HNHacker News
TopNewBestAskShowJobs

Confiks

2,429 karma · joined December 1, 2014

confiks@scriptbase.org
submissionscomments
Confiks··on Far Cry 1.34 source code (2006)

  $ grep -ir "remove this after e3" | wc -l
        40
Confiks··on Substack Notes Launched
Compare the two homepages without cookies [1][2]. The rounded buttons in orange instead of Twitter-blue. The footer nagbar. The similar navigation menu.

Following the whole banning-saga my impression was that Notes was a genuine extension of the Substack platform, but it being a frontend clone explains why such a tantrum was thrown by Musk.

[1] https://twitter.com/

[2] https://substack.com/notes

Confiks··on Weka Violates MinIO's Open Source Licenses
> Based upon the screenshots, it doesn't looking like they're trying to hide things though.

The screenshots are produced by manually mounting a squashfs, locating a minio binary and running it. It's not a very clear (and completely convincing) demonstration, and IMO could better have been left out.

Confiks··on My new hobby: finding public domain images that Getty sells for $500
There's at least one other person with the same hobby, because they made a short documentary about it, thereby 'liberating' the source material (in a really unpractical way): "A History of the World According to Getty Images" [1] [2] [3]

[1] https://www.idfa.nl/en/film/f2e29b37-216a-4899-ae67-c4367b8b...

[2] https://www.ahistoryoftheworldaccordingtogettyimages.com/ (which can't be downloaded)

[3] https://www.youtube.com/watch?v=BIinx95rFxg

Confiks··on Ask HN: Indoor air quality sensors and other IoT that's local-first and not DIY?
I bought the Aranet4 a while ago, and that seems to meet all your requirements. Keeps measurement history local, but can be paired via Bluetooth (with a pairing code) through their (somewhat flaky) app or open source options. Has a hardware switch to disable Bluetooth. Good quality sensor. Very good battery live due to e-ink screen. Looks pretty neat as well. Quite expensive though, but almost every quality sensor is.
Confiks··on Class-action lawsuit filed against US state agency over mobile 'spyware'
> secretly install a COVID-19 tracing app

The Register's article is a complete shitshow in emulating the confusing language from the lawsuit. Luckily the complaint itself [1] refers to an Ars Technica article from 2021 which finally explains a bit more [2].

[1] https://nclalegal.org/wp-content/uploads/2022/11/Complaint_W...

[2] https://arstechnica.com/gadgets/2021/06/even-creepier-covid-...

Confiks··on Police don't trust Apple's Find My to retrieve missing MacBook shown next door
It's quite a low-quality article. The only real testimony is that:

> "However, when I showed them the screen shots … they didn't seem to understand it. He said police returned to their cruiser, and when he spoke with them again, they told him they were researching Find My to learn how the app works."

Perhaps the misunderstanding is on the part of the complainant. Especially considering that the 'Find My' signal is potentially originating from <2m of their home, although Sudbury looks quite sparse.

Confiks··on Students break acceleration world record for electric vehicles
Zeno's Truck.
Confiks··on GHC 9.4.2 regresses being able to do math on aarch64
Issue created 3 months ago [1]:

"CCall testsuite doesn't test `signed` arguments and results. This would have helped catch [a previous ghc regression on aarch64]".

https://gitlab.haskell.org/ghc/test-primops/-/issues/3

Confiks··on Hacker News moved off AWS again at 10:17 PM PST
Related: The Best Time to Post on Hacker News (2019) [1]

[1] https://blog.rmotr.com/the-best-time-to-post-on-hacker-news-...

Confiks··on Twilio incident: What Signal users need to know
The attacker sought out 3 specific numbers. The 1900 number is the amount of registrations that occurred during the time the attacker had access to re-register their Signal account – but likely mostly didn't.
Confiks··on Getting started with decentralized identity
ION makes bad choices that are disastrous for user privacy. They don't even acknowledge these problems, let alone propose a solution for them. See: https://news.ycombinator.com/item?id=32283529
Confiks··on Getting started with decentralized identity
> Did not mean to imply that web5 sprung out of web3 in any sense.

It's really hard for anyone unfamiliar to the area to not read that in your article. To take three quotes out of the whole narrative: "But web5 takes it to the next level", "it's possible to keep the good parts of web3 while improving on its privacy properties (...) thats what web5 is all about", "In web5 (...) This is a radical departure from both web2 and web3".

I get that you wanted some nice story for your blogpost, but it's just not grounded in reality, and you're supporting the wrong actors here if you really want to claim that 'web5' is about privacy.

> I'm generally happy to support the hype

Happy to support privacy destroying technology by adopting their buzzwords while plenty of people – which you even reference at the end – do keep ethics in mind. Alrighty then.

Confiks··on Getting started with decentralized identity
The article completely misses the mark in creating some weird narrative about 'web3 turning into web5', all seemingly based on a wordplay announcement by Dorsey, thereby giving that project a lot of undue credibility.

In reality, many of the good projects and people referenced at the end of the article have been working for years without any notion that their projects are sprung out of some hyped but underspecified 'web3' technology.

Dorsey's 'web5' clamor is mostly about (barely [1]) implementing some existing technology and then writing a bit of slideware around it [2], which proposes to magically "allow individuals, organizations, and companies to publish credentials anyone can discover and independently verify" while not spending any thought on how such a PKI would be ("independently") governed without centralizing everything back again – an all too common failure mode of 'web3' [3].

Meanwhile, both Dorsey's slideware [4] and the actual specifications referenced [5][6] make bad technological choices with regard to privacy where users have stable identifiers (their public keys) which must be published, allowing them to be easily tracked across transactions.

While this can be used as a building block, no material on the 'web5' website or the TBD54566975 Github repository (I guess it's some other wordplay) indicates that they even recognize this as a problem, let alone that they propose how to solve it.

This is no new problem however: Sovrin – which many people referenced in the OP have worked on or with – has published a commentary on this back in 2018 [7]. There's also a great talk by Christopher Allen if you need to refresh your memory about what you need to consider when designing identity systems [8].

Otherwise the OP can be a great introduction to identity, but please don't feed the magical hypetrain.

[1] https://github.com/TBD54566975/ssi-service#whats-supported

[2] https://developer.tbd.website/docs/Decentralized%20Web%20Pla...

[3] https://moxie.org/2022/01/07/web3-first-impressions.html

[4] See the diagram on page 9 of [2]

[5] https://identity.foundation/decentralized-web-node/spec/

[6] https://identity.foundation/ion/

[7] https://sovrin.org/wp-content/uploads/2018/10/What-Goes-On-T...

[8] https://www.youtube.com/watch?v=JzM_Brpk95E&t=1574s

Confiks··on Show HN: A short dystopian game I build last weekend
The game is rigged, but you cannot lose if you do not play.
Confiks··on Mighty: The Browser You Didn’t Know You Needed but Definitely Do
> Assuming I don't drop this computer and smash it to bits, I'll be able to keep it as long as my last MBP (a 2015 I bought new). So conservatively, let's say 5 years.

The benchmark is not whether your existing computer breaks to pieces, but whether it can do that "1) Browsing 2) Coding 3) Video and photo editing 4) Graphic design" smoothly for the coming 5 years in the newest versions of popular applications, as they inevitably get more demanding for older hardware.

That being said, I don't think the SaaS-part of the value proposition is particularly convincing, and there barely is anything else.

Confiks··on Show HN: Read Wikipedia privately using homomorphic encryption
Either the amount of Boolean logic operations or the amount of integer additions and multiplications, as these are the operations FHE schemes support.
Confiks··on Rust: A Critical Retrospective
> Auditing the script won't help you, because it'll say it will install a program somewhere. Which is what you want, so you'll consider the audit "ok" [but that program is made by the same people as the installation script].

Your argument doesn't take into consideration that build artifacts / software releases have culture and best practices behind them. Such releases are often considered, tested, cut, digested, signed and included in package managers delegating trust.

Many one-off installation shell scripts are not afforded that culture, especially when maintained from within (static) websites that update frequently. On the other hand, they are small enough for you to audit a bit. If you'd compare the script with one that someone else downloaded a month earlier (i.e. archive.org), that would help a lot to establish trust.

> If we ignore the idea of downloading and building every program from source

Your argument is equally valid when building every program from source. You will not be able to review the source code of moderately large programs. You will need to delegate your trust in that case as well.

Confiks··on Manifest v3 in Firefox: Recap and Next Steps
It would aid communication if Mozilla would denote the maintained support for blocking `WebRequest` in the version number. Unfortunately `manifest_version` is a number, not a string, but I guess naming it 4 would clarify things plenty by annoying the standards process just enough.
Confiks··on Coloring computers: non-electronic computers that work when you color them
These days that library can be found here: https://archive.org/details/Rockys_Boots_1982_Learning_Compa...
Confiks··on Desynchronization of nickel production and consumption
"The [London Metal Exchange’s] history dates back to the early 19th century, when metal traders drew a circle in the sawdust on the floor of the Jerusalem Coffee House in the City of London. Today, in addition to its electronic market, it’s one of the last exchanges where brokers still gather in person to yell orders at one another for part of the day." [1] [2]

[1] https://www.bloomberg.com/news/articles/2022-03-14/inside-ni...

[2] https://www.youtube.com/watch?v=VOvA5HWdbmc

Confiks··on Ask HN: Any weird tips for weight loss?
Most vinegar is filtered and pasteurized.

In the context of the relation with gastric cancer, pickling is about fermentation, not acidity. The studies suggesting a relationship are all epidemiological and suggest a weak link at best [1].

The stomach is already very acidic; much more acidic than vinegar, which makes both gastric cancer and any potential benefits unlikely.

[1] https://www.spokesman.com/stories/2017/oct/05/ask-the-doctor...

Confiks··on Inhaled Vaccine Delivers Broad Protection Against SARS-CoV-2
Publicly promoted, DIY-vaccine indeed: https://news.ycombinator.com/item?id=23983756
Confiks··on Browser Shell: A Linux VM in the browser serving a website
Related project posted a few days ago [1][2][3]

[1] https://leaningtech.com/

[2] https://news.ycombinator.com/item?id=30167403

[3] https://leaningtech.com/webvm-server-less-x86-virtual-machin...

Confiks··on Direct conversion of CO2 to solid carbon by Gallium-based liquid metals
> One thing I learned is that these experiments are generally done with a pure CO2 stream.

According to this comment three months ago [1] "they used 6%-20% CO2 mixtures with balance nitrogen and some water to try and approximate different exhausts including flue gas".

[1] https://news.ycombinator.com/item?id=28873458

Confiks··on Even with Agile and Scrum waterfall will sneak in
> If you can't formulate actionable requirements, you're (...) not the domain expert

Yes, fine. So there is no (true Scotsman) domain expert. Grandparent's point is also just that actually building the application and seeing how users interact with it is a valid method of analysis either in a prototype phase or actual evolving production software.

Confiks··on Long-term NAEP scores for 13-year-olds drop for first time since testing began
Agreed. It's a good hunch, but no evidence.

"One such factor [of increasing ADHD prevalence] may be audiovisual media exposure during early childhood. Observational studies in humans have linked exposure to fast-paced television in the first 3 years of life with subsequent attentional deficits in later childhood." [1]

but also

"The diagnosis of attention-deficit/hyperactivity disorder (ADHD) among children and adolescents has increased considerably over the past decades. Scholars and health professionals alike have expressed concern about the role of screen media in the rise in ADHD diagnosis. However, the extent to which screen media use and ADHD are linked remains a point of debate. (...) The available evidence suggests a statistically small relationship between media and ADHD-related behaviors. " [2]

[1] https://www.pnas.org/content/115/40/9851

[2] https://www.pnas.org/content/115/40/9875

Confiks··on China's Robotaxis Hit the Road
Interesting except from the article:

"Baidu maintains two strategies for its AV activities: Apollo open source AV software platform and its own AV products based on Apollo software technology. The internet giant has already built an impressive Apollo open source ecosystem, with more than 200 companies participating."

Which indeed [1] is Apache licensed.

[1] https://github.com/ApolloAuto

Confiks··on Is Ford about to reinvent the bicycle derailleur?
The nitinol in TFA actually becomes pretty hot; around 100 degrees Celsius.
Confiks··on Antiviral Molnupiravir Reduces Risk of Hospitalization/Death by ~50 Percent
Keep in mind that any negative effects, even those unlikely to be caused by the medication, need to be reported as adverse effects. It allows for making a clean comparison between the placebo, and also makes it possible to retroactively relate effects that have been overlooked previously. For example, you want 'patient was hit by a car' as possible side effect, because the medication could make people drowsy.
← PreviousPage 3 of 14Next →