HN user

weaksauce

6,855 karma

five nine plus r at gmail

https://www.github.com/fiveNinePlusR/tabist

Posts61
Comments3,013
View on HN
lwn.net 1mo ago

Linux and Secure Boot certificate expiration (2025)

weaksauce
130pts66
railsatscale.com 1mo ago

One engine, many tools – Introducing Rubydex

weaksauce
2pts0
byroot.github.io 3mo ago

The Missing Bundler Features

weaksauce
3pts0
byroot.github.io 3mo ago

Optimizing Ruby Path Methods

weaksauce
134pts64
hackingpassion.com 3mo ago

Windows Defender Is Being Used to Hack Windows

weaksauce
16pts3
matduggan.com 5mo ago

GitButler CLI Is Good

weaksauce
3pts0
www.blundergoat.com 5mo ago

AI makes the easy part easier and the hard part harder

weaksauce
532pts366
privacy.ca.gov 6mo ago

The Delete Act

weaksauce
211pts88
twitter.com 7mo ago

Basecamp to Phase Out Once Business Model

weaksauce
2pts0
usage.jdx.dev 11mo ago

Usage – a shell completion / manpage / help documentation generator

weaksauce
34pts6
mensfeld.pl 1y ago

I Spent Months Solving the Ruby's Most Annoying Gem Installation Problem

weaksauce
3pts0
www.ruby-lang.org 1y ago

Ruby 3.4 Released

weaksauce
2pts1
tomazos.com 1y ago

First-Hand Account of "The Undefined Behavior Question" Incident [pdf]

weaksauce
68pts21
matduggan.com 1y ago

How Mobile Networks Work

weaksauce
3pts0
matduggan.com 2y ago

Sears

weaksauce
2pts0
matduggan.com 2y ago

A Eulogy for DevOps

weaksauce
248pts165
amber-lang.com 2y ago

Amber: Programming language compiled to Bash

weaksauce
463pts314
matduggan.com 2y ago

Tech Support Stories – Part 2

weaksauce
2pts0
arstechnica.com 2y ago

We now know how cats purr–why they purr is still up for debate

weaksauce
2pts0
www.science.org 3y ago

Ionocaloric refrigeration cycle

weaksauce
44pts14
twitter.com 4y ago

Kasper Timm Hansen Resigns from Rails Core

weaksauce
2pts2
wattenberger.com 6y ago

Thinking in React Hooks

weaksauce
6pts0
ericasadun.com 7y ago

The Beauty of Swift 5 String Interpolation

weaksauce
4pts0
uk.reuters.com 9y ago

Apple receives permit in California to test self-driving cars

weaksauce
367pts307
medium.com 10y ago

David Ogilvy’s unconventional rules for getting clients

weaksauce
4pts1
www.youtube.com 12y ago

Alexis Ohanian, "Without Their Permission" | Talks at Google

weaksauce
1pts0
news.cnet.com 13y ago

Congresswoman Turns to Reddit for Legislative Advice

weaksauce
3pts2
www.gelsight.com 14y ago

Novel 2 micron resolution surface scanner

weaksauce
1pts0
marakana.com 14y ago

Git - Tips and Tricks for Ruby Teams

weaksauce
1pts0
www.edn.com 15y ago

Pranking bosses, Friends, and Competitors

weaksauce
1pts0

I was speaking in general terms of the trend that spanned a long time and not to the rapid lefward swing in a few recent elections of a few candidates... the general trend of the party went rightward even if there are outliers. those elections were a reaction to how disastrous the republicans have been these past two years.

Also, the Democrat party has steadily moved leftwards over time.

the only way someone thinks this is if they have fox news blaring all day every day. the dems keep moving rightward step by step to appeal to "moderates" while the right wing keep moving the overton window even further right.

The point being made is: If one isn't re-entering their passphrase after suspend, how are they surprised that the encryption keys are somewhere in memory during suspend?

If that was the case for the people using the debian extra secure extension that should have wiped the memory clean then someone would have found this bug much earlier than two years. Their password was required to be re-entered even though the key was still in memory somewhere.

The thing that stuck with me is the awful reasoning by the judge: "Judge rules Fenwick Island's corporate voting does not dilute human votes"

How could corporations voting not dilute the human votes by the very nature and reason of voting in the first place?

1488 is a white supremacist racist dogwhistle.

dhh has been parroting tony robbins stuff and other vaguely white supremacist stuff on his blog.

probably a hobby but a 421 is a high performance dual engine with a pressurized cabin... that's a lot of plane and dual engines are difficult to fly with a lot of technical knowledge and practice to handle an engine out procedure safely. this kind of plane very commonly kills doctors and other high earning individuals that don't have the time to keep their time in the plane to stay recent.

a lot of time people do buy multi engine planes for travel so it's not certain it was just a hobby.

typically attacks happen when the URL for the source code or binary gets changed significantly... or like in this attack someone adds something to the post_install section which does something like add an npm install command. a lot of updates for binaries are just version bumps and SHA hashes changing which are easy to vet if you trust the source to not be compromised.

Love systemd timers 2 months ago

the thing for me is I started using the init system and while it was fine it always felt brittle for some reason. systemd feels solid and robust like it was well thought out. maybe i'm off base and didn't know how to use init effectively but it was my feeling.

that and cron always felt fragile too with a lot of quirks and limitations you had to work around instead of being a robust thing from the start.

Love systemd timers 2 months ago

you can organize them however you want on your system and then use symlinks to make them available.

there's also `systemctl --all list-timers` to view them.

Local Git remotes 2 months ago

It's useful for me to have a "production" website remote that i just run on my computer for myself locally. rsync could also work but tagging with rollbacks make it easier if something goes wrong. it's not a common thing but it's nice to have that as an option. just because you can't see the utility of it doesn't make it useless

they could do it like they do it for accessibility settings. you have to opt in for an app and you need to know damn well if it is a reputable app before giving those controls over. there's enough friction in that that it is not done by many apps but not hard enough that it's a huge ask to whitelist the app.

Sadly marketing drones think everybody wants a Tesla-style "everything is a screen" design whereas a 1999 Toyota pretty much had it right.

they also had to redesign the door handle and people have gotten stuck in the cars because of that and died. not just one isolated incident... more than one case of the car door not working because it's electrical only and the backup physical release mechanism is under a door panel you need to pop off and reach inside to pull after you just got into an accident and are physically disoriented.

looked into it more and the docs say that an index out of bounds will return nil. also says if offset == size and length >= 0 it will return an empty array.

``` If offset == self.size and size >= 0, returns a new empty array.

If size is negative, returns nil. ```

either way if you are doing stuff with arrays and not checking bounds you can throw an `Array(some_array.slice(x, x+100))` and it will always behave.

the docs say... if index is out of range return nil. the edge case is that if you specify the exact end index of the array and want a slice of that index to 100 it will return an empty array. if you go out of bounds it informs you that you are out of bounds with nil. not sure it's the best api but probably is mimicking some C api somewhere as a lot of ruby does that. that said it will never error on this alone but it will almost certainly error if you chain it with something not expecting nil.

The easiest way to get around that if you are not carefully using the ranges would be to do `Array(array.slice(a, b))` as that will guarantee an array even if it's invalid. you could override slice if you really wanted to but that would be a performance penalty if you are doing it often.

because it's meant to be a more functional language. if slicing an array out of bounds threw an error it would be java.

[].slice(0, 100).each do |x| puts x end

that shouldn't be an error and it seems to be the principle of least surprise imo.

It does seem like linux is having its moment right now. there's the money and effort valve is putting into KDE making the steamdeck and steammachine polished for their hardware which helps all users of KDE. cachyos is making having a rolling distro really smooth and snappy on old hardware and making games work mostly ootb. stuff like winboat and wine will let you use the few windows apps you need. you are kinda stuck though if you want to use something like fusion360 or solidworks. freecad has improved quite a bit but it's still like gimp where it's slightly worse UX in a lot of ways.

i think the facts of the matter are that a gmail vulnerability is on the very low likelihood kind of event. they wouldn't burn their insanely valuable vulnerability on showing how much of a fratboy kash is. the most likely possibility is that he either clicked on something dumb and gave access through phishing(really bad) or had a really weak password without 2fa(also really bad).