I don't know what the percentage would be, but we do have some historical precedent that could give us a clue.
Best one I can think of is when bigger websites started actually dropping SSLv3 and TLSv1.0 (and later TLSv1.1) support, cutting off older browsers and operating systems. Google and Amazon still support TLSv1.0, but plenty of others (including Microsoft) have dropped 1.0 and 1.1. HN itself doesn't accept 1.1 anymore either.
Then there's browser support. Lots of websites - big and small - cut off support for Internet Explorer 6 when it was somewhere below 5% marketshare because the juice was no longer worth the squeeze. Of course, few of those actually fully cut off the ability to browse the (now broken) website fully but it's a datapoint suggesting trade-offs can and will be made for this sort of thing. Or to put it in the present: a significant amount of webapps don't support Firefox (3% market share) to the extent their product is completely unusable in it.
Okay, but is being present at a protest where others push through a barrier enough for the first amendment to no longer apply or do we know he was one of the people doing the barrier breaking? The original post implies he bailed out after only 5 minutes - quite possibly because he wasn't on board with the (relatively mild) escalation. At this point, we don't know. But if he did cross that line, he should be criminally prosecuted like the students with American citizenship (if they even are...) and not presumed guilty being punished via the immigration system without any kind of trial.
I mean, given how the site performs on average I don't think they've optimized so much that the extra cpu cycles of ANDing with the fixed constant of 2^64-1 and then looking up or hashing a 16 byte integer - whatever they do - rather than a 4 byte one would increase the load significantly. Let's be pessimistic and say it's 20 extra cpu cycles, that's not gonna be much of a problem if their load balancers were made in the past 20 years.
Perhaps a little tin foil hatty and definitely not the only reason but Microsoft owns Github and also makes a boatload of money off of Azure. Incumbent cloud providers like Azure have a major advantage in terms of having plenty of IPv4 addressing available whereas a new entrant to that market would have to buy or lease that space at a premium. Thus, these companies have an incentive to keep IPv4 a necessity.
I think there's an important distinction in making money off of a tragedy your investment had no part in causing and happily announcing you did so.
To use a slightly hyperbolic example: A company that makes body bags is always going to be making cash when a massive amount of people die in a tragedy. That's fine, without that we wouldn't have body bags which is a thing we need. But they're not gonna do a press release on September 12th 2001 about how their sales volumes have spiked and are expected to continue to rise as victims are being pulled from the rubble. I would hope their execs are not watching CNN and rubbing their hands in eager anticipation when they see the second plane hitting the towers.
Coincidentally, I bought a 12v car horn yesterday with the intent of wiring it into my ebike's power supply with a little button on my handlebars.
Not because of other cyclists or pedestrians wearing (anc) headphones but because modern cars are so heavily sound-proofed they don't hear a bicycle bell anymore. A recent incident with an inattentive taxi driver in a brand new EV nearly flattening me prompted me to want to pursue this.
I'm still waiting for my cheap AliExpress dc-to-dc step down converter but otherwise I have everything I need and I think it should work. The horn module itself is definitely loud enough: I connected it to a 12v power supply at my desk and jumped out of my chair.
cause a lot of lives have been lost! they even thoroughly blew up a school. it's generally considered to be in somewhat poor taste to celebrate your personal gain in situations like that. it's like openly celebrating a massive passenger airliner crash because you happen to hold stock in their biggest competitor.
increasing the (social) pressure on maintainers to get PRs merged seems like the last thing you should be doing in light of preventing malicious code ending up in dependencies like this
i'd much rather see a million open PRs than a single malicious PR sneak through due to lack of thorough review.
yeah, but I got the impression that the EU is very much doing it as a retaliation to the US and UK doing it. Tho they could have limited it to just those countries.
Congratulations, you're a lot smarter than the average person. I understand this is sometimes a bit annoying, but at the end of the day it's probably something to be grateful for.
table stakes, but people still mess up on it constantly. The "yeah, but that's only a problem if you're an idiot" approach to this kind of thing hasn't served us very well so it's good to see something actually being done.
Trains shouldn't collide if the driver is correctly observing the signals, that's table stakes too. But rather than exclusively focussing on improving track to reduce derailments we also install train protection systems that automatically intervene when the driver does miss a signal. Cause that happens a lot more than a derailment. Even though "pay attention, see red signal? stop!" is conceptually super easy.
I flew out of the UK twice in relatively short succession in ~2018 and the first time was out of London City: did not have to take off my shoes. I was pleasantly surprised by this and concluded common sense had prevailed and it was no longer necessary. The second time was Gatwick, and based on my prior experience I did not take off my shoes. I got yelled at because "everybody knows you have to take off your shoes at the airport!". Then got subjected to an extra search of my luggage as punishment. Of course there was a razor in my bag of toiletries (one of those Gilette cartridge ones with a million blades - not an oldschool safety razor) and promptly 'got got' for that as it could have potentially injured the person searching my belongings. 0/10 would not recommend.
even if they don't have access to the actual data, the US government has the option to order Microsoft to switch these essential government services services off. For example, as a means of pressuring the Dutch government into supporting the American annexation of Greenland.
Or even, post-Greenland, to force the Dutch to give Trump the Dutch Caribbean islands off the Venezuelan coast as well (Aruba, Bonaire, Curaçao).
If I were a Dutch member of parliament, I would be insisting this particular vulnerability to extortion be addressed as soon as possible. Of course, the US can still threaten to, at worst, nuke us all to smithereens but let's hope they're not willing to go that far.
The “benefitting from being friends with the US” is exactly the frame Trump would love for you to use. It’s a little more nuanced than that imo.
After WW2 the US wanted the European powers under its wings rather than rebuilding their own militaries to the level of a global power. There were to be two powers: the US and the Soviets.
It suited the US interests to force Europe in a dependent position. Partly for good reasons like preventing us fighting amongst ourselves starting another war. Which we’d just done twice, so fair enough.
But also to stop us from coming under communist influence voluntarily. And, just for imperialist reasons. They were just more modern and subtle about it than the empires they replaced, most notably the British Empire. The almost-century of western Europe being effectively part of an US empire culturally, financially and militarily is now coming to an end. How we’re gonna deal with that? No idea. It’s going to be pretty damn hard in a lot of ways.
Sure, no argument there, but the fact is there was a weakness there and a weakness that would be considered a threat to national security if it were to get out - before today
I shouldn’t have used the word disappeared, I just meant picked up. And yeah no, not for saying a substation exists and could be bombed.
But for saying there is a single substation that, if taken out (by sabotage, terror attack, arson, or whatever), would cause great embarrassment and economic damage to the country by disabling THE British Airport? I think that’s a whole different matter.
I didn’t mean this substation existing. I know that’s obviously not a secret. The fact taking it out takes out the entire main airport for at least an entire day is a different matter. Do you really think they’d have been fine with you announcing that to the world yesterday?
Don’t forget the BT Tower existing was technically classified under the official secrets act, even though it was extremely obviously there for everyone to see including on maps.
Best one I can think of is when bigger websites started actually dropping SSLv3 and TLSv1.0 (and later TLSv1.1) support, cutting off older browsers and operating systems. Google and Amazon still support TLSv1.0, but plenty of others (including Microsoft) have dropped 1.0 and 1.1. HN itself doesn't accept 1.1 anymore either.
Then there's browser support. Lots of websites - big and small - cut off support for Internet Explorer 6 when it was somewhere below 5% marketshare because the juice was no longer worth the squeeze. Of course, few of those actually fully cut off the ability to browse the (now broken) website fully but it's a datapoint suggesting trade-offs can and will be made for this sort of thing. Or to put it in the present: a significant amount of webapps don't support Firefox (3% market share) to the extent their product is completely unusable in it.