Hacker News Reader

BCM43on Bucketsquatting is (finally) dead

I'm pretty sure buckets use star certs and thus the individual bucket names won't be in the transparency logs.

BCM43on Scammed out of $130K via fake Google call, spoofed Google email and auth sync

I'm pretty confident gmail's servers don't let you send with headers matching @google.com email addresses you don't control though.

BCM43on UK drops demand for backdoor into Apple encryption

“As a result, the UK has agreed to drop its mandate for Apple to provide a ‘back door’ that would have enabled access to the protected encrypted data of American citizens and encroached on our civil liberties.”

Back doors to end-to-end encryption are considered bad now? Someone should tell the FBI. https://www.fbi.gov/how-we-investigate/lawful-access/lawful-...

BCM43on Ask HN: Who is hiring? (June 2025)

Thanks! FWIW, I think that means you're required to comply with NYC's pay transparency laws and provide salary ranges. https://dol.ny.gov/pay-transparency

BCM43on Ask HN: Who is hiring? (June 2025)

You say NYC here, but the job ads say NJ?

BCM43on WordPress Drama: From the Sidelines

  $ cat /etc/apt/sources.list
  deb http://cdn-aws.deb.debian.org/debian bookworm main
  deb http://cdn-aws.deb.debian.org/debian-security bookworm-security main
  deb http://cdn-aws.deb.debian.org/debian bookworm-updates main

BCM43on "Confidential" 988 conversation records shared with corporations

For somewhat complicated reasons that can be simplified to them not billing insurance, I don't think most crisis text lines are going to qualify as covered entities under HIPAA.

BCM43on OCapN, Interoperable Capabilities over the Network

I think Capt'n Proto is similar to CapTP, one of the three draft specifications. There's talk of combining them and a comparison here:

https://github.com/Agoric/agoric-sdk/issues/1827#issuecommen...

BCM43on New York Times tech workers to strike this afternoon

Your description of how you think it should work is how it actually does work. The Times Tech Guild is not a union in and of itself. It's chapter of The NewsGuild of New York (representing news workers in New York), which is a local of The NewsGuild (representing news workers nationally), which is a member of Communication Workers of America (aka CWA, which represents communications workers nationally).

BCM43on Show HN: Using GPT-3 and Whisper to save doctors’ time

Will you sign a BAA for HIPAA covered entities?

BCM43on Joint statement by the Department of the Treasury, Federal Reserve, and FDIC

Is this any different without steps 5 and 7? I don't understand how the FDIC actions change the incentives here.

BCM43on Should this paper in psychological science be retracted? (2016)

See hgsgm's comment. Just because the test predicts outcomes doesn't mean what it's testing is causing the outcomes.

BCM43on U.S. appeals court rejects big tech’s right to regulate online speech

One of the judges issued a partial concurrence and partial dissent.

BCM43on Map showing birthplaces of "notable people" around the world

Wikidata has MrBeast listed as being born in Wichita, KS, where he's competing with Joe Walsh for notability. There's probably still a very reasonable argument to be made that MrBeast is more notable, but it's much less clear than Lee Norris.

BCM43on Amazon to remove more content that violates rules from cloud service – sources

By this argument HN shouldn't be allowed to remove spam that doesn't break any laws, or else it would get sued for defamation. I don't see it surviving that? Even just tamping down the flamewars and tone is incredibly useful to the community.

BCM43on Docker Desktop no longer free for large companies

Since they've buried it a little:

"Specifically, small businesses (fewer than 250 employees AND less than $10 million in revenue) may continue to use Docker Desktop with Docker Personal for free. The use of Docker Desktop in large businesses, however, requires a Pro, Team, or Business paid subscription, starting at $5 per user per month."

BCM43on NYC Emergency Executive Order 225

FWIW, the Seattle rate you've cited is for people 12 or older, while the 56% NYC rate is for everyone in the city. NYC's vaccination rate for those over 12 is closer to 75%.

BCM43on Observing my cellphone switch towers

Crocodile Hunter as well. https://github.com/EFForg/crocodilehunter

BCM43on Why I Work on Ads

> How do you draw the difference between an ad and not an ad?

If it's paid promotion, it's an ad. If the doctor's doing this only because they think it's in my best interest, it's not. The FTC already has some pretty clear guidelines on this because ads are required to be clearly marked as such in many cases.

BCM43on Tiny Wins

Have recently tried both, my guess is the "sane table + view design the end-users are nearly support-free" is key. Superset is way way more complicated and hard to understand IMO.

BCM43on Opting Your Website Out of Google's FLoC Network

I'm pretty sure this is the list: https://github.com/chromium/chromium-ads-detection/blob/mast...

It's derived from easylist, and (I think) scoped down based on things that actually show up in the top X websites.

BCM43on Why the new USPS mail trucks look so weird

Aaron Gordon at Vice gives some explanations - most important cost-related bit seems to be they weight upfront cost a lot more than amortized cost, and non-electric does better on that front.

https://www.vice.com/en/article/3an4k8/dont-expect-the-usps-...

BCM43on SolarWind, enough with the password already

https://www.nytimes.com/2019/11/06/technology/twitter-saudi-...

BCM43on Signal app downloads spike as US protesters seek message encryption

It's truncated hashes, not full hashes. So you don't see exactly which phone number it is, you get a bucket and the client checks if the full hash is in the bucket. Which is far from perfect, but it's a little better than the full hash.

BCM43on GitHub Classroom

Maybe the bug is not having blockquotes, something that people clearly want? We're seeing a desire path of feature use.

BCM43on Subspace – A simple WireGuard VPN server GUI

PostUp should do what you want. https://wiki.archlinux.org/index.php/WireGuard#Store_private...

I have it grabbing a key from AWS Secret Manager, haven't had a problem with that.

BCM43on DuckDuckGo Traffic

It doesn't proxy the request to google, it issues a redirect to google and your browser does the request, with all its cookies.

BCM43on A 1950s-Era New York Knife Law Has Landed Thousands in Jail

If it's not obvious to others, this is from 2014. I'm not sure how things have changed since then.