HN user

tatersolid

1,925 karma

Head of Information Technology located on the NORTH coast of the USA.

Posts68
Comments960
View on HN
blog.cloudflare.com 1d ago

Cloudflare R2 is now Generally Available (2022)

tatersolid
2pts2
www.bleepingcomputer.com 7d ago

Zoom warns of critical account takeover vulnerability

tatersolid
5pts0
third-bit.com 1mo ago

Twelve Ways to Be Wrong About AI-Assisted Coding

tatersolid
2pts0
arstechnica.com 2mo ago

Ebola outbreak with uncommon strain erupts in Congo and Uganda; 65 deaths

tatersolid
12pts0
www.npr.org 3mo ago

Tired of waiting for your EV to charge up? Chinese company has a novel solution

tatersolid
1pts0
krebsonsecurity.com 4mo ago

Feds Disrupt IoT Botnets Behind DDoS Attacks

tatersolid
3pts0
dbushell.com 4mo ago

SMTP on the Edge

tatersolid
1pts0
krebsonsecurity.com 5mo ago

Please Don't Feed the Scattered Lapsus ShinyHunters

tatersolid
2pts0
www.koi.ai 5mo ago

MaliciousCorgi: AI Extensions send your code to China

tatersolid
91pts89
blog.trailofbits.com 5mo ago

Building Cryptographic Agility into Sigstore

tatersolid
2pts0
words.filippo.io 6mo ago

Go.sum Is Not a Lockfile

tatersolid
2pts0
calendar.perfplanet.com 6mo ago

The Curious Case of the Shallow Session SPAs

tatersolid
13pts9
www.themirror.com 6mo ago

Netflix NFL streaming quality issues

tatersolid
25pts7
calendar.perfplanet.com 7mo ago

Fixing the URL params performance penalty

tatersolid
4pts0
blog.trailofbits.com 7mo ago

Catching malicious package releases using a transparency log

tatersolid
6pts0
blog.ipspace.net 8mo ago

Ansible Release 12: The Windows Vista Moment

tatersolid
3pts1
blog.trailofbits.com 8mo ago

The cryptography behind electronic passports

tatersolid
200pts122
blog.cloudflare.com 8mo ago

Keeping the Internet fast and secure: introducing Merkle Tree Certificates

tatersolid
215pts92
www.caranddriver.com 9mo ago

GM Will Phase Out Apple CarPlay and Android Auto on Its Gas-Fed Cars

tatersolid
7pts2
blog.cr.yp.to 9mo ago

Surreptitious Surveillance

tatersolid
2pts0
www.potaroo.net 9mo ago

Geolocation and Starlink

tatersolid
151pts71
ethanmarcotte.com 10mo ago

Against the Protection of Stocking Frames

tatersolid
1pts0
blog.trailofbits.com 10mo ago

Subverting code integrity checks to locally backdoor Signal, 1Password, Slack

tatersolid
9pts0
blog.trailofbits.com 11mo ago

Weaponizing image scaling against production AI systems

tatersolid
494pts131
words.filippo.io 11mo ago

Cross-Site Request Forgery

tatersolid
156pts30
zeropath.com 1y ago

Windows SPNEGO Nightmare: Critical RCE Vulnerability

tatersolid
2pts1
dbushell.com 1y ago

SVG Optimization and Accessibility Basics

tatersolid
3pts0
arstechnica.com 1y ago

Meta AI model can reproduce almost half of Harry Potter book

tatersolid
3pts0
www.wired.com 1y ago

Apple Created a Custom iPhone Camera for F1

tatersolid
7pts0
www.netmeister.org 1y ago

Bootstrapping HTTP/1.1, HTTP/2, and HTTP/3

tatersolid
5pts1

For tracking uniques, why can’t we just set a “first_visit=false” cookie if not present on first request? The number of new unique users is then the number of requests that came in without that cookie in whatever time window. Expiration timeline left as an exercise for the reader (month, week, whatever).

This zero-entropy cookie cannot be linked to a specific person and would not require consent under any privacy law I think.

Why can’t Postgres auto-tune these values itself in 2026? Microsoft SQL Server has mostly done a good job of this since about 2005. It will set parallelism thresholds, soak up as much cache RAM and CPU as the runtime environment allows, etc. It will give RAM back when the OS is under memory pressure, and schedule worker threads based on current resources.

A DB with a privileged supervisor process could generally detect how much free RAM, CPU usage/layout, etc at startup and re-evaluate periodically while running.

This is market-dependent. We offer email OTP login for small business customers because it is “poor man’s SSO”. You’re basically validating the recipient is still at the company, able to receive at their work email.

Larger customers have IT staff and set up OIDC or SAML with us. We don’t add an SSO tax.

Clarification/correction:

The Nagasaki “Fat Man” bomb was the same plutonium implosion design tested at Trinity.

The Hiroshima “Little Boy” bomb was the uranium “gun” design that was never tested before combat use. The physics and engineering were comparably straightforward so the scientists were very sure it would work assuming the Urnaium enrichment was pure enough.

Ferrari Luce 2 months ago

Luxury goods are funny. No way an owner of this $650K car can stomach the same app as the peasant who owns a $250K Ferrari Amalfi.

One thing that gets neglected by policymakers is that our top priority for energy policy should be resiliency. That means distributed systems with varied generation sources, without dependence on foreign suppliers.

This requires regulation unfortunately as it is inherently less efficient and cost optimized than the 1-2 solutions the market will coalesce around.

Solar + batteries are great but if the panels and cells all come from China we can’t base our energy future on that. We’d just be trading the Strait of Hormuz for the Taiwan Strait.

I know the USA can build forests of wind turbines that stretch from horizon to horizon. I’ve seen it in central Indiana. But can we do the same with solar cells and batteries?

Jira is justifiably derided, but Bamboo was truly Atlassian’s entry into the worst software of all time derby. Basically a random event generator masquerading as a CI/CD system.

Not sure what the appeal is for Anthropic.

I’ve observed airlines will do this as well if they have maintenance or gate queues. They will sacrifice 1-2 flights (hours late or even cancelled) to keep many other flights near on-time. Fewer angry customers, better reported average “on-time” metrics.

Concur. My kids and watched a “small” Falcon 9 launch from the mainland park nearest the pad at Cape Canaveral. The noise alone was astonishing; bring binoculars to see detail.

FIPS-140 allowed encryption using 3DES up until Jan 1 2024, and allowed certification of modules containing SHA-1 through the end of 2025. There is some transition-timeline nuance involved, but those examples are in general pretty horrible from a security perspective.

Before the introduction of cars, “poor road engineering practices” wouldn’t result in those deaths.

Death by adverse horse encounter was very common before the 1920s. Not sure how many of those deaths can be blamed on poor quality road engineering. But putting a bunch of humans, carts, and excitable half-ton animals in the same crowded streets seems like poor engineering practice.

Perhaps it was actually an authorized drone?

Here in the USA quad-copter drones are used to inspect powerlines and other infrastructure; I see them a few times per year in my area. I don’t see why they wouldn’t use drones to visually inspect train tracks as well. Very cost effective and energy efficient alternative to manual inspection in a vehicle of some kind.