Readit News logoReadit News
UnoriginalGuy commented on Microsoft plots the end of Visual Basic   thurrott.com/dev/232268/m... · Posted by u/bluedino
Vaslo · 6 years ago
Wonder what is going to happen to Visual Basic for Applications? I hope it pushes Microsoft to move toward a new language like Python to automate Excel.
UnoriginalGuy · 6 years ago
The two are completely district languages. Kind of like comparing Java with JavaScript.

I'm sure in general Microsoft would love to scrap VB in Excel but there's too many companies that run entire areas of business on it, or the whole business itself.

It is the typical legacy/back compat problem. Python or even Powershell would be a vast improvement, but you're going against billions in sunk cost/skills/knowledge.

VB.Net was slowly losing popularity, VB in Excel isn't.

UnoriginalGuy commented on PHP-FPM remote code execution bug exploited in the wild   github.com/neex/phuip-fpi... · Posted by u/orangepanda
heavyset_go · 6 years ago
This is a case study in why you shouldn't expose your self-hosted services to the internet.
UnoriginalGuy · 6 years ago
Google has gone the opposite direction.

I feel like throwing everything behind a VPN and pretending it is secure is a crux.

Several famous break-ins over the last ten years have hypothetically been on the inside of that wall.

Better to isolate services from each other limiting cross service jumping, than to build security around a single point of failure.

UnoriginalGuy commented on If You Lose Your iPhone, You Can’t Pay Your Apple Card Bill on the Web   buzzfeednews.com/article/... · Posted by u/minimaxir
UnoriginalGuy · 6 years ago
Last week we had this exact issue.

We added an iPad and tried to purchase something, but the only card on file was long since expired and thrown away.

But in order to verify the account we had to enter the card's digits, which we did not have, and we couldn't add a new card because we hadn't verified the old one.

In other words we were stuck. Had to contact Apple support. Took several days to resolve.

UnoriginalGuy commented on The History of ‘Easter Eggs’   nytimes.com/2019/08/08/te... · Posted by u/lelf
UnoriginalGuy · 6 years ago
Depressingly every place I've worked has had policies against Easter Eggs.

I guess it is part of becoming a more professional industry. It we did add an Easter Egg it would likely need a spec, docs, owner, and code review.

UnoriginalGuy commented on Capital One Says Breach Hit 100M Individuals in U.S   bloomberg.com/news/articl... · Posted by u/pseudolus
shiftpgdn · 6 years ago
> hacked into a cloud-computing company server, federal prosecutors in Seattle said

> the cloud-computing company, on whose servers Capital One rented space, wasn’t identified in court papers.

Does this feel like it was just an S3 bucket with permissions set incorrectly? I've come across sensitive documents in S3 buckets with a well crafted google search.

UnoriginalGuy · 6 years ago
Kind of like the AT&T "hack" wherein just changing the url leaked other customers info.

They were still successfully prosecuted though. And AT&T received no punishment.

When a company says jump the USG asks how high.

UnoriginalGuy commented on Ask HN: Why is Google search different on mobile Firefox compared to Chrome?    · Posted by u/1drr
theturtletalks · 6 years ago
I think his point is that Firefox should integrate with AMP. Now I’m not sure if Google puts obstacles in place to make this harder, but wasn’t AMP recently open sourced?
UnoriginalGuy · 6 years ago
AMP is built on Google's CDN, and the standard is controlled by Google for Google's own self interests.

It being "open source" or not kind of misses the bigger picture. If Google had any interest in AMP being a web standard they would have sent the spec out, and helped fund a neutral org to run it.

UnoriginalGuy commented on Boeing 737 Max Simulators Are in High Demand, But Flawed   nytimes.com/2019/05/17/bu... · Posted by u/howard941
FabHK · 7 years ago
Hmm, I see. So the Boeing VP was claiming that a pilot following procedures properly would've saved the plane, and (at that time, after the first crash) the test pilot (also from Boeing) agreed. Makes sense now, thanks.
UnoriginalGuy · 7 years ago
And then a second crash occurred where they followed Boeing's procedure, it didn't work, were forced to diverge and then crashed.

Boeing's procedure only works if you catch it quickly. If you let MCAS trim the aircraft too much it is difficult to recover, particularly at low altitude.

UnoriginalGuy commented on Ask HN: Favorite ergonomic/mechanical keyboard for programming and typing?    · Posted by u/dattl
UnoriginalGuy · 7 years ago
Mechanical keyboards require deeper compression and are thus the opposite of what you want. They'll worsen strain.

Have you checked your chair/table height, monitor height, and are you placing both feet on the floor? You might be able to mitigate this without buying things.

UnoriginalGuy commented on Boeing Believed a 737 Max Warning Light Was Standard   nytimes.com/2019/05/05/bu... · Posted by u/aaronbrethorst
inferiorhuman · 7 years ago
And if you look further through the transcripts you'll see that they kept playing with the flight director for reasons unknown.
UnoriginalGuy · 7 years ago
That's commentary. We can reasonably speculate they were looking at warnings and the flight log, autopilot is only one part of the flight director and as autopilot was never turned back on, pointing at it seems odd.
UnoriginalGuy commented on JavaScript is now required to sign in to Google   security.googleblog.com/2... · Posted by u/amaccuish
totony · 7 years ago
Passwords can be hashed directly client-side with javascript, which is way more secure than sending them clear on the wire, so i dont disagree with Google's stance here and dont understand the hate
UnoriginalGuy · 7 years ago
If the client hashes the password then the hash itself is the password. Meaning stealing the hashes passwords is the same as stealing the plain text password for which they're based, since you can post them direct.

Blizzard entertainment does half client half server hashing which is rather clever, one of the few examples where client hashing makes sense.

u/UnoriginalGuy

KarmaCake day6721June 8, 2012View Original