HackerTrans
TopNewTrendsCommentsPastAskShowJobs

paradaux

no profile record

Submissions

Chain Letter

en.wikipedia.org
2 points·by paradaux·3 года назад·0 comments

Report shows HSE (Irish Health Service) hacked by malicious Excel file [pdf]

hse.ie
84 points·by paradaux·5 лет назад·12 comments

comments

paradaux
·3 года назад·discuss
https://archive.ph/wqCJ5
paradaux
·3 года назад·discuss
Another, related, issue would be the existence of two authors with the same name who both publish under their birth names. I don't see how they could be a 'trade mark' so to speak unless there was an intent to commit identity theft which would be a separate issue (which appears to be the case here)
paradaux
·3 года назад·discuss
I'm pretty sure the GP's point was that the US shouldn't have .gov/.mil etc, every country essentially has a form of government and military — And besides .gov.us would be more explicit.
paradaux
·3 года назад·discuss
No one? That's a rather brash statement to make. Here in Ireland I can count on zero hands how many people use credit cards on a day to day basis. Debit cards are the norm in much of the EU I would assume.
paradaux
·3 года назад·discuss
Your url comment reminds me of the concept of the semantic web [0] Whereby we can have a structured machine readable and pure URL structure backed by ontology and linked data. There's a project that is working on this for Wikipedia called Dbpedia. [1]

[0] Unfortunately this concept has been completely bastardized by random research groups shoehorning the technology for EU grants, from my experience working in one such group.

[1] https://www.dbpedia.org/
paradaux
·3 года назад·discuss
Equally, neither is the budget. Load isn't an excuse.
paradaux
·3 года назад·discuss
As another post has commented, in Ireland we indeed use C13 cables, and it's pretty common to use this term for that here !
paradaux
·3 года назад·discuss
With physical access, sure. The same could be said for shutdown with physical access. Nothing stopping the user without group membership from holding down the power button or unplugging the kettle cable.
paradaux
·3 года назад·discuss
React Native is essentially just writing web apps, once RN has css grid I will be happy enough with everything it has.

There's something to be said for writing web apps in RN purely for the option of porting to iOS, Android and even MacOS/Windows now.
paradaux
·3 года назад·discuss
What I'd love to see with this is a way to use supabase auth itself as an idP/SAMP provider. Have your tools (back-office tools and what not) written in native supabase, or have multiple supabase projects with the one shared auth system. Could be better UX for Sysadmins than OpenLDAP and so forth.

I'm currently building something similar to just do that on top of supabase for work. Happy to see the developments with Supabase Auth anyway.
paradaux
·3 года назад·discuss
I'm working on several RN + Supabase projects and it just works !

There were a few kinks initially, like URL polyfil being missing from RN and the need for AsyncStorage alongside supabase.js but they've all been rectified by the team or made more clear using their Expo instructions in the docs — Although maybe it'd be clearer for people that the expo guide is for RN? People who haven't started using RN might not know the connection?

It's such a pleasant stack, we're experimenting currently with edge functions in place of an API in certain places, so far it's just to use Cloudflare Turnstile to insert contact form records into a database, but it's super trivial.

Excited for the future of edge functions!
paradaux
·4 года назад·discuss
I'm a huge fan of the scrimba[0] style of teaching. They're a fairly well established startup now, whose content style involves having a screen cast be recorded with an interactive code editor, review window and slides which you can move around and use as an online IDE.

You can interrupt the narrator at any time and interact with their code editor as if it was your own, messing with the code at that time and review the results.

Right now they seem to be focused on fronted skills, namely React and more general web dev topics but I'm very happy with how quickly i was bale to get the hang of React using their courses.

[0] https://scrimba.com/
paradaux
·4 года назад·discuss
There is no universe where Wizz is earning £10 per visitor booking a ticket through their website. Ads are dollars or parts of a dollar per thousand clicks
paradaux
·5 лет назад·discuss
(Disclaimer: I work as an online Tutor for an Irish EduTech company which teaches children ages 8-18 to code via after-school and weekend classes.)

This article has the right idea. Our style of teaching varies on the kids age. Younger kids (8-11) are treated much like school children, the teacher presents a topic, kids are given activities to do which they screenshare, then we work through them as a class. This is done in Scratch, mostly.

As the kids get older we take a more hands-off approach, we have tonnes of exercises which take kids through Java via Processing. Learning variables by moving shapes, if statements by adding constraints to those moving shapes, collision detection by moving the mouse around and watching shapes change color as they collide, in the hopes to build their confidence to start building their own games.

This is a highly adaptable form of teaching, although it's only really possible and practical as we have such small class sizes, allowing tutors like me to be able to spend ample time with teach student when issues arise.

Younger students often have the enthusiasm, but they don't know where to guide it, this lends itself well to a lecture then activity format where there's at most a 7-8 minute period of "lecture" followed by an equal amount of activity time.

The older kids often don't need the "lecture" part at all, rather we set them more and more challenging exercises and explain things individually as issues crop up, it allows them to use their own problem solving and initiative and we have seen some excellent programmers come through because of this (some of whom have began working with us as Tutors after they turned 18!)
paradaux
·5 лет назад·discuss
I don't think I have seen classes with many parameters to avoid varargs in Java, however I have certainly seen classes with dozens of Type Parameters, I believe some form of code generation was responsible.

Can't for the life of me find that class again.
paradaux
·5 лет назад·discuss
Kodi is just the media suite, what add-ons one installs in it is neither their concern or their liability.

The same goes for similar offerings like Jellyfin/Plex, if the end user uses a pirated streaming service that is on them and the service provider (which Omi was.) It was this which got him into trouble, not the fact he used Kodi.
paradaux
·5 лет назад·discuss
Chrome's equivalent is http://www.gstatic.com/generate_204 for those curious, and plenty of other browsers have their own.

Neat tools as until I learned of the existence of these ssl-less sites to prompt captive portals I use to try to connect to various sites until it showed up.
paradaux
·5 лет назад·discuss
It's mostly plug and play; on desktop install the browser extension and it just works!

There is some tuning to be done based on your own personal preference as you can tune it to _only_ skip sponsors, but by default it skips a variety of fluff

- Engagement reminders - Canned Intros - Self promotion

They're all marked by other users of the extension and I've never come across a malicious marking, so it's got a neat community, sadly I'm never early enough to contribute.

In the likes of YouTube Vanced (third party YouTube fork with integrated sponsorblock on android) it's simply a player, I resume the youtube-dl alternative works the same way
paradaux
·5 лет назад·discuss
The ransom was not paid, to the best of my knowledge, indirectly via a contractor as you stated or directly.

https://www.rte.ie/news/2021/0520/1222857-hse-weekly-briefin...

This is the government-funded news media organisation, akin to the BBC here — but I have sufficient trust that they didn't
paradaux
·5 лет назад·discuss
The health minister at the time explicitly stated that they did not pay the random, directly or indirectly (e.g. via a third party) although realistically not easily verifiable.

The discussion at the time was the perpetrators didn't expect to have the effect they did, effectively halting the entire health service for several weeks to months. I think the ethics element as the other commenter stated is a valid one, as one is playing with another's life when you interfere with medical operations, routine or otherwise