Hacker News new | past | comments | ask | show | jobs | submit | rieTohgh6's comments login

It is not the same scale but the same issue as in article happens here. There is huge meat-processing plant next town, build from nothing in those 30 years and owner had to sell it to some big corporation since his children didn't want to take over. And that is would be management job, not crazy overworking yourself for pennies, like those examples from japan.


Last time I had resort to UA sniffing Firefox had issues with clikable horizontal/vertical lines on SVG. There was no version that supported it properly. So I should just display "Switch to Chrome" banner for Firefox users? Is it that simple?


> There was no version that supported it properly.

So what's the point of sniffing UA? What was your fix?


I expected this to be about 3D modeling and default pose.


For me it was people in the gym that skips legs day. Actually a good metaphor is absolutely required to create some ambiguity.


I expected it to be about Göbekli Tepe in Turkey. The t-shaped structures there I am pretty sure are meant to represent people as the theory goes.


So, you're not T-shaped when you know how to pose otherwise?

What about body building? You aren't T-shaped with a broad base and shoulder?


Well at least it wasn’t about the “This is my hole! It was made for me!” manga.


I came here for Roblox avatars and was disappointed


YT now shows 6 ads, for 10 minutes video, they share 50:50 with creator, who gets about 10$(+/-100% depending on viewers demographic) for 1000 views - it is nowhere close to cover the cost of Uber drive.


> use oauth with google or whatever and automatically get the name and birthdate from there

After recent story about github ban: https://news.ycombinator.com/item?id=33917962 anything that asks for more that email is a instant 'close tab and never return' for me. And even before, there is no way I am allowing any site to access may date of birth (despite it being fake one anyway)

And going back to "autocomplete" - it looks that browsers "know better" than developers: https://stackoverflow.com/questions/12374442/chrome-ignores-...


> anything that asks for more that email is a instant 'close tab and never return' for me.

OK? Unrelated to what I was talking about. I'm saying devs do it out of convenience. What you do with that is not their problem, really. Most people like Google auth.

> And going back to "autocomplete"

Again, totally irrelevant? I was not talking about autocomplete=off, but about the dozens of available autocomplete values, which is what leonidasv was asking about: A standard for the various autofill forms.

Funnily enough, you're nicely showcasing the problem yourself: You're a developer who didn't bother doing the research, and yet complains upthread about the lack of standards or whatever. I invite you to look at this page:

https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes...


It is 2022: some JS frontend frameworks don't have `input` elements in DOM tree ( or at least it is nowhere near the place visible "inputs" are). I guess it is the result of standard elements not being customizable enough (and let's be real, there is never going be a point when available options are enough).


Literally yesterday I encountered the date picker that didn't allow to manually change the value and didn't display whole calendar properly, with days in 5 and 6 row either invisible or not reacting to selection. And when it is obligatory event date field in insurance claim system, it is hard to apply Hanlon's razor.


Almost all security issues with ES stem from their idea to keep authorization as separate, paid product (X-pack). On other other hand MongoDB had similar issues since they wanted to their product to be easy to setup and use, maybe for people scarred of pg_hba.conf.


To be fair, "X-pack" was a thing many years ago. But those days are gone and have been for a while.

You get authorization in the free offering and that's been the case for the least two major versions.

The things you need to pay for are IMHO not hobby project stuff, like integration with LDAP/AD.

You are of course correct that this used to be the case, and that to some extend this sentiment prevails.

But I feel Elastic (the company) deserves credit for acknowledging the issue and addressing it.


Actually wrong at several levels. First, the free version includes all the security features. Xpack was always free (as in beer) and easy to enable when that still was a separate thing (it no longer is). After they changed the license for the whole of elasticsearch to be similar, xpack is no longer a separate thing. You just get the whole product. For free. There are some paid features in there but they are mostly related to high value stuff related to e.g. machine learning.

The "security issues" mostly stem from people intentionally running it without a firewall completely unprotected on the public internet. And then they put important data in there. Simple solution: don't do that, it's stupid and negligent and it's 100% your fault if data leaks like that.

You wouldn't run a database on the internet either. But if you must run it on the public internet, just put nginx in front of it with basic auth and https. Problem solved. Not that hard.

Alternatively, use the hosted version which doesn't allow you to do that at all and is nice and easy to get started with.


That used to be the case, buy the Opensearch fork forced them to include it in their free offering


I wanted to check if it is due to stacking (security) patches instead of just extracting whole tarballs and the first result I got from Google was: https://www.quora.com/Why-are-updates-in-Linux-much-faster-t...

Quora always had reputation for being shit but I am impressed by how terrible that page is. I mean there are only two 2 types of answers there: "Window$ is BAD" and stuff that looks like generated by GPT-3( or straight up from those infamous "recipe sites" a.k.a. SEO farms).


No, but it doesn't need one. Or looking at it in at other way - as long as it is better than Slashdot and Reddit people will keep coming anyway - and that bar is freaking low.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: