rietta

5 ms·

1.
Flock Cameras and "What Do You Have to Hide"(rietta.com)
2 points by rietta 1d ago|0 comments
2.
RubyGems Open Source Supply Chain Security and OpenAI(rietta.com)
45 points by rietta 2d ago|6 comments
3.
by rietta 6d ago
Isn't that the truth! I remember it very, very well. Vividly even.
4.
by rietta 6d ago
The promise of React Native was easing development burden from the web app to the native app. It makes sense if they are just using coding agents to cut out the framework and just go native. That was my thought when I saw the headline and t
5.
by rietta 6d ago
I didn't go with the scroll up but did drastically shrink the header and make a hamburger menu. I still like having it sticky because many a time I have been on a page and forgot who I was reading. Hopefully what is up now is a good tr
6.
by rietta 6d ago
HN has moved on, but I wanted to come back again and say thank you to you and those who replied below. I just pushed an update to the website that makes the header much more mobile device friendly.
7.
by rietta 6d ago
I love the understated "some time ago" linking to a 2004 blog post. Raymond has been at this a long time :-)
8.
by rietta 7d ago
Fascinating! I wonder if cloth artifacts, such as the Shroud of Turin, would also exhibit similar signatures. Though I have read some extremely compelling multi-disciplinary evidence exist to its authenticity to 1st century Judea, not a for
9.
by rietta 8d ago
I have other disks, including personal files, that are not mass market. Including some very fun early "Rietta Solutions" programs by my learning days. I was very early mimicking the look and feel of commercial shareware at the tim
10.
by rietta 8d ago
The disk appears visually in good shape. It has been stored all these years in the original box in an air conditioned basement. I am not seeing any white material or other obvious corrosion. However, I can confirm that my first attempt to r
11.
by rietta 8d ago
I wanted to say I really, really appreciate your comment here John. libvips is a very useful tool set and maintaining it is certainly a bigger public challenge than I ever took on. I just wish the Ruby on Rails community had hardened their
12.
by rietta 8d ago
Normalize into flat xml that I could then parse in Nokogiri. Edit for clarity: I am a Rubyist at heart so I reach for Ruby for almost all of my automation, ML, and even now AI stuff. Fro a very long time, I have been able to use CLI LibreOf
13.
by rietta 8d ago
This is awesome! I have used LibreOffice (and Open Office) extensively for decades now. It is my real office suite I use for real work and real business accounting tasks. Yes, I am very well aware that Calc is different than Excel but it ca
14.
by rietta 9d ago
Neat! Thank you for the info on that one. Bookmarked! Before I spend well over $100 importing that device, I previously was thinking of brining up a 2001 era motherboard with a USB stack and can natively host the drives, but the 486 that ha
15.
Ask HN: 3.5 inch diskette read errors, would a period correct drive do better?
34 points by rietta 9d ago|44 comments
16.
by rietta 10d ago
I am working an a fictional world set 1800 years in the future. A whole subplot is the digital resurrection of 1990s Microsoft Encarta encylopedia which was the first time in a millennia they had a glimpse into this time beyond fragmentary
17.
by rietta 11d ago
Another type confusion vulnerability! Interesting.
18.
by rietta 11d ago
Thank you. I will work on that.
19.
by rietta 12d ago
Thanks for the heads up. The navigation header does not collapse as I never liked hamburger menus but it should be more than two lines. Works more than that on my iPhone 16. What size is yours? I will pull it up in the Firefox simulator nex
20.
by rietta 12d ago
I agree. And unstated in this write up is the direct upload route. Even if your Cloudflare was perfect, once the attacker got the preflight they send the binary file up to S3 directly and then hit the variant route directly. The first code
21.
by rietta 12d ago
Correct, which is how the ActiveStorage gem was patched. After this, Rails raises a Vips::Error: VipsForeignLoad exception on an attempted variant render of a malicious file. I plan on writing a technical detail post soon with some more cod
22.
by rietta 12d ago
I am not sure, but my read on the original disclosure is no. libvips itself has a variant processor for matlab v5 files, which the exploit took advantage of.
23.
by rietta 12d ago
Cloudflare or a WAF may or may not help. These can often catch and block specific bot traffic, but not every attack payload is delivered naively. It would be part of a defense in depth. Having the underlying vulnerability fixed is criticall
24.
Government Rails Site Hit Hours After CVE Patch(rietta.com)
117 points by rietta 12d ago|38 comments
25.
by rietta 14d ago
Hugged to death? website is not working for me from the xfinity network.
26.
by rietta 16d ago
There are way worse choices to fall back on than LibreOffice. Heck, it's the primary tool I actually use in my business. I can tell you first hand that it does not handle all the random stuff that corporate Excel users come up with, bu
27.
by rietta 19d ago
This is something Windows and Mac OS got right in the 1990s. I remember reading specifically about it in terms of digital accessibility too at the time.
28.
by rietta 19d ago
They got painfully expensive and then acquired. I still remember the arguments with clients and finally went all in AWS ECS, which is still quite pricey but clients seem to complain less about the Amazon bill then they did about Heroku.
29.
by rietta 19d ago
Oh! That's a term I have not heard in a long time!
30.
by rietta 22d ago
I am doing metadata auditing for government documents these days and there are UUIDs in lots of files going back a very long time. I have certainly seen them in PDFs and Word and Excel documents that long predated the current AI integration

More ›