boveus's comments

boveus | 1 year ago | on: Security Is a Useless Controls Problem

> Cross-site scripting (XSS) safe front-end frameworks like React are good because they prevent XSS. XSS is bad because it allows an attacker to take over your active web session and do horrible things

What? React is not "Cross-site scripting safe"

Many security controls do require more than a 2-3 sentence explanation. Trying to condense your response in such a way strips out any sort of nuance such as examples of how react can be susceptible to XSS. Security is a subset of engineering and security decisions often require a trade off. React does protect against some classes of attacks, but also exposes applications to new ones.

boveus | 2 years ago | on: Correlation between height and being a F500 CEO

> In the US, 14.5% of men are 6ft or taller. Among CEOs of Fortune 500 companies, 58% are 6ft or taller (4x increase) 3.9% of men are 6’2’’ or taller, among F500 CEOs, 30% are 6’2’’ or taller (7.6x increase)

10% of F500 companies are run by women as of 2023[1]. It's interesting the author assumed all F500 CEOs are men. I would also be interested on the source of height for the F500 CEOs. If it is self-reported it is possible that some of them aren't quite as tall as they say.

1. https://fortune.com/2023/06/05/fortune-500-companies-2023-wo...

boveus | 2 years ago | on: US spends billions on roads rather than public transport in 'climate time bomb'

> If you increase the capacity of the road system however that's accomplished and more people use it that's a win.

This ignores the cost/benefit of constructing more car infrastructure in heavily urbanized areas and the cost of owning a car for transportation. It ceases to be an economic multiplier when you compare it to cheaper alternatives. You are also painting car infrastructure as some sort of panacea, but it costs households a lot of money (almost 1/5th of their total income[1]) to use a car for transportation.

Not only are cars expensive, but their expense is inversely correlated with income (poor people spend more money on cars). In the USA we spend much more on transportation than in EU countries[2]. From the standpoint of the average American family, car infrastructure is much costlier than the alternatives.

1. https://data.bts.gov/stories/s/Transportation-Economic-Trend... 2. https://www.itdp.org/2024/01/24/high-cost-transportation-uni...

boveus | 2 years ago | on: US spends billions on roads rather than public transport in 'climate time bomb'

> More lanes helps because now more people are able to get where they want to go!

I can't tell if you're being sarcastic, but no one wants to get to the 5 or 6 lane highway. They are using the highway to get to smaller 1-2 lane surface roads and parking areas with limited capacity. Eventually you will hit a bottleneck in surface roads or parking that you cannot improve easily or cheaply. The larger highways only serve to get people to the bottlenecks in the system faster.

boveus | 2 years ago | on: How to Roman Republic 101

I have always struggled with just how difficult it is to retain long form text over HTML. Even if you block the ads, the hyperlinks and strange font choices can make it difficult.

The solution I figured out was to use a Kobo e-reader with Pocket. The integration with Firefox is actually quite seamless. You can basically just take a webpage, save it to pocket, and then sync it to your e-reader and read the article there. I have found this to be the best way to consume acoup's content.

boveus | 2 years ago | on: This month is the planet’s hottest on record by far – and hottest in 120k years

You have a somewhat justifiable position, but you lost me when you started talking about social media posts. In your proposed rationing of "climate relief" it shouldn't be focused on people's thoughts. It should, instead, focus on specific actions people have taken or not taken that directly impact the client.

I could see something like a carbon credit for individuals based on their actions that impact the climate such as limiting their power use, not driving their car frequently, or not having pets. This type of rationing also has problems, though, as it starts to become effectively limiting things to wealthy people who can afford a lifestyle in which they can use a car less frequently or own an energy-efficient home for example.

I don't think there is a reasonable way of rationing climate relief in a morally justifiable way.

boveus | 2 years ago | on: Dear Aliens

I assume there is some particular combination of factors at play here:

The US has a very advanced military and intelligence apparatus which operates globally.

The US has an enormous area that it operates in domestically (large areas of both the Pacific and Atlantic oceans).

The US also has a relatively open culture and emphasizes free speech.

When you look at all of these factors it seems that by having all of them it makes it a lot more likely for people to detect UAPs and then talk about them. The other thing that might be at play here is that, as an American, I have no idea what a credible news source would be from Botswana and it is unlikely to be in English even if I would consume it in the first place.

boveus | 2 years ago | on: CWE Top Most Dangerous Software Weaknesses

XSS and SQLi can happen independently of the memory safety of your chosen programming language. You can use relatively safe frameworks or ORMs to generate HTML and interact with your DB, but there will sometimes be complex use cases that require you to extend or otherwise not use those safeguards.

Similarly, I imagine that there are cases where someone needs to do complex wood working tasks that involve dangers which are a less obvious than with a table saw.

boveus | 2 years ago | on: Tuesday set an unofficial record for the hottest day on Earth

It would be beneficial to your understanding if you read the article. The title is slightly misleading.

> Even though the dataset used for the unofficial record goes back only to 1979, Kapnick said that given other data, the world is likely seeing the hottest day in “several hundred years that we’ve experienced.”

boveus | 2 years ago | on: Vacations in the Soviet Union

>It encouraged workers to vacation with groups of relative strangers as opposed to their friends and families.

This can actually work out well. I experienced something similar in the US while on vacation. I was traveling with someone from Glenwood Springs, CO to Denver, CO via Amtrak. We went to the dining car for lunch an since there were two of us and space is at a premium, the Amtrak policy was to seat us with one or two random strangers. We sat and had lunch with an oil executive and someone's grandmother and it was quite an interesting experience and we got to meet two strangers. It was actually a highlight of that train trip.

I feel like the experience of having unplanned social interactions with strangers is often missing in modern American life. I don't know if the Soviet style of assigning vacation groups via a worker's committee would be pleasant, but I can't help but think things would be better if we had more situations where we are "forced" to engage with strangers.

boveus | 3 years ago | on: Meta plans to lay off 10k employees

I believe that is the point the OP was making. If you're ROI on employee X is 3% of the investors' dollar, the investor would simply buy a bond since the ROI on the bond is higher. Because of this discrepancy it no longer makes sense to keep employees or business units with a 3% ROI or an ROI lower than what the expected return on a bond is.

boveus | 3 years ago | on: JPMorgan to spend $1B on rental homes in the US to become a megalandlord

This isn’t a new thing and there are demonstrable problems caused by private equity becoming involved in rental housing in Atlanta: https://www.ajc.com/news/investigations/dwellings/apartments...

It isn’t surprising that they want to start in Atlanta, as the combination of few renter protections, lax code enforcement, and affordable housing subsidies can combine to make an ideal situation for maximizing profit at the cost of human misery.

boveus | 3 years ago | on: Caffeine and Exercise Performance

It is difficult to determine if researchers are measuring the effect of caffeine itself or the effect of individuals taking caffeine to recover from the effects of caffeine withdrawal. This is a common weakness in studies that show purported benefits to caffeine consumption[1,2,3].

Anecdotally as someone who quit caffeine entirely about a year ago, the effects of caffeine withdrawal seemed to last much longer than the 24 hour period that many studies ask participants to abstain for.

1. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6213082/

2. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6209127/

3. https://pubmed.ncbi.nlm.nih.gov/27649778/

boveus | 3 years ago

I am not attempting to take a side in either direction here, but I noticed something interesting about the format of your reply in contrast with the person you're replying to. The person you were responding to broke their post up into paragraphs that were organized into sentences (sort of like you'd expect in a book). Your reply seems to be broken up into individual paragraphs that are >240 characters (coincidentally the same character limit as Tweets).

I don't mean this as an attack. It seems interesting to me that the way people can communicate in writing can be influenced by what type of media they consume.

page 1