m_herrlich

I hear that a lot but not sure how it would work. What if two people are standing there? How do they know what price you saw when you go to pay?

I think it only makes sense for online shoppers (and there it does make sense)

Thanks for sharing this, it actually makes it easy. I somehow convinced myself it was a trick having to do with ages being rounded off to whole numbers, so delta-age can be off by one... anyway I want my day back.

Role Hemp! I miss those days.

now it says unstainable

Also true!

It might not incompetent to assume the audience is not very discerning

Well said. But 'fear of God' only works until religion itself is hijacked.

What a great read, it reminds me of "True Believer" by the great Eric Hoffer. "Stupid" as a word is a translation choice, it would be more effective if they had chosen a less derogatory term. 'True believer' would work better than 'stupid person'.

You can set the wind to 0 and the speed somehow stays at 35 knots, I don't know much about sailing but that can't be right

Some people like to show off their creativity by making tenuous claims that every single thing is racist

Great visualization but lost me at the end when it got a bit too preachy. Turning socioeconomic issues into race issues doesn't help anyone.

With most 2fa systems going through people's cell phones, this is scary.

Jeez, no floppy drive on this laptop? How did people install stuff back then? But thanks, this is inspirational :)

I love this. It's a book about craftsmanship and the philosophy of excellence and knife sharpening is almost incidental (it takes a while to find the part that actually says how to sharpen stuff).

This kind of trade craftsmanship is rare these days but the lessons apply to any kind of productive pursuit.

I can barely finish a leetcode hard in a few hours, let alone something I would call a project. Still, this is an inspiring approach to tackling day to day work in incremental micro-projects.

I love building and developing software, and despite the fun and interesting challenges presented at my last job I quit because of the operations component. We adopted DevOps and it felt like "building" got replaced with "configuring" and managing complex configurations does not tickle my brain at all. Week-long on-call shifts are like being under house arrest 24/7.

I understand the value that developers bring to operational roles, and to some extent making developers feel the pain of their screwups is appropriate. But when DevOps is 80% Ops, you need a fundamentally different kind of developer.

This. Living in a city with this problem, I struggle to imagine a significant causal relationship between housing prices and homelessness. The people I see in tents are not priced out. Magically roll rents back 20 years and they would still be largely unaffordable to this crowd.

How does one even get into the cofounder speed-dating circuit? My background is software engineer, SE manager, occasionally playing PM/TPM at a big company. I want to build something cool. Ideas are cheap, need someone who understands execution.

Maybe pedantic, but this seems like just a heads-up display. AR implies the projected image interacts with real objects in your field of vision. I wouldn't call this AR. Nice HUD though.

I'm sick of the NIMBY card. This should not be in ANYONE'S backyard.

NIMBYism is Houston, Atlanta, etc. buying one-way bus tickets to Seattle and SF. Locals who want the problem solved are not NIMBY's.

Interesting read but they lost me in the last paragraph before the conclusion where they recommend a specific brand and dose of cholesterol supplement.

I had impostor syndrome for years and eventually stopped caring what other people think. I have a fancy title. I say dumb stuff in meetings and smart people roll their eyes. I am an actual impostor now.

This is literally how Snowpiercer begins

anyone else reminded of the Spinal Tap album "Smell the Glove" cover discussion?

> How much more black can it be? None! None more black

Some of the things people currently believe are so patently absurd and obviously made up that labeling them as false would not make much difference. It's would be just one more conspiracy vector.

Even if it did, how could the regulators possibly keep up with the gish gallop of misinformation? There are those who seriously examine and rebut the claims of q-anon et al. but can you imagine a more thankless task?

A better approach is to teach good informational hygiene to kids. Pull from a variety of information sources, weight the ones that correct errors, awareness and taxonomy of cognitive biases, stuff like that.

The obvious result of this will be that news is less accessible and "news" is more accessible. Am I missing something?

Pure speculation but I'd guess the feds were involved. If they didn't pay, it might tell us something about what the NSA (or whoever) is capable of.

(sorry, WAS exploitable)

It's exploitable through apple's web-based login flow used by web sites and Android devices. There are multiple round trips between the user and apple, and state is passed over the wire. The state could be modified at a certain point in the flow to cause the final result (the JWT) to be compromised. The flow is still the same, they seem to have fixed it entirely by adding checks server-side.

The apple endpoint returned an apple-signed jwt with an email of the attacker's choice in the sub field. It didn't even have to be an email associated with an apple id. Relying parties verify the id_token against Apple's cert and that is Apple's guarantee that the email is correct.

You misunderstand the bug, the exploit allows an attacker to generate an apple-signed JWT with an email address of the attacker's choice.