Hacker Newsnew | past | comments | ask | show | jobs | submit | abridgett's commentslogin

I'll just leave this little NSA intercepting Cisco products reminder here: https://arstechnica.com/tech-policy/2014/05/photos-of-an-nsa...


But Sir! We are talking here between USA <eagle sound> versus rest of the world that’s unsafe and all the time attacking USA people privacy. Cisco is India based, not American!

disclaimer: not connected in any way with Cisco, just disappointed business customer.


Reminder that <eagle sound> is actually the call of a red-tailed hawk, and that the actual call of the bald eagle is far less impressive.


SSL added and removed here! :)


> NSA intercepting Cisco products

They could have searched on the internet for the backdoor password. /s


The hazard perception test was a great addition in my opinion. (Basically a video plays and you have to press a button when something dangerous has happened).

I passed my driving test 30+ years ago and then took the HPT as part of a motorcycle test 15 years later.

Paying attention (to the kid bouncing a ball at the side of the road, to the cyclist when it's windy weather etc) is a key part of road craft and I hope this made it much clearer with some (contrived) examples. TBH I just wish they let you click earlier (for _potential_ threats - i.e. before they step into the road, not just afterwards).


Actually this is wrong, it's what everyone thinks, but when you take the hazard perception test, if you press a button when you perceive a hazard, you will fail. What actually happens is there are 5 points available per hazard. You have to press the button five times, evenly spaced throughout the due of the hazard, but not starting earlier than the test setters deem appropriate, or you will drop points. It's one of the most bizarrely implemented tests, and needs serious practice to get its arbitrary rules right.


If a president flaps his arms on one side of the planet does this cause a hurricane of chaos on the other side of the world? And everywhere else.


This sounds reasonable. However there was a study showing major economic benefits if was free. These benefits came from more people implementing it, time saved by all those additional users, removal of licensing hassle.


Also the entire database can be incorporated into things like FOSS map software, or free map data. Websites can have the DB stored locally so do not rely on an external API.

We would get more utility out of it that way.

We would also not have the extra cost from the profit made on selling the data.


I know what you mean, but it would also be of economic benefit if you worked for free and any downstream customers all got that discount of the profit you make from selling your time.


Their "paint" advert wasn't bad either: https://www.youtube.com/watch?v=q-ut_2GWIm4 though it can't compete with the music.


It's a sad indictment that it took all this effort, in 2019, to convince a world "leader" that climate change was real.


What's weird is that people who don't think climate change is real / man made are against off shore wind.

Even if it isn't real, off shore wind in the UK is a gold mine.


Indeed, and it is better at continental scale: https://www.imperial.ac.uk/news/180592/european-cooperation-...

France, albeit enjoying even better offshore wind potential than the UK, is even worse as it only starts to deploy turbine fleets.


Renewable are boosted by interconnected grids, it's probably always going to be sonny or windy somewhere.

But with Brexit, UK has lost out on potentially being a large exporter of power to Europe, the same way the French do with their excess nuclear power.


Numerous non UE members sell electricity to members (Norway, Iceland, Switzerland, Ukraine...), including the United Kingdom.


I wish companies were more environmentally conscious and stopped churning out swag. It's such a waste. Much of it you would never have bought, most is low quality. We don't need it.


I've asked them: a) _what_ details may have been involved. Currently the criminals know more than we do. b) why EBT had any data if Wise stopped working with then in 2023.

I'd except there to be a fairly strong obligation (probably on both parties) under GDPR to ensure that EBT destroyed that data.

I'll be following up


I still remember playing Quake on Linux - with the X display being displayed on a different computer over the network. The different computer was running HP-UX (HP's Unix) on a PA-RISC chip.


They didn't trap Ctrl+C on Linux, so you had to be really careful about key binds.


I'm not sure it can replace non-trivial setups - sudo/doas looks set to stay.

e.g when you need to restrict a set of users to run only certain applications with certain other users. sudo can do this (even if the config format can be painful).


Good news! run0 will use polkit[1], which uses JavaScript for its rules[2], so there's no limit to how complex your rules can get!

On the other hand, maybe adding a JavaScript interpreter to Linux's trusted computing base isn't good news...

[1] https://mastodon.social/@pid_eins/112353420303876549

[2] https://www.freedesktop.org/software/polkit/docs/latest/polk...


It's a heck if a lot better than a random smattering of shared libraries getting pulled into a random high-priviledge context which also inherits some other context from whoever is asking for authentication. Polkit gets a lot of flack but PAM is absolutely mad.


If the lesson of xz was "reduce supply chain attack surface" then the freedesktop people clearly haven't received it yet.


Fedora has used PolKit for 12 years now, and the javascript rules have probably been a thing for about as long.


Doctors recommended cigarettes for decades. What should give everyone similar pause is xz was found unintentionally.


Thats why i moved every sudoers rule to ldap. Much nicer to configure and no need for files with the same content on multiple servers. New users are added and removed fast and i can check the rule on any server.


What's the goal?

If the host is to get most scenarios off sudo, exceptions aren't a problem.

If the goal is to delete sudo, exceptions matter, and migrating what is migratable will clarify what the remaining requirements are.


sure but very few people (relatively) are doing stuff like that?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: