Hacker Newsnew | past | comments | ask | show | jobs | submit | steven_is_false's commentslogin

I kinda worry about this.

I wish I could tell people that having that much access raises legal issues for me.

It's not enough to have them sign a contract limiting liability because as a business they have far more lawyers than I do.

When I work on a contract I want to be able to say in court that I couldn't possibly be in any way related to the event of a bug, security breach or data loss because I simply do not have access.

It is genuinely worrying on my part to carry around credentials with that much data. What if my laptop is hacked or stolen? I do not want to be sued (again it doesn't matter if they have a valid case or not, I don't want to deal with legal fees or anything.)

This is what I wish.

Obviously things are far from that.


Taking a pill is a somewhat poor way of getting substances into the body because it must go through the liver anyway. It does have the advantage of slowly leaking into the body though.

If you read into this subject to avoid processing by the liver or other problems like this you want an injection, sublingual administration or rectal administration or a patch/cream. For want of a better word "sensitive" parts of the body such as the scrotum are more permeable to patches/creams. You could probably get tipsy by dipping your balls in a drink similar to boofing.


I'm not sure "Responsible Disclosure" makes sense in any case.


Acting responsibly as a researcher who has discovered a vulnerability requires delicately balancing a question of two greater evils. Will more people get hurt overall if we announce the vulnerability sooner, or will more people get hurt overall if we wait until the vendor is ready?

In most cases, working with the vendor to allow a patch and a warning to be released is the path of least harm. But sometimes the right decision is to announce a vulnerability before the vendor has issued a patch.


It does if you’re ethical and care about potential fallout.


"Potential fallout"???

Like the potential fallout of known broken "encryption" in a security vendors products being hidden from their customers for 18 months?

The ethics of publicly disclosing way quicker than that, despite what the vendor wants to label "responsible disclosure", seems pretty straightforward to me...

I hope that 18 months of conference calls was extremely lucrative for the researcher here, because I'd feel like a jerk sitting on that one for a year and a half while the vendor was no doubt selling more and more of their broken and insecure crap to unsuspecting customers...


And this right here is why “responsible disclosure” is a dumb term that people need to stop using.

Look how much time is wasted arguing over the highly subjective definition of “responsible” that breaks out. Communicating these issues would be far more optimal if we use objective language.

That was the point when Scott Culp coined that awful term in the first place. People are still taking the bait.


Anyone else feel buying drugs online is a relatively more legitimate use than most of what crypto is promoted for?


There's other uses than buying drugs online?


You can also buy all the tools and materials for fraud !!


There's no reason to think evolution gave us a single variable for "goodness". We have a strong tendency to love our in group; our family, friends, tribe and so on. But I see no reason why love of the out group should be the same.

Parents do lots of bad things to get their children ahead. Consider the soldier who "loves his country" but "hates the enemy." Prosocial behavior benefits your society, not other societies. But there's also no reason to think it benefits individuals.

We know the halo effect is real and we have no reason to think empathy to attractive people is the same as empathy to ugly people.

More worryingly consider the case mother cat. Mother cats love their kittens. They also eat them sometimes when they are sick or there's not enough food. The same drive to have genetic offspring can produce care and intense hate. There's no reason to think apes don't have similar kinds of natural urges.


It's difficult to talk about this but it really fucks you up when your parents are fat and sit around watching TV all day. I still don't know how to explain to other people what it's like or how I still struggle very hard today. You don't develop an I or a tongue and other people there's nothing for them to hear.


Bad article. Sell me on her poetry not her biography.


After all it is a review of a biography of Elizabeth Bishop, not a critique of her poems.


It's slow. You should read up on the challenges of implementing memcpy in C emulated on Java. Basically you have to manually implement paging.


>Since we want to support those languages as first-class citizens, we can't require GC support as a base concept

I feel like you're overthinking it. Can't you just have a table that holds GCable objects and only hand out indexes to C and co?


That is how we support references in the Rust toolchain right now, via wasm-bindgen, and it's an important part of making unforgable references work for languages that rely on linear memory.

It doesn't help with making capabilities more fine-grained, though: we have to treat all code that has access to that table as having the same level of trust.


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: