He / They

  • 33 Posts
  • 1.18K Comments
Joined 2 years ago
cake
Cake day: June 16th, 2023

help-circle


  • No, the Hastert Rule (which Johnson would absolutely invoke again) would mean we’d need a supermajority in order to force it to actually get voted on. A simple majority can’t force a floor vote.

    The Speaker usually has de facto control over floor votes on pending legislation (via the United States House Committee on Rules). The Hastert rule says that the speaker will not allow a floor vote on any bill that does not have majority support within their party—even if the majority of the members of the House would vote to pass it.

    The rule keeps the minority party from passing bills with the assistance of a minority of majority party members. In the House, 218 votes are needed to pass a bill; if 200 Democrats are the minority and 235 Republicans are the majority, the Hastert rule would not allow 200 Democrats and 100 Republicans together to pass a bill, because 100 Republican votes is short of a majority of the majority party, so the speaker would not allow a vote to take place.

    It can be bypassed with a discharge petition but those are incredibly rare, and as we saw with the Epstein files, at the point that a party thinks they’re likely to lose to one they’ll figure out another route to forestall (like SCOTUS or having the FBI redact everything that hurts them).



  • I don’t want to sleep any more than I have to. I don’t want to work, either.

    If you have major health issues that impact your lifespan, you might be more acutely aware of how little time we have in our lives. It might make you reassess how you value time spent.

    We spend roughly a third of our lives sleeping.

    If your life is likely to be <2/3 the average, those lost hours start to feel like wasting precious time. It’s also just limiting in what you can feasibly do.

    Imagine being able to head out on a Friday after work and drive 14 hours without needing to sleep; you could be 4 states over by morning, spend Saturday exploring a national park or visiting family, head back at 6pm, and be back home by 8am to spend all Sunday relaxing with your at-home hobbies. Then 8 hours on Sunday night spent reading instead of being unconscious. If only.


  • From the blog post OP linked in a comment:

    We made an unrelated change that caused a similar, longer availability incident two weeks ago on November 18, 2025. In both cases, a deployment to help mitigate a security issue for our customers propagated to our entire network and led to errors for nearly all of our customer base.

    It seems that the method they have of specifically propagating new security configurations to their servers is not a gradual or group-based rollout, it pushes certain changes to all servers at once, so uncaught bugs end up hitting everything instead of just some initial test group.

    In particular, the projects outlined below should help contain the impact of these kinds of changes:

    Enhanced Rollouts & Versioning: Similar to how we slowly deploy software with strict health validation, data used for rapid threat response and general configuration needs to have the same safety and blast mitigation features. This includes health validation and quick rollback capabilities among other things.

    “Fail-Open” Error Handling: As part of the resilience effort, we are replacing the incorrectly applied hard-fail logic across all critical Cloudflare data-plane components. If a configuration file is corrupt or out-of-range (e.g., exceeding feature caps), the system will log the error and default to a known-good state or pass traffic without scoring, rather than dropping requests. Some services will likely give the customer the option to fail open or closed in certain scenarios. This will include drift-prevention capabilities to ensure this is enforced continuously.


  • So large skyscrapers, large nuclear plants, datacenters, etc would be state owned. Actually more…. This would be hundreds of the largest companies. This means the state would commandeer a company when what, the market cap hit a billy? The nav? That actually seems kinda crazy to do

    Not state-owned, just state-managed. We already generally subsidize power plants, but for other large projects it could provide both funding and oversight of the build.

    When it comes to really large companies themselves, if there’s a cap then they would just stop being such large companies, not be taken over.

    But if you wanted to make a process for a company to grow beyond the $1B cap, my personal preference would be a system where depending on the level of impact to peoples’ lives, either something like monthly auditing of financials and business plans, or for companies operating in areas with a higher potential for harms, something closer to a Fannie Mae-style conservatorship, that would directly advise the company on minimizing risks (and potentially actually prohibit actions outright if they clearly were harmful). Ownership, stocks, profit, etc, would all still be private. We actually already embed IRS auditors in companies if they’re caught doing tax evasion, and I think of this more as a logical extension of that. We’ve tried voluntary compliance with laws and regulations, and too many of the very large companies are happy to flout them, and use their wealth to help them do so.








  • Minchin said the total cost “includes the previously stated $4.1m required to redesign the front end of the websites”.

    “The remaining cost ($92.4m) reflects the significant investment required to fully rebuild and test the systems and technology that underpin the website, making sure it is secure and stable and can draw in the huge amounts of data gathered from our observing network and weather models,” Minchin said.

    So 92 MILLION dollars on SQA and maybe some pentesting? Bullshit. Pentests run $50k-$400k for single-domain websites like this, and $400k is on the very expensive end.

    Even if you paid 30 people $200k apiece for 4 years to work on this, which is more people and at higher salaries than would have happened, that would still only come to $24m, less than a third of the cited cost.

    There is no possible way for this to have legitimately cost this much. There was corruption of some kind involved.






  • But my question is, are these only “hacked” passwords? Because those who are not hacked, you don’t know what passwords they have. So this is a bit of bias here, right?

    No, that’s not how these are obtained. Password dumps are from attackers breaching a site’s user database and dumping their credentials, usually by phishing administrators’ logins. Attackers are brute-forcing passwords anymore except on a one-off, very rare basis. Here’s a list of publicly-known password dumps, and you can see details about where they came from: https://haveibeenpwned.com/PwnedWebsites