HNHacker News
TopNewBestAskShowJobs

pigbearpig

790 karma · joined May 19, 2021

submissionscomments
pigbearpig··on Progressive JSON
That’s not going to make the front page of HN though.
pigbearpig··on Progressive JSON
Sure, if you’re the 0.00001% that need that. It’s going to be over engineering for most cases. There are so many simpler and easier to support things that can be done before trying this sort of thing.

Following the example, why is all the data in one giant request? Is the DB query efficient? Is the DB sized correctly? How about some caching? All boring, but if rather support and train someone on boring stuff.

pigbearpig··on DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage
Not when "off the shelf" is the motto. They'd still have to outsource the development and at that point would be questioned why spending that much money when Telemessage sells the product.

Unfortunately, the financial structure doesn't really make it easy for custom DoD software.

pigbearpig··on DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage
From the Wired article, it may not have even been a mistake, depending on the version of Spring Boot.

"Spring Boot Actuator. “Up until version 1.5 (released in 2017), the /heapdump endpoint was configured as publicly exposed and accessible without authentication by default."

pigbearpig··on DDoSecrets publishes 410 GB of heap dumps, hacked from TeleMessage
From the Wired article: "The archive server is programmed in Java and is built using Spring Boot, an open source framework for creating Java applications. Spring Boot includes a set of features called Actuator that helps developers monitor and debug their applications. One of these features is the heap dump endpoint,"

So the heapdumps being available is a Spring Boot feature so it does not appear to be malicious.

pigbearpig··on Zoom outage caused by accidental 'shutting down' of the zoom.us domain
Could it have been something as simple as "hey, zoonn.us is violating Zoom's copyright, please block it" and then someone typos "zoom.us".
pigbearpig··on MLB says Yankees’ new “torpedo bats” are legal and likely coming
Two players used the bats. I'm not a Yankees fan, but all these articles are making it seem like the bats are the reason. That does not explain why the rest of the lineup went off. Perhaps poor pitching is the better explanation. Too much is being made of these bats.

Also, golf club technology basically does the same thing. Everything is about making a bigger sweet spot. Oversize drivers and irons didn't seem to ruin the game.

pigbearpig··on Feds Link Cyberheist to 2022 LastPass Hacks
You have to provide the secret key to each device on initial setup. After that, you just need your password.
pigbearpig··on Ask for no, don't ask for yes (2022)
Agree, if someone did this to me and I didn't know them, I would find it presumptuous and annoying. If I had worked with them and had trust and I knew they were doing it out of respect for my time, then that's a different story.
pigbearpig··on Build your own SQLite in Rust, Part 5: Evaluating queries
I think you’re looking for LiteFS

https://fly.io/blog/introducing-litefs/

pigbearpig··on Thomson Reuters wins first major AI copyright case in the US
" court’s ruling that West’s headnotes are copyrightable even when they merely quote a court opinion verbatim"

That is the opposite of the ruling. The judge said the ones that summarize and pick out the important parts are copyrightable and specifically excludes the headnotes that quote court opinion verbatim.

The judge:

"But I am still not granting summary judgment on any headnotes that are verbatim copies of the case opinion (for reasons that I explain below)"

pigbearpig··on Bill requiring US agencies to share source code with each other becomes law
> The new law doesn’t apply to classified code, national security systems or code that would post privacy risks if shared.

Seems pretty clear they would.

pigbearpig··on Touchscreens are out, and tactile controls are back
This vid talks about how the MD-80 has different types of switches for different functions. Not sure if intentional, but the ability to know if you have the wrong switch by feel seems like a great benefit.

https://youtu.be/7R0CViDUBFs?t=429

Moment I question is at 7:09, but whole vid is quite interesting.

pigbearpig··on Counterfeit Cisco Devices Discovered in US Military Combat Zones
That procurement officer could be less than a year removed from high school and in charge of ordering anything from ballpoint pens to medical devices and weapons. They aren't experts in what they are purchasing all the time. I doubt there are specific details on how these got ordered, but there are scenarios that could lead to little questioning.
pigbearpig··on Counterfeit Cisco Devices Discovered in US Military Combat Zones
There are many variables to procurement and all have various levels of scrutiny. I'm not an expert, but here are a few routes to paint a picture.

If it's a part of an "official" system/package from a big defense contractor there's little chance it's counterfeit. There's quite of bit of scrutiny there, unless the contractor providing that system is buying these off Amazon which seems the lest likely scenario. But maybe a small company setup with the sole purpose of winning the bid for an F-15 simulator bids so low that they do buy this stuff, it's possible.

As others mentioned, there are layers of rules about justification if you don't go for the lowest price, preference for small business, and getting bids.

Finally, if you just need something, the person ordering the item isn't the person buying the item. The IT professional orders a Cisco router, provides some possible places to source it and turns that into contracting/procurement. The procurement team will then actually go buy it and often they will go try to find the cheapest option and they're not experts so they'll often buy the wrong damn thing entirely. Want a 500ft roll of yellow shielded Cat6? Here's 1000ft of blue UTP Cat3 because "it was cheaper".

pigbearpig··on The Adwaita Icon Theme no longer follows the FDO spec, breaking e.g. KDE apps
I was struggling to find the word that was appropriate, but you nailed it with insufferable. I can't imagine responding with such disdain for developers and users to a sincere request.
pigbearpig··on Ex-Amazon exec claims she was asked to ignore copyright law in race to AI
“The complaint argues the plan was designed to ensure Ghaderi's failure.

For example, the first goal required her to create a plan to reduce data storage costs across the entire AmazonBot web crawling organization by 75 percent in just eight workdays.”

If that is true, that’s pretty absurd.

pigbearpig··on PuTTY vulnerability vuln-p521-bias
The answer is in the link. Sixth paragraph, right above the horizontal rule. Couldn't be clearer.
pigbearpig··on NIST: Personal Identity Verification (PIV) of Federal Employees and Contractors
Maybe, just maybe it’s possible the US Government is an enormous entity and there could be some inconsistencies.
pigbearpig··on The Reddits
I don’t really remember delicious, but what would the difference be from something like https://pinboard.in/popular/ ? I was under the impression that’s basically a clone. Was it just a different aesthetic?
pigbearpig··on Walmart is migrating the remaining F# code into Java
It always amazes me how nearly every job posting somehow acts like Java is an acronym.

At my company I’ve asked that engineers proofread job descriptions so we don’t look stupid, but no, we still post for JAVA, NODE, and C SHARP.

pigbearpig··on Remote work doesn't seem to affect productivity, Fed study finds
Bill might like a long commute as much as Gladys likes to work from home. Hard to call Bill a sucker in that case.
pigbearpig··on We are going to start charging for dedicated IPv4 in January 1st
That was posted 10 weeks ago. It also mentions that they list the charge for ipv4, but never actually billed for it.

The subject seems editorialized.

pigbearpig··on YouTube's Anti-Adblock and uBlock Origin
That review is completely respectable and something I would leave if an extension added popups asking for money to my browsing experience.
pigbearpig··on The Mystery of the Bloomfield Bridge
I think you're jumping to a few conclusions. How does foot traffic annoy them exactly? Who isn't annoyed by litter? There are no more kids. If a bridge that I and no one else uses, means that I have to pick up wind-blown litter everyday, I'd complain a bit too.
pigbearpig··on The Mystery of the Bloomfield Bridge
How does it invalidate the claim? I don't see anything saying the bridge is used. If you mean that garbage collects, I'm assuming that to mean that wind blown trash (probably from the highway) collects and they clean it up.
pigbearpig··on The Mystery of the Bloomfield Bridge
This bridge has elements that make me think it's beyond ADA. The bridge could have been closer to the intersection. It could have both stairs and a ramp.
pigbearpig··on Outlook now ignores Windows' Default Browser and opens links in Edge by default
My first thought was “Isn’t this so clearly the same behavior that got them an anti-trust violation 25 years ago”
pigbearpig··on OPNsense: Open-source security platform
I just got a Protectli Vault FW4B to run it on. I wanted something small and fanless. Didn't even realize Celeron's were still made. Been running it 2 years now with no problems. Even that hardware (8GB RAM / 32GB msata) is overkill for home network.

Protectli was nice to buy from, but I do think there's a lot of similar options.

https://protectli.com/product/fw4b/

pigbearpig··on Microsoft Edge removes ability to delete Sync Data from Cloud
This is totally a non-issue and fake headline. You can still delete it, they just made the feature better.
← PreviousPage 2 of 6Next →