HN user

arein2

45 karma
Posts0
Comments39
View on HN
No posts found.

In my company we worked with a platform launched on local machines that had an admin console where you could execute java code. Pair that with almost everyone not turning on the firewall and all engineers connected to the same wifi network, anyone could do whatever they wanted.

I showed a demo how easy it is to read private ssh keys to the head of infrastructure, and after some months people could connect to network only using custom credentials (ldap) which was good, but also asked us to install "spyware" that among other things checked the firewall. I never installed the "spyware" but nobody pushed me. I didn't think I somehow prevented a disaster or did some heroic deed because everyone in the company was professional and nobody would exploit this. But of course I didn't tell about this to anyone except the infra because such information should not be disclosed until is fixed. And once is fixed why disclose it?

I really miss the Mac checkbox to enable the firewall. On linux I use nftables which is really powerful, but with so many possibilities it is easy to miss something during configuration.

I observed a lot of senior engineers don't have sufficient network knowledge. A lot of people on linux don't use the firewall which is really bad if you work on shared wifi.

Also when running docker images, if you map a port when using docker run (ex. docker run -p 80:80), docker will automatically add firewall rules and bypass the enabled firewall, exposing that port publicly.

Apple gets the hate because almost everybody has an iphone, and because they are one of the worst offenders (making critical parts unavailable and parts pairing).

Of course there are other companies that have similar approach, but if you want to make a change, I am guessing Apple would be the best company to try to force into more nature and consumer friendly practices.

If you are working within a code base that uses fd and fp, then it's expected to preserve the style. However if it's a new project I would use filePointer and fileDescriptor to have consistent naming scheme along all variables.

FPGA N64 3 years ago

I looked at nand2tetris a while ago briefly and I have the impression that it focuses too much on making complex circuits.

The target audience for nand2tetris are people that want to understand how the CPU works, and nand2tetris focuses too much on how to make logic using nand gates leaving other areas uncovered.

I recommend the Ben Eater youtube chamnel, he has a series of videos about building an 8bit computer, that in my opinion is much more informative for a curious person.

The stuff they are doing to trans people - hormones to change the traits, cutting off genitals is very strange, and the people who enable that are sick.

https://i.imgur.com/p1AFgjL.png not sure if this is real, but might be.

The same sick people are giving orphan kids for adoption to pedophile parents in Germany https://www.dw.com/en/berlin-authorities-placed-children-wit...

All this stuff is used to confuse people into submission to nonsense, and after some years when the trans narrative is worn out something new will have to appear, and looks like pedophilia is a good candidate.

I also think we will have implanted cips in the future. Everybody ridicules people that say that Bill Gates wants to cip people because it's too ridiculous. But I think we are not too far away from that (maybe 20 years). Social Credit Score is doing well in China, and there is https://id2020.org/ by Microsoft and Gavi The Vaccine Alliance. When I read the website I can't not laugh. They present the idea in a nice way but if you look trough it is actually just enabling government to have maximum control over you. Also there is this phrase: But doing digital ID right means protecting civil liberties and putting control over personal data back where it belongs...in the hands of the individual.

The math and physics are exact sciences, I am assuming there is no way to fool that.

For the "non-exact" ones there is always possibility of corruption. I think the current establishment for some areas in science is politicised, and there is a system in place - you have to be published in certain prestigious publications to receive money, but if you do not follow the political status quo, everybody will cut ties with you.

I guess more transparency about data collected and videos of experiments would help, but I don't think that's a solution. This is a problem only few worry about, the system is perfectly happy the way it is.

This whole incentive - corruption relation reminds me about greek democracy: You want to chose the leader that doesn't want to be chosen, so that he would not have incentives. The athenians also chose people at random instead of elections, to minimize the chance of picking someone with special interests.

So the author argues that trans people's receptors are inhibited and estrogen helps unihibit them. Why is then transition from female to male allowed, this would inhibit the estrogen and worsen the situation.

Putting kids on hormones is wrong.

I am thinking about the next nareative, and I am pretty sure it's going to be pedophilia.

Not sure why you are downvoted.

Maybe because your comment is not the assuring "vaccines don't cause autism" and people already chose the assuring narative.

Vaccines do cause a lot of bad stuff, however for mass population it makes sense to vaccinate, as the benefits outweight the drawbacks.

Some time ago corruption was direct. Now a lot of corruption and business is done trough "science".

If any science is related to politics or there is some business/financial incentive I just assume it's skewed.

Take for example the harvard study that is responsible for the US obesity. The study found that sugar does not make you fat, because of food conpanies.

Or the guy that discovered the ulcer cause and cure. It was ignored because the fake ulcer treatment industry was a multi billion dollar one.

The "I F***g LOVE science" guys that will beleive anything, because SCIENCE are the worst

The vaccines don’t train the immune system correctly. Usually when you are infected you get a fever and the immune system has to go trough a certain process. With vaccines you get the antibodies for the virus, but this makes the immune system react in a unnatural way.

From the DMCA page:

With potential damages multiplied across millions of users, cloud-computing and user-generated content sites like YouTube, Facebook, or GitHub probably never would have existed without the DMCA (or at least not without passing some of that cost downstream to their users).

Talk about backwards logic

Has anyone got WebRTC’s file sharing to work?

You find a website that creates a link between 2 clients, and the file is shared via https (maybe the file is decrypted at the server and encrypted again using your public key). Sounds easy if both clients don’t have a public IP (to get SCP to work, at least one client needs a public IP) and every browser now has WebRTC.

When you don’t know what to say, better say nothing or I don’t know.

Instead it proceeds to list the best software in class used by the developers. It just sounds stupid to me.

Regarding Docker, I have this opinion because Docker was the trend for a few years, at every conference there was a hipster making a presentation about docker. So I think Docker made containers the cool topic and a lot of people started using containers because of that. And because a lot of people used it, new services/software started appearing around it.

Yes, Docker uses the existing kernel apis for containerization, but the value it added was publicity, ease of use and adoption for containers, not the core features

[dead] 6 years ago

So the “exposed” it’s pictures with him and his daughter?

It has most of the features needed.

Everyone was trying to make a system simple and adopted, but if you want it to be adopted, it's going to need a lot of features. Also Google worked some real magic in getting Kubernetes being supported by all the cloud providers.

It's a framework that will enable you to do what you want, while being the standard.

You could write your script to do that in a simpler way, but most people already know the standard and it's easier for everybody to understand Kubernetes rather than your clever solution.