Live data from Hacker News

Viewing profile — ademarre

ademarre

HN member
Joined
Mon, Sep 30, 2013, 11:38 PM UTC
HN karma
1,355
Public activity
338 items

About ademarre

Andre DeMarre / demarre.com / [first] at [last].com

Recent public activity

  1. comment
    Comment #48869606

    This reminds me of "Why So Many Control Rooms Were Seafoam Green" : [0] https://bethmathews.substack.com/p/why-so-many-control-rooms... [1] https://news.ycombinator.com/item?id=475…

  2. comment
    Comment #46395247

    I am all for using proper typographic symbols, but it is unclear what place the precomposed ellipsis U+2026—what I assume you mean by “true ellipsis”—has in that canon, especially …

  3. comment
    Comment #45974966

    Only if they are able to block the siteverify check performed by our backend server. That's not the kind of attack we are trying to mitigate with Turnstile.

  4. comment
    Comment #45974925

    I integrated Turnstile with a fail-open strategy that proved itself today. Basically, if the Turnstile JS fails to load in the browser (or in a few specific frontend error conditio…

  5. comment
    Comment #43895834

    Gandi was sold to a private equity firm in a leveraged buyout in 2019 [0,1]. Nothing good has happened with Gandi since. [0] https://www.crunchbase.com/acquisition/montefiore-inves…

  6. comment
    Comment #43076782

    ISPs aren't helping either. Ziply Fiber only provides IPv6 with their 10 Gig and up plans, starting at $300/month.

  7. comment
    Comment #42979705

    Neutraface has some similarities, including the low crossbar height. Fittingly, it appears to be used in materials published by the Frank Lloyd Wright Foundation.

  8. comment
    Comment #42976517

    The lettering on the proposal is very interesting. I assume it was hand drawn. I can't find any typeface quite like it. Google Lens suggested it is similar to Copperplate Gothic, w…

  9. comment
    Comment #38822849

    This would be a better link; the blog post on which the Bleeping Computer article is primarily based. They refer to it but never link to it: https://www.cloudsek.com/blog/compromis…

  10. story
  11. comment
    Comment #36445644

    > it would be highly likely that multiple systems around the world would generate the same number. "Highly likely"? No. You are ignoring probability. See UUIDv4, which does not use…

  12. comment
    Comment #36161419

    Shazam-like fingerprinting for text. The complete LLM outputs wouldn't need to be stored, just the fingerprints along with some mechanism for trusted timestamping (could be Blockch…

  13. comment
    Comment #35084046

    > I let it expire for a few days, now they are charging me $100/year! It sounds like your domain name entered the redemption period. The high fee to restore a domain in the redempt…

  14. comment
    Comment #33747577

    Speaking of billing, are there any good resources or examples for an engineer who gets thrown into this domain?

  15. comment
    Comment #32959485

    Those are good words to use. That's how people should think of these redirects and use them, as long as you are careful to use explicit cache directives.

  16. comment
    Comment #32949033

    There seems to be some FUD going on here. The solution to the OP problem is simply to use 301 redirects with Cache-Control headers to limit caching to some reasonably short duratio…

  17. comment
    Comment #32434325

    No. That is not how it works. https://docs.python.org/3/library/pickle.html https://blog.nelhage.com/2011/03/exploiting-pickle/ (referenced from https://cwe.mitre.org/data/definiti…

  18. comment
    Comment #32433366

    That quote supports my statement. Notice that the serialized object is the thing that was constructed by the attacker, not some user data that you serialized yourself.

  19. comment
    Comment #32432354

    > If you pickle data from an untrusted source . . . and then later unpickle it That is not exactly right. The risk is when you unpickle data that was pickled by someone else or tha…

  20. comment
    Comment #32157000

    From the post: > "As set forth in the Dodd-Frank Act, the SEC protects the confidentiality of whistleblowers and does not disclose any information that could reveal a whistleblower…

  21. comment
    Comment #31116610

    As IMcD23 commented, the real link is here: https://arstechnica.com/tech-policy/2022/04/isps-cant-find-a... It would be nice if the mods/dang would update the link.

  22. comment
    Comment #30912848

    Google search used to use rel=prev/next to identify paginated sequences for indexing, but not anymore. https://twitter.com/JohnMu/status/1108717486424363009 As of 2019, Bing was lo…

  23. comment
    Comment #29291013

    One of my neighbors has a bright light on a garage behind their house. It shines directly onto my backyard and I see it as light pollution. It is a nuisance for sky watching with m…

  24. comment
    Comment #29203716

    Paying for standards is acceptable in a context where you are given a requirement to conform to some industry standard. But that is rarely how it works in software and networking. …

  25. comment
    Comment #28981446

    > software-related standards. We are an industry in which there are lots of independent contractors and self-employed people and small businesses, it is easy to be self-taught Cons…