oconnore

5 ms·

1.
by oconnore 1mo ago
I think you're assuming that updating software/hardware to more recent versions is sufficient to prevent a nation-state from wreaking havoc, and I'm not sure that's true. When it comes to something as critical as water i
2.
by oconnore 2mo ago
There are two camps: people who are fans of Haber Bosch because it feeds most of humanity, and absolute psychopaths.
3.
by oconnore 2mo ago
Sure but a system that breaks if it doesn't get exactly 86,400,000 millisecond scale scheduled events in a day has already been driving your SRE team insane.
4.
by oconnore 5mo ago
I don't understand why people are so negative about IPv6. I have done essentially zero home networking work and I just ran this successfully. It just works! ``` > ping6 google.com PING6(56=40+8+8 bytes) 2605:59c0:236f:3a08:7883:9d04
5.
by oconnore 8mo ago
Why would you be running sudo in production? A production environment should usually be setup up properly with explicit roles and normal access control. Sudo is kind of a UX tool for user sessions where the user fundamentally can do things
6.
by oconnore 8mo ago
Can you share how the scripts work? That seems to be the most interesting part, but is omitted from the article. The only technical details are UART + an opto-coupler. > Both devices run custom scripts designed to handle data transmissio
7.
by oconnore 9mo ago
I'm not sure which dimensions you're talking about, but in terms of bed size the F-150 has been very consistent over the years (although I think Crew Cabs — although they always existed — have become more popular). The Ranger sti
8.
by oconnore 9mo ago
I was considering getting a Rivian and decided that in fact I would probably not allow the 24 year old dude at my local construction supply co to use a skid steer to drop a load of gravel into the bed of my $75k+ electric vehicle. So instea
9.
by oconnore 9mo ago
Why do you do this?
10.
by oconnore 9mo ago
The only disappointing aspect of the Iocaine maze is that it is not a literal maze. There should be a narrow, treacherous path through the interconnected web of content that lets you finally escape after many false starts.
11.
by oconnore 11mo ago
I guess you had a bad experience, but this hasn’t been an issue for me using it for many years now.
12.
by oconnore 11mo ago
If this is a concern, pass your UUIDv7 ID through an ECB block cipher with a 0 IV. 128 bit UUID, 128 bit AES block. Easy, near zero overhead way to scramble and unscramble IDs as they go in/out of your application. There is no need to
13.
by oconnore 1y ago
This package also seems to just have a misbehaving github action that is in a loop.
14.
by oconnore 1y ago
This is a lot of fuss when you can get a batch update to stay within a few minutes of latency. You only have this problem if you are very insistent on both (1) very near real-time, and (2) Iceberg. And you can't go down this path if yo
15.
by oconnore 1y ago
Wikipedia is based in San Francisco. Why can't they just tell the UK to pound sand?
16.
by oconnore 1y ago
Perhaps change the link to the original NASA JPL post: https://www.jpl.nasa.gov/news/voyager-2-illuminates-boundary...
17.
by oconnore 1y ago
No one is being replaced 1:1, but everyone is going to be downsizing (and that’s mostly the same thing). You need a lot fewer managers if your team is 5-20% what it needed to be a few years ago.
18.
by oconnore 2y ago
> What's wrong with just eating a bit For one thing you won't get many likes, subscribes, retweets, or what have you.
19.
by oconnore 2y ago
256 bit symmetric cryptography keys are a bit like picking one atom in the universe (10^80 atoms, or 100000000000000000000000000000000000000000000000000000000000000000000000000000000). Your opponent would have to test half of the atoms in t
20.
by oconnore 2y ago
> Could someone like the NSA with limitless resources do it? Quite probably, sure. If you're not worried about a fairly well-resourced government agency uncovering whatever network activity you believe needs to be anonymized, why wo
21.
by oconnore 2y ago
I thought this would be a different proposal. But on the topic of verified HTTP: something that I think you could do that would be pretty neat would be to allow first party assets to be offline-signed and then delivered over unencrypted HTT
22.
by oconnore 2y ago
As I understand it, the earliest they could actually strike would be 80 days from today, as per the Taft-Hartley act, putting the strike on November 29 (after the election). Something seems broken when a group is paid relatively fair wages
23.
by oconnore 2y ago
I am excited and optimistic that we appear to be applying economic principles to housing! Now that we're getting rid of centralized price controls / collusion, next can we do supply/demand?
24.
by oconnore 2y ago
My first thought was, “oh, I used to do this when I wrote Common Lisp, it’s funny someone rediscovered that technique in <rust/typescript/java/whatever>”. But no, just more lispers.
25.
by oconnore 2y ago
It seems like the chemistry has some interesting trade-offs. https://www.mitsubishicritical.com/resources/blog/the-runawa... https://www.linkedin.com/pulse/which-better-nickel-manganese... &g
26.
by oconnore 2y ago
It occurs to me that in year 2000, we had already invented Kerberos, Merkle trees, AES, and McEliece. Kerberos for one is built on symmetric cryptography, and is as far as I'm aware not vulnerable to the sorts of attacks that make RSA,
27.
by oconnore 2y ago
Sure you can , but it's rare to see a GUI app built keyboard first and specifically optimized for the productivity of power users. The list of apps that do this successfully is a tiny fraction of the total. - Excel - 3D modeling tools
28.
by oconnore 2y ago
> Legacy apps never die I think it's a mistake to frame this as legacy vs. new. There are real benefits to the approach taken by these TUI applications and it would behoove modern app designers to learn from them. It's perhaps
29.
by oconnore 3y ago
> Case 1 is moot, case 2 would be prevented by properly implemented HTTPS. That's not true. It's significantly easier to ensure the security of an offline signing key than it is to ensure that an arbitrary HTTPS server avoids e
30.
by oconnore 3y ago
HTTPS is irrelevant here. You can send incorrect headers in either.

More ›