HackerLangs
TopNewTrendsCommentsPastAskShowJobs

dsl

no profile record

comments

dsl
·há 8 dias·discuss
THIS IS A GRIFT.

Joel Ferry, the executive director of Utah's DNR retooled state laws to allow water right leasing and promoted HB187 which allows you to hold water rights without developing them.

He also happens to be a large shareholder in Bear River Canal Company and has been going around quietly buying up water rights from smaller canals and municipalities.

Grow The Flow is closely aligned with Great Salt Lake Rising (ran by the son of Mitt Romney), who plan to solve the issue ahead of the 2034 Olympics by buying up water rights from private owners. They committed $100 million of their own money, but got it matched with $300 million in state funds and a $1 billion budget line item from the Trump administration.

Be wary of environmentalism that is being driven by the wealthiest families in the state.
dsl
·há 8 dias·discuss
Criminal prosecution isn't even an issue because it does not extend to the executives. PG&E somehow keeps paying fines to resolve murder charges.

https://liberationnews.org/pges-rap-sheet-the-criminal-histo...
dsl
·há 26 dias·discuss
A webpage cannot provide a system I/O device (camera, microphone, speaker, etc.). That requires a signed driver on MacOS.
dsl
·há 26 dias·discuss
Heh. I built "Fusion" a few months ago as an MCP using OpenRouter. The idea was to give Claude a "panel of experts" to go talk to when it got stuck.

After extensive testing and benchmarking I discovered that when you ask one model to judge another's response you don't actually get a better answer. You are just asking it "how closely does this resemble the answer you would have given me." Additional rounds and all the "obvious" solutions that pop into your mind reading the proceeding sentence are essentially just cranking up the temperature.

I did find a solution, but it is insanely expensive. Maybe if this gains traction I'll release mine.
dsl
·há 30 dias·discuss
TLDR: Adafruit found out Flux was being dishonest about their user numbers. They also found and responsibly disclosed that they could get their Firebase keys by opening up Chrome's devtools.
dsl
·mês passado·discuss
> pretty sure this is stems from the insane US legal requirement to not export SSL technology to enemy countries

This is most likely OFAC. Lets Encrypt could apply for a license to do business with sanctioned entities, and given their use case it would most likely be approved.

https://ofac.treasury.gov/ofac-license-application-page
dsl
·mês passado·discuss
That is like saying you can't get a virus on your computer because Facebook doesn't allow viruses to be posted to the internet.

Differential parsing is a whole class of security bugs and they matter a lot. Take a look at HTTP Request Smuggling for examples.

Also, I am pretty sure there are more non-web x509 certificates out there than all the "browser trusted CAs" combined have signed. :)
dsl
·mês passado·discuss
You either die a hero, or live long enough to see yourself become Akamai.

The reason everyone came running when Cloudflare first started was obviously the "burn VC money to gain marketshare" but it was also the sheer simplicity. They had one product and a handful of features.

Until someone on the business side takes a step back and says "when I mouse over 'Products' on the homepage, why the fuck is there a 'See All Products' link" it will be impossible to have a usable customer experience. Start killing things and making them features.
dsl
·mês passado·discuss
> Yeah, but Google has the money for this. They are quite literally the most profitable company in the world.

"Alphabet announced that its 2026 capital expenditures are expected to be $180-$190 billion, and that it expects 2027 capital expenditures to significantly increase [...] over the 12 months ended March 31, 2026, Alphabet generated $174 billion of operating cash flow"
dsl
·mês passado·discuss
[flagged]
dsl
·há 2 meses·discuss
Compelling Microsoft to turn off your Office 365 at least requires Microsoft to be complicit. Sovereign infrastructure didn't protect Venezuela or Iran.
dsl
·há 2 meses·discuss
Which is just wildly backwards. It is the same mindset of the cyberpunk "privacy advocates" of the early 2000s, move your stuff to Sealand or Switzerland.

The fundamental flaw with this plan is if your fear is genuinely of the United States, your data is far more protected inside the US. The intelligence community has no restrictions operating on foreign networks and servers.

Rather than go to a FISA court for approval, we just hack your box and take your data. Or ask a European intelligence service to use the much more lax laws to compel its disclosure.

Yes, data collection happens on US soil. But ask anyone who has worked on the inside how much of a pain it is to view or process USPER data.
dsl
·há 2 meses·discuss
gLinux already exists. Its meh.

ChromeOS was honestly the best they could do.
dsl
·há 2 meses·discuss
[dead]
dsl
·há 2 meses·discuss
The internet worked for so long because people responsible for each little island did what was for the most part in the best interests of the rest of the islands. If you didn't, other islands would shut off their links to you. Law enforcement was a last resort because 1. the courts don't move at the speed of the internet and 2. nobody wanted the internet getting top down governmental regulation because it was trans-national.

Cloudflare spent a bunch of venture capital to give away expensive things for free and buy market share. If you convince all the grocery stores to move to your island, you can operate a den of criminal activity with no fear of everyone else shunning you.

Talk to anyone who fights botnets, malware, or online scams. Once you hit the Cloudflare dead end you just have to give up. Law enforcement isn't going to take up a case where only 7,000 peoples computers are infected, and Cloudflare isn't going to investigate and take action themselves.
dsl
·há 2 meses·discuss
Yes. At this layer the OS has no say in the matter.
dsl
·há 2 meses·discuss
> The first is what a cellular network does for tracking a user. It's not returning a set of GPS coordinates.

From the perspective of someone working on the RF side of cellular networks, you are absolutely correct.

Modern cellphone baseband chips however are required to implement MT-LR, which allows the network to request that the device respond with its latitude and longitude. In the US this is legally required to be accurate to within 300 meters, so it comes from GPS or AGPS. By sending LAWFUL_INTERCEPT_SERVICES as the client type in the request, the phone is required to not notify the user in any way or log the request.

There is a reason China has been caught with their hand in the US "lawful intercept" cookie jar at least three times.
dsl
·há 2 meses·discuss
It is missing the most important function.

If the first tile you build is a lobby in the bottom left corner, it is supposed to double your starting money. :)
dsl
·há 3 meses·discuss
Not exactly.

Security patches aren't like bugs or features where you can just roll a new version. Often patches need to be backported to older versions allowing software and libraries to be "upgraded" in place with no other change introduced.

Say you had software that controlled the careful mix of chemicals introduced into a municipal water supply. You just don't move from version 1.4 to 3.2, you fix 1.4 in place.
dsl
·há 3 meses·discuss
I never doubted for a second that someone at the DoJ wrote a bunch of words. Unfortunately we have good cause to call them into question.