News for hackers. Stuff that matters.

toasted_flakes

Just my two cents, but being a coach for children/teenagers can be a paying job. Up to you to decide if it's better or worse than the job you describe.
This might sound a bit naive, but is that even legal?
Re:Double Blind Passwords a.k.a. Horcruxing on Tuesday December 22, 2020 @04:38AM (#25504550)
If only we had a secure place to store all of the horcrux strings that are unique per-website!

Joking aside, I don't see the point of this. It guards against exactly one attack (your password manager somehow revealing all your passwords) which is unlikely, but not against a whole lot of other (slightly more generic malware, phishing, ...) whilst making logging in harder (there's now a manual process).

If you're willing to go such lengths, enable 2FA on more accounts (which the articles mentions, points for that) or get a physical token for your password manager.

Go read the article
> yes, that's technically true

Not even in this case, the performance and energy numbers they got for CoreMark on the M1 are off by an order of magnitude

See this comment[0] from a previous submission, but long story shorts, the numbers are literally made up.

[0] https://news.ycombinator.com/item?id=25263011

It's really cool that there are open source bridges between the proprietary ecosystems. But I have to ask, why would you want to deal with all of this just to speak to your phone instead of pressing a button to open the garage door or turning on the light?

And this questionable convenience uses finite resources on earth, both carbon emission and ore. It's hard to scale back on what we use, and I wouldn't go back to a 17" monitor for coding. But maybe we could at least try to avoid creating new stuff that's accelerating our demise?

Re:I sold Baremetrics on Tuesday November 10, 2020 @09:36AM (#25046395)
That's no different than me buying GOOG/FB/AMZN stock at the time of the grant, it's nothing more than betting on the stock market.
That would be even slower than an FPGA.
Drone has recently been bought by Harness. Will it still be around in a year or two?
Have you read the article? The author has literally hundreds of repositories on github.
Re:8GB Raspberry Pi 4 on sale now at $75 on Thursday May 28, 2020 @03:31AM (#23334505)
Did they fix the stability issue? Even with a known-good power supply my raspberry pi 3 has been losing power 3-4 times a week at random points.
Re:Lithuanian capital to be turned into vast open-air cafe on Thursday April 30, 2020 @07:06AM (#23029587)
Belgium counts all deaths from care homes as COVID-19 deaths. Hardly a fair comparison, even if I have my gripes with the politics.
Re:Stripe records user movements on its customers' websites on Wednesday April 22, 2020 @06:42AM (#22944163)
This isn't Stripe's fault here, but if to make a payment online you need to track everyone just to make sure the transaction isn't fraud, then the system is broken.

Why can't online payments use a use two-factor authentication by default?

Re:Tell HN: C Experts Panel – Ask us anything about C on Tuesday April 14, 2020 @11:37AM (#22867269)
Overflow of signed integers is undefined.

    int add(int a, int b) { return a + b; }
Unless the compiler can prove that `add` is never called with a and b values resulting in an overflow, this code can lead to UB, and, under your rules, the compilation aborts.
Brilliant, thanks. I didn't realise the threshold was 5 days out of a full week, and didn't remember reading about the 50ppm minima.
Re:How Bird Laid Off 406 People in Two Minutes via Zoom on Friday April 03, 2020 @09:52AM (#22769113)
The Uber cowboys are really a cancer for this industry
> it looks at the previous 7 days of data and only if there were at least 5 days where the baselines are within 50ppm of each other, treats the average of those baselines as the fresh air concentration.

Is that documented anywhere? I couldn't figure out why mine is reading garbage, it could be that it didn't see fresh air every day for a full week

I have a scd30 from Sensirion, hooked up to a raspberry pi GPIO pins, with a python script pushing the measurement to InfluxDB and Grafana.

It's super cool how open source projects make it easy to get a great UI, built-in basic statistics etc, with a few hours of datasheet reading.

Word of warning though: make a proper enclosure for the sensor. Mine is now perpetually reading 1400 ppm or above after a fairly rough move, even outside (where it should be about 415 ppm).

Re:American fuzzy lop – a security-oriented fuzzer on Tuesday January 28, 2020 @01:35PM (#22172557)
Nitpick, but what made AFL much more successful than other fuzzers is that it's not collecting coverage of basic blocks, but a (quantized and bloom-ish filtered) count of basic block transitions from block X to block Y.
Re:American fuzzy lop – a security-oriented fuzzer on Tuesday January 28, 2020 @12:36PM (#22171691)
The project home page [1] has a lot of information and a "bug trophy case"

[1] http://lcamtuf.coredump.cx/afl/

Re:Sinkholed on Wednesday December 04, 2019 @04:36AM (#21700830)
This is so bad. This process needs transparency and notifications! It shouldn't be possible to sinkhole a website without the owner being aware.