Viewing profile — ademarre
ademarre
HN member- Joined
- Mon, Sep 30, 2013, 11:38 PM UTC
- HN karma
- 1,355
- Public activity
- 338 items
- HN profile
- View on Hacker News ↗
About ademarre
Recent public activity
-
comment
Comment #48869606
This reminds me of "Why So Many Control Rooms Were Seafoam Green" : [0] https://bethmathews.substack.com/p/why-so-many-control-rooms... [1] https://news.ycombinator.com/item?id=475…
-
comment
Comment #46395247
I am all for using proper typographic symbols, but it is unclear what place the precomposed ellipsis U+2026—what I assume you mean by “true ellipsis”—has in that canon, especially …
-
comment
Comment #45974966
Only if they are able to block the siteverify check performed by our backend server. That's not the kind of attack we are trying to mitigate with Turnstile.
-
comment
Comment #45974925
I integrated Turnstile with a fail-open strategy that proved itself today. Basically, if the Turnstile JS fails to load in the browser (or in a few specific frontend error conditio…
-
comment
Comment #43895834
Gandi was sold to a private equity firm in a leveraged buyout in 2019 [0,1]. Nothing good has happened with Gandi since. [0] https://www.crunchbase.com/acquisition/montefiore-inves…
-
comment
Comment #43076782
ISPs aren't helping either. Ziply Fiber only provides IPv6 with their 10 Gig and up plans, starting at $300/month.
-
comment
Comment #42979705
Neutraface has some similarities, including the low crossbar height. Fittingly, it appears to be used in materials published by the Frank Lloyd Wright Foundation.
-
comment
Comment #42976517
The lettering on the proposal is very interesting. I assume it was hand drawn. I can't find any typeface quite like it. Google Lens suggested it is similar to Copperplate Gothic, w…
-
comment
Comment #38822849
This would be a better link; the blog post on which the Bleeping Computer article is primarily based. They refer to it but never link to it: https://www.cloudsek.com/blog/compromis…
- story
-
comment
Comment #36445644
> it would be highly likely that multiple systems around the world would generate the same number. "Highly likely"? No. You are ignoring probability. See UUIDv4, which does not use…
-
comment
Comment #36161419
Shazam-like fingerprinting for text. The complete LLM outputs wouldn't need to be stored, just the fingerprints along with some mechanism for trusted timestamping (could be Blockch…
-
comment
Comment #35084046
> I let it expire for a few days, now they are charging me $100/year! It sounds like your domain name entered the redemption period. The high fee to restore a domain in the redempt…
-
comment
Comment #33747577
Speaking of billing, are there any good resources or examples for an engineer who gets thrown into this domain?
-
comment
Comment #32959485
Those are good words to use. That's how people should think of these redirects and use them, as long as you are careful to use explicit cache directives.
-
comment
Comment #32949033
There seems to be some FUD going on here. The solution to the OP problem is simply to use 301 redirects with Cache-Control headers to limit caching to some reasonably short duratio…
-
comment
Comment #32434325
No. That is not how it works. https://docs.python.org/3/library/pickle.html https://blog.nelhage.com/2011/03/exploiting-pickle/ (referenced from https://cwe.mitre.org/data/definiti…
-
comment
Comment #32433366
That quote supports my statement. Notice that the serialized object is the thing that was constructed by the attacker, not some user data that you serialized yourself.
-
comment
Comment #32432354
> If you pickle data from an untrusted source . . . and then later unpickle it That is not exactly right. The risk is when you unpickle data that was pickled by someone else or tha…
-
comment
Comment #32157000
From the post: > "As set forth in the Dodd-Frank Act, the SEC protects the confidentiality of whistleblowers and does not disclose any information that could reveal a whistleblower…
-
comment
Comment #31116610
As IMcD23 commented, the real link is here: https://arstechnica.com/tech-policy/2022/04/isps-cant-find-a... It would be nice if the mods/dang would update the link.
-
comment
Comment #30912848
Google search used to use rel=prev/next to identify paginated sequences for indexing, but not anymore. https://twitter.com/JohnMu/status/1108717486424363009 As of 2019, Bing was lo…
-
comment
Comment #29291013
One of my neighbors has a bright light on a garage behind their house. It shines directly onto my backyard and I see it as light pollution. It is a nuisance for sky watching with m…
-
comment
Comment #29203716
Paying for standards is acceptable in a context where you are given a requirement to conform to some industry standard. But that is rarely how it works in software and networking. …
-
comment
Comment #28981446
> software-related standards. We are an industry in which there are lots of independent contractors and self-employed people and small businesses, it is easy to be self-taught Cons…