From the headline:

>Kubeside: Your apps, across every cluster, without thinking in ReplicaSets.

So I assume it does.

Yes, but don't require the user care about it. At least from my experience developers just want to see the app, if needs replicaset or not is another problem . But yes the apps translates those terms

>it was already pretty much impossible to get an encrypted device past US Customs more than 15 years ago

B-but I did it many times? Or do you mean that it's impossible to refuse providing the decryption key and still pass? That's pretty obvious.

>The idea that something more nefarious than the bird flue was going on was very unpopular on HN at the time

Because journalists see conspiracy everywhere. It is prudent to wait a bit before seeing malice everywhere

Now we know (or at least - have more proof) what was going on, so the justice system worked. How many conspiracy theories were invented and then turned out to be false? This is news precisely because it turned out to be actually true.

> Because journalists see conspiracy everywhere.

To be fair, journalists also seem to miss even when there is an obvious conspiracy. They are a varied bunch.

>in general we should be a lot more strict on sexual crimes (sa, trafficking, child abuse but not voluntary prostitution) and white collar/economic ones including wage theft, but less strict on drugs and property. drug possession and non commercial digital piracy should be decriminalized.

Why? I mean, do you have a specific scientific research in mind, or is it something you feel is right?

I mean, it makes sense to me, mostly, but "we should" presented without any evidence irks me a bit.

To start with, the war on drugs was initiated by Nixon as a way to target political enemies (hippies and non-whites).

Because debian users with luks-suspend have to re-enter their boot password after sleep.

The term is much older than the current GPU craze though. Ypu're trying to regulate how experts in a field communicate, which is... Weird.

I'm trying to effect cultural change. People who do that are gonna be considered "weird". That's what that word means.

I assume a part of the point is gambling - you either lose exactly as much as you planned, or you "win big" and still come out ahead.

>GET requests will be sent, but they are supposed to be idempotent so if your server is implemented in a sensible way, it cannot cause any adverse effect, and reading the response is all that matters for GET requests.

Just my first thought as a security engineer, but sounds like a perfect opportunity to execute a timing attack to me. For example, vheck which users exist (by measuring response time for /api/users?name=john) etc

Probably, but note that cross-domain GET-requests have been supported since the beginning of the web, since this is literally how links works.

So while a badly implemented GET handler can indeed cause security issues, this is old news and unrelated to CORS.

(Besides, why measure response times? Can’t you just check if api/users?name=john returns a resource or a 404 not found?)