problems

Calling a 1.5L Prius engine "expensive" is a bit of a stretch, you can buy a lightly used engine for ~$500.

Compare with say Tesla where a single motor runs you over $3000 and they call it "cheap".

Interesting, I often drop caffeine for a week or so (without any real conceited effort, typically just when I'm sick or on vacation) and any withdrawal seems gone after a few days but then restart it within a week because it's just so damn good, especially when you only sleep 4-6 hours a night which is... every night for me.

It's not just a nagging doubt, it's adding a "gap" to your resume - I've heard many employers view any sort of exclusive self-employment as basically that and it's something that actively keeps me hesitating.

How much is a normal % of take home pay to go to your mortgage?

I'm at about 30% and it's my only debt.

I think you're confusing some sort of emotional pain which may deserve analysis with physical pain which analysis cannot bring any insights from - it's just pain. Nothing revolutionary.

This seems to me to be entirely backwards. If you appreciate creativity, don't you want to have as much time as possible to experience and enjoy the world around you? To learn? To create? Why would you spend the day stuck in bed feeling like shit, unable to do anything but watch TV when you could easily solve that and do more?

And in the best case (and almost 100% of the time) you'll just heal anyways, but won't give a shit about the pain and will actually be able to do stuff.

I think I'll roll that dice, thanks anyways. I'm generally able to restrict myself without the need for pain.

Yeah, I question the idea that it's beneficial to experience pain - why should I? Especially if it's going to cost me days of my life that I could do something with. Maybe not go out, but at least be able to catch up on some of the more passive content... seems like a needless waste of life.

How so? Texting someone isn't distracting to anyone around you... unless I'm missing something?

Are you really that easily bothered by other people that them enjoying something in a different way than you detracts from your experience?

What's with the incessant need to tell other people how to enjoy an experience?

I'm reminded of this xkcd comic: https://xkcd.com/1314/

For even the nastiest of obfuscators there are often attempts at deobfuscators...

https://github.com/kirschju/demovfuscator

I'm a programmer who's currently in a union position - I want out. I pay dues and get basically nothing for them, as developers we're generally in decent negotiating positions. Unions are great when you're not in that position, but just an extra cost when you are.

Run your mail server on a different provider and configure it to strip the relay headers - some mail relay services may also work for this purpose.

I see people on this very website claim they can probably implement an Uber clone in a weekend or two - and they're probably right, the basics of such a service are quite simple, but perfecting it and marketing it are far harder.

Is that my problem though as a freelance developer? Should I invest effort in something knowing it will fail because it can't possibly be marketed successfully against competitors?

Yeah, I put a good pile of reverse engineering work into this thing at one point - used Flare and Flasm along with a lighttpd proxy to replace their swfs with my own.

Yes, CloudFlare even provides official lists for this purpose.

https://www.cloudflare.com/ips/

IPv4 space is far too small not to use this. Often times if an attacker has determined your provider in the past, they may be able to leverage that information and scan only nearby ranges.

Other common anti-DDoS proxy bypass tactics:

- direct.* subdomain used to be used by default on CloudFlare for a direct route to the server

- Check headers in outgoing emails for an origin IP (this one gets way too many sites)

- CloudFlare only recently got websocket support - check if their websocket servers are secured or not

- Check for an MX record

- Use DNS bruteforcing tools to attempt to find other services

I fail to see how it'd be good for this use - do they require a number of friends or something? I have 4 Facebook accounts for faking out exactly this kind of stuff, but none with any real information.

So they didn't bother to check if the add to group message was from someone in the group?

I mean no offense to the developers, but this seems like a fairly basic oversight and quite concerning that respected and popular products didn't get this level of review until now.

No crazy cryptographic mess involving improper ordering of authentication or weird random number generation, this is a simple logic bug. One that I'm sure many of us would have considered if we were implementing it, things like this do get missed too of course, but enough eyes on the design could have caught this.

Nice method, but for future record you don't really need to mess with mains to hook up Sense or OpenEnergyMonitor, they use inductive current clamps which work by detecting the field around the a single terminal of your incoming mains. Pretty much as safe as it gets with this stuff.

30 Rock also pushed Obama a bit if I recall correctly and before the election - but they also cracked a joke about how Tina Fey's character would tell everyone she was voting for Obama but then secretly vote Republican.

So think what you will of that.

Indeed - I think ad-paid centralization (largely for ease of use sake) effectively drove a lot of great stuff off the internet.

And stuff like Wikipedia which runs ad free off donations.

Honestly, I'm okay with that, most info I get is from Wikipedia, scientific papers or tiny random blogs. What sites are you afraid of it killing? Junk news sites? Reddit? I can live without them. I struggle to think of any with significant value.

This is not the case anymore.

https://github.com/xdarklight/mktplinkfw3/blob/master/README...

Their firmwares for newer devices do indeed include signature support. A malicious firmware on their server will fail the signature check and not be flashed. Signature checks occur only in the flasher, not in the bootloader, but that would require physical access to the device, at which point all bets are off anyways.

What makes you think they're unsigned? Surely there's at least some basic checksumming if not cryptographic signatures inside of that blob? There's no reason to even bother with delivering it over https if you put a good signature on the blob itself.

Depends how you look at it - ditching the planet might be our only shot at a "long run".

So, botnet C&C with no takedowns and more efficient and lower risk than servers on Tor? Nice.

If they're just doing so by essentially flipping between bid and ask prices they may also be called scalpers.

https://www.investopedia.com/terms/s/scalpers.asp

It really is - any many people focus on its features as a GUI library, but it goes so much beyond that. Providing data structures, concurrency primitives, file management, networking, high performance drawing, etc. And it provides all these in a cross platform way that often feels nicer than other C++ libraries in my experience. Sometimes these are less robust than alternatives, but often they're much more elegant.

Interesting - I've never cared for professional reviewers or anything of the sort - instead I just look for the biggest user review site around, which is currently probably Steam and read the comments a bit and then if I'm on the borderline I'll watch a YouTube video of actual gameplay. I can understand why they existed before, but what's the benefit of professional reviewers in this day and age, when it's far easier to determine what the common opinion of something will be?

Keyboards, sound cards will work great without any special drivers typically.