HNHacker News
TopNewBestAskShowJobs

Confiks

2,429 karma · joined December 1, 2014

confiks@scriptbase.org
submissionscomments
Confiks··on State considered harmful: A proposal for a stateless laptop (2015)
Conversely, it's frustrating that you reference some definition instead of just stating it. Are you referring to stateless (web) applications? Wouldn't that also exactly fit your other "ephemeral storage" definition? You surely don't propose that those applications don't keep state while processing a single request. This proposed laptop only keeps state for a single boot.
Confiks··on PeerTube 1.0: A decentralized video hosting network, based on libre software
This doesn't address your main point, but you might appreciate an easy workaround for this problem: access the video at

    /embed/$videoid
Confiks··on America Isn’t Ready for the Lanternfly Invasion
Your comment seems to be to be touching on the ethics of "eradicating" insect pests ("that is not a bar cleared"), rather than the ethics of advancing genetic engineering in general (or specifically of reproduction capabilities).

Having written that first comment: I was merely wondering aloud – without doing a tour du Google myself – whether such genetic intervention would be possible at all.

I cannot see many problems with sterilizing pest animals, as long as we don't define pests so strictly as to include any nuisance. For example, in cities in The Netherlands, feral pigeons are sterilized when population numbers increase too much. The article about the lanternfly also clearly specifies that small populations of lanternflies do not pose a problem. Any intervention would not need to "eradicate" lanternflies from the earth.

Perhaps you are referring to the suggestion of 'improving' the to strategy to produce non-viable offspring.

What is your own opinion on these matters?

Confiks··on America Isn’t Ready for the Lanternfly Invasion
I wonder if any of the genetic control strategies used with the Aedes aegypti mosquito [1] could be used in this case. The obvious difference would be that males would also be harmful to the environment in this case. The strategy could also be improved if actual non-viable offspring was produced, increasing opportunity cost of reproduction and spent energy.

[1] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4001467/

[2] https://www.popsci.com/mosquitoes-designed-self-destruct

Confiks··on Chipforge opensource foundry [pdf]
It's awesome people are working on this. Their progress is unfortunately is pretty hard to follow or even support.

Their low-tech process steps: https://github.com/libresilicon/process/raw/master/process_s...

Lightning talk during the 34c3: https://media.ccc.de/v/34c3-9256-lightning_talks_day_2#t=178...

For an idea of how you could build transistors in your (admittedly pretty large) basement: https://www.youtube.com/watch?v=TrmqZ0hgAXk

HN thread with article about a home-made litographically-fabricated IC: https://news.ycombinator.com/item?id=16955549

Confiks··on ‘Robotic Skins’ turn everyday objects into robots
The current address of SciHub is https://sci-hub.tw/, and the DOI of the paper is 10.1126/scirobotics.aat1853.

As for the actuators: "One of the implementations used pneumatic actuators integrated into an elastomer substrate, whereas the other used coiled shape memory alloy (SMA) actuators integrated onto a fabric substrate."

Confiks··on iOS 12 released
Does anyone know if and what concrete changes have been made to Core NFC, beyond the speculation beforehand [1]? I understand there has been a beta of iOS 12 for a while now. The documentation still shows information for iOS 11 [2]

[1] https://9to5mac.com/2018/05/25/apple-will-reportedly-open-up...

[2] https://developer.apple.com/documentation/corenfc

Confiks··on [dead]
This is a new category of clickbait: adapting a chapter from a book with a very alarmist title.
Confiks··on EA reportedly under criminal investigation in Belgium due to FIFA's loot boxes
EA has publicly stated that there will not be lootboxes [1] or even DLCs [2]. I'm especially content about there not being DLCs that divide the player base so much that there are only enough players available to play the base maps.

If only they'd bring back a usable server browser, or (god forbid) release the server software for community game servers.

[1] https://www.polygon.com/2018/5/23/17386912/battlefield-5-loo...

[2] https://www.pcgamer.com/battlefield-5-will-have-no-premium-p...

Confiks··on Who Wrote the Anti-Trump New York Times Op-Ed? Using Tidytext
I don't see that transparency at all, nor in the previous analyses linked to in the article. In fact, the articles seem to explicitly be on the side of their methods being definitively able to identify "the author behind New York Time’s op-ed" [1]; this article is prefaced by the title and question "who wrote the anti-Trump New York Times op-ed?", leaving out any criticism to its methodology, making me doubt any other claim Robinson would unreservedly make.

[1] https://github.com/mkearney/resist_oped

Confiks··on More Americans report near-constant cannabis use
I think it's a mistake to legalize cannabis and continue to treat it like any other consumer product, opening the floodgates to gratuitous advertisements and dubious health claims. Instead, the sale of cannabis (and perhaps other drugs) should be treated as a public health issue, where the sale is permitted as long as it isn't advertised and proper information is given about the product.

The Netherlands partly has this system, where cannabis sale is 'tolerated' for shops with permits, and where advertisements are forbidden. The system is far from ideal, but I think better than complete (de)criminalization. Additionally, the discussion about drugs is very open thanks to a number of publicly funded organizations. They do not hesitate to also note the positive sides of certain drugs, which all the more encourages a conversation about the responsible use of drugs.

Portugal has gone even further in decriminalizing other (more addictive) substances [1] with fairly good results.

[1] https://www.theguardian.com/news/2017/dec/05/portugals-radic...

Confiks··on Decentralized Identifiers – DIDs
There was a talk about this on the Decentralized Web Summit. Unfortunately the (livestreaming) version uploaded to Youtube is (still) borked, but they have reuploaded the videos to the IA directly: https://archive.org/details/decentralizedwebsummitmedia-2018... (from 12m00s on).

Would anyone know how they plan to represent Idemix (or U-Prove) keys and proofs, for example for Hyperledger Indy / Sovrin? There doesn't seem to be anything in the w3id.org JSON-LD schemes, and while wading through the mountains of code of Hyperledger Indy I haven't been able to find any interface to DID documents.

Confiks··on SpiderOak removes its warrant canary
I don't know anything about SpiderOak, except occasionally having browsed their front page, but they do seem to have some clue about security and secure software. If that is true, they must have known from the outset that once you decide to install a canary, you cannot discontinue it except to signal that it has died.

That canary has now died. It did so along with a statement [1][2] that signing a canary every 6 months with an airgapped computer is too impractical, which isn't very plausible as this is a perfectly schedulable event which will take at most an hour for every person involved, twice a year. I suppose they sign their (APT, RPM) releases in the same way (please ask them; seems answerable). Additionally, they were three days late with their statement about moving away from the canary, which is otherwise irresponsibly late for an event that can completely erode trust in them as a security company.

The irony is that their conclusion in [1] that the "canary’s effectiveness as a tool has been questioned, the usage of it at other companies is not consistent, and verifying it and keeping track of it is complicated for users" is spot on; the confusion that can be created about whether the canary is dead or merely deprecated, that after it has died once it cannot be reinstated, and that the only recourse for users is to move away from the service, makes it a pretty useless signal to act upon.

[1] https://spideroak.com/articles/transparency-report/

[2] https://twitter.com/SpiderOak/status/1025488889564327936

Confiks··on Cookie policy notifications have ruined user experience on the web
I gave up on the redesign and am now using a browser extension[1][2] that always redirects to the old design.

[1] https://addons.mozilla.org/en-US/firefox/addon/old-reddit-re...

[2] https://chrome.google.com/webstore/detail/old-reddit-redirec...

Confiks··on A response about dep and vgo
The comparison is indeed pretty thin; it certainly doesn't come anywhere near the miscommunication and whiffs of NIH that are present in the Dep case.

It still made me think of it, because in that thread there is a domain expert which lays out careful reasoning for the decision to place constant-time arithmetic inside big/int. Among some other discussion, the main hangup is about the placement of the code, and not any core maintainer is signalling go-ahead with any direction. The issuer author could of course continue to work out the existing strawman proposal, but that risks to be abandoned if the core maintainers turn out to change their mind.

Meanwhile, on March 19 2018 a core maintainer asks if "anybody want to fill out this proposal to see what changes would be required in math/big?", despite that the issue itself has an extensive PR with test suite which reveal most of the necessary changes. (either that or it refers to the Aug 17 2017 comment, but that seems to be exactly bford's proposal with a different public API)

Confiks··on A response about dep and vgo
The discussion about the original post can be found here: https://news.ycombinator.com/item?id=17623023

This response is a long one, of which the ending deserves special note:

> I hope this story serves as a warning to others: if you’re interested in making substantial contributions to the Go project, no amount of independent due diligence can compensate for a design that doesn’t originate from the core team.

> Maybe some of you are reading this and thinking to yourself, “well, no duh, Peter, that should be obvious.” Maybe so. My mistake.

It personally made me think of this issue / PR in the Go issue tracker, https://github.com/golang/go/issues/20654, about support for constant time arithmetic with bigints. Currently, operations on bigints in Go may leak secret data via timing channels, because calculations with different values take predictably different time. The maintainers have chosen to specially modify only the P256 curve (but not P224, P384, or P521) to work in constant-time.

The author of the issue has written an extensive (somewhat strawman) PR that includes the constant-time code inside the current implementation of the bigint. That's a choice – for seemingly good reasons laid out in the issue, and of which the author admits that it also could be a separate package – but the rest of the conversation is halted in indecision about how the core team should proceed, without referring back to any of the arguments and reasons the original author has put forth.

Confiks··on Wave After Wave of Garbage Hits the Dominican Republic
The article title and introduction is pretty misleading, as only halfway the article it is revealed that "the plastic waste washing onto Montesinos Beach comes from the Ozama River". So while this is obviously an example of plastic reaching the ocean to form a garbage patch, the article's examples of beaches filled with plastic are not a result of the patches reaching the shore again.
Confiks··on Why Intel will never let owners control the ME
So the article is portraying 4k blu-ray as the raison d'être for Intel ME on consumer devices, but isn't for example Netflix HD which uses HDCP 2.2 somehow also tied to a trusted execution environment within Intel CPUs, or is this method of protection only via the display and the graphics chip (sometimes also by Intel; on the motherboard)?
Confiks··on Have the Tech Giants Grown Too Powerful?
> Would you like newspapers (e.g. that very NYT) be governmentally regulated because they are "too important for society"? It's dangerously close to the late Soviet Union.

I can agree with the first part of your argument, but you're going overboard here by declaring any form of regulation to be totalitarian in nature. Considerations on the interests of companies versus the interests of society as a whole can be made (and are made) in well-functioning democracies. It's continually difficult to strike a balance, and overzealous mistakes may be made or the process might be corrupted. Still, you can't wholly dismiss governmental regulation as the modern world simply functions on it.

Confiks··on Nearly 1,000 Paintings and Drawings by Vincent van Gogh Digitized and Put Online
I really don't understand your comment, and all subsequent responses along the same line. The digitized van Gogh paintings are perfect copies of the original public domain works. For the US, Bridgeman Art Library v. Corel Corp. [1] makes it perfectly clear that the images are not protected by copyright, and there is similar law and legislation in Europe.

What do you mean with the ability of the museums to choose a license for the paintings, and what is the "sub-A4" license you refer to?

[1] https://en.wikipedia.org/wiki/Bridgeman_Art_Library_v._Corel....

Confiks··on A man who paves India's roads with old plastic
While I can't say anything about GP's post, the Gjenge organization doesn't seem to be scammy per se. It pretty interesting to scroll a bit through their Facebook timeline and see another world [1].

One which seems to be heavily influenced by a European and Canadian conference / competition for African entrepreneurs. While there are some photos of 'plastic bricks', the products predominantly seem to be conference demos, especially the mobile app [2].

[1] https://www.facebook.com/gjengemakersltd/

[2] https://play.google.com/store/apps/details?id=com.noriega.g_...

Confiks··on Programming Minecraft on the Raspberry Pi
Another interesting environment to explore related to Minecraft is an open-source clone of that game: Minetest [1].

It allows extensions in the form of Lua scripts. There is an extension [2] that opens up a TCP socket which can be used to modify the environment in any language across the network. There is an accompanying Python library [3] that is quite accessible (I had to use the 2to3 tool to seamlessly convert it to Python 3 because of some dependency problem).

I've been trying to get it to work in WebAssembly (some notes here [4]) and maybe connect Blockly / Scratch to it, but unfortunately the WebAssembly shared memory model is postponed due to the Spectre and Meltdown debacle [5].

[1] https://www.minetest.net/

[2] https://github.com/sprintingkiwi/pycraft_mod

[3] https://github.com/sprintingkiwi/pycraft_lib

[4] https://news.ycombinator.com/item?id=14855176

[5] https://github.com/WebAssembly/meetings/blob/master/2018/CG-...

Confiks··on Smart TVs Track More Than What’s on Tonight
GP argues that they have no incentive to offer a non-ad-subsidized TV at a higher price, because consumers will for the large part not notice ad-(preference-)subsidization or otherwise consider it a factor in the decision to buy such a TV.
Confiks··on Smart TVs Track More Than What’s on Tonight
I am as shocked as you are are, but apparently they exist: https://www.cookmellow.com. A bit like a remotely-programmable slow cooker, but then for the limited amount of ingredients a sous-vide will cook.
Confiks··on Juggalos figured out how to beat facial recognition
More specifically: Juggalos figured out how to beat facial recognition tech trained on normal faces and trying to recognize normal faces.

While the black and white paint does seem to negate a lot of natural contrast human faces have – and on which the recognition of faces is currently based – there seems a lot of information left to recognize specific faces, especially when considering stereovision or even possible pulsed laser reflection / LIDAR based solutions (think long-range iPhone X sensor).

Even if the recognition of an individual within a database of millions yields too many false positives, the set can be further refined by considering other subject metadata, say geolocation or social connections.

While considering this, it's still important to not succumb to privacy nihilism. Not everything is lost, but it's hard to practice that when 'beating' facial recognition tech means "looking like a fucking juggalo" [1].

[1] https://news.ycombinator.com/item?id=17452411

Confiks··on Take your $85,000 car into service and they destroy it
I was viewing the video this comment [1] mentioned, and found another video which shows what happens to the circuit boards inside the motor when when you submerge a Tesla, like the case in TFA: https://www.youtube.com/watch?v=OOZ_FvfnN6k&t=13m48s

(oh, and the on-board system still boots even after additional high-pressure cleaning: https://www.youtube.com/watch?v=P5_J5h2UFiY)

[1] https://news.ycombinator.com/item?id=17403127

Confiks··on AT&T Cleared by Judge to Buy Time Warner
Another comment [1] indicated that "this isn't the internet Time Warner (...) this is the entertainment Time Warner".

Is that correct? (I'm not familiar with the US broadband market)

[1] https://news.ycombinator.com/item?id=17297966

Confiks··on Gitea – Alternative to GitLab and GitHub
An insightful comment linked to from that issue: https://lobste.rs/s/gokjbo/gitea_1_1_0_released#c_dg9pwe
Confiks··on Pushing the Limits of IPFS and OrbitDB
There is already a Javascript implementation [1], but it is not feasible to setup a full IPFS node in every browser tab that loads an IPFS resource. Instead you can use ipfs-companion [2], a browser extension that lets you easily load IPFS resources in your browser. While it can use the Javascript implementation, this is not recommended as it is currently pretty resource heavy [3].

[1] https://github.com/ipfs/js-ipfs

[2] https://github.com/ipfs-shipyard/ipfs-companion

[3] https://github.com/ipfs-shipyard/ipfs-companion/blob/master/...

Confiks··on A Wikipedia editor's long-running campaign
Your post is a clear example of an ad hominem and whataboutism [1], an invalid argument, where you cite the usage of a link to Vox to completely dismiss the parent as untrustworthy.

[1] http://rationalwiki.org/wiki/Whataboutism

← PreviousPage 8 of 14Next →