I would probably avoid transportation that kills 1% of its users each trip.
Username checks out. Guess you're going for 100%?
Readit Newsanon4242 commented on A mistakenly published password exposed Mercedes-Benz source code techcrunch.com/2024/01/26... · Posted by u/isaacfrond
anon4242 commented on The browser's biggest TLS mistake blog.benjojo.co.uk/post/b... · Posted by u/greyface-
Biggest? How about serving TLS certs when doing direct IP access? Or how about leaking sub domains in TLS certs?
I, as a mediocre hacker, cough, security advisor, cough, use certs to find vulnerable subdomains all the time. Or at least. I get to play around in your test envs.
Edit: Ok, the problem in the topic is also not good.
The title was "The browsers biggest TLS mistake"...
anon4242 commented on The browser's biggest TLS mistake blog.benjojo.co.uk/post/b... · Posted by u/greyface-
Sort of a corollary to your point: if an admin sets up a website and verifies with Firefox (or Chromium, whatever), and then later the server needs to communicate with...basically any tool that speaks HTTPS but isn't a web browser, then there will be many tears shed by that admin.
For instance, you stand up a server, and then a user complains their script using cURL, wget, etc. doesn't work, and if you aren't paying attention you'll have no idea why.
Inb4 why can't the OS certificate store just do the same thing: I suspect people will tend to install OS updates less frequently that browser updates, so it will tend to be less reliable.
This is why you should do `openssl s_client -connect <your site>` to verify TLS when changing your server's TLS certs.
anon4242 commented on The browser's biggest TLS mistake blog.benjojo.co.uk/post/b... · Posted by u/greyface-
I get that this feels un-pure, but what is the actual damage of validating against cached intermediate certs? The only concrete thing the author cites is harder debugging, but that's a pretty weak objection.
It's a potential Heisenbug for (some of) your javascript code. Sometimes things work on some machines and sometimes it doesn't. Unless you have the cert-chain misconfig in your brain-cache you'd probably spend hours debugging confusing bug reports from customers that you fail to reproduce reliably. So it's not just harder to debug, it causes bugs (and indirectly bug-reports you'll need to investigate).
How could it ever be racist? Muslims aren't a race, anyone can become a Muslim.
Are you serious? Bjarne Stroustrup Lives in New York and Linus Torvalds lives in Portland, Oregon. They are my examples, not yours.
I'm dead serious. Btw, I'm also thinking of Anders Hejlsberg and Rasmus Lerdorf. They also live in North America. But that doesn't remove the fact that they were all born and bred in Scandinavia.
I'm guessing that their decision to move west had very little to do with the "stifling" unions and more to do with the increased opportunity for a skilled SWE over there. I would say that that increased opportunity has also very little to do with "stifling" unions and more to do with the huge single market that the US is. That huge single market allows companies to grow fast. The EU works hard to be a single market as well but we have language barriers, bigger legal differences and dare I say bigger cultural differences.
Also talking about Scandinavia, as tiny as it is population-wise, we've had a disproportionately large impact on the world in many different areas. Some factors that contribute to this, I believe, are our free education system and the social safety net that unions have played an important part upholding.
I think we have different opinions, but also that you are misinterpreting on purpose. The reason I put social stability in quotes is that it’s not the perfect words for what I mean, but it’s meaning should be clear from the context.
What I was referring to was the Nordic cultural focus on a certain kind of “equality”, often referred to as the law of Jante, which is very focused on holding capable independent-minded people back.
> Who will innovate based on your innovation?
This is an excellent question, but I would like to turn it around: Who’s innovation do you innovate on top of? The answer in my case is “Anglo-Saxons”. There is pretty much nothing in my tech stack from the EU. It’s just a black hole. Does that not concern you at all?
"From the EU" is hard to discriminate in our industry these days I think, things are developed all around the world these days.
Then again maybe we have different tech stacks but mine typically includes: Linux (originally from Finland), ARM (from previously EU member UK), C++ (designed by a Dane) and Python (designed by a Dutch). That's the basis at least then there are other stuff as the need comes by.
As for social stability, I didn't intentionally misinterpret you. The kind of monetary equality that we traditionally have had in Sweden is good for social stability (the one without quotes I was talking about). That has changed during the last couple of decades and with increasing differences in income comes the increasing social problems we see.
OTOH I do agree that Jante can definitely be a negative factor when it comes to innovation.
I don't know how it makes them feel, but the poorest 20% of US citizens consume more than the average citizen in many European countries, so they're at least spending in a way that should feel that way.
https://www.justfacts.com/news_poorest_americans_richer_than...
Haha, that article is ludicrous.
I wonder how rich Elon Musk would be on that scale? "Wow Elon, you have managed to consume goods for $50000! You are off the chart of richness. $50k, what a rich man!"
Free choice… how terrible!
BTW, I’m a Swede with my own company looking for deals like this. Where did you find them? :)
I found it on LinkedIn, specifically targeting Swedish SWE ASFAIR but do you really want to work for $50/hour? That's less than I pay my carpenter and it's what $100000/year boils down to when you have to work 50 weeks/year.
The ad said prominently $100000/year which sounds pretty ok for an SWE salary in Sweden, but then if you read on you realized that you needed to start your own company and your company would be paid $100000/year which is quite a big difference. That's my main objection to these types of ads, if you don't already run your own company, chances are low you are familiar with the payroll tax and other costs that comes from running a company which will eat into what you may initially perceive as a good salary, only to end up working more for less.
In my experience as self-employed, it's not that hard to find Swedish companies that pays at least twice the hourly rate and then you can have much longer vacation and still earn more!
Sweden is fairly decent for avionics actually. For example we’ve designed and built our own fighter yet (the Gripen), which I’d say is impressive for a small country of 10 million inhabitants.
I’m interested in fundamental challenges around computing: programming languages, cloud platforms, operating systems, combinatorial optimization, database technology, machine learning and the like. Not many bleeding edge opportunities around that here.
We also have a work culture were effort and ability is not rewarded (which at least I associate with strong unions), but “playing politics” is. It’s very hard to stay motivated in a culture like that. I think this is an important part of the downward spiral.
> I’m interested in fundamental challenges around computing: programming languages, cloud platforms, operating systems
Yeah, for programming languages you should probably have been Danish and for operating systems the Finnish have had quite an impact. Both socially stable countries with dare I say pretty strong unions...