Hacker Newsnew | past | comments | ask | show | jobs | submit | omcnoe's commentslogin

Originally OLED TVs used different sized subpixels for different colors as part of their wear management. Red wears out the fastest so it would have the largest subpixel.


Without TLS on your blog anyone in the middle can trivially inject malware to all your readers.


it still can, just add some 3rd party javascript or unpatched backend app


How do you inject anything into a TLS served webpage as an equipment-in-between without the cert's key?


supply chain - if you put some 3rd party script link, ad, tracking or even just update dependencies to a bad version like the npm packages hack on your page, TLS won't save you if the service or dependency gets hacked


The biggest culprit is the ad network script. Whether it’s a script tag, an iframe, an image pixel, it’s basically allowing the browser to send your visit event and user agent information (or the chrome updated headers) to that 3rd party and if it’s using jsonp, can callback a function on the page to inject malware that can take over your browser. Ask me how I know.

You think that’s base64 you’re reading? Hmm. :)


Brightness control on external monitors has never been supported in Windows though, partially due to issues with displays that have poor write endurance on internal storage.


Monitor brightness is controlled over CEC which is just i2c. Windows most certainly supports this on an OS level.



It might not be an "internal windows" tool, but I have controlled an ancient monitor (I think over VGA?) using a 3rd part app on windows. The buttons had broken, but software control worked just fine.


I change brightness all the time with a little tool called Monitorian.


Cloudflare explicitly supports customers placing insecure HTTP only sites behind a cloudflare HTTPS.

It's one of the more controversial parts of the business, it makes the fact that the traffic is unencrypted on public networks invisible to the end user.


All it means is that applications downloaded/installed via Homebrew will no longer be able to bypass the Gatekeeper signing/notarization requirement on Intel platforms (already is the case on Arm).

If you didn't need to install a cask with this flag before you won't be impacted by the deprecation.


I think that homebrew will be removing those that require it as well ( or I suppose you can build from source)


How important is being a language expert in x vs all your other skills as a Software Engineer? My opinion is that "higher level" skills (like system design/architecture, product thinking/planning etc.) are so much more important than language minutia (outside of specialized fields).

If a business is turning away candidates because they "don't have n years of experience in x" that doesn't sound like a very dynamic/interesting place to work, it sounds like a code monkey job. AI is going to eat code monkey jobs.


Before you can demonstrate your skills on the job - you have to get the job.

Most of the 2.6 million+ developers in the US don’t have “interesting jobs” nor do they care if their jobs are “interesting”. They work to exchange labor for money to support their addiction to food and shelter.

https://www.hanselman.com/blog/dark-matter-developers-the-un...

If you look at the requirements for most jobs they want you to have $x number of years of technology $y. When every job application gets 100s of resumes, employees can be picky.

Besides, every technology has its foot guns, ecosystems, way of doing things and people who think they can just pattern match based on what they know are often the most dangerous.

One example is that I’ve seen people who know relational databases, optimization techniques and normalization try to pattern match their understanding of OLTP databases when using OLAP databases like Redshift and Snowflake and it being a complete disaster.

See also people who don’t understand how to do a single table design with DynamoDB.

In my particular niche (cloud + app dev + customer facing consulting) , I knows AWS inside and out and have used more AWS services than you can imagine in the past 7 years in a production capacity [1] and I’m currently a staff level developer at a consulting company (full time), the only company that would (has) looked seriously at me to do consulting outside of working with AWS is ironically enough - Google.

But they have the bandwidth to let me ramp up. When I have one open req, why would I hire someone who needs to ramp up on AWS when I have a dozen applicants with experience? Why would I put myself at a disadvantage?

A company would be absolutely insane to choose me over someone with experience with Azure, or GCP as a staff consultant over the probably dozens of applicants they have with that particular skill if they were an Azure or GCP shop.

When my current company hired me, they were short staffed and gave me a week to onboard and flew me out to a customer site to do support a large sales contract. They hired me because I could hit the ground running both technically and without “consulting training” like AWS had.

[1] seven years of experience between 2 working at a startup, 3 working directly at AWS (Professional Services) and two working as staff consultant at a third party company.


I've worked with a lot of junior devs/graduates on a large F# project, in that context hiring/onboarding for F# hasn't at all been a limiting factor. Ultimately F# is not a particularly difficult language to learn.


My biggest complaint would be a tendency to blindly use a "Microsoft first" approach to selecting tech rather than evaluating things on their own merits in the context of their own use cases.

Some Microsoft stuff is really good but it's not universally true. And in the worst cases you end up locked into some hard to migrate off platform that is withering on the vine.


Betting platforms specifically work to identify customers who act in such ways and ban them from the platform. Developing accurate odds costs money, it's cheaper to just identify "advantage bettors" and ban them.


I'm not sure this applies to these prediction markets. Normally when gambling you're at a casino playing e.g. blackjack, where if you're winning more often than expected you're taking the house's money.

But this is more like playing poker, where overall the casino could care less if you're continuously crushing the other players, as long as people keep turning up to play and they keep getting a rake.


Maven also has some terrible design where it will allow incompatible transitive dependencies to be used, one overwriting the other based on “nearest wins” rather than returning an error.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: