm missing your intentional irony, but NIST was one of the best places to send folks who think user password rotations are a good idea.

I said "was" because pretty much everyone has now caught up, but NIST updated guidance shortly after big breaches were able to be studied.

> Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator

https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.S...

>I’ve never ever received spam from GitHub.

I wonder how long they will keep investing in both GitHub and Azure DevOps. I'm worried they are just busy ruining other experiences at the moment, but enshittifying GitHub is on the list of things to do.

Re:Tor Browser Security Audit on Friday October 27, 2023 @09:22AM (#38038096)
Thanks,I have read this concern before but was not aware it was part of the design specification.

What gives people, especially in the west, the confidence to use it at all, given all of the fusion centers and likelihood of parallel construction? Perhaps this is a rhetorical question...

Re:Tor Browser Security Audit on Thursday October 26, 2023 @10:26PM (#38033980)
This implies the browser is pretty sold, but what about the network itself? How do we know all of the traffic isn't deanonymized due to a big company or government having control of a large number of nodes?

Apologies for not bothering to research this question in advance.

Re:Log is the "Pro" in iPhone 15 Pro on Tuesday October 10, 2023 @11:51PM (#37840671)
Blammo's best seller!
Re:Cloudflare 1.1.1.1 DNS resolving issues on Wednesday October 04, 2023 @06:44PM (#37772788)
Can be done with a combination of client groups, like this:

https://discourse.pi-hole.net/t/client-group-management-how-...

Re:GPT-4V(ision) system card [pdf] on Monday September 25, 2023 @02:26PM (#37648381)
In this PDF there is an example of a controversial output in response to an image for job applicants. The "solution" was to decline to answer that category of question. This doesn't feel like a reasonable approach, as it will become a game of whack-a-mole.

This also seems to acknowledge that the model has deep bias-related flaws and instead of treating the causes, they are going after symptoms.

Re:How HTTPS Works on Sunday September 17, 2023 @10:26AM (#37545382)
Re:OpenAI Aquires the Domain Chatgpt.com on Tuesday September 12, 2023 @03:31PM (#37486684)
Unfortunate a settlement was required for what was obviously domain squatting.
Re:Ask HN: Any interesting books you have read lately? on Thursday August 17, 2023 @12:01AM (#37157030)
The Water Knife. ISBN 978-0-385-35287-1

Dystopian-future novel with a backdrop of water scarcity in the western United States. A "water knife" is a name for a security contractor who enforces water rights...

Older »