News for hackers. Stuff that matters.

jb0x168

Or, y'know, the NSO group exploit.

I think the difference here is that apps getting uploaded to the app store have static analysis run on them looking for unauthorized calls. Still doesn't rule it out, but adds an extra check to the process.

Further amended: nothing connected to the internet can reasonably be expected to remain private.

Unless you have some secret kung-fu that makes your on-prem infrastructure hack-proof.

The issue with the cloud is scale.

Is there an extension needed or is this a recent addition?

I've spent way too long reconfiguring yubikeys to act as an OTP device so that they work over RDP.

(edit: reconfiguration is needed to capture the device ID/secret and get them registered to our MFA provider as an OTP token, I realize they do OTP OOB :) )

Probably not what they were referencing, but it made me think of "The Expert" - https://www.youtube.com/watch?v=BKorP55Aqvg
Re:HomePod has been jailbroken with checkra1n on Friday November 20, 2020 @12:50PM (#25162916)
Yes. If you use an app like AirParrot, you can do it from windows as well. Can't speak to android specifically but I believe there's an App For That as well.
Cache your images longer at cloudflare's edge:

  New Page Rule -> your.site/*.png (or jpg, gif, etc)
  Cache Level: Everything
  Edge Cache TTL: (some large value, an hour maybe)
This will make sure you don't serve any given image more than once per hour, and the rest of the requests will get served CF's edge cache.
I don't think it's exactly racism in many of these cases, so much as a lack of empathy. If you're not personally affected by these terms, and you're not able to empathize with those that are, I can see why, without being overtly racist against any particular group of people, you could be against these changes.

Our inability to empathize, or "put ourselves in someone else's shoes" is at the root of so many of our problems...

Ask that same question again after we have self-aware machines/software.

Inherent in the negative concept of slavery is the removal or limitation of self-determination. If the components don't have free will, this isn't an imposition.

However, in the larger context, there are very much thinking, feeling entities that are negatively impacted by the use of this terminology.

In contrast, it costs next to nothing to update the terminology to use similar terms that don't cause psychological harm to a significant portion of the populace.

Primary? Initial? Root? (ok maybe not the last one, though the internal rhyme is nice).
Maybe direct that question to someone who's dealt with the effects of systemic racism their whole life, you might find the answer enlightening.
"Trunk" fits the branching metaphor better, but I think "main" will be easier to uptake (autocomplete, muscle memory, etc).

I feel the same way about "denylist" versus "blocklist". "Denylist" is more precise, but I think "blocklist" would make for an easier transition.

You can bridge scripting from any programming language into minecraft through the use of plugins.

The educational versions of minecraft (e.g. the raspi version) integrate python scripting directly.

Microsoft forked a "bedrock" version of minecraft that I'm not as familiar with and that has a different plugin ecosystem. The Java-based version still has all the same plugin capabilities it always has.

I've been using an ElGato StreamDeck repurposed as a global mute button (among other things) for Zoom, Webex, etc. The Powermate could be pretty nifty for this as well, using the radial menus to quickly get at globals like mute/unmute, start/stop video, etc
Re:Ask HN: Should I fight back management enforcing Jira? on Wednesday October 17, 2018 @01:25PM (#18241292)
My advice after working with Jira for the last several years: keep it light. Process heavy Jira is/can be a nightmare. Jira as "digital stickies" works well, and still provides plenty of metrics for outside stakeholders.

Based on my experience:

- Use the "Jira Agile" (formerly greenhopper) add-on so that you have sprint/kanban boards and reports to visualize planned and in-flight work. Enable the "Backlog View" for your boards to separate planned from in-progress work.

- Keep required fields to an absolute minimum (we only require Summary) so that you can quickly capture cards and flesh them out later.

- Avoid complex workflows - use the Software Simplified workflow if possible. Don't complicate it further without a really strong business case.

- Learn the keyboard shortcuts. C (create), E (edit), I (assign to self) "[" (hide sidebar) and "." (command palette) are your friends

- Confluence and Slack both have great integrations to let you publish and interact with your Jira issues

Those are just a few random thoughts on how we've kept Jira working for us and not against us.