HNHacker News
TopNewBestAskShowJobs

Grollicus

1,054 karma · joined March 3, 2016

submissionscomments
Grollicus··on Nobel scientist's deletion from Wikipedia points to wider bias
Why does this article about notability deletions not link the notability criteria of wikipedia?

https://en.wikipedia.org/wiki/Wikipedia:Notability_(people)#...

Grollicus··on Hash collision in Apple NeuralHash model
Hashes are generally a part of the signature generation used with certificates. See for example "What role do hashes play in TLS/SSL certificate validation?" -> https://security.stackexchange.com/questions/67512/what-role...

In certificates, md5 - and sha1 - was used quite some time after it was known to be weak, I suspect OP was thinking of that.

This article seems to give a good summary what happened with sha1, mentions md5 in passing and links the related chromium issue: https://konklone.com/post/why-google-is-hurrying-the-web-to-...

Grollicus··on Apple Has Opened the Backdoor to Increased Surveillance and Censorship
Looking into the future with AI and advanced pattern recognition does not work for the stock market, why would it work anywhere else?
Grollicus··on 2021.06.08 Certificate Lifetime Incident
RFC 5280 further says: [1]

> The validity period for a certificate is the period of time from notBefore through notAfter, inclusive.

It says nothing about the comparison precision, just the storage format. It says CAs MUST encode validity dates as UTCTime / GeneralTime. It does not say this encoding must be used for comparison.

So I don't think it's actually defined if 2020-01-02 03:04:05.01Z is actually <= 2020-01-02 03:04:05Z.

That would mean this is not a 1 second-mistake but instead an infinitesimal mistake.

[1] https://datatracker.ietf.org/doc/html/rfc5280#section-4.1.2....

Grollicus··on RFC 4180: Common Format and MIME Type for CSV Files (2005)
Is Microsoft somehow on board for this? In my experience there are CSV files and there are CSV files that excel understands and as long as you don't get your file format into excel that will seriously hinder adoption.
Grollicus··on Protasevich Street? Bucharest mulls changing address of Belarusian embassy
German Tagesschau has published an interview with an aviation lawyer about the difference between the current incident and the Morales thingy. TLDR: difference between a scheduled flight (protected by international treaty) and diplomatic flights, which need separate approval of the countries they're flying over. [0]

[0] https://www.tagesschau.de/ausland/europa/luftfahrtrecht-zwan... (in german)

Grollicus··on Product placements may soon be added to classic films
So then the next piratebay will have the -original, the -coke and the -redbull version?
Grollicus··on Freenode ops take control of 700 channels
I'm disappointed it seems nobody thought of the "Don't go to irc.libera.chat, freenode.net is much better!"-Topic joke yet.
Grollicus··on Complexities of e-mail validation logic
This is currently happening to my email domain. Gets rejected as it doesn't have a valid hash (recipient name), but the logfiles are full of <3 letters>@mydomain.com and <english_word>@mydomain.com rejections.
Grollicus··on Apple Music Announces Spatial Audio and Lossless Audio
I've got two recordings of Machine Head's Through The Ashes Of Empires, one 320kbps mp3 and one flac, which is the one I usually listen to.

So some day I'm listening to that album as I'm wont to do and I notice there's some cracks missing. After questioning my sanity a bit it turns out the mp3 ones somehow managed to sneak into my playlist.

Grollicus··on Intent to issue €2.5M fine to Disqus over GDPR breaches
On the other hand, geoblocking e.g. by ip address (and then completely not letting EU visitors access the website) would probably work, but somehow most companies don't want to do that.
Grollicus··on Google used ‘double-Irish’ to shift $75.4B in profits out of Ireland
Ah I thought they were actually moving patents but they're just cancelling an intermittent licensing agreement and then license it directly from the US. That makes it a lot more difficult to stop, yes.
Grollicus··on Google used ‘double-Irish’ to shift $75.4B in profits out of Ireland
How can google shift billions worth of patents from one country to another without having to pay taxes on this move?

If I bought all their patents for $1 from them, I'd have to pay a huge amount based on some estimated valuation as this is seen as massively undervalued = a gift.

Are there tricks like moving a whole company from one country to another?

I think it's way too easy to shift paper values around the globe which makes these kinds of insane tax saving tricks way too low risk.

Imagine Ireland saying "we won't let you export this as some of this has security implications".

This is deeply amoral and even if in the strict sense of the law it's obviously legal that does not mean one has to let them get away with it too easily.

Grollicus··on I Implemented /dev/printerfact in Rust
Ah yes because `write_slice` fails. That's actually nice and quite ergonomic with the ?.

Well, thanks for the quick intro for how to actually use this new rust-in-kernel stuff and also for showing how to easily test it with nix. That's a great article, so thank you for sharing!

Grollicus··on I Implemented /dev/printerfact in Rust
How does this /dev/printerfacts react to partial reads? Does it mix multiple facts?
Grollicus··on Revision demoparty banned on Twitch mid-stream
Currently when I visit twitch of the 4 streams they recommend me (https://www.twitch.tv/directory/following) they show:

- some sleeping stream "HE WOKE UP widepeepoHappy !SUBATHON !GIFTCAP DON'T FORGET TO SUBSCRIBE :)"

- hot tub stream 1 "HOT TUB BIKINI TRY ONSUBATHONSHAMELESS!IG: amouranth!socials"

- league of legends tournament "GEN vs T1ㅣ2021 LCK Spring PLAYOFFS Round 2"

- hot tub stream 2 "CUTEST HOT TUB GIRL ™ © 1080PIG: indiefoxx.tv!socials "

I'm generally watching niche content - diablo2, starcraft, some league of legends here and there. Never shown an ounce of interest in hot tub streams or similar content. Still, that's how my recommendations look all the time over the last weeks, at least at this time of the day. Trying to nudge me to that kind of content.

I can understand people criticizing that.

Grollicus··on The cesspool of the internet is to be found in a village in North Holland
I wish people would find a way to monetize obviously false DMCA requests.

I know of some people who basically finance their niche bulletin boards via police requests - they get something in the range of 2-3 digits (€) for a information request. Get a few of these a year and your hosting costs are paid.

There's not a lot of money to be made but if it's your hobby anyways..

Grollicus··on Reddit nuking accounts of anyone who mentions a new employee or their history
Probably because it smells like reddit drama and is not really a good basis for a curious debate.
Grollicus··on I don't care about cookies
I've recently learned of a website that respects this this: https://geizhals.at/

So maybe there is some hope.

Grollicus··on Write libraries instead of services, where possible
I think this is especially annoying on the app stores, as there is no way to filter for a specific price (range) or in apple's case for apps that don't sell your data to everyone and your neighbor
Grollicus··on Element (Matrix chat app) suspended from the Google Play Store
Did you think to maybe give your article a more self-explanatory title? It's harder to spread the message when the primary qualified source for this is titled "Element on Google Play Store" instead of maybe "Element (Matrix chat app) banned on Google Play Store".
Grollicus··on Gitlab removes its 'starter' tier Users must either pay 5x more or lose features
Look at [0], click at "compare more features" and search for ldap. For us it is mainly group sync and administrator sync that's missing.

[0] https://about.gitlab.com/pricing/

Grollicus··on Gitlab removes its 'starter' tier Users must either pay 5x more or lose features
.. and happily so. We (few) devs like gitlab and it was a relatively cheap way to keep the devs happy. The feel-good factor about giving something back. Now it grows to a number that people will actually notice :/

Note that it's not the basic ldap authentication but ldap group sync and especially admin accounts in our case. Basic ldap auth works on the free plan. (ldap authed users take a subscription seat, which costs $0 on the free plan)

Grollicus··on Gitlab removes its 'starter' tier Users must either pay 5x more or lose features
We're hosting our own instance but we need a feature that is not available in the free version
Grollicus··on Gitlab removes its 'starter' tier Users must either pay 5x more or lose features
We're currently using the starter edition for exactly one reason, ldap integration.

Now we're supposed to pay $240 / employee for an ldap integration?!

Not sure what we'll do but I suspect scripting some ldap integration into our gitlab will be one of the best spent times in terms of ROI for me this year.

Grollicus··on Airbus hit as new US tariffs come into force
Wikipedia has a summary of the history of this shitshow:

https://en.wikipedia.org/wiki/Competition_between_Airbus_and...

Grollicus··on YouTube storing cookies before you even give them permission to do so
Assuming you're living in the EU.

The cookie:

So on the one hand there's the GDPR which deals with personal data (PII). As what they're storing there does not seem to be PII and is not used for tracking you, it does not care.

On the other hand there's the EU cookie directive. It is responsible for all the "this website uses cookies" banners from before the GDOR Consent popups. I'm not sure if it forbids storing any cookies wihtout consent but that's a direction you might want to look at in more detail. https://www.privacypolicies.com/blog/eu-cookie-law/

Can't say much about the consent form itself as I think the google consent form is especially weird as it's not possible to deny them tracking and still use their site. I suspect there will be fines for that some time down the road, but there a probably a lot of smarter people than me looking at this so what do I know...

Grollicus··on Transitioning from Docker to Podman
Last time i did look into docker it couldn't even tell if a service is up or still starting and there were all kinds of weird hacks around that like "is something listening on the configured port". Did that improve?
Grollicus··on Public Apology to Jeremy Howard
They seem to have rescued themselfes:

> Because of the missteps of this committee, we have asked the NumFOCUS Board of Directors, minus those involved, to take over the work of the committee as outlined in the appeals process of our enforcement guide.

This was possibly edited later into the article.

Grollicus··on Reading too much political news is bad for your well-being
If you want to get really depressed you should look into the state of our media where they themselves have something at stake. One examples from the top of my head would be Peer Steinbrücks destruction in the weeks running up to the 2013 election where they collectivly decided that fighting against tax evasion is bad. Or the reporting about Article 13 where they forgot to ask critical questions about how some of the arguments made absolutely no sense and could someone please explain that in more detail?

On the other hand if you are looking for more nuanced reporting I've come to like deutschlandfunk radio lately.

← PreviousPage 3 of 8Next →