Hacker Newsnew | past | comments | ask | show | jobs | submit | pmontra's commentslogin

Cash flow and fraud, yes. Credit, not much in most of Europe. AFAIK nobody has had something close to real credit cards until recently. They were called credit cards but it was a debit card with payment and deferred to the end of the month and backed only by the cash in the bank account linked to the card. I guess that no financial institution did like to risk any money on the behavior of European customers.

Capitalism or consumerism, a never ending offer and demand for goods, material or immaterial?

I don't know how Signal works and I never used it, but could I signup with a phone number and keep using it with another number, on the same phone?

Yes. The phone number is just for activation, once activated, you can swap the SIM and carry on. Or have the SIM that receives the activation text in another phone, or be virtual, or whatever.

The bit about the clothoid finally made me understand the odd shape of highway junctions. I always wondered why they want me to enter turns fast and then slow down progressively until the turn becomes a new straight. Unfortunately sometimes that straight is the highway, and they should give us plenty of space to build up speed and match the traffic inside the highway. Sometimes they do, sometimes they don't.

This is why I like Dutch road design, there's a legally required minimum (I think it's 200m, but 300m is more common) for onramps, and we are taught not to merge before you've reached the maximum speed on the road you're merging too, so that you cause minimal disturbance to the traffic currently there. (Think like a zipper.)

I live near the border with Germany, and these guys are used to short ramps and so just merge well below the speed other traffic are going, expecting others to yield. (And many locals also drive like that unfortunately.) So uncivilized.


I visited the site on my Android phone with Firefox. It loads and the UI fits the screen, however it seems slow. Words appear at 3 or 4 characters at a time, then there is a pause, then another 3 or 4 characters. Some music when characters appear, then it stops, then it starts again. I muted it soon.

It looks nice, so I hope to give it a try from my laptop. The Mars trilogy was a great read. When I saw the title of this Show HN I said, oh wow!

By the way, dust storms could be a plot device but are they really that bad with so low air pressure?


Thanks for giving it a click! Let me know how it goes on desktop. Actively trying to improve the phone experience now...

There is a fourth reason to use a framework: onboarding.

It does not work much for Django, as every project I saw using it has a different shape, but it works very well for Rails, as all projects share the same structure. However, even for Django, there are some practices that a newcomer to a project should expect to find in the code, because it's Django. So, maybe onboarding on a LLM coded project is just picking the same LLM as all the other developers, making it read the code and learning what kind of prompts the other developers use.

By the way, does anybody mind to share first hand experiences of projects in which every developer is using agents? How do those agents cope with the code of the other agents?


If somebody is MITMing a target person, they will respond positively to "update available?" calls from that person and then serve the tainted update. The article does not say what the frequency of auto update check is. Let's say one per day. If somebody is targeted it's one day away from RCE.

The update check is HTTPS, only the files themselves are HTTP.

TLS doesn’t mask the IP of the server. The updater probably isn’t using DNS over HTTPS. If I can determine that a user’s updater just hit the update check server, I can start impersonating the update server.

That takes it out of the one day away territory, but it does allow an attacker to only have a malicious HTTP capture up and detectable during the actual attack window.

Then, of course, if you’re also being their DNS server you can send them to the wrong update check server in the first place. I wonder if the updater validates the certificate.


I missed that, thanks!

The British Crown had to concede some rights centuries ago, or there would have been civil wars and probably no more crown. Dear Leaders are the ones that don't have to concede anything, yet.

Not only have there been multiple civil wars, there has also been “no more crown” after the beheading of King Charles I (1649) until the restoration in 1660.

> or there would have been civil wars

Would have been? There were.


Well, the only difference between Fascism and Stalinism was more or less that Fascism was anticommunist (communists and fascists were killing each other in Italy when Mussolini, a former socialist, was raising to the power) but Stalinism was communism only because Stalin had to wave that ideological flag to become leader of that country in those times. Both were nationalistic (Stalin de facto killed internationalism), had control of economy, had full control of society. Dictatorships.

> But Everyone Uses It!

All of my customers are on bitbucket.

One of them does not even use a CI. We run tests locally and we deploy from a self hosted TeamCity instance. It's a Django app with server side HTML generation so the deploy is copying files to the server and a restart. We implemented a Capistrano alike system in bash and it's been working since before Covid. No problems.

The other one uses bitbucket pipelines to run tests after git pushes on the branches for preproduction and production and to deploy to those systems. They use Capistrano because it's a Rails app (with a Vue frontend.) For some reason the integration tests don't run reliably neither on the CI instances nor on Macs, so we run them only on my Linux laptop. It's been in production since 2021.

A customer I'm not working with anymore did use Travis and another one I don't remember. That also run a build on there because they were using Elixir with Phoenix, so we were creating a release and deploying it. No mere file copying. That was the most unpleasant deploy system of the bunch. A lot of wasted time from a push to a deploy.

In all of those cases logs are inevitably long but they don't crash the browser.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: