• 1 Post
  • 493 Comments
Joined 7 months ago
cake
Cake day: March 20th, 2025

help-circle
  • Easier said than done, if your end users run Chrome. Because Chrome will automatically block your site if you’re on double secret probation.

    The phishing flag usually happens because you have the Username, Password, Log In, and SSO button all on the same screen. Google wants you to have the Username field, the Log In button, and any SSO stuff on one page. Then if you input a username and go to start a password login, Google expects the SSO to disappear and be replaced by the vanilla Log In button. If you simply have all of the fields and buttons on one page, Google flags it as a phishing attempt. Like I guess they expect you to try and steal users’ Google passwords if you have a password field on the same page as a “Sign in with Google” button.





  • It’s ironic that you mentioned game credits as an example… The video game industry (particularly in Japan) actually has a pretty sordid history with credits. Many Japanese game companies in the 80’s outright refused to credit the makers, fearing that their workers would be poached. There’s a very strong “you should be completely loyal to your company” culture in Japan, and companies didn’t want to give their employees any kinds of wiggle room to consider jumping ship.

    There was also a negative stigma associated with working in video games; it wasn’t a “good” job at the time, and the general consensus was that video games were just for nerdy kids. So there was some shame associated with being in the video game industry. As a result, many of the makers used pseudonyms when they were credited.

    But going into the 90’s and 00’s, that stigma began to evaporate as video games became more widely accepted, and began to hit the global markets. However, game makers then had an uphill battle to actually get the game companies to properly credit them. The practice of not crediting (or using pseudonyms) had become normalized, so game companies initially resisted proper credits.



  • Yeah, Adam Savage was saying that as a highly skilled person. I’ve worked with personality hires. I’ve worked with military-grade weaponized autism. I prefer the autism, because at least I don’t need to babysit them and double-check all of their work.

    With the autists, at least you can reliably know “if I give them {A}, I’ll get {B} in return. Not {B-1}, not {B+1}. Always {B}.” I don’t mind teaching. It’s inevitable in any job. But working with personality hires always ends up being an exercise in patience, because there’s only so many times I can show someone how to do something. I work in an industry with extremely strict deadlines where your work is presented to hundreds or thousands of people at a time. So if a personality hire needs to be re-trained on things because they can’t grasp something, (or just keeps doing things wrong because they don’t want to ask for help), then it puts an extra burden on the rest of us to keep meeting those deadlines.


  • Honestly I don’t know why anyone would consider it hard: you just stop eating animal products.

    Maybe you have a different definition of vegan. Most say “vegan” means no animal products at all. It requires a ton of research to avoid constant minefields, because animal products can be in everything. Dyes, scents, preservatives, flavors, polishes, powders, etc… Even fresh fruit can be non-vegan, because sellers will polish their fruit with beeswax or shellac to make it more shiny, and give it a better shelf life.



  • That’s largely because one half of the elected officials are dedicated to defunding and deconstructing government organizations, so they can then point at those same organizations and go “look, the government doesn’t work! We should stop funding it!” The government is actually great at organizing a lot of things. But they’re all so engrained in society that you don’t even think about them as being organized by the government. Systems that just work, reliably, all the time.

    The government’s job is stability and reliability, not being as efficient as possible. Where a corporation may only have one person doing a job, the government will have four or five. Those people aren’t bloat; They’re on the payroll because the government is expected to keep functioning during emergencies. People would lose their minds if the streets department (responsible for clearing downed trees out of public roads) shut down after a bad storm rolled through, just because a few government employees had a tree branch fall on their house. What if firefighters stopped working because a local wildfire burnt a few firefighters’ houses? What if the city water department shut down because three or four city employees’ water supply was affected? What if the health department shut down during a pandemic?

    The people who work in government also live in the same areas they serve. Which means that they are affected by the same emergencies. The government needs enough redundancy to be able to continue functioning, even after those employees are affected by the same emergencies as the general public. If some emergency affects 75% of the public in a given area, then 75% of the local government employees are likely going to be affected. So if the government doesn’t have enough redundancy to be able to redistribute the work, people will see their government shutting down in the wake of the emergency. And to make matters even worse, during (and in the wake of) those emergencies, people look to the government for help. Which means that’s the most critical time for the government to continue functioning.

    I say all of this because the same is true for the infrastructure that runs critical government systems. The government expands and implements things slowly by design, because everything critical has to go through multiple levels of design approval, and have multiple redundancies built in. If the government has updated a critical system, I can guarantee that new system has been in the works for the past two years at least. That process is designed to ensure everything works as intended. I wouldn’t want my city traffic lights managed by a private company, because they’d try to cut costs and avoid building in redundant systems.





  • This reads like you’ve only ever had to deal with mid-tier bosses, so your reference for a “bad” boss is pretty skewed.

    I know one dude whose boss demanded he climb through a full dumpster to retrieve something the boss had thrown away earlier that day. The boss also required him to be clocked out for it, because he was already capped on hours for the week. The dumpster was shared by a seafood restaurant and a frozen yogurt place, so it was full of rotting fish and spoiled dairy.

    Boss said he was fired if he refused. He refused, and was fired. Every single sentence in the previous paragraph violated existing labor laws. But sure, “just do as you’re told with a smile, whether you like it or not.”






  • Nope, 0-day means it was exploited in the wild before the company knew about it. Basically, the company had to rush to patch it because it was already being exploited. It means black-hat hackers found it and exploited it before the white/grey-hat hackers reported it. If white-hat hackers found it first, they’d have already alerted the company and given time to patch it before they announced the vulnerability. But since the black-hat hackers found it first, it was a 0-day.

    0-day patches are often a bodge, at best. They often consist of “just disable the vulnerable component entirely” to give the company time to work on a more long-term solution. And that’s exactly what happened here. MS didn’t take time to actually fix the driver; They just ripped it out and said “sucks if you needed it. It’s gone now.”