HNHacker News
TopNewBestAskShowJobs

LikesPwsh

291 karma · joined November 2, 2022

submissionscomments
LikesPwsh··on RFC 9839 and Bad Unicode
RTL lets you obfuscate file extensions.

E.g. Annexe.txt (that you might assume would be safely opened by a text editor) could actually be Ann\u202Etxt.exe, a dangerous executable.

LikesPwsh··on Streaming services are driving viewers back to piracy
Another possibility is that every streaming service wants "Pokémon" and parents don't care which season.

So each service buys a single season to tick that box.

LikesPwsh··on Monero appears to be in the midst of a successful 51% attack
That way you can also claim 100% of mining rewards with 51% hash rate.
LikesPwsh··on Monero appears to be in the midst of a successful 51% attack
BTC can't move to proof of stake because religious zealots would keep their money in the old fork.

It's doomed in general, see the cash fork.

LikesPwsh··on Token growth indicates future AI spend per dev
AWS/GCP are at least making money with their current pricing model.

When your provider is dumping at a loss, it's their way of saying that the business plan is to maximize lock-in/monopoly effects followed by the infamous "enshittification".

LikesPwsh··on Show HN: A GitHub Action that quizzes you on a pull request
You could, but it would be mad to skip the code review because it "only" touches customer-facing code rather than GHA.
LikesPwsh··on SQL Injection as a Feature
Giving analysts direct SQL access can be great, but you should tell them to use an IDE rather than trying to build your own IDE in a text box.
LikesPwsh··on Code highlighting extension for Cursor AI used for $500k theft
Cryptocurrency contracts are going to touch actual tokens at some point.

Even if the compromise wasn't on the developer's machine, it could have enabled a supply chain attack post-deployment.

LikesPwsh··on Most people who buy games on Steam never play them
% of people vs % of games.

A single person who "collects" games or buys them because it seems like good value can have thousands of titles in their steam library. Someone who actually plays all of them will have a much smaller number.

LikesPwsh··on The day someone created 184 billion Bitcoin (2020)
At a certain scale, face value is meaningless and all that matters is liquidity.

$21tn in bitcoin isn't going to get you any more money than $1tn would.

LikesPwsh··on Sleeping beauty Bitcoin wallets wake up after 14 years to the tune of $2B
Mining and theft mostly.
LikesPwsh··on Sleeping beauty Bitcoin wallets wake up after 14 years to the tune of $2B
Miners get paid in BTC but have costs in money.

They have to sell, so the money is coming from buyers and impacts holders via reduced demand.

LikesPwsh··on Sleeping beauty Bitcoin wallets wake up after 14 years to the tune of $2B
Yeah the paper gains are nice, but they all net to zero in real money.
LikesPwsh··on Sleeping beauty Bitcoin wallets wake up after 14 years to the tune of $2B
In the long term everything goes to zero, so an asset that pays no dividends but has significant storage costs isn't much good for investment.

Bitcoin holders as a group are constantly losing money by definition. Some of them cash out at a profit, I suppose.

LikesPwsh··on Sony's Mark Cerny Has Worked on "Big Chunks of RDNA 5" with AMD
Also FPS just requires throwing more compute at it.

Excessively high detail models require extra artist time too.

LikesPwsh··on AI coding and the peanut butter and jelly problem
I realise this is meant to be a jab at high-level programming languages, but SQL really did succeed at that.

Its abstraction may leak sometimes, but most people using it are incredibly productive without needing to learn what a spool operator or bitmap does.

Even though the GUI and natural language aspects of 4GL failed, declarative programming was worth it.

LikesPwsh··on How My Six Months Working on the Railway Changed My Life
Downvotes help clear out false but emotive posts.

The sort of "gangs of [minority] on murder spree in [town]" posts that get so much traction on Facebook.

Even if most people dismiss it out-of-hand, it's so inflammatory that the gullible are much more likely to interact and you get exponential spread.

Maybe HN is just better than that, but I see it as a major differentiator of Reddit vs Facebook.

LikesPwsh··on PSExcel: Excel automation without Excel Overview (2015)
If you're already using python or powershell, you're not going to switch for one library (I.e. pandas or ImportExcel).

For this library in particular, powershell is already installed on the computers of 95%+ of non-dev admin workers. It fills the niche that VBA used to of shadow-IT automation.

LikesPwsh··on Composable SQL
It's not a problem in MSSQL, so solving the fat head of problems is clearly possible.

The escape hatch in MSSQL for the long tail is materialising an intermediate result to temp table.

LikesPwsh··on Northeastern's redesign of the CS curriculum
Relational databases are going to be around for the next thousand years if you want something useful outside of tech.
LikesPwsh··on Yi Peng 3 crossed both cables C-Lion 1 and BSC at times matching when they broke
If that list became popular it would be weaponised by military intelligence.
LikesPwsh··on 'I grew up with it': readers on the enduring appeal of Microsoft Excel
Csv is much more useful than Excel.

Pdf is much less useful.

LikesPwsh··on RP FLIP escapes wrecker's claws
Rather than ignorance, it's the ongoing development of the language.

French schoolchildren seem to spend half their time learning the gender of inanimate objects. The sooner we can get rid of that, the better.

The closest equivalent time-waster we have is different names for different groups of animals (flock, pack, herd etc).

LikesPwsh··on Send: Open-source fork of Firefox Send
If it's an exit node, you know what the user is connecting to but not which user.
LikesPwsh··on Bitcoin puzzle #66 was solved: 6.6 BTC (~$400k) withdrawn
Personal assets in The DAO
LikesPwsh··on Bitcoin puzzle #66 was solved: 6.6 BTC (~$400k) withdrawn
Vitalik got indirectly pwned by the infamous DAO smart contract hack, but had the social clout to pause/rollback the supposedly decentralised/immutable Blockchain.

Maybe not the best example of cryptographic security.

LikesPwsh··on CrowdStrike will be liable for damages in France, based on the OVH precedent
You can do dangerous actions in user space without any need for escalated permissions.

E.g. downloading a file and running the contents as code, or uploading/encrypting all files you have access to.

Crowdstrike and Defender handle those possible but suspicious actions.

LikesPwsh··on CrowdStrike Update: Windows Bluescreen and Boot Loops
You'd seize the company from its current shareholders.

That gives shareholders of other companies good reason to care going forward.

LikesPwsh··on CrowdStrike Update: Windows Bluescreen and Boot Loops
I'm mandated to use one of those.

The security tradeoffs don't make sense at all once you understand how it works.

Ssh or winrm are significantly more secure than whatever some security vendor thinks will tick an audit box.

10ft pole is an excellent approach.

LikesPwsh··on Malicious VSCode extensions with installs discovered
C# Dev Kit is not only recommended by Microsoft, but developed by and for them.

It still has a serious license footgun built-in, Oracle-style.

← PreviousPage 2 of 4Next →