News for hackers. Stuff that matters.

zonidjan

Re:Google Sheets was down on Monday January 27, 2020 @04:16PM (#22163871)
"All the functions" - I guarantee you that almost any function you want in Excel is in Sheets. Just because you don't know how to use it or find it doesn't mean it doesn't exist. The only reason you know how to use Excel better is that you have past experience with it. That's, effectively, the sunken cost fallacy.

"size" - what?

"some of the external tools" - duh? But what on earth are using using "external tools" integrated to Excel for?

Re:PHP in 2020 on Tuesday January 21, 2020 @10:50PM (#22114435)
Array destructuring: already existed, list() pseudo-function

Array spreading: already existed, array_merge

Variadic functions: are probably better implemented as a function accepting an array, especially now that there's a proper array syntax instead of a pseudo-function. Also already existed, func_get_args.

Argument unpacking: already existed, call_user_func_array

Arrow functions: are not any shorter, and are less clear, than anonymous functions.

Literally the only item on your list that was any good for the language is the null coalescing operator. The rest are just re-implementing something that PHP already had, in yet another incompatible (and often unclear) way.

Hell, good luck coming across '??' and trying to find any documentation on what it does. Searching Google for 'php ??' returns results for 'php', searching php.net for '??' returns seemingly random functions, going to php.net/?? gives you the homepage.

Re:Netgear Signed TLS Cert Private Key Disclosure on Monday January 20, 2020 @08:42AM (#22098697)
> Fallback to HTTP reachable via port 80 on the private IP for the server.

How, exactly, is that better than using a common cert? What threat do you propose that applies to HTTPS with a shared cert, and not to HTTP?

Re:Netgear Signed TLS Cert Private Key Disclosure on Monday January 20, 2020 @08:40AM (#22098689)
What? No. While those are meant to be reserved, nothing stops you from configuring your resolver to answer for them.
Re:Netgear Signed TLS Cert Private Key Disclosure on Monday January 20, 2020 @08:35AM (#22098658)
This is intentional on Netgear's part, and does not in any way degrade security compared to the alternative (an untrusted cert or no HTTPS). It is neither a bug nor a security issue.
Re:Software Library: MS-DOS Games on Tuesday December 17, 2019 @03:09AM (#21811637)
Yes, I know what dosbox is, thank you. That's ... why I mentioned it ...
Re:Software Library: MS-DOS Games on Tuesday December 17, 2019 @03:08AM (#21811636)
> Is there an equivalent like that now for game development?

dosbox is your equivalent.

Re:Uber and Lyft Suggest the Days of Cheap Rides Could Be Over on Tuesday December 17, 2019 @03:07AM (#21811628)
They did not win based on their "higher standard of service", but based on their price, which was only possible due to their non-compliance with regulatory requirements.
Re:Uber and Lyft Suggest the Days of Cheap Rides Could Be Over on Tuesday December 17, 2019 @03:06AM (#21811624)
But you will never get customers without drivers and you will never get drivers without customers.

Plenty of Uber/Lyft competitors have tried and failed. Heck, a few different companies tried here in Austin once we grew a spine and banned Uber/Lyft, only to die as soon as they came back to town.

Re:#include </etc/shadow> on Tuesday December 17, 2019 @03:04AM (#21811611)
> 1) A sophisticated compiler might read the length of a file before loading it, so that it can allocate a buffer of the right size. Doesn't work with /dev/stdin.

gcc does this. It appears to be why /proc files don't work. gcc sees that stat calls it a 'regular file' and 0 bytes long, and actually performs a read() syscall with a length of 0.

> 3) Furthermore, it might check whether the file is a regular file. If not, it is almost certainly not what the programmer had in mind.

gcc probably does this. (It would explain why /dev/stdin works)

Re:#include </etc/shadow> on Tuesday December 17, 2019 @02:52AM (#21811565)
> Recently I saw a tweet where someone mentioned that you can include /dev/stdin in C code compiled with gcc. This is, to say the very least, surprising.

You can also call something to read from stdin in your Makefile, or read from stdin in your executable.

> But is it equally obvious that the compiler also needs to be sandboxed?

Yes. Why wouldn't it be sandboxed?!

> I even found one service that ... showed me the hash of the root password.

Wow. That's bad. Of course, that's not a compiler issue, but rather a system administration issue. /etc/shadow should not be world-readable.

> This effectively means this service is running compile tasks as root.

That's quite a leap from 'I can read /etc/shadow' to 'I am root'.

> Interestingly, including pseudo-files from /proc does not work. It seems gcc treats them like empty files.

More accurately, it seems the system treats them like empty files. gcc does a stat on the file, which returns 'regular file' and 'size=0'. gcc therefore calls read() with a length of 0 bytes.

Re:Kotlin vs. Java on Monday December 16, 2019 @11:39PM (#21810637)
This seems great.

For someone who already knows Kotlin.

Re:Uber and Lyft Suggest the Days of Cheap Rides Could Be Over on Saturday December 14, 2019 @06:46PM (#21793238)
It's not hard to build a ride sharing app.

It is, however, hard to get drivers and customers FOR your ride sharing app.

Re:Uber and Lyft Suggest the Days of Cheap Rides Could Be Over on Saturday December 14, 2019 @06:45PM (#21793227)
Surprise! Now that they've mostly killed off taxi companies, their rates will be the same as taxi companies. Who could've seen that coming? Oh wait.
Re:Software Library: MS-DOS Games on Thursday December 12, 2019 @02:26PM (#21775345)
Errrrr... dosbox?
Re:API Practices If You Hate Your Customers on Wednesday December 11, 2019 @06:57PM (#21768098)
Whether there's a bug in the underlying API code, or a bug in the web server, there's a risk that it "may or may not result in the standard response format you're expecting", and therefore... should be a 500 error.

Yes, using the wrong status codes is a problem, you're right, that's the entire point of the thread you're responding to.

Re:API Practices If You Hate Your Customers on Wednesday December 11, 2019 @06:55PM (#21768081)
That's... extremely rare, extremely ancient, and even then was usually only a problem below a certain page length.
Re:Fight back against Google AMP (2018) on Thursday December 05, 2019 @05:28PM (#21717365)
> it's not like you can't design super lean websites anyway.

Sure, but people don't.

Re:Fight back against Google AMP (2018) on Thursday December 05, 2019 @05:27PM (#21717355)
> I've been using the web on mobile connections ever since I got my first iPhone in 2008.

Okay, great. You had one of the most powerful phones at the time. How was the experience for people with a "feature phone" in 2008? (I'll tell you from experience, it was terrible).

How would the experience be today, with your iPhone from 2008? Terrible. Why? Is the web more powerful as a result? Can you do more things? Nah, it just looks flashier.

Re:Fight back against Google AMP (2018) on Thursday December 05, 2019 @05:23PM (#21717310)
> because it helps drive up the current average affordable densities of RAM and storage

It does, but it also means that RAM and storage isn't available to be used for other things. Think about what you could if you had current hardware back in the XP days...

Re:Fight back against Google AMP (2018) on Thursday December 05, 2019 @05:21PM (#21717292)
JavaScript, SPAs, animations, pages filled with "pretty" instead of content.
Re:Discovering less-known Postgres v12 features on Thursday November 28, 2019 @02:33PM (#21659664)
Site blocking the page with an empty overlay named "BorlabsCookie". No thanks.
There are plenty of other ways to fingerprint a user. https://amiunique.org/
No? It would seem to apply to current employees who move to Russia/China who are in roles covered by the block. i.e. they would have the choice of moving and changing roles/quitting, or staying.
All the people who are saying they've never seen a contract with a term like this, I'm just sitting here wondering how my experience is the opposite...
The difficulty is, it's often very difficult to find news from an organization who isn't "like Breitbart or RawStory", to some extent.
I would love, so much, for Youtube to just stop targeting recommendations. At least then I'd see new things once in a while...
That's the thing. That's never changed. Vacations have always been more fun. The change is that now, when you're doing boring mundane things, you can pull out your phone and have at least some modicum of entertainment.
Would you be any happier if you were, instead, standing there staring at traffic waiting for the light to change?

Older ยป