News for hackers. Stuff that matters.

windwake12

Re:Rust's 2019 Roadmap on Tuesday April 23, 2019 @03:30PM (#19732017)
According to Google/SO curl can indeed be built/configured to use the Windows cert store, seems that would be a better fix?
Re:Marriott CEO shares post-mortem on last year's hack on Tuesday March 12, 2019 @02:20PM (#19371298)
All properly configured applications should be running with least required db credentials, limiting what they can do. That Accenture was monitoring all administrative level queries against the db makes perfect sense in a locked down production environment.
Re:Why I wrote 33 VSCode extensions and how I manage them on Tuesday November 06, 2018 @04:28AM (#18389514)
Having it built in seems just as likely to be a "bad thing", since that version is "baked" in, there's no alternatives. That's why the extension approach by VS code is so surpreme. I'm sure JetBrains would love to have a similar ecosystem.
Re:Windows Defender detects malware in DMD on Wednesday October 31, 2018 @06:28PM (#18349748)
Angry users is not something you can opt out of. Malware reports are just another fact of life for many open source projects. I think the putty link (was posted elsewhere) is an awesome summary of the impossible fight you're asking developers off taking on.

Also, that's an insane comparison between AV reports and personal credit reports.

Re:Windows Defender detects malware in DMD on Wednesday October 31, 2018 @06:12PM (#18349667)
It's pretty common for programs compiled by "uncommon" compilers, and since the D compiler is selfhosted, it would fall into that category. AV software isn't magic, they probably just look for stack/calling/allocation patterns that don't look "right" meaning none of the major compilers generate such code, and it "might" be bad somehow.

I've a few flags from npm with Kaspersky, because there's so many packages that include some little binary, and since this is npm, it's often "unusual", like go.

Re:Incomplete List of Mistakes in the Design of CSS on Thursday October 25, 2018 @08:21AM (#18300316)
CSS and HTML will usually afford a specific approach. Being a web developer is knowing what these approaches are, and to know when stuff might get "not nice". So when you see a graphic designer using multiline text blocks with elided text in their design layouts, you know to raise a red flag and get that removed.

Personally, I've not found collapsing margins a huge issue either way. It's just the way it is. There's 10 billion ways to add distance between two elements in the browser, so pick a solution and go with it.

Re:Do We Worship Complexity? on Tuesday October 16, 2018 @04:07PM (#18232778)
More Azure billage to the customer, more kickback from MS.
Re:Do We Worship Complexity? on Tuesday October 16, 2018 @04:05PM (#18232761)
It's a "oh shiny" thing from my point of view. People get bored with the old, and want to try the new Google/Netflix/Microsoft tech, irrespective of its suitability. Once the client/customer signs off on it, internally it becomes political.
Re:The last day of linotype at the NYT (1978) [video] on Monday April 23, 2018 @01:34PM (#16905567)
Alot of font terms comes from that time, like leading and kerning: https://en.wikipedia.org/wiki/Kerning
Re:Linux'izing your Windows PC into a dev machine on Sunday February 11, 2018 @11:58AM (#16353430)
WSL is a godsend for developers. Having easy access to openssl with minimal fuss is awesome for all those obscure cert operations that you need a couple of times a year. Cygwin and all that has always been rather crappy IMO, so I'd usually keep a linux vm handy for those kinds of things. Installation can be slow yeah, QT took forever to build. But it did work!
Re:Deep-copying in JavaScript on Thursday January 25, 2018 @04:55PM (#16235065)
There's no difference

    let a = function bar() { };
    
    function foo( a ) {
      a = 2;
    }
    
    foo( a );
    
    console.log( a ); // bar
Re:How the Elderly Lose Their Rights on Tuesday October 03, 2017 @05:01PM (#15396161)
The article described how the courts are basically in cahoots with the scammers, bending any possibly argument in favor of the "professional ward."

It's truly awful, but it seems to jibe with the whole prison thing going on in the states. Its all the people who have no means to defend themselves who seem to be the targets of these schemes: poor people, kids, elderly, the disabled.

Re:Don't tell people to turn off Windows Update on Monday May 15, 2017 @01:29PM (#14343385)
I shouldn't have to use gpedit to disable ads that consistently appears when using certain windows features, and which have no "Don't ask me again".

Presumably some freak compatability issue (I've noticed ads always appear when I open files using a certain program).

It's incredibly frustrating. I've been on the .NET wagon since ASP.NET 1.0 (and ASP before that), and my day to day friction with .NET has been increasing steadily over the last few years as more and more of the eco system starts to support "core".

Looking over an example doc of how to host .NET in IIS (by far the most common approach) really shows how out of control it has become: https://docs.microsoft.com/en-us/aspnet/core/publishing/iis

It's a mess.

Re:Trust: the inside story of the rise and fall of Ethereum on Wednesday February 15, 2017 @03:07PM (#13654966)
It's in the document title.
I initially thought it was a story about some obscure compact disc pressing/inventory management system that Yahoo apparently had lying around because big corps have strange stuff in their basements. I mean, it's pretty common to see curiosity/historic articles on HN. 35 years of age ;-)
Re:Elm is Wrong on Wednesday November 09, 2016 @06:01PM (#12915706)
"Elm is Wrong" is a good click-baity title. It's not out-right lying, but opinionated sure. It leads me to want to know in what way it's "Wrong", somehow broken fundamentals, stupid API, bad implementation, or what have you.

Given the response in this thread, I can only surmise it was a well chosen title for a blog post.

Presumably it received a false positive (or it was interpreted as such). This really seems like the root cause, and I suspect a case of happy path engineering striking again.
It would have taken 10 seconds to add a box over the username while he was adding those arrows, given the context of the article, it seems outright irresponsible.
Re:Fall of the Designer, Part 4: Credible Threats on Tuesday April 28, 2015 @02:06PM (#9454167)
In some ways, the article reminds me of the documentary "Helvetica" about the eponymous font. In the film, font designers are both for and against, some calling it sterile and corporate/big-brother and others saying that it's about democratizing and humanizing fonts.

I'm gonna lean in favor of "this is the best outcome for everyone", even if it possibly screws specialized design roles (such as Icon creators). Google and Apples approach to design makes good sense (to me at least), as it significantly lowers the bar for what is needed to create a "good looking" app. Perhaps it's a more sterile look, but my apartment also has plain white walls for a reason.