News for hackers. Stuff that matters.

pingsl

Re:We lost 54k GitHub stars on Thursday April 14, 2022 @10:36PM (#31036110)
This is horrible -_-!!! But I wonder what would happen to GitHub Discussions in this situation?

I now 100% feel necessary to build a Discord channel for OSS projects.

Re:Super Simple Storage Service on Saturday April 09, 2022 @09:35PM (#30973732)
Confused for a second till I saw "Write-Only storage".

Obviously, they should include "Trash bin" in the pricing comparison table.

Re:IBM Parallel Sysplex on Friday April 01, 2022 @01:28AM (#30875453)
From an app dev perspective, sysplex is very similar to a single system image, especially when they are using the Db2 database.
You were very likely not the only one who found this security issue. But you were probably the only one who disclosed this issue to the bank.

This is ironic, but it is how business people deal with issues.

Re:The first RISC-V portable computer is now available on Tuesday March 15, 2022 @11:57PM (#30695152)
I am very excited to see the RISC-V devices come to the end users.

Then I am thinking how this device could fit into my daily life. I am wondering what are the typical scanrios for portable computers these days?

I have accounts on Medium and Substack.

In the beginning, I posted blogs on Medium, and I sent out newsletters on Substack.

Then Medium started to provide email subscriptions.

Now Substack has a mobile app.

I need to rethink my content strategy going forward...

Re:Postgres Auditing in 150 lines of SQL on Wednesday March 09, 2022 @08:49PM (#30622362)
> if someone has access to data the assumption is they are able to read it.

This is not the case in most production for two major reasons:

1. Row-level security is expensive and hard to manage, so in most cases, users are granted the select privilege on table level. But indeed, it doesn't mean they should have access to all the rows in that table.

2. Power users should not have production accounts all the time. The production accounts should only be activated when power users have to perform the changes during the production change window.

So financial institutes usually generate two kinds of reports for audit/regulation purposes.

1. Report on the privileges and roles, which tells if a user should have those privileges and roles. This is a periodically static report.

2. Report on the actions a user has performed to see if these actions are part of the changes. This is a dynamic report in which we have to capture the select statements.

Me neither. That's why I posted here to see if someone could give some insights on this.
Re:Postgres Auditing in 150 lines of SQL on Wednesday March 09, 2022 @07:47PM (#30621934)
I am afraid data audit is not just about data changes. The real challenge is how to audit the data read which people should not do.

Since there is no redo logs generated for data read, CDC could not help in this case. It will reply on the audit traces, the SQL capture and cache, etc. But it's costly.

Re:Man given genetically modified pig heart dies on Wednesday March 09, 2022 @07:38PM (#30621876)
People die some day because of some disease. This is natural.

Give people a heart from other species, this is unnatural.

I'd rather transform my brain and thoughts into a robot.

Re:Ask HN: What are some good keyboards? on Thursday March 03, 2022 @09:39PM (#30549974)
I am using logi K580.

It can connect 2 devices and support both Bluetooth and Unifying.

Most important it has numpad with a compact size.

Re:A new wave of Linux applications on Thursday February 17, 2022 @08:28PM (#30381114)
> On windows and android was consensus reached between all interested parties or was consensus reached within microsoft/google?

This is exactly the number 1 challenge for Linux Desktops: hard to coordinate with each party, then we end up hundreds of different distros.

Re:A new wave of Linux applications on Wednesday February 16, 2022 @10:23PM (#30369191)
> the overall user experience is very good if you stick to a pure GNOME desktop. KDE and Xfce are also pretty good.

Yes, exactly users have to stick to one single environment. But when you want to use Gtk application on KDE, then ...

Re:A new wave of Linux applications on Wednesday February 16, 2022 @10:21PM (#30369184)
I mean the consensus about the visual/UX style like we have on Windows or Android.

It's not that hard, I believe.

Re:A new wave of Linux applications on Wednesday February 16, 2022 @10:20PM (#30369173)
Agreed, KDE is great. I like Kubuntu and KDE Neon. A little bit frustrated when I have to use a Gtk application; it's sometimes not working well in a KDE environment.
Re:A new wave of Linux applications on Wednesday February 16, 2022 @07:41PM (#30368038)
I use Windows/MacOS/Linux(Ubuntu) on a regular base.

As a ordinary end user, I feel

1. Windows software are usually good at product function design.

2. Mac has a better enforcement on overall UX. The visual across different software (from different vendors) are much consistent.

3. Linux desktop is unfortunately still missing above 2 points.

Some Linux distro provides really good visual, but it only applies to its built–in programs. If you'd like to switch to the external programs, the system visual might be fragmented.

I really hope in this new wave people could make some consensus on the visual of Linux desktop.

Re:Tell HN: Voting on HN Fails Silently on Saturday February 12, 2022 @09:50PM (#30318665)
Think about this, there is no notification system on HN. If you got any errors, you'd better send an email to the moderators here.

I did this when I first created the ID, the moderator helped me out. Or my ID will be shadow blocked. :D

Re:Discord is a black hole for information on Saturday February 12, 2022 @08:47AM (#30312779)
What he described is not only a Discord "issue", it applied to other modern communication tools as well. I feel Discord is better than Slack because there is no 10K searchable message limit for free accounts and ridiculous pricing model.
Re:Daily chart: A new low for global democracy on Thursday February 10, 2022 @04:00AM (#30283867)
This article is behind a paywall. I know there is a Chrome extension called "Bypass Paywalls". But I really don't want to use it, as it breaks the business model of the writers.
I am inquisitive about what kind of enterprise communication software you think is good.

MS Teams is not perfect but it's not that bad either. I have used Teams, Slack, even Discord a little bit. I don't think anyone of them is above average.

I followed up on this and had some conversation with one of the Skywalking PMC members.

They escalated the situation to the company legal of Byte Dance (the parent company of Volcengine Inc.). Then Volcengine has added an Apache license file for Skywalking. Skywalking is open-source software, it has no commercial license. So nobody knew how to evaluate the impact of this violation. And some people thought it was well resolved.

I felt very frustrated about this. It means there is totally *zero* risk to violating an open-source software.

- The ability of Google Workspace organizations to turn off “Web & App Activity” for all users will be removed.

Why is this? The company should have control over how employees use the company assets.

Older »