News for hackers. Stuff that matters.

pmh

The paper is https://mikespecter.com/assets/pdf/AgeVerification.pdf (good on them for linking it)

The rest of the IEEE Symposium on Security and Privacy papers are listed at https://sp2026.ieee-security.org/accepted-papers.html

Re:Is it a pint? on Monday March 23, 2026 @01:02PM (#47492167)
> not only are the glasses typically much smaller (this is fine) but they also leave massive gaps at the top

I'm wondering if this is due to the prevalence of cask ales vs bottle/keg conditioning. The former is relatively uncommon in Belgium and you want the head from the latter.

That said, oversized glassware (e.g. Duvel's tulip for aromatics) and/or fill lines are also used to accommodate the head while still not cheating the customer out of volume.

In-vehicle infotainment system
> scream test

I didn't realize there was an actual name for this, so I'll add another for the thread that I haven't seen brought up: email is evil in operations (EIEIO, like the nursery rhyme)

Re:Calculate past stock investment value today on Sunday November 27, 2022 @07:12PM (#33768352)
Not to take away from OP, but https://www.portfoliovisualizer.com/backtest-portfolio has that among other features
Re:DoorDash removing 1-year cliff for equity grants on Wednesday July 07, 2021 @11:39PM (#27768250)
It's RSUs vesting at:

- 5% after 1yr

- 15% at 2yrs

- 20% every 6 months for years 3 and 4

The 401k match also has a 3 year cliff.

But as they said, years 1-2 you typically get a signing bonus

Re:How to find a job as Software Developer in Germany on Thursday April 22, 2021 @07:17PM (#26909288)
Since the tax changes in 2017, it's effectively not deductible in the US for most
Re:OAuth 2.0 Authentication Vulnerabilities on Saturday March 27, 2021 @02:43PM (#26604427)
From a quick glance, it doesn't look like a protocol per se, but a user management system akin to Keycloak. Those solve a slightly different set of problems than OIDC or OAuth
Re:Security.txt on Sunday March 14, 2021 @01:47PM (#26457180)
It's likely some kind of caching issue. tools.ietf.org at 4.31.198.62 responds with the draft, but 64.170.98.42 404s
Yea, it's a bit odd. There are only a handful of gender-specific exercises in the directory[0], but that seems to be down to having a video for it.

[0]https://musclewiki.com/Directory

I see dumbbell rows listed for lats.

If you don't have access to a dumbbell, substitute a heavy bag of some sort with a short handle. Google has some ideas on other alternatives as well, but I'd recommend against using canned food goods (or anything else you don't want to dent/break).

It's the anniversary of the publication of (the first volume of) The Count of Monte Cristo
Re:Building the ultimate home office again on Sunday July 26, 2020 @12:04AM (#23954346)
In the post, but easy to miss:

>I do a lot of data processing in SQL Server which can be really memory intensive (no, the cloud is not always the solution to this, I've got a draft blog post on that)

Add to that: video/photo editing, live-streaming, development, and general purpose usage, and it's not an unreasonable setup.

> Yes you can buy thicker re-usable bags (sometimes made out of textiles or a mixture of textiles and plastic) but by far many people bring their own bags

This has been my experience shopping in Austin, but it may vary based on neighborhood. The vast majority bring their own reusable bags. Those that forget to bring bags buy the plastic reusable bags (unless the store also offers free paper bags).

Re:A detailed look at the router provided by my ISP on Thursday March 26, 2020 @11:59AM (#22694889)
> I don't see a point to being able to provide my own cable modem

Other cable providers (e.g. Comcast) charge you a monthly fee (~$5-15) to rent their modem. Buying a modem gets cost effective pretty quickly.

Re:Tesla’s success in Europe catches industry off guard on Tuesday March 10, 2020 @08:42PM (#22541722)
> how I can bend the seats and carry a ton of stuff in the back

I don't think I've ever been in a sedan that doesn't have this feature, but you usually get a little more space out of a hatchback if the roof-line doesn't taper down.

Re:New Guides for Terraform Modules on Saturday March 07, 2020 @03:03PM (#22513683)
FWIW, the "Learn" link on terraform.io goes to the same codelabs in the blog and there's some existing guidance in the docs. I don't mind separate domains for these kinds of things, but I agree that they should at least add links in the docs.
Re:Every bookmark manager ever made on Monday December 09, 2019 @01:35PM (#21745064)
I see it there under "No longer active (Tag-Based)", but listed as "Delicious" instead of "del.icio.us".
Maybe in the future it will, but it uses Have I Been Pwned. From the FAQ[0]:

How does Firefox Monitor know I was involved in these breaches?

Firefox Monitor gets its data breach information from a publicly searchable source, Have I Been Pwned. If you don’t want your email address to show up in this database, visit the opt-out page.

[0] https://support.mozilla.org/en-US/kb/firefox-monitor-faq#w_h...

Re:A tiny pharmacy is identifying problems with common drugs on Sunday November 10, 2019 @02:19PM (#21499617)
https://news.ycombinator.com/item?id=19828317

tl;dr: 1.1.1.1 doesn't pass along any client IP information for privacy reasons and archive.is won't return a good DNS response without it

Re:Expertise in the Age of YouTube on Sunday November 10, 2019 @12:22AM (#21496534)
Do you have a list of videos/channels you've found useful for these projects? I would find it useful and I'm sure others would appreciate it as well.
I thought that was opt-in still (https://support.google.com/googleplay/android-developer/answ...) unless you use app bundles, but that article makes it sound like you can bring your own key too. Do they still modify the signature in that case?
It looks like a family plan (https://support.google.com/youtube/answer/7507349?hl=en) may solve most of that, but you still may have to lie about the age.
Re:Slack Security Incident on Friday July 19, 2019 @01:42PM (#20480817)
Password rotation in this context is for the infrastructure, not normal user accounts.

There are other options for securing/managing infrastructure access (e.g. PKI, Hashicorp Vault), but if you're using passwords, it's a good idea to rotate them if only to encourage good practices around automation.

Re:Ask HN: What is the best chair for developers? on Wednesday July 17, 2019 @12:22PM (#20461166)
You're likely seeing that from a third-party seller, similar to Amazon's marketplace or ebay. At the least, I wouldn't expect the chair to be brand new at that price.

Older »