Readit News logoReadit News
marwatk commented on Bypassing airport security via SQL injection   ian.sh/tsa... · Posted by u/iancarroll
raddan · 2 years ago
FWIW, as a regular user of login.gov, from the outside, it looks like a well-designed system. I am able to add strong forms of 2FA (e.g., security keys or biometric authenticators), it requires strong passwords, etc. It also has decent developer documentation, has a support process, and comes with a vulnerability disclosure form baked into the main website. However, I have not used their API, nor have I seen any of the code (although I wonder if a FOIA request would actually compel them to give it to you).
marwatk · 2 years ago
> although I wonder if a FOIA request would actually compel them to give it to you

I believe most of it is open source: https://github.com/18F/identity-idp

marwatk commented on Cruise confirms robotaxis rely on human assistance every 4 to 5 miles   cnbc.com/2023/11/06/cruis... · Posted by u/belltaco
PartiallyTyped · 2 years ago
You can get pretty far in cities in 4 to 5 miles, and highways must be a couple orders of magnitude easier.

I think that's acceptable so far, no?

marwatk · 2 years ago
Such frequent interventions means you need very reliable cell service. In times of heavy congestion (concerts, etc) that doesn't seem feasible.
marwatk commented on Passkeys will come at a cost   fy.blackhats.net.au/blog/... · Posted by u/xena
ballenf · 3 years ago
> how attestation is handled (and can be trivially abused to kill companies)

What's this issue?

marwatk · 3 years ago
Hardware tokens (Yubikeys, etc) are signed by their vendor. They support attestation which allows q site to disallow vendors not in a white list. Some banks (Vanguard was/is one) actually enforce this preventing all but a handful of hardware keys from working with their 2FA.
marwatk commented on “Greedflation” is a nonsense idea   economist.com/leaders/202... · Posted by u/edward
marwatk · 3 years ago
> Regardless, the fact that companies raise their prices in response to shortages is not only defensible but desirable.

Gouging is good. I'm sure they'll be lowered again when supply stabilizes. Any time now.

marwatk commented on Red Hat cutting back RHEL source availability   lwn.net/Articles/935592/... · Posted by u/0xdeafbeef
BossingAround · 3 years ago
I don't get what's the big deal--essentially the only thing being lost is a pointer to commit that marks the difference between RHEL X.Y and X.Y+1..?
marwatk · 3 years ago
RedHat spends a lot of time back-porting security updates to older software (e.g. RHEL7). Stream is always only the latest RHEL version, I believe.

The whole point of RHEL is the long term support (the back-porting), which is what they're going to stop publishing.

marwatk commented on Build your own private WireGuard VPN with PiVPN   jeffgeerling.com/blog/202... · Posted by u/ingve
1vuio0pswjnm7 · 3 years ago
What is conveniently overlooked in these neverending^1 HN comments that dismiss RPi as "inferior" is that (a) RPi is a brand, (b) people are familiar with and trust the brand and (c) when everyone is doing their projects on the same hardware it avoids compatibility disclaimers like "This is project is tested on X. It may or may not work on Y." It obviates consideration of "hardware compatibility". With the RPi people know exactly what hardware to buy. Even if the hardware is overpriced or underpowered, synergies are created when everyone is using the same hardware. IMHO, one cannot discount the value of that, but these comments downgrading the RPi aways do. Of course there are better choices for hardware than the RPi, and perhaps without the supply issues, but good luck getting everyone to buy the same thing so that projects do not have to account for "hardware compatibilty".

1. Eleven years and counting

marwatk · 3 years ago
I love these things:

https://www.aliexpress.us/item/3256804116114245.html

There are a few suppliers, but the 4x Intel NICs open up lots of possibilities. They're very lower power, but still fast enough to handle a lot of traffic.

I run VMWare ESXi on mine and use openwrt for my router on two ports and then a general purpose server in another VM.

marwatk commented on Early Remote Work Impacts on Family Formation   eig.org/remote-work-famil... · Posted by u/RickJWagner
burlesona · 3 years ago
I will offer a contrarian take, not because I think anyone else in the thread is wrong, but because I think there’s more than one opinion here, and it’s not showing in the comments.

I have multiple children, and I hate (ok, strongly dislike) working remotely. I dislike the lack of separation between home and work, and how it makes my children feel like I’m “always working.”

I love the high-bandwidth communication and collaboration of in-person, as well as the way it naturally fosters empathy and community. It’s a better learning environment for most, and it makes work more fun for most.

I have been an outlier, I guess, and have only been able to find remote jobs for most of my decade+ SWE career. I have a dedicated office space and all the gear, so my dislike of remote has nothing to do with not being properly equipped for it.

I think people have a lot of valid complaints that are actually orthogonal to in-person work:

- Housing is too expensive. True! Not the fault of the office.

- Commutes take too long. True! Not the fault of the office.

- Housing units close to the office are often too small to be comfortable for families. Subjective, but many people feel this way! Also not the fault of the office.

The common theme here is that housing and transportation in America is broken. Utterly broken.

There is no technical or economic reason that we couldn’t have the majority of workplaces in neighborhoods where the majority of employees could comfortably live within a ten minute commute. And I submit that there is nothing better than getting to work together in real life while living comfortably within ten minutes of your workplace.

There’s nothing _wrong_ with remote work, and I think it’s great for it to be an option for those who want it (including all remote companies for those who want them). But remote isn’t morally superior to in-person work, despite the way many advocates talk about it. And an escape hatch from our broken cities is not the same as a solution.

It saddens me that more of us aren’t working seriously on the problem of fixing housing and transportation in the US, and instead are embracing bandaids.

FWIW I do what I can via my work with Strong Towns. If this is a cause that interests you I’d encourage you to read our material and consider becoming a member.

marwatk · 3 years ago
Even if we fixed all of the above, changing jobs would still require uprooting your family. In an era where you worked for one company for life it made sense. Today I don't think it's feasible.
marwatk commented on US Marines defeat DARPA robot by hiding under a cardboard box   extremetech.com/extreme/3... · Posted by u/koolba
onethought · 3 years ago
Problem space for driving feels constrained: “can I drive over it?” Is the main reasoning outside of navigation.

Whether it’s a human, a box, a clump of dirt. Doesn’t really matter?

Where types matter are road signs and lines etc, which are hopefully more consistent.

More controversially: Are humans just a dumb hammer that just have processed and adjusted to a huge amount of data? LLMs suggest that a form of reasoning starts to emerge.

marwatk · 3 years ago
Yep, this is why LIDAR is so helpful. It takes the guess out of "is the surface in front of me flat?" in a way vision can't without AGI. Is that a painting of a box on the ground or an actual box?
marwatk commented on Go Style   google.github.io/stylegui... · Posted by u/tomcam
oracardo · 3 years ago
In my opinion the hardest style rules to accept when trying to use this guide are:

  1. Do not create "assertion libraries" like `assertEqual(x, y)` [1]
  2. Leave testing to the Test function [2]
  3. Intialisms (HTTPURL, IOS, gRPC) [3]
  4. Function formatting [4]
For the record I'm not saying I disagree with these. I just think that folks coming from other languages have a lot of built in muscle memory to do it other ways.

  [1] https://google.github.io/styleguide/go/decisions#assertion-libraries
  [2] https://google.github.io/styleguide/go/best-practices#leave-testing-to-the-test-function
  [3] https://google.github.io/styleguide/go/decisions#initialisms
  [4] https://google.github.io/styleguide/go/decisions#function-formatting

marwatk · 3 years ago
I've read the assertions section a few times and I still don't understand the argument. How is:

  if got == nil {
    t.Errorf("blog post was nil, want not-nil")
  }
Better than

  assert.NotNil(t, got, "blog post")
? They seem to suggest that you lose context, but their "Good" examples are similarly devoid of context.

marwatk commented on Disney says it has more streaming customers than Netflix   cbsnews.com/news/disney-s... · Posted by u/lxm
marwatk · 3 years ago
I don't think they were able to "become HBO faster than HBO can become us"[1] and now they're paying the price. They have effectively zero moat with their own IP and now they're competing with everyone else for the same creative talent without an ability to separate the wheat from the chaff resulting in quality all over the map.

1: https://www.gq.com/story/netflix-founder-reed-hastings-house...

u/marwatk

KarmaCake day196March 1, 2013
About
me@marcuswatkins.net
View Original