News for hackers. Stuff that matters.

iloveponies

Re:I'm About as Good as Dead: The End of Xah Lee on Friday May 16, 2014 @11:11AM (#7755884)
As a degreeless, high school drop out who works for a very large corporation that's not the case. In a time where many are screaming about shortages in skilled IT people, mandating a degree is only going to narrow the already small pool of possible candidates down even further for no explicable gain. Many job advertisements I've seen will say "degree or relative experience", the latter being the key part here.
Re:Core Infrastructure Initiative on Thursday April 24, 2014 @03:22PM (#7642331)
What for? Apple discourages the use of OpenSSL[1] and instead use their own open source library[2] which also has an API present inside of Cocoa and iOS.

1: https://developer.apple.com/library/mac/documentation/securi...

2: http://opensource.apple.com/source/Security/Security-55471/

Re:Rubygems.org AWS bill for Feb 2014 [pdf] on Wednesday March 05, 2014 @11:27AM (#7347861)
I suspect mirror delay is less of an issue than you might perceive it to be. Many CPAN mirrors manage to stay within tens of seconds/no more than a minute from the main CPAN mirror that PAUSE publishes to.
Re:Alcatraz – Package manager for Xcode 5 on Monday March 03, 2014 @03:19PM (#7336171)
Of course not. It's open source, nobody would do anything malicious right?
Re:AWS opening Beijing Region (for select customers) on Wednesday December 18, 2013 @12:49PM (#6929113)
Also, I imagine the various regulation ISPs and hosting providers are obligated to inside the country - if customers can siphon off data that local officials disapprove of to another region easily, it puts Amazon in a difficult position.
Re:How to send DMs on Twitter without permission on Sunday December 15, 2013 @07:40AM (#6909190)
On the flip side, Homakov personally has incredibly bad OPSEC practices which would make me think twice for using him. There's a correlation between what you pay and what you might get.
Re:Help Scale NPM on Wednesday November 27, 2013 @08:29AM (#6807894)
Yes, npm itself is the only reason why.
No, actual whistleblowers should be covering their own asses as much as possible with informed decisions and good opsec/infosec practices and not trusting anyone or anything else which includes the press. If a whistleblower's identity is exposed, it stands to reason media outlets have more to gain from the fallout.
Re:MongoHQ Security breach on Tuesday October 29, 2013 @06:05PM (#6637828)
Mandatory SSH keys mitigates the brute forcing risk, and turns it into a nuisance. My employer presently has this arrangement and has done so for a while. Bastions only get you in the door: different entrances for different environments, users keys are only propagated to the machines they need.
Re:MongoHQ Security breach on Tuesday October 29, 2013 @05:41PM (#6637695)
It's far simpler to remove the need for passwords alltogether or at least minimise them than to offset the liability against your employees using security software correctly.
Re:MongoHQ Security breach on Tuesday October 29, 2013 @05:38PM (#6637667)
2FA and VPNs are not exclusively the only way to secure things. X.509, bastion servers, airgaps that require physical access to a secure facility etc are also valid options, dependent on your systems and their configuration.
Re:Fight bike theft with the open source bike registry on Friday October 11, 2013 @04:22PM (#6535729)
Bike shops already do this in some places. In the UK and Japan at time of purchase you can register your bike with the police and it's handled by the store themselves. Both countries use the serial number imprinted by the manufacturer.

If there is indeed a problem of a lack of registration at point of purchase in your area, have you considered bringing this up with the cops, the shops and the politicians?

The idea that code be "self-documenting" is naive at best. Action does not necessarily infer intention, and without explanation can lead to assumption. To reach the code we end up committing a process of thought should have occurred by those who wrote it. For some things such as "boilerplate" code this may not be seen as significant. For others of increased complexity like explaining interactions between two pieces of logic, performing a complex set of logic or the expected usage of an externally provided interface comments are in my opinion essential.

In contrast to what you've said I completely disagree with the notion that the "best code transcends the need for comments". I'd argue the best type of code has the most effective comments in line with code to ensure the next person can gain with the least amount of effort clear understanding of both the rationale and of the functionality that lead to what they see before them.

Re:Show HN: Help programmers from Syria get jobs elsewhere on Sunday September 01, 2013 @10:44AM (#6310552)
So... where are all the Syrian programmers? This website says none are available.
Re:NFC Ring on Saturday July 20, 2013 @03:52PM (#6076315)
The fact you have to have your screen on and unlocked is intentional and by design, otherwise there is plenty of potential attacks where NFC is used to exploit phones whilst it's in your pocket.
Re:Square now in Japan on Thursday May 23, 2013 @04:53AM (#5755866)
They've had standalone systems like Edy and other systems tied into retailers on their phones for years. Given that Japan is hugely a cash based society, I wonder if this will really take off.
Re:Show HN: Hosted IRC for Teams (my first startup) on Sunday April 21, 2013 @03:57PM (#5586174)
Personal opinions of said founder aside, all three were bringing arguably trivial products to market where there already was a large presence of two or more players dominating (Twitter/Facebook/status.net for Pownce, HipChat/Campfire for Grove) and with a lack of game-changing innovation to separate them.

Makes less sense to blame the people, rather than lay blame to what they did (or did not) do.

Re:"I Will Ruin Him" – How it feels to be stalked on Sunday January 27, 2013 @07:31PM (#5126393)
More or less. The more evidence of all communication of theirs and yours, the more useful it is as either plaintiff or defendant in court.
Re:No, you are not 'running late'; you are rude and selfish on Tuesday January 08, 2013 @09:24PM (#5029769)
The acceptance of this seems to vary towards the reliability and availability of transport (both personal and public) amongst other factors. Here in London where train frequency can be as little as 90 seconds but compensation payable to punters only if the service is greater than 15 minutes late - "stuck on the tube (with no phone reception)" is almost always an acceptable excuse.

In Tokyo, given as your employer usually pays for your train fare and the train service is notorious for being punctual and reliable, you're expected on time and if you're not, the rail company usually issues on paper an apology like this http://traininfo.jreast.co.jp/delay_certificate/pop.aspx?D=2... .

Re:Another awesome US immigration experience on Monday January 07, 2013 @11:50AM (#5021845)
As someone who goes in and out of the UK on a regular basis, this is news to me as I've yet to be subjected to full body scanners.
Re:Another awesome US immigration experience on Sunday January 06, 2013 @10:13PM (#5019071)
So I've experienced something similar minus the overcrowded room with British immigration. I watched the immigration official turn from apathy the moment I handed my passport over into passive agression with loaded questions ("When was the last time you were deported?" answer: "never") into apologies ("Sorry for making you wait sir there clearly has been a misunderstanding") to vague answers to the question of future prevention.

After being told "and there's nothing you can do to stop this happening again", I tell every British immigration official I stand before briefly what happens every time I want to come back here and they're usually understanding about it all.

Re:I need an iOS developer. on Tuesday January 01, 2013 @08:18PM (#4994802)
Sounds like this person needs to learn how to become an iOS developer. There is so many tutorials, guides and sample code out there and a very large portion of it is free.

No, it's no easy. No it might not be as fast as getting a seasoned developer, and yes the code might be poor but I hold to the belief if there something you can't find someone to do for you - figure it out and do it yourself.

Re:Dr Richard Crandall has passed away on Saturday December 22, 2012 @10:14PM (#4958418)
It is never easy when people you know pass away, especially those younger than you. However, I'd argue it is more difficult when the situation happens at a much younger age for the realisation that the deceased were given less time alive than we will receive no matter how abrupt our lives end.

Dr. Crandall was fortunate to have a daughter and time to achieve so many things, more than I can say about some of my peers who left the stage before their twenties. For some of us, the bittersweet position has already arrived.

Re:No one-click unsubscribe? It's spam. on Sunday December 16, 2012 @07:01PM (#4930132)
They repeatedly send you emails even if you don't have an account.
Re:Where's Ryan Dahl? on Saturday December 08, 2012 @01:08PM (#4892228)
Ryan caused a lot of drama not so long ago saying some things that escalated into quite a lot of people flaming him on Twitter - I'm unsure if this is why he's abandoned the other websites as well.
Re:Google Nexus 4 Actually Has an LTE Chip on Saturday November 17, 2012 @07:59PM (#4799494)
Plausible reasons have already been suggested somewhere else[1], in summary chipset makers are creating dual purpose chips with dies that support LTE, but have fuses burnt and a cheaper price tag to restrict their usage. Even if you could reverse the fuses, there is still a lack of hardware and calibration for it to be possible in the nexus 4.

[1] http://www.reddit.com/r/technology/comments/13cods/nexus_4_t...

Re:Japan introduces piracy penalties for illegal downloads on Monday October 01, 2012 @02:48PM (#4598676)
The implementation certainly differs. The US at least keeps copyright infringement civil unless significant damage or financial gain has been made from the infringement. In Japan, the police already go after infringers, irregardless of the damage. They also put a lot of resources into breaking the encryption used in the various Japanese p2p networks.
Re:Japan introduces piracy penalties for illegal downloads on Monday October 01, 2012 @09:45AM (#4596914)
Interesting how this will actually happen, given as all the popular Japanese p2p networks are encrypted - of recent their efforts have not been on downloaders but on uploaders since Perfect Dark is apparently leaking information on the latter.

Older »