Hacker News new | past | comments | ask | show | jobs | submit | devwastaken's comments login

Very few services do this. Steam is not forced to comply unless there's an order to do so.

Even today, some people and companies choose to follow the law without being forced to. It might even be important from a business perspective to remain squeaky clean if you are in a dominant market position, when competitors are looking for leverage against you.

What law?, if there is a law you have to follow it, it being a law by definition forces you to follow it. Whether anything is done to those that do not follow it is another question. The issue is that there is absolutely no legal reason to ban Russians from buying games.

This seems like an arbitrary 'moral' choice, an honestly after the bs we've seen from Israel and the U.S, they have no moral high ground to stand on and criticize the Russians. Losing all your games is a massive issue, they are effectively holding your games hostage in an effort to exert politically motivated influence.


Add Docker Hub to the list, just a couple of days ago they banned access from all of Russia on their own accord. Judging by reactions of people I know from there, I can't say actions like this bring us closer to good relations and a peaceful world. They're having exactly the opposite effect.

https://habr.com/ru/news/818177


I don’t think anyone is counting on Docker or Steam to bridge the gap and bring about peace between Russia and the West. That’s up to Putin. One of the goals of economic sanctions like this is to coerce change in the target country by creating domestic discontent that bubbles up to the leadership.

The contract between Sony and Steam in this case. Sony has chosen to restrict the regions Steam can sell in. Steam could honor the contract, or just pay lip service to it and hope Sony don't care enough to invoke their lawyers.

There is always high moral ground to criticize russia.

What "leverage"? They're not required to ban VPN users, period. Not their responsibility. The Fed has to draft orders first. Valve is doing this of their own want.

There's multiple videos demonstrating Tesla's that self drive themselves into obstacles, including trains, because video cannot properly figure out obstacles.

Am very curious to see how others do their setups beyond just installing the obvious packages and simple configuration.

I can't wait. MWL's writing style makes reading technical documentation a lot more fun than it has to be.

No. Bachelor's only if you're getting a paid ride. Anything else make sure it's than 2 years, and it's a program that proves industry placement and strong connections. You will be stuck with a useless bachelor's in most programs today.

"Firefox is already a leader in foundational qualities like speed and privacy"

Incorrect? Firefox's default settings run obscure and opaque studies, collect data, save browser passwords and data by default. This is both a privacy and security issue out of the box. Malware can simply copy and upload all of it. Recently there was the courtroom software fake 'fffmpeg.exe' hack that accomplished that.

Firefox should be looked at like software components. Modules that can be used by other projects. Chromium did this which spawned Node.js, Electron. I would very much like to use firefox's tech in my software, but I can't! It's actually easier to compile WebKit to all platforms than to even try.

I hope the best for Mozilla, and perhaps going forward they can figure out how to focus on engineering and next gen.


You dont need to, you can bypass it anyways through win32 function call redirection and a dozen other methods.

Antivirus's are trash, they are a mitigation that exists when the operating system does not have proper security measures in the first place. This is why Windows must ship with an AV, and everyone else laughs.


> the operating system does not have proper security measures in the first place

> everyone else laughs

Meanwhile:

    So let's install our shiny $UB3RK3WLAPP !

    # setenforce 0
    # curl http://ub3rk3wlapp.io/install | sudo bash

Notice the sudo and terminal. You must enter a password in a terminal. In windows you just click twice.

> In windows you just click twice.

Uh, oh, that means you're working on an admin account. If you are using a normal user account, you will be prompted to enter your admin credentials instead.

(You can also force this behaviour on administrator accounts. Search for the registry setting "ConsentPromptBehaviorAdmin")


On Windows installs the default user created in a home/pro install is an admin and it never prompts the user to go create a non-admin account for daily use. This actually makes perfect sense in itself (beyond the behavior defaults you mention being backwards).

Notice you ignored setenforce and what it's already a root session.

how is that any different? you're still allowing arbitrary code to run.

Unless you are saying that those who type into the terminal will first |echo the script into a file, verify it, then run?


"Secure by Design" [0] MacOS also ships with at least 2 different virus scanners [1] that are as active as Defender

[0] https://www.apple.com/business/docs/site/AAW_Platform_Securi...

[1] https://arstechnica.com/gadgets/2022/08/apple-quietly-revamp...


Not even close to "as active". Defender will scan everything, even windows own updates. It is the reason why Windows machines perform poorly and why battery life is a joke on that platform. It's intrusive and doesn't care much about resource use.

My Lenovo X13s lasts about 15 hours on a charge and performs very well.

Universities are scams. I recall this year an instructor was very upset that students were using Quizlet, and claimed they were "violating intellectual property". A false, hyperbolic and ridiculous position that was successfully used to scare students into not admitting they use Quizlet. Defund universities.

You're not wrong. Media codecs are a good attack vector. However, it's not so simple. You need hand crafted SIMD to reach desired performance. That is a whole area of specialized theory and research. I think it should be done, but who is going to fund it?


It would involve unsafe rust anyway, which does sequester but not eliminate the concern. I think it would be difficult to make a case that this effort is worthwhile.


You don't necessarily need all the code to be fast. I think writing correctness validators in a memory-safe language would go a long way toward securing media formats. Run the validator on all untrusted media to confirm it strictly conforms to the specification before playing it in the fast-but-unsafe player. This should make things a lot more difficult for attackers. As a bonus, it would be a useful debugging tool for encoders.


Germany’s Sovereign Tech Fund?

;-)


Protest is illegal in most cities in the U.S. This is because the 1st doesn't specify how it can be used. Therefore cities will require permits and move people to areas where the protest is ineffective. Even if its illegal, no one actually follows the law. It's based on what that administration chooses to follow.


I know this is a popular take right now, but it's actually just wrong.

The 1st amendment absolutely protects your right to protest in the US. But practically you do have to be in the right courtroom for that to be meaningful.


Law is theory, court outcome is practice. In theory people should be able to protest effectively. In practice it will gain you a felony charge.


Depends on the courtroom.


I can't speak to "most cities". What is effectiveness in this context? Shutting down a road, or making it clear that many people are troubled with whatever they are protesting?


Twelve million people not working, no matter where they assemble, are going to make the politicians change something in order to placate their corporate bosses.

This is why we need more general strikes.


Do not do this. This is a trap. Research and higher academics are in effect a scam in modern day. At one point they were useful, but now everything done is overwhelmingly private R&D. In academia you will scrounge for scraps and never pay off the loans.


FWIW, I did my PhD in neuroscience and am now working in R&D in biopharma. It would be very difficult to have landed my current position without a PhD. Lastly, most STEM PhD programs pay a stipend (a small one, mine was 30k/year), so you’re not going into debt to get one.

I agree with your sentiment. Academia as a career path isn’t viable (or even feasible) for the majority of people who get a PhD


But most people doing research at private companies have a PhD at the very least, if not experience in academia, do they not?


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: