HN user

zurn

2,457 karma
Posts37
Comments1,241
View on HN
nakedsecurity.sophos.com 3y ago

OpenSSL fixes High Severity data-stealing bug – patch now

zurn
9pts1
arstechnica.com 6y ago

Linux on Laptops: Asus Zephyrus G14 with Ryzen 9 4900HS

zurn
1pts0
www.theregister.co.uk 7y ago

Azure goes super-secure by borking MFA in Europe and Asia

zurn
4pts1
blog.hansenpartnership.com 9y ago

TPM2 and Linux

zurn
1pts0
www.colinsteele.org 9y ago

Building the Next-Gen Travel Agency Using AWS, Clojure and a Comically Small Team

zurn
3pts1
news.ycombinator.com 9y ago

Ask HN: Linux distribution with security support for Raspberry Pi?

zurn
10pts10
news.harvard.edu 10y ago

Harvard scholars identify tenets of America’s built-in inequity, offer answers

zurn
4pts0
kevinchen.co 10y ago

Postmortem: Server compromised due to publicly accessible Redis

zurn
84pts48
motherboard.vice.com 10y ago

Finally, a 'Reasonably-Secure' Operating System: Qubes R3

zurn
4pts1
dymaxion.org 10y ago

Please Stop Writing Secure Messaging Tools

zurn
69pts82
developerblog.redhat.com 10y ago

Writing an application that supports DNSSEC in RHEL and Fedora

zurn
2pts1
sourceware.org 10y ago

Support for DNSSEC in the GNU C Library

zurn
2pts1
www.phoronix.com 10y ago

Intel Is Making a High-Performance Software Rasterizer for Mesa

zurn
5pts0
github.com 10y ago

Duktape – embeddable JavaScript engine with a focus on portability and compact footprint

zurn
1pts2
www.netsurf-browser.org 10y ago

NetSurf: Small, fast, free web browser

zurn
156pts70
europa.eu 11y ago

EU final agreement for network neutrality and free roaming

zurn
4pts2
www.globenewswire.com 11y ago

SSH Communications Security Announces Patent Enforcement Action

zurn
40pts17
www.amd.com 11y ago

Mantle graphics API programming guide [pdf]

zurn
2pts1
www.realworldtech.com 11y ago

Linus: Parallel computing is a huge waste of everybody's time

zurn
118pts128
www.cnet.com 11y ago

Intel snared in $6B Israel divestiture hoax

zurn
1pts0
code.google.com 11y ago

Android hiding GSM crypto status, issue open since 2009

zurn
1pts0
www.exploit-db.com 12y ago

Magic packet to reactivate backdoor after faked patch by Netgear/Cisco/Linksys

zurn
2pts0
news.ycombinator.com 12y ago

Was Heartbleed a fuzzing success or failure?

zurn
3pts0
www.usenix.org 12y ago

Presentations from USENIX NSDI '14

zurn
1pts0
www.educatedguesswork.org 12y ago

Boeing 787 control and in-cabin entertainment networks are/were connected (2008)

zurn
10pts1
www.theverge.com 12y ago

Can you make gasoline that slows down global warming? Google Ventures thinks so

zurn
1pts1
lists.debian.org 12y ago

Multiple pre-auth remote vulnerabilities in Openswan/Libreswan IPSec

zurn
1pts0
boingboing.net 12y ago

Microsoft will no longer read your email without a court order

zurn
1pts0
arstechnica.com 12y ago

Microsoft breaks into leaker employee's Hotmail without warrant

zurn
9pts3
yle.fi 12y ago

Finnish team makes diabetes vaccine breakthrough

zurn
6pts1

Looks like the BeBox motherboard didn't have the external L2 in the first place.

Besides web sources, logic dictates this as well: Since dual-cpu was its selling point, it wouldn't make sense to ship a disabled L2 implementaton on the mobo at extra cost. There was no single-cpu model.

> Machine -> Asm -> C -> Python -> LLM (Human language)

Something that you neglected to mention is, with every abstraction layer up to Python, everything is predictable and repeatable.

As long as you consider C and dragons flying out of your nose predictable.

(Insert similar quip about hardware)

Electricity is fungible, so when big operators buy wind-only power from the market, the rest of the demand uses the non-green power left in the pool.

(It still potentially increases wind buildout so it can have indirect positive impact especially if wind is not competitive at the same prices with fossils)

Also the accounting is "we bought as many MWh of wind power as we used" over some time window, so in reality they are using fossil power in peaks, competing with everyone else and placing pressure to expand fossil based capacity.

These are also the reasons it's probably better to talk about the electricity used instead of trying to translate it to emissions by proxy, which is prone to being gamed due to abovementioned reasons.

(Also the number is high rather than low if you consider that all the individual slices of the emisison pie at this subdivision granularity are pretty small)

JSON Schema Store 3 years ago

There are some YAML based schemas there too. How does this work, is there a canonical YAML->JSON transformation, or does JSON schema spec have explicit YAML support?

edit: skipping the theoretical foundations, there seems to be at least this tool that claims to validate yaml against json schema: https://github.com/json-schema-everywhere/pajv

Buildings lose value over time in most places. And in many places where they don't, including renovation investments in the picture results shows declining value.

Doesn't the shielding help prevent heat output only with short duration power use peaks? If we imagine the conductor is heating at the same rate 24/7, all of the heat must flow out of the cable at the same rate it's getting generated unless the conductor's temperature can increase indefinitely.

Coast on Clojure 4 years ago

The x86 monoculture has shaken around a bit. But surprisingly it seems there has been friction even on the JVM side, partly because of Docker style nonportable containers had time to cement in the x86 monoculture period.

We're so far behind in replacing fossils and fighting off global warming disaster, that we should do both. Nuclear has worse bang for the buck though and decades long lead times. But as long as it can be financed without displacing more capital efficient renewables we should still build nuclear as well.

Network segregation is your last line of defense. Having anything rely on it is a recipe for a bad security that's always just one step away from someone getting around it due to misconfiguration, request forgery, networks configuration changes over time, malware transiting over via VPNs etc. And of course from the SW vendor POV they don't know if the customer env employs this defense in depth layer, so it's really irresponsible to rely on it. Like is amply demonstrated here...

If a product upon unboxing promptly flops on its back with "come here internet" access controls, even if by good fortune it's saved by your network ACLs, it's time to put it back in the box and return it.

Interesting that ES is still such a widely used component, this is a huge red flag about a software product. And of course there are lots of other regular complaints about it (eg uses a lot of memory and wants a 3-node cluster so costs 4 figures/mo to run on AWS).

Your impressions are cordect: DynamoDB is quite low-level and more like a DB kit than ready to use DB, for most applications it's better to use something else.

WebGL Water 5 years ago

I just went through comments from all the times this has been reposted in the past 10 years, and this is (so far) the first time there aren't any complaints about not working in their browser! I'm counting just the submissions that got >10 comments.

The previous time, from 2017[1], was already quite good - there was only a single complaint, and that was about someone missing a WebGL extension this needs for floating point textures.

[1] https://news.ycombinator.com/item?id=14432809

Seems like a possibly good business strategy for w3techs.

They publish numbers that are very surprising to most people, like Python and JS are used on 1.5% of sites vs PHP on 79%, then offer some very handwavy text about the data ("In order to obtain any information from websites, we rely on the websites themselves"), and then offer a full report for $$$ where they probably more fully own up to how they come up with this clearly flawed data.

In the end the paying customer sees the shortcomings of the data, feels relieved that their assumptions weren't invalidated and has invested some money to doing due diligence.

People living in arctic areas with multi-month polar night generally already have some other heating energy source, as it gets a bit chilly. But in the summer they can have 24/7 solar energy!

There's not many people living in these areas though like the sibling comment points out.

Many of the loads discussed, eg washing machines, are also reasonable matches a local solar power source, as it's much cheaper to buffer hot water than have large batteries.

(Water heating dominates the energy used in those, the mechanical sloshing around takes trivial power compared to it).

Actually i misread the example as using println instead of str because my brain had been primed by println in the headline!