HNHacker News
TopNewBestAskShowJobs

188201

206 karma · joined January 29, 2019

submissionscomments
188201··on Turning a MacBook into a Touchscreen with $1 of Hardware (2018)
This project makes laptop vendors selling touchscreen laptop with premium price cry.
188201··on When it comes to composition and length, passwords mostly don't matter
I don't think SMS is real 2FA, because many site can reset password by SMS, meaning having the phone number = controlling the account = 1FA. So, it is not better but worse to have SMS "2FA" since it depends on competence of mobile provider, which may be absurdly weak at preventing social engineering.
188201··on Qwant Maps: open-source and privacy-preserving map
The problem with OpenstreetMap based map is that there are no good reversed geocoding to search locations. For example, Osmand app is perfectly fine to use except I can't search location by postal code. Pasting the address does not work and searching only the street name leading to multiple city with same street name.

What I am doing now is searching the location in Google, getting the coordinate and searching the coordinate in OSM for offline map. A pretty dumb workaround but nothing can beat Google's resources on refining their map.

If this project aimed to be the consumer version of openstreetmap, then I would claim that reversed geocoding is the first thing that need to be fixed.

188201··on HK's extradition law: Not just HK people have reason to fear Chinese “justice”
I can't really rationalize why China would throw stone on its own feet, but there are two reasons I could think of.

One reason could be president Xi just can't back off because Xi is like Kim Jong-un in China. Xi has killed some of his political enemies and throw many of them to jail. If Xi shows any weakness to his internal enemies, he could not live long because he is playing too tough. It's like how a mafia boss works.

Another reason is taking back some US dollar from HK reserve. China is facing insufficient foreign currency for importing goods for production, or even food in trade war with US. One example is pork production, which China has large export in the world, but it relied on corn imported from US, so facing increased tax harm pork production in China a lot, and added up with African swine fever, the situation is even worse.

So, how would extradition law help? Basically there are some list of merchant in the hand of China who leaves China due to business disputed, bankrupt or any economic related prosecution. In China, they could start the court even with the absence of suspect. So, the court could proceed anytime and enforce any punishment without a lawyer to protect the suspect right. Without extradition law, it doesn't matter if the suspect left China. After the extradition law is passed, China would extradite those wanted list. And those wanted list could pay back some foreign currency in exchange.

Though, it is really just sacrificing long term advantage for short term benefit. Both reasons are really dumb but they can't stop. Chinese using nationalism to justify the party existence, since the party make China a strong country. But if it is not, then the party would start falling apart.

188201··on HK's extradition law: Not just HK people have reason to fear Chinese “justice”
Yes, it is true. It is confirmed by pro-China lawyer in HK local newspaper. The prosecution of Huawei CFO make China targeting foreign nationals in Hong Kong for revenge.

Moreover, the issue is not only about politics, but also economic. The most concern is about how China could use this to threaten any person including foreign nationals in Hong Kong. Have a business disputed with some Chinese business while in Hong Kong? Then, you could be extradited to China any time soon. It is not safe to do business in Hong Kong anymore. If this bill is passed, then it is expected Hong Kong would be completely replaced by Singapore within some time of period for foreign companies in Hong Kong to leave.

188201··on Hong Kong activists wanted by police gain protection in Germany
China is always tried to tighten its grip, but in a slower pace. For the extradition law they are proposing, it is not a standard move but very controversial among Hong Kong and even internationally. The main reason for China to do that is because China don't have enough dollar reserve.

In trade war between China and US, many food production in China relied on foreign trade. Increasing tax would cause China losing their reserve in higher rate. It is not just about Huawei, but many industry losing jobs, not enough food production for the people. The same or similar may apply to US but the difference is that China is authoritarian. If an authoritarian cannot maintain its economic growth, the government would be collapsed by revolution or a coup. They could even potentially start a war for cover up their fault by blaming foreign countries. For US, it's just a matter of losing an election.

Now what is the solution? There are still many reserve in Hong Kong. Let's start a extradition law in Hong Kong to China to take back some of the dollar from "outlawed" Hong Kong merchant. For the sake of China, Hong Kong could be a pawn for sacrifice.

188201··on Show HN: Grassland – Real-Life SimCity
Not about stalker, but related question. What if the offender don't really care if you can see them? They just do a suicidal attack to the victim, like what a terrorist always do. Or what if the offender are prepared for the jail time?

You can't stop people who ignore consequences, and this tech enable them to perform what they want without an organized crime group or terrorist group.

State surveillance is an issue, but this tech creates different issues.

188201··on Nokia phones sent identifiable data to Chinese server
One more reason to get a Purism phone I guess...
188201··on Airbnb’s ‘Guerrilla War’ Against Local Governments
In addition, register as a host in Airbnb does not require an ID proof, while register as a guest will be required to have an ID proof. And a host does not require to prove ownership of the property.

You can see it is such a convenient place for illegal business and money laundering. Some Airbnb has hidden camera for you know what it does. And as a matter of fact, many Airbnb in Japan is ran by the yakuza. They will use a pretty girl as profile pic. When you call the host, it is a yakuza guy respond to you. Actually, no problem with that as long as it is a smooth trade, but if something happens, god knows who can help you. And Airbnb only care about the host and don't give a fuck about guest.

I won't say don't use Airbnb, but just be reminded that use it if you can take some risk for some adventure.

188201··on The Cloud is Just Another Sun [video]
People jokes about dead. People jokes about sex. People jokes about anything. On the contrast, if some group of vulnerable people are in some protected zone that cannot be joke around, then it is in fact the society does not accept those people are the same as other people. It is a kind of positive discrimination. I mean, putting anything too far is bad.

And do the speaker insult people with PTSD? If no, then why being triggered, specifically if you don't have PTSD?

188201··on x86 Bare Metal Examples
Interesting. I have to admit I have stereotype and prejudice, any westerner married to Chinese woman is pro-China. I see you have some sensitive Chinese word in username in different community, so I thought it is a Chinese guy in Western country behind it.
188201··on Show HN: Stuff – An Alternative to Facebook Events
The alternatives of such integrated platform is chat app, which ironically, the most popular chat app is Whatsapp owned by Facebook. So if someone built a event management software based on Whatsapp's new API and start gaining traction, facebook would steal the idea and launch their own.
188201··on Gotify – a self-hosted push-notifications service
FCM is integrated in kernel, so it cannot be killed. And it starts a persistent TCP connection to Google server. If all apps uses FCM, then all notification would route through this connection, and this significantly reduce battery consumption than the alternative, where each app uses its own web socket server.

So, assume using a degoogled android, can this notification replaced FCM if more apps use this notification server? This server uses web socket, so what does FCM use for its connection? Does web socket battery efficient enough?

188201··on How I'm still not using GUIs in 2019: A guide to the terminal
With urxvt and hassle to install the correct font, it is doable to edit cjk using vim. Though it is less usable than using English, since you have to go back and forth to input cjk for input, and switch back to English for navigation and vim tricks. Some binding like f[some cjk work] becomes pointless since you are effectively typing f + (ctrl + shift) + (cjk word input) + (Ctrl + Space). You would rather use nano for extensive editing cjk. However, one or two words in cjk in some codebase is okay and not that bad.
188201··on A Nazi Interrogator Who Revealed the Value of Kindness (2014)
I think this technique will work if the victim does not expect interrogated by this approach. So, for example a terrorist group notorious for beheading victim, by contradicting themselves and use a friendly approach, then it will work.

For example for police force, they cannot play too tough due to law restriction, then those really bad guys basically don't give a fuck, so it may not work.

188201··on Ledger Live: A mobile companion app for Ledger hardware wallets
A mobile app managing cryptocurrency, but does not sign all their release, and don't even react the situation quickly. Apparently they have no clue what they are doing in terms of security.

Since they also use react native, and npm is notorious for being exploit to distribute malware. I have a brief look at the package.json. Seems to be a typical javascript project where developers tend to put one more dependency for a simple feature rather than implementing themselves. So, if one of the hobbyist project owner's key is compromised or hand over their orphan project to somebody malicious to manage their npm, then they are screwed. Although same could apply to other language which have package management, npm is the worst among those. Do they ensure the dependencies are signed before building the binary? And always use the last known good version for building new binary? I really doubt.

← PreviousPage 2 of 2