News for hackers. Stuff that matters.

ungamedplayer

Challenge response has a higher cost than challenging.

For example, would you debate with every flat earther you see? It's simply not worth the time spent. Maybe they fall into the idiot category though.

Re:Don't let dicts spoil your code on Wednesday October 09, 2024 @01:54AM (#41784912)
Can someone educate me in why dicts are uncool for explained reasons, but clojure (which seems to be highly recommended on hn) seems to suffer the same issues when dealing with a map as a parameter (ring request etc).

I know how to deal with missing values or variability in maps, and so do a lot of people.. what am I missing here?

Unless it's done by mega corporations with multiple shields of lawyers, it's illegal.
Re:Attacking Unix Systems via Cups, Part I on Friday September 27, 2024 @06:32AM (#41668581)
I guess I must be wrong. So many people disagree with me I must be an idiot.

You can write and understand llms but not selinux policies..

You are right, the crowd has spoken. Thank you for the education hn.

Re:Move Fast and Abandon Things on Wednesday September 25, 2024 @12:17AM (#41643633)
I have seen it. Take a good look at the Australian government funding central Australian communities and the crime and abuse outcomes in that area.

It will break your heart.

Re:Move Fast and Abandon Things on Wednesday September 25, 2024 @12:11AM (#41643595)
Just replicate more France
Re:Move Fast and Abandon Things on Wednesday September 25, 2024 @12:10AM (#41643587)
I only wish I had the stability to do this. I have family relying on me to pay the bills.

How did you do this (unless you got paid massive bucks) and afford to keep a family?

Re:Move Fast and Abandon Things on Wednesday September 25, 2024 @12:08AM (#41643579)
Thanks.
Re:Hy 1.0.0, the Lisp dialect for Python, has been released on Sunday September 22, 2024 @11:37PM (#41622202)
I find non lisp harder.

In blub lang based on c:

Fn(Val Val Val) to f(1,2,3) or

Val fn val 3 + 3

In blub lang based on lisp

(Fn val val...)

Re:Sanding UI on Sunday September 22, 2024 @05:59AM (#41615982)
You do not speak for me. I think but can't prove that you don't even speak for most programmers.
Re:Jeff Geerling – They stole my voice with AI on Sunday September 22, 2024 @12:22AM (#41614602)
I feel like this comment helps confirm dead internet theory. Are we there yet HN?
Re:Does anyone use sound effects in their dev environment? on Monday September 16, 2024 @09:57PM (#41563244)
Surel backspacing beeps at the empty prompt can be turned off. I feel like I do it all the time.
Right. But the judgement comes from a third party.

We as a society definitely judge peoples intent without knowledge into peoples mind, assumptions are made ( correctly or incorrectly ).

Re:F3 – Fight Flash Fraud on Friday September 13, 2024 @12:16AM (#41527986)
I had or had one in my possession that did exactly this. Another writes above a certain size were simply discarded.
Because intent is in the mind of the observer, not the mind of the person allegedly committing the crime.
My first thought after reading this was. Did friendlyjordies somehow doxx a government official?
Once again we blame developers for corporations not testing deployments and pushing changes live.

Nobody can test everything. Big deployments require big testing.

Re:Birds Aren't Real – How to Create Your Own "Bird" on Sunday August 25, 2024 @10:32AM (#41347569)
Everything is moving relative to something.
Re: on Thursday August 22, 2024 @01:29AM (#41317114)
Imagine blue tape for software. I guess the closest thing I have seen is

// Fixme: address this later.

The unsaid thing about endurance hunting is that you need to pick the right animal from the group and know how to persist hunt, aka keep prey away from water, have them run at the middle of the day, pace yourself, know the area and take shorter routes, know how to separate an animal from the herd.

Temperature of the area also plays a large part, perhaps the writer was doing this in a cooler area giving the animal an advantage.

I have not listened to the Audio, but most factors are not usually considered when people talk about any kind of persistence hunting.

I have hunted pigs, kangaroos and wild dogs and reindeer this way, without guns sometimes with dogs.

I am unable to do this in my older age, it's a younger man's game, it's good to see that people are still trying.

Sounds like they are artificial constraints.

I'm sure it sucks that it's "four digits only" but the air travel industry isn't immune from changing specifications. I believe ancient cultures called this software maintenance.

Re:CrowdStrike will be liable for damages in France on Thursday July 25, 2024 @11:34AM (#41069881)
Absolutely depends on the use case. I'm attempting to talk in the generic case. If you limit policy to the minimum attack surface from outside the process including permissions and capabilities which are significantly more fine grained in selinux compared to normal Unix permissions, you reduce the the capability of the attacker once they gain access to the system.

Imagine if they got access to local code execution... Binding to sctp protocol would instantiate the whole protocol in kernel. Effectively opening up whole new attack vectors. I can't see any other techniques (other than selinux like AC) that enables this kind of attack space reduction as easily.

I am aware that you can blacklist modules,etc but this is just one of many examples.

Re:Heat pipe – 250x faster heat transfer than copper on Thursday July 25, 2024 @09:08AM (#41068247)
Your CPU pins rusting is a bigger concern then.
If meltdown and speculative execution won't take down Intel, this is nothing.
Re:Never Update Anything on Friday July 19, 2024 @05:14PM (#41011344)
You would need to maintain python itself too. Imagine if you had done this same plan prior to the python 3 transition.
Re:Never Update Anything on Friday July 19, 2024 @05:13PM (#41011320)
Now do it for lisp and your libraries alone were last updated 5 years ago.
Re:Don't try to sanitize input. Escape output. (2020) on Sunday July 14, 2024 @02:11AM (#40959195)
The reason you sanitise input is because the data can attack the host and the client.

This post has a narrow view on attackers.

Re:WTF Happened to Blogs on Saturday July 13, 2024 @03:42AM (#40952503)
My personal evidence shows otherwise.. but maybe my deep technical topics isn't suitable for most people, or I'm just a shit person, probably both.

You absolutely need to water things down or you won't have an audience.

Or use qlot and drag from many supported source repos.
There are also other sources that are not quicklisp.

Qlot can and does install from github, gitlab, ultralisp, etc.

Older »