m_eiman

Here's a nice graphic showing a baby's sleep pattern during the first 15 weeks:

http://www.eiman.tv/misc/somnrytm.jpg

Since the text is in Swedish, here's roughly what it says: Every row is a day, black is sleep, white is awake.

I like the Swedish variant of this. It's basically describing the relationsship in terms of closes family ties, so maternal grandfather is "morfar" ie "mother father". Same principle applies to a bunch of relationships:

farmor - father's mother

farfar - father's father

faster - father's sister (abbreviated from "far syster")

moster - mother's sistem (abbreviated)

farbror - father's brother

I like to extend the basic set of these to older generations, so instead of "my mormor's father" it'd be "mormorfar". Very practical!

It would be interesting to see how it compares to Haiku Vector Icon Format, which shares some of the same priorities. Some more info:

https://en.wikipedia.org/wiki/Haiku_Vector_Icon_Format

http://blog.leahhanson.us/post/recursecenter2016/haiku_icons...

Decentralization is good, but there's no need to bring cryptojunk into the discussion since that's far from decentralized. IMHO.

Bring back the use of open protocols, add IPv6 support throughout and add a sprinkling of peer-to-peer.

Why hasn't Java added an option for automatic heap sizing for the desktop application use case (or any use case, for that matter)? Seems like a no-brainer thing to add, so I guess there are Reasons(tm).

> I would really be interested to understand which use cases justify using an actual blocking call to retrieve random bits.

The only case I can think of is when you've mass produced a million devices that each need unique certificates that are generated on first boot. If no good source of randomness is available, there's a decent risk you'll have duplicates.

The chathistory command is for you: https://ircv3.net/specs/extensions/chathistory

> What business people don't understand (or internalise) is software is a truly a new beast. It is a tool that can be applied in just about every domain. No such tool has existed ever in human history.

That's not quite true: the inventions of mathematics, writing and especially affordable material to write on were probably even larger culture shifts, but software and computers are of the same magnitude - perhaps it's easier to realize the shift needed in corporate culture when you compare it to those earlier changes.

Sweden's last phone box was demolished in 2016, which is surprisingly late! In the early 80s there were 44000 boxes in operation, apparently.

https://blogg.tekniskamuseet.se/minns-du-telefonkiosken/

Why hasn't Microsoft created a system service for this?

It's just inefficient to have each and every installed app run a service… I suppose they take care of it for Windows Store apps, but I don't see why they couldn't make a service for other apps too.

Same on the Mac, of course.

Perhaps there's a sandbox escape hiding in the workaround they did to get swiftc to use their jemalloc build?

Sweden has paused the use of Moderna's vaccine for people under 30, young people still get the Pfizer one though.

In our case the images contain some meta data, including version and checksums. The bootloader can default to starting the newest version, and be sure that everything is fine by checking the checksum. If needed the bootloader can be instructed to either remain in bootloader mode (to receive a new firmware image) or to start the older firmware.

Here's a practical application:

I have a device with 512k flash. I use 64k for a bootloader, 208k each for two possible application versions, the rest for settings.

If I can use relocatable code, I can download a new firmware version during normal operation of the device with no need to switch over to the bootloader. When it's time to switch version, a quick reboot is all that's needed. This means downtime of a second or two instead of several minutes, and that's very valuable.

A possible work-around is to prepare two binaries for each firmware version, one per possible location, but then I'd need to negotiate with the device to know which image to send. Better to just have one image fit any location.

Prices are only allowed to go down, it’s what the gods of consumerism have promised.

Can’t you check availability in stores online, before you go out?

… and embedded, of course. The main problem is that there IS a limit, and you have no idea what the limit is. The only way you find out is when you crash.

Implicitly indicated compression is also a "feature" of LZJB which we've used for firmware update files. Figuring out what was going on and fixing the issue when a bootloader suddenly started rejecting new firmware updates was interesting and annoying.

The updates were processed in chunks, and rarely a chunk doesn't compress at all - which means that it took a long time before it happened the first time. Always fun to find issues with code that has "always" worked and suddenly doesn't any longer.

https://en.wikipedia.org/wiki/LZJB

Servers no longer support the old TLS versions, though. Or if they do, they get minus points on checks like this.

> What would prevent someone from adding a few <script> tags here and there with ads on your site, or code to spy on your users?

Nothing, probably. In a sane country and legal system doing things like that would be illegal. But on the other hand forcing HTTPS means that some users will never be able access it due to old browsers and/or hardware.

More likely though is that I mess up the HTTPS certificates, either by mistake or inaction, and lock out everyone who doesn't dare click the correct sequence of "ignore warning" buttons.

I've already managed to block access for normal users to several sites, several times, by running too old certbot versions, not integrating things properly and whatnot. It's a good thing I'll never use HSTS and HPKP, or I'll make permanent messes.

Ok, seems a bit "modern web" focused. My score:

-25 for not defending against Javascript attacks on my javascript free domain

-40 for not forcing HTTPS

-35 more for not protecting against non-existing javascript being manipulated

Many many means 512 in the article. But that's with lots of room for optimizations.

In addition to the compute power, you also need som other things:

"An attacker would need to hijack the address for a peer that has been offline for 30 days or communicate only with other peers that do not have a cached identity for the hijacked address."

Paid tax and taxable income is public in Sweden, just call Skatteverket (Swedish IRS) and they'll send you the info on anyone you can name.

Edit: more info in Swedish here: https://lawline.se/answers/ar-inkomstdeklarationer-allmanna-...

As a reference, currently 20% of Sweden's area used for crops is organic.

Edit: and 17% of milk production.

Here's my favorite C64 ad in Swedish:

https://www.eiman.tv/temp/C64AlternativetSwedish.jpg

Translated:

"- Where have you been?

- Outside!

- What have you been doing?

- Nothing!

[C64] - the better alternative"

Is there a simple way to test if I've applied the mitigations properly?

Any suggestions on what to use instead of Confluence? Need to run on-prem, it's mostly the wiki-like features I'm interested in.

Has a class action suit ever benefited anyone except the lawyers handling the case?

Yes, this is a genuine question. In every case I've seen, the payout for the class members has been too low to even bother getting it paid out - but perhaps there are exceptions?