foolmeonce

> If you can look at it as a learning experience that's fine as well.

A gambling addiction is also something you get from (in)appropriate learning experiences.. I think Nordvig's view of programming and materials that fit a longer view of learning good style are likely to work against getting a job in this climate. You are more or less demonstrating your willingness to embrace the anti-patterns a company holds dear to the point that you could be stuck with them without even being considered for the job.

But this is reversed for a watering hole bug against an organization. They only needed to get into one stack one member of the org uses and stay. Their reason for releasing multiple chains of attack at once instead of whenever their current attack is patched is unclear unless they want to get into multiple organizations where some avoid a diversity of exploitable software.

I would describe it as "Restricted use" software which has existed for decades, generally as closed source.

Sure the SaaS server licenses are more or less open use with caveat, but why won't a process paralleling tivoization occur?

I wouldn't find it odd for a hardware vendor to release source code, "for review" without the rights to use it on any other hardware as some do for binaries.

In a way that could be worse than closed source as that is similar to the problem of suspicion of reading leaked source code, maybe you are tainted and can't actually write software licensable for competing hardware. Maybe you never read the code yet it will appear that way, but you shouldn't check.

Given the oddities of IP and copyright infringement, it is often the case that only the owner benefits from a process of publishing. I.e. what good is the disclosure of a modern patent?

I think it's an issue with estimating probabilities.

They probably saw a few failures a year of people using Signal or WhatsApp slopily on old Android phones that were easy to sideload onto with a warrant, had microphones with no hard switch, etc, etc.

They probably saw no failures of Sky ECC (as it sounds like a vendor hardened the phone for them and any convenience over security features are non-existent) right up until the claim that the protocol is broken and everyone is affected.

Democracy is important to me, and therefore republics that have limits to maintain it. If killing a leader who increases his power within a republic is a problem for you then you value a world where democracy for one generation can choose dictators for the next. That is a world that can't maintain democracy.

The power of foreign governments wax and wane, a permanent president is eventually a dictator and has all the necessary local resources to stay put.

It is unfortunate for other countries that the precedents haven't been severe. I don't think Putin, Erdogan or Morales can reasonably regret not taking their standard ex-President package.

Looking at the 2020 results, it seems like a remarkably good outcome to me. The trouble is that any leader who tries to expand term limits gets a relatively good deal probability wise, while the society gets a lot of uncertainty followed by a high probability of dictator. Consequences of trying to raise term limits should be many and more severe.

> My parents smart Samsung is just a few years old, but, as I learned on my last visit, is no longer supported for many of the current streaming apps, so they need a new streaming device to plug into it!

I think a dumb TV with an external device is always better and hit this same path with relatives. The normal TV companies have no incentive to keep people happy for years with a dumb TV, so I use a laptop for TV and would only upgrade to a video projector.

This happened with normal search, Google punished companies for spam links to their websites which caused sites to pay for bad links to their competition to raise their relative ranking.. It's now necessary for everyone to review links to their site and disown them.

Thanks, that article and it citations look very promising. I'm a little discouraged to see a first data point where clear is correlating with strength though since mixed color recycling waste was my first thought on sourcing. Still it gives me some ideas of areas to learn about with some specific goals in mind.

The HDD macs work very well with an SSD swap (hard in a corporate setting,) or just an external SSD (easy in a corporate setting.) But should have maximum RAM (hard to change in a corporate setting.)

I'm not at all fond of the newer more disposable Macs. Still, they should perform pretty well. One of my coworkers installed browser themes that seemed to be crypto mining or something equally ridiculous once. You may want to create a fresh user without any personalization and see if problems go away. I find Mac users and PC users tend never to do a wipe/install and almost everyone tends to port their problems with them by bringing their home directory even to new machines of the same OS.

Don't be self employed abroad as a US citizen.

Hm.. I find it funny that organizations use MS products and stay in business. The amount of downtime and ridiculous failures I saw regularly as a consultant were astounding.

My coworkers used Macs which really don't cost anything given hardware lasts 8+ years now. Most companies using Windows have a large budget for laptop IT that costs more than replacing expensive machines often if that were necessary.

Yes, land sand is no good for building directly due to grain shape, but I think it is fine as input to the glass stream. Most manufactured sand is from stone quarries today, but I think a process of making manufactured sand from recycled glass should be able to make something more consistent.

Yes, though the relatively small amount of sand that companies suck up with permission from i.e. EU countries in the mediterranean acts as a fig leaf for cheap ocean sand.

There's no real justification for letting all the ocean resource projects continue given the long standing tragedy of the commons and how it aggravates naval turf wars. If we outlaw all of it we will be better off. We can move towards manufacturing sand-like construction filler from our normal glass system, which is able to consume land sand, and such a filler would be visually distinct from raw ocean sand.

What does a publisher's reversal about their wants have to do with selling books they already printed?

I don't think(?) eBay globally banned selling of past copies of Meinkampf while the copyright was cleverly held by a German State. Doing so is pretending copyright is a right that extends to sold property that is a copy, extending a right too far, while banning a class of books like MeinKampf for your own reasons is perfectly valid.

If they want to ban racist children's media on their platform then they should. That includes a lot of TinTin, popeye, Tom and Jerry, etc, that has never been classified as racist by some copyright holder.

edit- s/published/printed

That's kind of a false dichotomy, since once you understand CSS rules on something such that it works somewhere, you spend a lot of time interpreting addendums on caniuse and trying to arrange graceful degradation.

If you only have to make it work on one browser with one version, or if the feature is extremely old, or if you can do it outside a larger system of constraints, then you can just follow the step-by-step guides the article is complaining about.

They let their customers sell which was probably a fiduciary responsibility.

An obligation to maintain the market for a stock because a portion of it's owners are your customers would be a bizarre responsibility.

OTOH, Socrates lived through the rise of Athens to prominence (their great generation?) and the generation he complains about would have been the ones to stop it's decline (our boomers -millenials.)

(So his observations could be of a cultural cycle rather than what every generation experiences from each perspective.)

It obviously depends on what "change this" means, but I would expect anything meant as a pro-merchant reform to first take current discretion to discriminate away from visa and merchant side processing.

While I think it's wrong to add additional risks beyond the loss of value itself (i.e. raised fees for too many charge backs.) I would rather the merchant stay liable for the loss itself.

I think it is an equivalent example that if no business was responsible for the risk of accepting bad notes, convenience stores would have a policy of not investigating and actively hindering prosecution on obviously counterfeit notes.

First key comes up with a 3rd party performance library for go.. If you are parsing a stream, etc, it is always possible to have situations where you can stop reading when you get a first answer, but then you don't really know if the stream is valid JSON at all.

There's also a reason the Ottomans needed to make an idiom to explain organizational failure: "The fish stinks from the head down."

> The only thing that tail recursion changes is how much memory an operation will take.

Tail recursion specifically changes whether a compiler can optimize away the stack, which means your out of memory will come from lack of memory for a stack. Whether the stack is allowed to use all memory is a decision beyond your control in a language that runs in a browser.

If you are SA, the risk that softbank will need to issue you a middleman with no ethics to manage your real estate is 100%.

The basic principle of real security models is once an attacker has full access all data on the system is potentially tampered with.

You can try to play games with ensuring logs leave the system, but everyone takes shortcuts to make sure they can recover the system when networking is down etc.

Everyone and their grandma has access to complex scripts, etc that were once very expensive. Whether they invest the energy in learning methods to hide their presence or just go straight to some other goal is going to depend on how they intend to abuse your systems.

I think most "security professionals" pretend they are going to catch an oddity that occurs that doesn't match what their automated tools would catch and occurs in the middle of some other crisis or holiday break. I would say good luck with that.

> b) It's literally an NSA leaked exploit????? Like are you kidding me using an NSA developed exploit as "pretty basic stuff" lol

It must have been very expensive and innovative, does that make it hard to copy into your scriptz folder?

People walking around with facial recognition reporting everyone else's whereabouts to FB, probably won't get what they deserve, at least in places with civil restraint.

> I can't imagine why they would have done that in the past .. decade?

Maybe they aren't using software keys, but rather a low quality/older/small-kb hardware token or following the default guide for one? The vast majority supported 2048 in 2010 though..

If you have no compliance requirements, you can also just use any pkcs#11 token (with support for non-extractable keys) to secure the key, and setup an air-gapped process on a laptop with a bootcd, etc, to minimize the risk of compromising your process.