• 0 Posts
  • 16 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle


  • 80%+ of severe injury and death on a bicycle is caused by motor vehicles, or complications of motor vehicle involvement.

    Which would mean ~1 in 5 have absolutely nothing to do with a motor vehicle. That’s significant.

    There is considerable evidence that everyone wearing a helmet in a car would save vastly more lives and prevent severe head injury

    Then that should be an easy [citation needed] for you because my searches are coming up blank for actual studies. Lots of assertions of it, but I’m not finding anything in terms of actual data.

    It’s very easy, on the other hand, to find comprehensive meta analyses on the efficacy of helmet use.

    It’s also worth noting that the introduction makes a point of calling out another common online assertion that you repeated – that helmets make people engage in more risk-taking behavior – as false:

    There has already been an extensive peer-reviewed literature review conducted by Esmaeilikia et al.5, which found little to no support for increased risk-taking when cyclists use helmets and if anything, they cycled with more caution.

    I don’t feel those people should be called stupid for their choice.

    I don’t think they’re stupid. I think they’re bad at risk analysis. That’s a pretty inherent feature of humans. It’s the reason I want to see actual data.


  • A helmet is only needed if you intend to spend significant time in traffic.

    The worst wreck I’ve ever had on a bike was without a single car in sight. Pinch flat while carrying speed through a steep downhill curve. I split an expensive MIPS helmet in two and still hit hard enough that I had a minor concussion, road rash up one side of my body, and cracked the face of a week old watch just to pour salt in the (metaphorical) wound. I mostly landed on my head and that helmet is the reason I didn’t have drastically more severe head injuries.

    Helmets aren’t just for traffic.




  • I had a few years of young and dumb followed by struggling through the great recession that pretty well wrecked my credit early on.

    I then went through a few years while rebuilding where I really dug into learning how the credit system works and gaming it to my advantage. It was literally a case of getting entertainment out of “number goes up.” I got bored with it once my available lines of credit hit a couple multiples of my annual income, but the end result was having a basically perfect credit score.

    It ultimately paid off when it came time to buy a car and get a mortgage. Basically had immediate access to the absolute best rates available and approvals have always gone super smooth.

    The flip side of that is my SO who never went through the young and dumb stage and hadn’t needed to rebuild credit, but had a similar “fuck credit” attitude as the OP so they’d never had credit in the first place. The fortunate thing there is we were able to jump start their credit history by adding them as an authorized user on one of my older accounts with a high line of credit – this gave a massive boost to both average account age and available credit and pretty much instantly brought their score up from the 5-600s to low 700s. Add in a few more deliberate things like financing a car instead of paying cash and now they’ve got enough of a credit profile built up that it’ll be okay if anything ever happens to me.

    Obviously, that requires a lot of trust, but it’s good info for relationships where one partner has established credit and the other doesn’t.


  • For myself, I simply dislike the usury present in the debt market for consumers and have decided not to engage with it.

    You’re engaged with it whether you like it or not.

    Credit cards are a reality of the modern economy. There are costs associated with every credit card transaction and, due to the ubiquity of credit cards, those costs are priced in to nearly every single purchase you make. Because most merchants charge the same price regardless of payment type, this effectively means that your cash purchases are subsidizing my purchases made with a rewards credit card that has its balance paid off each month by a couple of percent.

    You can choose to opt out, but that doesn’t mean you’re not playing the game either way.


  • I request a credit increase every time I get a raise or every 6 months, whichever happens first. Why get credit I dont need? In case I ever do need it, but more important is that debt ratio. That is what gets you good loan rates. Do it before you need it, and you will be set.

    There’s also a feedback loop here – once the credit limit increase hits your report, other creditors see it and are more likely to extend increased limits to you. I went through a few years where AmEx and Discover both seemed intent on being my highest limit card and would preemptively offer CLIs after the other one had.

    And to expound on your point re: credit utilization ratios - this is another area where having higher limits than you need helps. Your percentage utilized of available credit has a huge impact on your overall score. Having a higher limit means that if you need to carry a balance due to an emergency spend, it’ll have less impact on your score.

    e.g., you have an emergency expense of $700 with a line of credit of $1000. Your utilization is now at 70%. This will have a negative impact on your score pretty quickly.

    Take the same $700 spend and apply it to a $5000 line of credit and you’re only at 14% utilization. That’ll still have an impact but much less than anything over ~30% utilization.

    Even beyond emergencies, if you use a credit card to pay fixed bills each month and then immediately pay them off, you’ll occasionally have months where the payment credits after your statement date and hits your credit report – same deal there. It looks much better on your report if that balance is a fraction of your available credit than if it takes up a large chunk of it.



  • This is basically every major enterprise ticketing system. They’re typically extremely customizable over-featured behemoths so that they can check all the buzzword boxes for the people that make purchasing decisions but will never actually use the system.

    "It’s a fully integrated Agile ITIL DevOps CMDB that empowers your users while providing generative KPIs to guide business decisions!”

    Then, on top of that, ownership of it is generally dropped on a team that is completely incapable of properly managing it from both a technical ability and sheer manpower availability standpoint. So each install ends up becoming an overly complex, confusing, terribly performing mess.

    I think I’ve seen one reasonably well managed install in the couple decades I’ve been doing this, a couple of more that were mildly jank but usable, and then everything else has been a pit of despair largely driven by the above.





  • Cite NIST SP 800-63B.

    Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically). However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.

    https://pages.nist.gov/800-63-3/sp800-63b.html

    I’ve successfully used it to tell auditors to fuck off about password rotation in the healthcare space.

    Now, to be in compliance with NIST guidelines, you do also need to require MFA. This document is what federal guidelines are based on, which is why you’re starting to see Federal gov websites require MFA for access.

    Either way, I’d highly encourage everyone to give the full document a read through. Not enough people are aware of it and this revision was shockingly reasonable when it came out a year or two ago.