HNHacker News
TopNewBestAskShowJobs

_yy

465 karma · joined June 25, 2015

submissionscomments
_yy··on Elsevier, that just freaked me out
That would require an active intermediary, but yes, it should be possible.
_yy··on Persistent “pipes” in Linux
Nothing, since those "persistent pipes" are just regular sparse files (just like VM images). Clever idea.
_yy··on ​Ubuntu continues to rule the cloud
Debian is more conservative with changes - if you want your systems to be rock-solid, go with Debian. The downside is that it's so stable that packages are usually outdated, but in many cases there are more recent backports which you can cherry-pick.

In my experience, Debian's security team responds to new CVEs faster than Ubuntu's, but this is purely subjective.

_yy··on Chrome will begin pausing many Flash ads by default on September 1
Github somehow manages to copy stuff to the clipboard with flash player disabled - apparently it's using the new HTML5 clipboard API.
_yy··on WebExtensions FAQ
> Being able to just type in the random things you remember from a url / title (I think it combines them) and have FF narrow down the alternatives, -fast, is something I haven't found in any other mainstream browser.

Chrome has exactly the same feature. You can disable Google Instant, too, but it's actually a really useful feature.

_yy··on I accidentally had a popular political live stream
In most countries, this is (rightfully) illegal. You have a right to privacy, even in public places, and this includes not getting filmed arguing with your girlfriend by a stranger who then publicizes the video.
_yy··on Multiple Vulnerabilities in Pocket
https://webcache.googleusercontent.com/search?sourceid=chrom...
_yy··on OpenBSD on EdgeRouter Lite
Not always.
_yy··on OpenBSD on EdgeRouter Lite
Does not support the hardware offloading though, so you're not getting the advertised processing speed.
_yy··on Stronger Shell
There's fish: http://fishshell.com/

Also, a nice experiment: http://xonsh.org/ (Bash-alike with embedded Python)

_yy··on Stronger Shell
If you're writing shell scripts, you might as well write Ansible playbooks. You can use Ansible playbooks locally without the SSH layer.

Bash/sh is a horrible programming language.

_yy··on RethinkDB 2.1 is out: high availability
For anyone curious: https://github.com/rethinkdb/rethinkdb/issues/4663
_yy··on Firefox 42 will not allow unsigned extensions
You can still install custom extensions in Chrome for Windows using - among others - group policy: https://support.google.com/chrome/a/answer/188453
_yy··on A call to PHP's mt_rand generates only odd numbers
Quoting a Reddit comment (https://www.reddit.com/r/lolphp/comments/3eaw98/mt_rand1_php...):

The problem is way worse than you think. Check out what this looks like when printed in hexadecimal: http://3v4l.org/XVTgS

Basically, what is going on is that PHP_INT_MAX is 2^63 - 1. mt_getrandmax() is 2^31 - 1. The way mt_rand() makes a random number when the limit is too large is that it makes a random number in the range [0,2^(31)), then it scales it to be a number in the range [0,MAX-MIN), and finally adds MIN.

So in your case, it scales everything by 2^32 and adds 1. Which is why the numbers are* extremely non-random. [See my other comment in this thread for a more detailed explanation and some more test scripts that prove this is what is happening.](https://www.reddit.com/r/lolphp/comments/3eaw98/mt_rand1_php...

_yy··on Domesticating applications, OpenBSD style
Yes.
_yy··on Domesticating applications, OpenBSD style
Spender's point is that a capabilities-based approach does not really work for real-world scenarios, and he probably has a point. The setuid thing was more an example as I understood it.

While Spender's criticism isn't usually very diplomatic, he's often right.

Here's an example, this is QEMU's seccomp whitelist: http://git.qemu.org/?p=qemu.git;a=blob_plain;f=qemu-seccomp....

As you can see, it's mostly worthless since QEMU has to do lots of potentially-dangerous operations by design (even reading/writing to raw devices). A proper mandatory access control framework actually restricts which device files it can access, for example - as implemented in the AppArmor/SELinux sVirt drivers. Theo's approach is similarly flawed.

_yy··on PostgREST – REST API from any PostgreSQL database
Web servers usually scale better than (traditional) databases, so it makes sense to not offload computation to the database, even if it means that there's an overhead.
_yy··on Startups Finding the Best Employees Are Actually Employed
https://en.wikipedia.org/wiki/Misclassification_of_employees...
_yy··on Google has quietly launched a GitHub competitor
Take a look at Phabricator:

http://phabricator.org/

It has it's own code review workflow which is, in my opinion, superior to Github's.

A nice summary:

http://cramer.io/2014/05/03/on-pull-requests/

← PreviousPage 5 of 5