founderling

If Wolfram Alpha is right, then 10^11 km is 2 million times around the earth:

https://www.wolframalpha.com/input/?i=10%5E11km+%2F+earth+ci...

Shows the potential of batteries. Charge your one kilo batttery to drive around the planet two million times.

I mean for batteries in general. Independent of the technology.

For the spinning matter battery, the limit might be when the whole matter of 1 kg spins at the speed of light. I wonder if it matters how big the radius is with which it spins around the center?

For a non-rechargeable battery, I guess the limit is 1kg * c^2. As Einstein postulated that e=mc^2. And that guy was right more often then not. Is that also the upper limit for rechargeable batteries?

How long could a Tesla drive on 1kg * c^2?

I have two questions regarding batteries I often wonder about. Maybe the wisdom of the HN crowd can answer one or both of them:

Is there a theoretical limit on how much energy a rechargeable battery of, say, 1 kg mass can hold?

Can a rechargeable battery be discharged and recharged and afterwards be in the same state it was before the cycle? Or is degradation inevitable? Again, I am asking for the theoretical possibility. Not real life challenges to implement it.

Nothing is abused, nothing is bypassed.

The article makes it sound like IDS/IPS&WAF are intended to do input validation so it fits the applications model of the data.

They are not.

They are intended to harden the whole stack a little bit against yet undiscovered vulnerabilities.

By the same logic, this "article" could claim that it is possible to abuse Pythons strip() function to bypass WAF rules because filtering for the user name "root" will not filter out " root" and many login systems do strip whitespace before processing the input.

This applies to any language. Here on HN I can log in as "founderling" or " founderling" just fine.

If you want to filter out something in WAF, you 1) have to do it right and 2) do not do it for input validation at all.

It has nothing to do with the language if you fail at 1 and or 2.

Tried to create an account. When I try the activation link, it gives me a 500. When I try to login, it sends me back to the login page.

Requested a password reset. Reset my password. Login page still sends me back to the login page every time I try to log in.

Ha! Figured it out! I cannot login with my email. Need to use my "username". That is an unusual choice.

Which tech stack did you build this with?

I beg to differ.

Alice wants to send $1 to Bob via Bitcoin.

Alice needs some Bitcoin to do so.

Hoddler sells some Bitcoin to Alice for $1.01

Alice sends that to Bob.

Now Bob wants to change it to $.

Hoddler buys back for $1

Hoddler has a return on his investment.

The energy consumption is priced into the cost of holding and transacting Bitcoins.

I wonder if it is any different with any other thing you pay for. Or if any money you pay for anything ultimately results in energy being used up.

Nice! What tech stack are you using?

A bookmarklet is only invoked when you click it. Not on every fricking website you visit.

And it would just have to be a single line that you can read so you can trust it. Something like:

    javascript:location.href='https://discuss.com/'+location.href

That would redirect you to discuss.com where you can discuss your current url without discuss.com having any access to your data.

To make it more convenient, the bookmarklet could also add the discussion to the current page via an iframe which also has no access to any outside data.

    and the story was broken in the Financial Times,
    a British newspaper.

He is quoting and criticizing the Apple website.

Here is an answer from the hncynic bot:

I had problems with my spinner at first. However, this is one of the things that is really annoying about using captchas instead of passwords.

It is possible to create a secure account for something useless without using the system and you probably won't get spammers anymore.

What a dumb idea, you would want to implement it yourself, because the people working and maintaining the system(s) will all have some way of doing that already.

I don't know how much the government can take away from a site like this as well. But it's a bit like trying to ban a kid because the kid got an old friend on their facebook because his parents were "bad".

So, even though you have a big idea about voting systems, it would be a better option to require a system that only exists to be able to be used for good reasons.

A bookmarklet would be better. It could achieve the same functionality without the security issues of an extension.

Do new coders still learn SQL, now that they all use frameworks that abstract away the database queries?

After clicking "Try it now", I see a loading spinner for a while and then a an empty blue page.

Console outputs a bunch of stuff:

wasm streaming compile failed: TypeError: Response has unsupported MIME type

Assertion failed: glGetError() == 0, at: src/deps\sokol_gfx.h,3008,_sg_create_image

WebGL warning: texImage2D: Requested size at this level is unsupported.

uncaught exception: abort("Assertion failed: glGetError() == 0, at: src/deps\\sokol_gfx.h,3008,_sg_create_image") at jsStackTrace@http://lighttracer.org/index.js:1170:13

On Firefox 67 on Linux.

I never used Slack. Given a $16B valuation, I wanted to see what it is about.

But Slack seems to actively prevent me from using it on Safari on my iPad.

It keeps trying to make me install their app.

Is there a way to try their web interface it on an iPad?

Me: CTRL+faudio

Firefox: 0/0

Me: Damn

I completely stopped reading books and only listen to books these days.

The headlines all seem totally wrong.

    Uber: $1.25M VC capital turned into $84.2B

That sounds like the guys who invested $1.25M now own $84B worth of Uber stock. I don't think that is even remotely true. I would think there came many more investors who put in more money. And that's how the vast majority of the $84B market cap was created.

    Terms and Conditions

    This website is operated by Pyramid tracks.
    Throughout the site, the terms “we”, “us” and
    “our” refer to Pyramid tracks. Pyramid tracks
    offers this website, including all information,
    tools and services available from this site to
    you, the user, conditioned upon your acceptance
    of all terms, conditions, policies and notices
    stated here.

I wonder how these type of nonsense "TOS" that are on so many Show HNs these days came up for the first time.

A fantasy name like "Pyramid Tracks" is not a legal entity. So it cannot operate a website or make a contract with the visitor/customer.

You are !done yet.

Awk ' visited[$0]++' or how badly HNs automatic title formatter messes up awk commands :)

Hint: You can edit it after you posted.

That's like saying a company needs two CEOs because of bus factor.

Somebody else can take over the role of being responsible for pushing to production any time.

Well, each team member has their own set of skills.

Say ... Joe. Joe is good at looking at some mockup and turning it into html+css code.

So somewhere in the development process, Joe has an important role.

But why should Joe be able to push something to production?

Can you give an example of such an environment variable?

Could be. I only know environments where every project has exactly one team member who can push to production.

Usually the version control happens in git. And the person who can push to production is also the person in charge of the master branch.

I always structure teams that way. So I cannot speak for other structures.

I have the feeling that most developers these days suffer from too much tooling in every area. And would be 2 to 10 times more productive without it.

Most friends that I watch doing their deployment would be way more productive by simply using rsync for file changes and raw database queries when the DB needs a change.

What do you mean?

I started a local webserver listening on localhost:80 just to see what happens, but this thing seems to not detect it. It shows me "Scanning localhost ... localhost complete."

Edit: My guess is that this thing can only detect servers that send a CORS header that permits cross domain access.

It could probably do way better detection if it did not do xhr requests but added script/css/whatever elements to its own page pointing to localhost and detects if those error out.

Items cannot be shipped sometimes. In real life, that happens way way way more often due to other circumstances then due to race conditions. Staff breaks the last item. Manufacturer sent a box with 100 items but it only contained 99. The color of the shelf stained the last item. Etc etc etc.

Think about it: Depending on the shop software, two orders need to be placed within a few milliseconds. Containing the same item. And the item has to be very low on stock so the two orders cannot be fulfilled. That is a very very rare event. It's almost a theoretical event only.

I have seen a bunch of companies grow an online business. There were tons of pain points. This race condition was none of them.

The response seems shockingly arrogant and irresponsible at first. But he is in fact right. A good reminder that people who are unfriendly and argue against public opinion are not necessarily wrong.

I don't know opencart, but I know how it is handled in companies using other onlineshops:

When the stock of an item goes negative, it is noticed by staff when they want to fulfill the order. ("Strange, this customer ordered red socks, but we don't have any").

Staff sets the item as "Cannot be delivered" in the order. Which ups the stock to zero again.

Customer order gets fulfilled with a note "Sorry, the red socks could not be delivered.".

It's not perfect, but also not a big drama.

Same with coupons. You should have them being invalidated after the order process. And if you see the same coupon code used twice, you know it is fraud.

I mean a technical TlDr of how the actual attack works.