uxp · HackerTrans

uxp

no profile record

Submissions

Officials: Massive breach of federal personnel data

dailyherald.com

2 pointsby uxp11 jaar geleden0 comments

Apple Announces 128GB iPad

arstechnica.com

2 pointsby uxp13 jaar geleden0 comments

Google+ Most Recent Sorting Bookmarklet

github.com

11 pointsby uxp15 jaar geleden0 comments

Minecraft Mod MCAdmin had a hidden developer backdoor

minecraftforum.net

3 pointsby uxp16 jaar geleden0 comments

comments

3 jaar geledendiscuss

My mother in law works for a company that allows her to work from home from a personal device running Chrome.

Several times a year I get a phone call at 6:30AM from her asking to quickly drive to her house before her shift starts at 7 to fix her computer, because "something happened" or "I was hacked". Every time, it's been an update which has reset her default apps so email opens in the newish Mail app and not Outlook or Gmail-in-Chrome, or changes the browser to Edge from Chrome. I'm not a systems administrator, so I havent a clue on what the magical incantations of registry paths and values should be which prevent this despite trying.

Obviously if this was a domain managed asset at a company, someone would know how to prevent this. As a "home device", it feels like you're automatically enrolled in the "Global Microsoft domain", and subject to the whims of a product manager making IT decisions.

3 jaar geledendiscuss

> One really wishes to know: who is the guy with deep pockets that Eshelman upset and what are they beefing over, and how did he get the wholesome quartet of hunters to go along with him.

What are you talking about? Access to public lands has been an ongoing fight for decades with people from the entire political spectrum having opinions about the matter. Whether that be rock climbers trying to access routes, or people who fish trying to access streams, to people like this who are trying to access public hunting land. Assuming that everyone trying to access public lands is some poor pleb is in bad taste. Companies like Patagonia have long supported more liberal access to public lands with millions in donations, as well as organizations like the NRA with their advocacy and financial support.

4 jaar geledendiscuss

Validating any contact method that has the potential of sending PII, Health, or financial data should be mandatory by law.

At least once a year I get an automated phone call from a regional hospital letting me know some minor's test results. Calling the hospital's CS department in order to notify them or somehow get my phone number removed from the account is impossible, because I'm not this person nor their legal guardian and HIPAA regulations prevent me from instigating a change on someone else's medical records or accounts.

4 jaar geledendiscuss

Yes. Here's a non-crypto instance of using a seed value to deterministically identify the output of a random number generator. This only works in Python 2.x:

    import random
    for i in range(0,50):
        if not i % 15:
            random.seed(1178741599)
        print [i+1, "Fizz", "Buzz", "FizzBuzz"][random.randint(0,3)]

By seeding the PRNG with a known value, one can literally predict the output of a weak number generation utility. In this case, it solves the FizzBuzz puzzle.

https://en.wikipedia.org/wiki/Fizz_buzz

5 jaar geledendiscuss

It would be one thing if it was _just_ a little demo utility used to showcase packaging and distribution of a trivial use case, however the creator of this has also created a number of packages which pull in these "demo" packages, like `handlebar-helpers`, which is again just these trivial function packages wrapped in handlebar decorators.

Several of these utility and helper packages are then pulled into other packages and build tools and marketed as legitimate packages, effectively hiding and masking the "just a demo" labels of the root is-even, is-odd, is-number packages. When people like myself complain about the absurdity of NPM supply chain verification, this is what we're arguing against.

6 jaar geledendiscuss

For what, though? And I'm 100% being honest here, what is the specific situation you are envisioning that requires a face shield in your home?

In a medical setting, shields are typically used in conjunction with eye goggles and respirators when performing procedures that have a tendency to cause or be around splashing body fluids. Outside of someone sneezing or spitting on you directly, I can't think of an analogous situation that I come into on even a rare circumstance that a face shield would protect me from.

6 jaar geledendiscuss

It's not about the money. PPE like face shields are specifically used during procedures that involve significant bodily fluid, like intubation, which is the process of pulling or pushing a tube down a patient's esophagus. Going to to the grocery store does not require a shield.

Secondly disposable medical equipment, when used properly within a healthcare environment, is extremely wasteful. For most consumable items used in a hospital, they are covered in packaging with specific serial numbers and lot numbers that allow reconciliation if it's found that the goods are not sterile or have deficiencies. There is also a provenance or chain-of-command aspect that allows attestation of safety throughout the entire supply chain. While we might be talking about how to sterilize n95 masks, reuse face shields, and asking for donations of PPE from the public right now during a pandemic, the fact remains that in normal circumstances there is massive liabilities that hospitals and clinics would be subjected to if they started sourcing protective equipment from the public that could have been tampered with, may be slightly used and broken, or otherwise could cause harm to the patient and they'd be unable to identify the source of those resources. Everybody stocking a "handful" of PPE isn't a scalable solution to maintain a national supply.

This is one reason why we pay federal taxes.

6 jaar geledendiscuss

Yes. This is my position.

6 jaar geledendiscuss

[flagged]

6 jaar geledendiscuss

Nope. Like I just stated in my edit, I'm not advocating that anyone forgo the flu shot, but that the flu shot is not 100% effective or 100% side effect free.

It's not bias. It's a fact. My GP is the one that has specifically told me to avoid the shot because I have a history of complications with it.

If you're capable, I'd love for you to diagnose me with some other mental disorder or logical fallacy, but please look at my medical history before you start dismissing my experiences as idiotic.

6 jaar geledendiscuss

I've received the flu shot three times in my life. I've been hospitalized for influenza three times in my life.

Please tell me more about how I've deceived myself.

Just as the MMR vaccine is less about you contracting measles and more about your spreading measles to more vulnerable populations that are unable to get the vaccine, the flu shot is identical in that regard. Sure, it helps you not get sick and/or to lessen the effects, but there is the fact that some portion of the population is unable to get the shot for various health reasons.

Edit: Instead of downvoting please tell me how my experiences are wrong. I'm very much aware of evidence and studies stating that its "impossible" to get the actual flu from the flu shot, yet I am walking proof of contrary evidence. I'm also aware of how batshit emotional people can get with regards to vaccines, and I want to be clear I am absolutely NOT advocating that anyone forgo getting a flu shot every year. When everyone else gets the shot, I'm safer. When I get the shot, my body reacts violently and I will contract the virus.

6 jaar geledendiscuss

You can also ration your intake of food when it starts to become more scarce. People do this every day due to income constraints during non-Coronavirus times.

It's a little harder to ration your bowel movements. It can be done, but it's a lot less beneficial than forced fasting.

6 jaar geledendiscuss

I'm a .NET developer and I can't tell you how many times I've searched for documentation and come across something that's targeting UWP which is different than WPF and entirely not the same as WinForms and it takes way too much energy trying to identify why exactly the documentation isn't what you want. I thought Microsoft was more or less sunsetting WinForms until they also announced WinForms for .NET Core a couple months ago. https://docs.microsoft.com/en-us/dotnet/core/porting/winform...

I literally have no idea what Microsoft is doing anymore. Sometimes it feels like Linux was 10 years ago when I would accidentally install Konquerer on Gnome and all of a sudden I had two desktop systems installed and my root drive had doubled it's consumed harddrive space. It basically worked, but it was a terrible experience.

6 jaar geledendiscuss

Based upon this article were the retail costs of a cheap flickering LED bulb is approaching the single dollar mark, the cost increase to use a proper AC/DC converter could be orders of magnitude more expensive (at a rough minimum).

Honestly it's starting to feel like a most cost effective long term solution is to build homes with a master AD/DC converter (or several depending on sq/ft) and simply wire 12v outlets and light fixtures. The energy savings of swapping all incandescents or compact florescence bulbs with cheap LEDs with cheaper power converters is starting to scare me knowing just how shoddy and fire prone some of these power converters can be.

7 jaar geledendiscuss

This is a common problem in healthcare insurance. API connections will stop working for about 3 weeks every year as each side performs a complicated dance of noticing the expiration and updating the systems to accept a new public certificate.

7 jaar geledendiscuss

Do I have some weird rendering issue with this website, or do both of these snippets of code have terrible readability and highlighting? If I had to write code using an IDE or editor with this scheme I'd quit my career and go into small engine repair.

https://imgur.com/a/vS2EldV

7 jaar geledendiscuss

> whitelist the few that are actually real

I'm speculating that the balance is in the reverse favor. Last night I was looking at some file on GitHub which was redirecting to what looked like an S3 bucket subdomain named with a pattern like "github-production-f7e281a2", which I simply presumed to be cache-busting via subdomain instead of appending the hash to the filename. If my assumptions were correct, every time GitHub deploys a new build, you would have to whitelist that subdomain.

7 jaar geledendiscuss

PBMs are rent seeking middlemen. Their desire to seek the lowest drug price is arguably what contributes to things like quality standards at pharmaceutical manufactures slowly loosening and contaminants getting into the supply line.

Honestly, we should have an independent 3rd party with zero financial investment in either approving or rejecting a quality check of a batch sample. Something Federal, so manufacturers cant "shop states", that administers and regulates drugs and their distribution. Not sure what I would call it. I tend to go with cartoonish things, so Merlin after the bumbling wizard sounds fun, but the bureaucrat in me thinks the acronym "F.D.A." would suffice.

7 jaar geledendiscuss

In PG&E's world in context of this comment thread. Dividends are any payout amount that was not captured in the regulatory framework. Salary is a captured expense. Bonuses are paid from a pool when a surplus is created, or rather a profit is made, or more bluntly when dividends are earned.

Legally, you're correct. PG&E has been operating counter to those rules for a while.

http://investor.pgecorp.com/news-events/press-releases/press...

https://www.kqed.org/news/11737336/judge-pge-paid-out-stock-...

7 jaar geledendiscuss

Employee bonuses are dividends.