wutwutwutwut

So postgresql upgrades are a piece of cake if your users doesn't care if your system is available to them. Is this some paradoy of the older claim that MongoDb is a great system if your user doesn't care if their data is lost?

Haha. I would guess that >95% of NET developers have no idea what you are even talking about.

This really seems like the recurring bubble where posters on HN somehow things that a large majority of the industry is hitting F5 on HN while they are instead busy doing actual work.

All databases are ephemeral if the person running it don't read the docs. Your comment is hence fully redundant, as opposed to the default single-node install of any DBMS.

Haha, what. If you run a database without reading the documentation then you're the dangerous part, not the ACID-compliance aspects.

For _any_ database there will be important information only available in the documentation.

> scales linearly with # of cores you have in your cluster.

So if I have 1 machine and increase from 2 to 256 core the throughout will scale linearly without the SSD ever being a bottleneck?

HN text post. Here the text is sometimes lift gray on light gray background it seems. Much better!

So like talking about your 97-year-old grandmother in past tense, as if she was already dead, because she will be in a year or two.

I only use cast iron, some cheap pan i bought at Ikea a decade ago. Never seasoned it. I just put some butter in it and then throw in the eggs.

What issue are we even talking about?

Alright. I think you should remove those logos but I'm no business guy.. Either way I wish you good luck. Sorry if I sounded harsh.

Maybe it differs from company to company and country to country, but at least the company I work for would hesitate enormously before purchasing a service from a company which immediate appears to do something that is illegal in many countries.

This company (is there a company behind it, I couldn't find those details) markets to countries outside of Israel I assume.

Is this style of marketing legal in US? In the country I am in it is quite likely to be illegal due to being deceptive. In my country being technical correct doesn't help if misleading.

(If these companies signed up for the service then or course it would be legal to claim that.)

When is not wanting to have conversations with colleagues unless there's a prearranged meeting a good fit?

Play stupid games, win stupid prizes.

First you claimed it was bogus and now you say the area needed is staggering. I wonder what's comes next.

From the article:

> Sustainable aviation fuel can be made from any of 60 different feedstocks — among them plant oils, algae, greases, fats, waste streams, alcohols, sugars, captured CO2 and other alternative feedstock sources and processes. The Department of Energy estimates that the United States alone has the resources to produce 50–60 billion gallons of SAF per year.

Yeah, there free tier was useless when I tried it. Essentially couldn't send email to anyone, including myself, since their fiercely guarded IP addresses were crap.

Then crippled seems like the perfect word.

It is? I thouht it was the proper word to use to describe software which has limited features in free version so they can sell commercial licenses.

Bitwarden free has TOTP.

Bitwarden free edition is free. The free edition is crippled and doesn't support Yubikey among other things.

Safari leaks very sensitive information (database names) and its on Google? That's bizarre.

I'm so confused now. Did you read about the issue? I wonder if I misunderstood maybe.

As I understand it:

According to the source, Google inserts unique user ID is into database name. An attacker can make a request to Google, pass in this unique user ID into their API and get profile details, for example a photo back.

The attacker does not need access to the database data, only the database name, since the user ID is embedded in the _name_.

You are right it's a leak of a database name, but Google store sensitive data in the database name.

Why would you have to guess when the source describe it. Anyway, funny how you mention "only"- the "only" increase in trackability is to be able to retrieve user information about users using the world's most popular online services. I don't want pornhub to be able to view my photo from Google. Comparing this to CSS fingerprinting seems misinformed at best.

For me, the behavior is:

* Connecting from my own IP with wrong password: It tells me to "Check my master password and try again."

* Connecting from another IP with wrong password: It tells me to "Check your inbox for an email from LastPass: <myemail**@gmail.com>" and also to check my login info.

It's a bit odd that it tells me to check my email even though the master password I provided was incorrect.

Let me preface by saying I'm speculating of course.

> Did the malware wait for me to open my keepass vault and snoop the password then?

It's not impossible at least. There's been vulnerabilities in Keepass RPC which allowed any javascripts on Internet reading your passwords [1]. If a simple javascript can read secrets from keepass, I would not be at all surprised if that has happened.

> the less probable it is that we were all hit with the same malware.

Sure. But there's also some selection bias here, were a lot of people visiting hackernews is affected. On twitter, everyone (more or less) who's discussing this issue links this post, which at least in theory could indicate that the scope of the issue is relatively narrow (compared to the entire internet). It could be that some specific developer tools or libraries have been affected for example (as any of the recent packages on NPM which people claim may have sniffed credentials).

1: https://forum.kee.pm/t/a-critical-security-update-for-keepas...

Could it be that some malware were run on your machines recently (say a few weeks ago) which extracted the master passwords and then used it now? If your LastPass master password was stored on your computer then malware could have collected it and sent it off to some attacker.

Or could it be that all of you guys are using the same router, same ISP, same anything-else, which has snooped on traffic and collected the credential?

Couldn't it just be that someone got a copy of the password some years ago and now sold the list of credentials to someone else, who then tried to use it? Maybe the original owner of the list didn't realize some of the credentials was for LastPass, for example.

I'm still seeing hackers trying to log on using passwords I haven't used in ~10 years, because it's on a list somewhere.

> Will they learn without someone taking them to court over this?

Only on hackernews I see this level of crazyness. You need to reduce your caffein intake drastically.

If the box is designed for that purpose then it's designed for that purpose. Then it's not plain wrong. The article is not saying that all the kids have an equal start in life so not sure where you got that from.

Your reasoning is like saying Red Cross isn't designed to reduce the suffering of people because there are still suffering people. It's an odd claim to make.

I just looked at VPN section and as a Mullvad user I disagree with you.