HNHacker News
TopNewBestAskShowJobs

Sidnicious

2,202 karma · joined May 3, 2009

https://s4y.us

previously: sdy@{google.com,chromium.org},sidney@{okcupid.com,keybase.io}

[ my public key: https://keybase.io/sidney; my proof: https://keybase.io/sidney/sigs/DJzkNxrS60U9aNarQjjhFWsTBZYcC_LFiMBtGmd67Cc ]

submissionscomments
Sidnicious··on Google Doesn't Want What's Best for Us
I would summarize the memo in one (long) line as:

"Non-discriminatory [against men] ways to increase women's representation in tech include making engineering people-oriented (rather than systems-oriented), disincentivizing competition, endorsing part-time work, and making it socially acceptable for men to leave tech and leadership for traditionally feminine roles, but a meaningful application of these strategies would prevent driven employees (mostly men) from working extra hours or taking extra stress, which would have disastrous consequences for Google's success."

Sidnicious··on Tofu – The opposite of a font
I would guess that it’s given that capacity, but the memory is allocated lazily.
Sidnicious··on The security content of iOS 10.3.3
0x0 (since this thread has hit the reply depth limit): The filesystem on iOS isn’t exposed to users, so I would guess that Apple considers it a strictly developer-facing change.
Sidnicious··on iOS 11 Location Privacy: "Only While Using" is now always an option for users
iOS does that too — on-device! — but as a result may not identify as many obscure objects. Seems to handle common ones well, though.
Sidnicious··on A Case of Stolen Source Code
I don't believe that the role of an OS maintainer includes blocking users from running any software. (It's OK to make malware difficult to run.)
Sidnicious··on A Case of Stolen Source Code
Sorry, I wasn't thinking of the App Store. I read the original text as meaning that they might block cracked versions of Panic apps from running on Macs entirely.
Sidnicious··on A Case of Stolen Source Code
> …breeze right through an in-retrospect-sketchy authentication dialog…

I can't blame them for this. A surprising number of apps ask for root (inc. Adobe installers and Chrome). As far as I know, it's to make updates more reliable when an admin installs a program for a day-to-day user who can't write to /Applications and /Library.

We're long overdue for better sandboxing on desktop (outside of app stores).

Sidnicious··on A Case of Stolen Source Code
> And more importantly, the right people at Apple are now standing by to quickly shut down any stolen/malware-infested versions of our apps that we may discover.

The "stolen" part bugs me — even though it would be incredibly shitty to distribute cracked-from-source versions of Panic apps, I hope that Apple wouldn't prevent users from running them. I appreciate the malware protection built into macOS, but this might be an abuse of it.

Sidnicious··on Ask HN: Secure automated backup?
Here are some options that I have experience with:

- Time Machine with offline disks: Since Time Machine supports multiple backup destinations, you can use a Time Capsule or hard drive that's always connected to your Mac, and also have one or more additional hard drives which you connect periodically and otherwise leave in a drawer.

Pros: Free, built into macOS, can browse file versions directly from many apps.

Cons: Needs ongoing manual intervention (i.e. plugging in the offline drives). Some reliability issues… but I've experienced the most problems backing up to my own SMB/AFP shares, so a Time Capsule might be OK.

- Backblaze (https://www.backblaze.com/) or CrashPlan (https://www.crashplan.com/): Both of these online backup services have $5/month unlimited plans, and both let you specify your own encryption key (in the form of an additional password), which isn't shared with the backup provider. Note: In my experience, Backblaze's client is much lighter on system resources/battery on Mac.

Pros: Inexpensive, off-site storage, low-maintenance.

Cons: Ongoing cost, requires trust (In theory, the client software could be sharing the encryption key with the company/the NSA/your nemesis).

- Arq (https://www.arqbackup.com/): Paid desktop software which can back up to many different destinations, including S3, Google Drive, or your own server via SFTP. You specify an encryption key for each destination.

Pros: Full control. Option to back up to another machine that you own (so no ongoing cost for hosting).

Cons: Up-front cost. Support is less straightforward than hosted solutions since Arq doesn't provide storage.

Sidnicious··on Bose Headphones Spy on Users, Lawsuit Says
I believe that the button is disabled because it's too easy to click by mistake. You can mute a tab in the right click menu without turning on any flags.
Sidnicious··on Acme Klein Bottle
What luck! My dad's been keeping our PowerBook 180c in a closet for a special occasion.

It looks like Apple, Amazon, etc. all sell electronic copies, it's just that they can only be read on approved devices, and only for as long as the company in question keeps running its licensing servers, and that bothers me.

Sidnicious··on Acme Klein Bottle
Does anyone know where I can buy this an an e-book without DRM?
Sidnicious··on Night Shift compared to f.lux
It's not Night Shift — this seems to be fixed in 10.12.4.

I filed a bug with Apple on it, and in November of last year they duped it to rdar://22180778 and said to expect a fix in 10.12.4… so I've been waiting eagerly for this update, and it looks like they followed through.

Sidnicious··on Sketchpad III Demo [video] (1963)
I've worked with Auto Layout a bit.

- The GUI built into Xcode is usable once you learn its quirks (e.g. how to swap the relationship in a constraint so that it doesn't say that the right edge of some button needs to be -5pt from the left edge of the button next to it).

- The ObjC/Swift API is bad.

- It handles RTL languages excellently: by default, constraints are expressed in terms of leading/trailing edges, but can be literal left/right if you want.

- It deals poorly with adding and removing views from a hierarchy: removing a view discards all of its constraints, so you need to have logic to reestablish them.

Unfortunately, there are horror stories about performance tanking with an OS update or taking on exponential properties, like this one which lead the team to develop a non-constraint-based layout framework:

https://realm.io/news/slug-nick-snyder-layoutkit/

It leads me to wonder if unpredictable performance is a limitation of constraint solving… or at least to be cautious with current implementations. Maybe an API that only makes known-fast relationships possible would help.

Sidnicious··on A Study of MAC Address Randomization in Mobile Devices and When It Fails
iOS doesn't have UI to delete networks unless they're currently in range (except a big "Reset Network Settings" button). The only workaround I know of is to sync your networks with iCloud Keychain and use a computer to delete them.
Sidnicious··on Entr(1) – Run tests whenever files change
This is a troll/unhelpful comment… but I genuinely like the reminder.
Sidnicious··on A Study of MAC Address Randomization in Mobile Devices and When It Fails
Side question: the last time I watched broadcasts coming out of my unassociated iPhone, it was specifically asking for certain SSIDs. The set seemed somewhat random (I've joined all of them, but not recently), and I don't think any of them had ever been hidden networks.

Are these broadcasts viable for tracking (it seems like they would be)? Is there anything I can do as a user to mitigate the effects (other than turning off WiFi)?

Sidnicious··on Introducing Keybase Chat
The whole client is open source:

https://github.com/keybase/client

As far as I know, it asks for root because the Keybase filesystem runs on Fuse, and the menu bar app can be quit from its menu.

It's hard to balance making a simple, self-contained app with providing easy installation, a custom filesystem, automatic updates, and a command line tool… if you have ideas on how to improve things, I think they'd be open to issues/PRs. (I used to work on Keybase. I personally trust the devs, but, really, you can build from source if you want.)

Sidnicious··on Show HN: OneView Calendar – My zoomable calendar app just got a big facelift
There seems to be a bug that affects Mac trackpads with momentum scrolling — when I scroll quickly zoom speed slows to a crawl, then gets faster as the momentum runs out. Otherwise, it's incredibly smooth!
Sidnicious··on Think twice before signing subscription to Adobe products
The issue is that programs will behave unexpectedly unless they know and respect the filesystem's rules for case insensitivity (which might be tricky when you go beyond ASCII):

    $ touch Open
    $ ls open*
    ls: open*: No such file or directory
    $ ls open
    open
Sidnicious··on 33C3 talk on dissecting cellular modems
Here's the recording:

https://media.ccc.de/v/33c3-8151-dissecting_modern_3g_4g_cel...

(I prefer media.ccc.de over YouTube because it lets you download the video in at least a couple of formats, and sometimes offers alternate streams/languages.)

Sidnicious··on Building native macOS applications with Rust
How do you subclass an ObjC class from Rust — say, to create a delegate for a UI element?

How is type safety handled? It looks like msg_send itself isn't type safe, but there are hand-written bindings… is that right?

Sidnicious··on Homebrew 1.1.0
I do the same (but installed to ~/.homebrew). No issues so far — if anyone knows why this isn't the default, I'd be interested to know.
Sidnicious··on Instapaper Premium is now free for everyone
Hi Brian,

I paid for Instapaper so that it could run in the interest of its users. If it's fully supported by Pinterest, then its value to users is secondary to the value of its data and technology to Pinterest.

Why can't I keep giving you money? I don't want any special features, just your undying loyalty.

Sidnicious··on Task_t considered harmful
I was going to say that it signals launchd's process group — every process spawned by launchd, which always runs with PID 1. However, the `kill` manpage confirms your hunch:

  -1      If superuser, broadcast the signal to all processes; otherwise
          broadcast to all processes belonging to the user.
(This is on macOS/iOS, Linux might have slightly different semantics.)
Sidnicious··on Apple Has Removed Dash from the App Store
Definitely — Chrome sandboxes its renderer processes, for example. The tools are all there, it would just be cool if something glued them together.
Sidnicious··on Apple Has Removed Dash from the App Store
I'd love a to be able to download a single file representing an app, double-click to install it (it doesn't matter where it lives on disk, as long as it's predictable) and then have the system facilitate sandboxing, permissions, and one-click updates and removals.

Just like the App Store, but without the App Store.

Sidnicious··on Apple Has Removed Dash from the App Store
No standard update mechanism, no standard uninstall mechanism, and going from "I have this .dmg/.zip file in my downloads folder" to "I'm running this app from my Applications folder and don't have any leftovers in my downloads folder" is several non-obvious steps.

.app bundles are great, just not a complete solution.

Sidnicious··on Google HTML/CSS Style Guide – Omit Optional Tags
What's happening isn't what you think is happening.

The parser creates an empty head element when it sees the <body> start tag, the second <head> start tag is ignored, and the <script> is treated as part of the body element. Try changing the body of the <script> tag to this:

    alert(document.currentScript.parentNode);
It alerts "[object HTMLBodyElement]".

The behavior is specced out here, if you're curious: https://www.w3.org/TR/html5/syntax.html#parsing-main-afterbo...

Sidnicious··on Google HTML/CSS Style Guide – Omit Optional Tags
I'd say yes. Defer-in-<head> works just like bottom-of-<body>, except the browser can start downloading and parsing the scripts right away (and in parallel if it wants).
← PreviousPage 3 of 13Next →