Hacker News new | past | comments | ask | show | jobs | submit | qyi's comments login

There was a 10?


> it's worth it to purchase tools that have long term benefits.

Good luck finding an LCD with any concrete health benefits beyond any other. The industry literally just adds a bunch of gimmicks each year to see if people bite. All I can say for sure is IPS prevents you from needing to fix your head in one angle (especially for low contrast images), and most LCDs are too bright.

This reminds me of another issue: If you have a monitor with overdrive and use a color temperature adjuster like redshift, the overdrive smearing is often super bright while the rest of the screen is mellow.


This is true until you realize all general purpose languages are the same and redundant. There is no reason to have more than one on a given system.


Ah yes, we should outlaw the ability for people to send money to each other and have civilization take the burden of incompetent corporations that can't be bothered to follow basic infosec practices (let alone whatever product they are selling in the first place is probably garbage and has no value beyond monopoly).


You sure some ransomware crooks don't provide contracts to their clients?


The standard business solution to solve security issues - for example like having all your database in a public folder - is to get a guy to implement "security" (whatever that means) who is 40 years old and is really confident he knows what he is doing. He will go configure some firewalls and stuff that has absolutely nothing to do with preventing any real risk aside from automated attacks. Every time someone still gets the files from some 90's vuln, everyone is surprised that some sooper dooper hacker wizard was able to own their fortune 500 company.

> The least deployed solutions post-attack included web scanning (40%), endpoint detection and response (EDR) and extended detection and response (XDR) technologies (38%), antivirus software (38%), mobile and SMS security solutions (36%), and managed security services provider (MSSP) or managed detection and response (MDR) provider (34%). Only 3% of respondents said they did not make any new security investments after a ransomware attack.

uh huh. uh huh. uh huh. uh huh.

Meanwhile, for example, earlier today: a web search for "cat /etc/passwd" blocks my IP. What even is the point of this article? _Of course_ if you don't patch they will just hack you again. _Of course_ if your company follows terrible 90's practices, it will get owned again.


Did you choose 40 year old because it’s too old, or because it’s too young? I genuinely can’t tell


The essential point is that he's 40 and still doesn't know what he's doing (a common problem in any technical field).


So, what age must one be to supervise implementing security practices at an organization?


We live in a world where people unironically put comments on top of every file in their projects (but only the ones they can easily insert a meaningless string into) like "you cannot disclose this file blah blah blah" and call themselves "grown ups". What's this Android nonsense, can't it just run programs like a normal computer? At the very least if it purports to not be a general purpose computer, then there should be no excuse for security vulnerabilities.


After all the snakeoil that depends on facial recognition is bypassed, that will still before it's retrained.


Zope was pretty popular a decade ago, never got into it though.


The idea of an interface is fundamental to computing. No matter what you do, at the end of the day data exchanged between two systems has to be structed _some how_. E.g., machine code submitted to the CPU, register configurations, C ABI, Python structures, JSON. You _could_ be hand wavy about it, maybe even use machine learning, but then it will just be ambiguous and lead to vulns. IMO the constant insistence to try and find ways around this is a huge setback. I used Python heavily in 2008 and always was annoyed when trying to figure out the essence of an API (which is what you get when there is no concrete interface). Whenever I read a Python codebase, unsurprisingly, it's full of handwaving and the resultant bugs (some people know what they're doing, but the problem is there more than in a typed language).


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: