Hacker Newsnew | past | comments | ask | show | jobs | submit | projektfu's commentslogin

My reading is that the BOLD source was lost and found but that BDE and some parts of dBase were lost completely, evidenced by them including an unmodified version year after year. Perhaps the author thought people were more aware of the BOLD source being lost.

You get a box and someone is sitting on its IP address (in the middle), proxying to the real one, so everything is getting logged. Other comments say that this mitm stops working when you use public key authentication.

> Other comments say that this mitm stops working when you use public key authentication.

It doesn't completely stop working; a MITM can still pretend to be the server, it just can't authenticate to the real server on your behalf. You could be doing all your work in a fake server controlled by the attacker, while the real server sits there untouched.


If that were the case then I don't think the OP approach works either.

It does note that it only protects against an attacker "who learns the cloud-init user-data at any point after the script terminates".

If the attacker can get the cloud-init user-data while the script is still running (in the time between sending the cloud-config.yaml and connecting with SSH to the machine) that would still allow MitM, but would require more effort on the attacker's part to leak the cloud-init data.

The point of the script was that leaking the cloud-init data after the script has completed is harmless.


Yes, I'm just saying if you think you've set up a server with Hetzner, but Smersh is able to intercept your first interaction with it and present you a server that you think is the one you created, then it doesn't matter how much you try to harden the compromised server. But if you get MITM later in the the process, the above is the scenario you are worried about.

I think it's an echo of "If Japan can... why can't we?"

https://youtu.be/vcG_Pmt_Ny4?si=KbAxOSFSjoPT3vK_

I could be wrong.


Yep, at some point I lost the few things I had on iTunes.

In the future they'll track your eyes and when you've been staring blankly for a second at something, it'll pop up a tooltip that you'll have to dismiss.

The thing is, nobody is ever going to feel bad that you've ignored their little feature. It'll just keep nagging you into the future until you dump the product. In spite of many saas products collecting data on every mouse movement and keystroke, perpetually, they seem to do nothing with that data.

Yeah, it depends. Some webapp vendors will actually look at metrics of interaction with those tooltips/tutorials, though I'm sure most don't. But yes, there are things I've had showing on the screen for months and months (like the "Try dark theme" which has been showing at the top right of JIRA since whenever they added that)...

I have at least two different saas packages that I use regularly that fall into product tour mode frequently even though I have completed the tour and have been using the product for some time, logged in as the same user. The tour was usually not helpful in the beginning, especially when I was onboarded by a trainer. It's more frustrating that I can't make them go away for good.

You could at least write a letter.

But it has to be strongly worded, otherwise it won't accomplish anything.

It's better to do a hiring freeze before the RIF. Otherwise people have left jobs to come work for you and are now stranded.

The opening line was funny, because the Wall Street Journal famously had no photos long into the color photo era of newspapers. When did they add them? Sometime in the late 90s/2000s?

Then again, financial news doesn't really lend itself to photojournalism. A photo isn't going to make the story of a bankruptcy or merger more believable. The rest of the media would show an exasperated trader on the day of a market crash, but at the level of traders some will benefit from a bull market and others will benefit from a bear. So it's just pointless showing the photo.

I always liked the hand drawings of people referred to in the stories.


If we could get rid of useless stock photos, the world would be a better place. An article about headaches doesn't need a picture of someone with a headache. WE KNOW WHAT A HEADACHE IS. An article about someone arrested doesn't need a picture of a generic crime scene. An article about Facebook doesn't need a photo of a monitor at an angle showing Facebook.

But apparently it drives engagement because people can't sustain their focus on text-only media?


To get around this problem , I personally use a ON/Off extension and only load images if article "...is interesting enough ..." But yes, lots of images only have a very weak usefulness ....

What's the extension, if you don't mind?

I'd love an extension that classifies images and somehow blocks stock photos or keeps anything that's not a photo like charts and graphs. For crime and police stories, not that I regularly stumble upon those, I want to see the real crime scene or the real perp, but not a stock photo of a police tape or a judge's gavel. If everything is "off", I wouldn't know what I'm missing.


Just turn off Auto Load Images in Netscape.

Instructions here: https://www.ou.edu/class/webstudy/n4/old/N_Auto_Image_Loadin...

:)


Help, I'm now stuck in the 90s. Or at least give me some stock tips or something.

Buy Apple.

And that cheeky little online book store that Jeff Bezos dude is running from his parents' garage: Keep your day job, but also make time to go over there in person and figure out a way to give him all of your money for as long as he'll take it. He'll want to keep calling all of the shots and that's fine. Let him.


Instead of useless stock photos we now have useless AI generated photos.

True, but some sites, especially the smaller ones, make fun artistic AI images in a certain style with some quirky elements thrown in. It's not drawn by a human, but the prompt for good images that I personally like (or tolerate, at least) is usually way more creative than the search query for the boring stock image ever was. If the stock image was a judge's gavel, the AI image would, for example, be a judge's gavel threatening the hidden accomplices of the accused that the article is trying to allude to. It may be in an 8-bit style if it's for cybercrime perpetrated by a nation state. Just a random example that I haven't seen, but it's much more fun than a shitty stock photo. Useless, of course, but gets a "hah" from me once in a while. And it makes stock photo companies die.

RE ".... the Wall Street Journal famously had no photos long into...."

Made me think of how I dislike articles, " often from newspapers " that seem to add (often several) photos only weekly related to article content when in my opinion only a few ( 1 or 2 ) are useful. I use a Image on/off extension, and only load images when I'm reading an article and it seems "... interesting enough ..." A side effect of such a browser extension is it reduces PC .resources. I also sometimes save a page with out images ..


"I always liked the hand drawings of people referred to in the stories."

I did too. It was distinctive, tasteful, and understated. The style is called Hedcut:

https://en.wikipedia.org/wiki/Hedcut


Cook’s Illustrated continued to have black-and-white photos in the inside of the magazine up until the late 2010s.

It seemed to be a stylistic choice that kept the focus on the cooking lore and knowledge rather than making the magazine about food porn. Their “cooking tips” section continues to be drawn in pen-and-ink style.


Without researching, I would say the 2000s. They held off for a long time. As you suggest, it was a somewhat stodgy paper for ages that didn't really need photos prior to getting into more "lifestyle" and such topics later.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: