HNHacker News
TopNewBestAskShowJobs

6502nerdface

2,256 karma · joined January 13, 2015

See username.
submissionscomments
6502nerdface··on A Basic iPhone Feature Helps Criminals Steal Your Entire Digital Life
The iPhone "feature" referenced by the headline is that you can change the AppleID's password knowing only the phone's passcode; no need to enter old password, no 2FA (technically having phone + passcode is 2FA according to Apple), nothing but the passcode. This presumably shields Apple from a torrent of support requests by forgetful users, but seems like a major security hole in the case that someone steals your phone. Once they change your AppleID pw they have EVERYTHING -- FindMy disabled, all other devices forced logged out, photos gone forever, etc.

And once they enable "Recovery Key" on your iCloud account, Apple will never let you back in no matter what you do.

6502nerdface··on A Basic iPhone Feature Helps Criminals Steal Your Entire Digital Life
I'm curious what mitigations against this people would suggest.

- Using a very long passcode? (Harder to shoulder surf)

- Using a third-party password manager instead of keychain (something with its own master password independent of Apple ID); in fact you could store intentionally wrong passwords in keychain as a decoy, heh.

- Configure financial apps to disable passcode authentication, requiring their own password/2FA on every login (this becomes inconvenient though... wonder if they can be configured for FaceID only without passcode auth)

- Some process (doesn't have to run on the phone) for rsyncing iCloud content to another service or NAS.

6502nerdface··on John Boyer, blind software engineer, has died
The Journal also ran a lovely obituary of him earlier this month: https://wsj.com/articles/blind-software-engineer-expanded-ac...
6502nerdface··on Non-Compete Clause Rule (NPRM)
> assuming it's even real.

Sir or Madam, you question my good faith!

6502nerdface··on Non-Compete Clause Rule (NPRM)
Well, I guess all I mean to highlight is that a blanket ban might be sub-optimal versus requiring some minimum bar of fairness and consideration of noncompetes. After all, if the situation outlined above seems fair to us, then I feel like we'd have to concede that it would also be fair for the "average worker" if only such workers got similar terms (not necessarily millions of dollars, but commensurate with their normal pay) and had some negotiating leverage going into the agreement.

There is already plenty of precedent for overly lopsided/one-sided contracts not being valid/enforceable (and indeed many noncompetes actually aren't valid for exactly that reason), so I would have no problem with a law that makes the standard explicit, rather than relying on litigation and jurisdictionally variable case law to sort it out as happens today. Compared to a blanket ban, requiring employers to pony up some "fair" cost and to weigh that against the benefits to them of a noncompete may actually be better for workers overall.

6502nerdface··on Non-Compete Clause Rule (NPRM)
> non-competes should be banned, yes.

I like my non-compete. I'm a highly paid professional with rare skills/experience, I negotiated hard on my employment contract with multiple rounds of edits in consultation with my employment attorney, I will generate and be exposed to valuable trade secrets during my employment, and I look forward to being paid millions of dollars to sit on my ass for a couple of years if/when I eventually leave.

Should it be banned? Seems fair to me. Or you just mean noncompetes that don't include monetary consideration, or which don't establish protectable interests? In many jurisdictions those are already unenforceable.

6502nerdface··on American Standard Safety Code and Requirements for Dry Martinis (1966) [pdf]
Also available for purchase in print from the official ANSI store: http://global.ihs.com/doc_detail.cfm?currency_code=USD&custo...
6502nerdface··on Show HN: Frankenfit, a Python-based DSL for predictive data modeling pipelines
The documentation is still very much in progress, but I thought I'd share this library/DSL that I've been working on, which is inspired by my experiences in academia and quant finance, as well as a desire to improve on scikit-learn's "pipeline" module. I'm hopeful that others might see the benefits of this style of writing data-modeling pipelines, or perhaps critique it mercilessly :)

One point of inspiration here is my experience that many researchers and data scientists in industry, while fastidious about the in-sample/out-of-sample distinction for the predictive "core" of their model (i.e. the regression or the ANN or whatever), are often less conscious of the same distinction for all of the feature-preparation steps and prediction transformations that may precede or follow that core in their over-all pipeline. For example, before fitting your regression or whatever, you might z-score some of the predictors, and when you later apply that now-fit regression to make predictions on some held-out data, you really ought to z-score the held-out feature values using the same means and standard deviations that were "learned" at fit-time (they should be considered part of the "state" of your model). But this is often inconvenient or overlooked by practitioners, who might naively z-score the held-out batch using its own means and SDs, before feeding it to their trained model.

But if you imagine receiving the held-out data not as a batch, but as a stream of observation one at a time, and needing to generate a prediction for each as it arrives, it's clear that this is not correct! (As you make each prediction, you can't know what the held-out batch's means and SDs "will be".)

So with Frankenfit, I wanted to make it easy to write end-to-end data modeling pipelines where this distinction between fit-time and apply-time is baked in all the way through the intermediate transformations, be they z-scores, winsorizations, imputations, or whatever. And it turns out that this can also make for very elegant expressions of common resampling workflows like cross-validation, hyperparameter search, sequential learning, and so on.

6502nerdface··on Roman church decorated with 4k skeletons
Mostly they're just cool as works of art :). Still lifes with skulls and such.
6502nerdface··on Roman church decorated with 4k skeletons
Personally, I hang a "memento mori" near every mirror in the house, to remind him who would regard himself that what he sees will one day inevitably return to the earth.
6502nerdface··on Steps towards prompt-based creation of virtual worlds
It's going to be like those scenes in Star Trek: TNG when they give instructions to the holodeck.
6502nerdface··on Microbes are 'active engineers' in Earth's rock-to-life cycle
I really highly recommend Robert Hazen's _Story of Earth_ [1] if you're into this sort of stuff. Highly knowledgeable and entertaining geologist argues that the geosphere and the biosphere should really be viewed as one co-evolving system, over deep time. There are thousands of species of minerals that can only exist because of the action of life, and those minerals in turn enable new forms of life, which enable new species of mineral, and so on in a complex and ever evolving system within which we exist for only a fraction of an instant.

[1] https://www.amazon.com/Story-Earth-Billion-Stardust-Living/d...

6502nerdface··on Forking Chrome to render in a terminal
I absolutely love how in the YouTube demo (on the github page) he makes a point of enabling 1080p playback :-)
6502nerdface··on Kaktovik Numerals
As employed so hauntingly by Jake Thackray in "Molly Metcalfe": https://youtu.be/TiXINuf5nbI
6502nerdface··on We tried to run a social media site and it was awful
https://archive.ph/AoOno
6502nerdface··on ‘That girl is going to get herself killed’ (2022)
The English word is pedantry, not pedanticism.
6502nerdface··on New York City hiring top rat killer
> Honestly, I got no problems with the rats. They're kinda cute actually.

Wait, are you the one posting all these pro-rat posters? [1]

[1] https://ibb.co/CV0CWcm

6502nerdface··on Keyboard shortcuts for GNU Readline
It's perhaps worth mentioning the smaller and more liberally licensed editline library if you want to embed the same line-editing functionality in your own CLI. It's been used in non-GNU Unixes for decades.

https://troglobit.com/projects/editline/

See also the note at the bottom of that page about other versions of editline/libedit.

6502nerdface··on Books recommended by profitable founders
Yes :). I'm just saying that it could theoretically be done properly in a way that addresses GP's criticisms, but it would be impractical.
6502nerdface··on Books recommended by profitable founders
What they should really do is collect book recommendations from ALL founders right when they start up (make it a required field in the incorporation paperwork, lol), then after N years, group them into the recommendations by failed founders and the recommendations by successful founders, and use a Chi-square test or something to select the most significant differences between the two sets of recommendations.
6502nerdface··on We should have Markdown-rendered websites
Interestingly, your comment is very similar to the Gemini FAQ "2.9 Why didn't you just use Markdown instead of defining text/gemini?" [1]

[1] https://gemini.circumlunar.space/docs/faq.gmi

6502nerdface··on How rate hikes are affecting the economy
Picture two white collar professionals sitting at a bar, clinking their glasses to celebrate college debt relief, inches away from the blue collar bartender whose taxes will pay for that relief.

I agree I don't think it's fair to "hate" on the college-indebted, but I can also see an element of unfairness to debt relief and can understand why someone like that bartender would not be so happy about it.

6502nerdface··on Laws barring noncompete clauses spreading
This is almost exactly how noncompetes work in practice in the finance industry, where most employment contracts are governed by New York law or something similar, which will generally require the payment of "consideration" during the noncompete for it to be enforceable. The amount of consideration is part of what you negotiate when you join, generally always at least your most recent base salary at resignation, but possibly much more, i.e. some fraction of your total comp.

Usually the way it works is that when you resign, the employer has a fixed amount of time (specified in your contract) within which to decide whether to exercise the noncompete, and for how long (i.e. they could elect a subset of the maximum term in your contract), and once exercised, they can't change their mind. If you violate the noncompete, they'll of course stop the payments, possibly claw back payments, keep your deferred comp (which they are holding over your head during the noncompete), possibly reset the noncompete clock (so you have to start waiting all over again), and possibly sue you. Details will vary, but broadly that's my experience.

Some consider it one of the major perks of the industry, assuming you become important enough to have it exercised on you, and would be sad to see them banned. Firms consider it money well spent, which makes sense when you consider that investment strategies have no real protection as intellectual property... copyright is only narrowly useful, patenting would mean disclosing, and so at the end of the day they are just trade secrets, which can really only be protected by nondisclosure and noncompete agreements.

6502nerdface··on Elon Musk owns Twitter: The story so far
Well... by comparison the sitting president of the United States peaked at only ~89 million followers [1].

[1] https://slate.com/technology/2021/01/trump-twitter-ban-follo...

6502nerdface··on Since becoming Meta, Facebook’s parent company has lost $650B in market value
"unforced error" and "forced error" already are sports jargon (baseball) and from context "unforced error" must have been intended, which is similar to "own goal" but doesn't imply points being scored. (It's not possible for the defending team to score against itself in baseball anyway, so "own goal" would never really be applicable... though actually the pitcher can walk a run in, I guess that's like an own goal!)
6502nerdface··on Source Code for SunOS 4.1.3 (1992)
I appreciate the implementation of /bin/true.sh.
6502nerdface··on The Iran Firewall: A preliminary report
> A game of Telephone

Funny enough the children's "telephone game" is, in many Commonwealth countries, apparently called "Chinese whispers," at least according to my Londoner colleagues.

6502nerdface··on New technical analysis confirms the evidence against Billy Mitchell
So basically, the smoking guns are the TV being tilted the wrong way (oops!) and certain frames of video, especially in the transitions between levels, appearing as only MAME would output them, not real hardware (because MAME is framebuffer based, rather than actually simulating the electron beam, which produces some differences in timing). There's also evidence of v-sync tearing, which could only happen in MAME. Fascinating!
6502nerdface··on Cat gap
If this interests you, then I highly recommend The Big Cats and their Fossil Relatives by Turner and Anton [1]. The illustrations of ancient cat species are almost forensic in style and realism, showing details of muscle and tissue placement, and the text relates a number of fascinating fossil stories, for example a sinkhole into which a sabertooth cat and its prey tumbled, presumably while wrestling to the death, to be entombed together for megayears.

[1] https://www.amazon.com/Big-Cats-Their-Fossil-Relatives/dp/02...

6502nerdface··on Ask HN: What'd you do while HN was down?
I rode my motorcycle to the beach where I helped a little girl build sand castles and capture mole crabs in a bucket. Then we released the mole crabs and I rode back home to hackernews.
← PreviousPage 2 of 10Next →