HNHacker News
TopNewBestAskShowJobs

aneutron

1,557 karma · joined May 19, 2017

I like software and tech. I'm practically a sloth who knows a tiny bit about computers, linux, and can program.
submissionscomments
aneutron··on A letter to Microsoft for not attributing authors of the Edge Flatpak app
They sure seem to have a LOT of "oversights" of this kind. AppGet comes to mind when I read this.

Either it's a cultural issue, or that the management are sorry they got caught. I'm thinking this is more of the second option.

aneutron··on Internet Backbone Giant Lumen Shuns .RU
One the one hand, it's a sad day for Russians whoes only outlook on the world was the Internet, as this seems to be one of the main connectivity providers.

On the other hand, I really have a hard time believing that they exited because of the moral aspect. I'm suspecting that there is more to the story.

They cite heightened security risks. But I wouldn't be surprised if it was also economic issues (i e. they would no longer be paid for their services).

I would genuinely like to see a more educated guess on the matter.

aneutron··on Apple M1 Ultra
Bloomberg brought the Supermicro hit pieces. I personally can't take them seriously anymore. Not after the second article with 0 fact checking and sad attempt at an irrelevant die shot. And their word is certainly irrelevant against one of people who are working (and succeeding) at running linux on M1.
aneutron··on Starlink service is now active in Ukraine. More terminals en route
I have been wondering all day about how any of the military aid will reach Kiev, or how the soldiers are supplied with their rations.

I'm just genuinely curious about wartime logistics.

aneutron··on Asian Boss planted deep blue YouTuber and pretended he was a 'man on the street'
That's so sad ... I used to follow the channel from its beginnings, especially when they used to cover exclusively Korea and Japan (with Kei), but since then I dropped off.

I'm very saddened to see it has reached this state.

aneutron··on Saving a Third of Our Memory by Re-Ordering Go Struct Fields (2020)
Thanks ! That's nice to know !
aneutron··on Upwork asking me for a $12.5k refund as the client was using someone else’s card
If you have Robin's contacts, I would suggest you get a lawyer and sue him personally. You have made work for him which hasn't been paid (because the money was taken back).

To my untrained eyes that seems pretty much a classic case of unpaid dues. Just get a consultation with a lawyer either way, it's the surest thing to do.

aneutron··on Microsoft Edge may be sending search information to Microsoft
What the fuck Microsoft ... If anyone is listening, you're ruining an otherwise perfectly good browser. Please fire whoever is running this product into the ground.

It's so painful seeing Microsoft fallback on shit tactics and anti-privacy, user-hostile features like this to gain market share when in reality it will probably have the opposite effect.

You have a great base product, fucking build on it. Please, pretty please, give us a christmas gift and stop being this shit at running your product ...

aneutron··on Tesla remotely unlocks Model 3 car, uses smart summon to help repo agent
Thanks very much for the answer. I assumed that it would have to go through the judiciary, but I am surprised to see it's not the case.

It does make sense, especially if it's not abusive (e.g. one month behind equals reposession)

aneutron··on Tesla remotely unlocks Model 3 car, uses smart summon to help repo agent
While potentially completely unrelated, I've seen how "cowboy-like" the whole bounty hunters situation is over there, so it honestly and unfortunately wouldn't surprise me as much if it were the case with the creditors ...
aneutron··on Tesla remotely unlocks Model 3 car, uses smart summon to help repo agent
That would make much more sense.
aneutron··on Tesla remotely unlocks Model 3 car, uses smart summon to help repo agent
While this is an "interesting" story, I'd love to get some verification on it.

It sounds plausible, but almost illegal ? I'm in EU so don't know how really things work over there, but I would assume Tesla would need a judicial order siding with the bank to be able to do this ? I mean it's probably not the wild west over there. Or is it ?

aneutron··on Code Review as a Service
I will admit that I thought this was a joke on the "SaaS" everything trend.

I can see how this works for fairly limited web applications for example, but as soon as the application grows in complexity and interacts within a bigger system of systems, I am doubtful that it would be logistically possible to outsource the code review (legally, knowledge transfer wise, and a plethora of other angles I'm a tad bit lazy to consider).

Overall, why not, if it's priced correctly, then it's probably a set of additional eyes for small projects. But for anything medium or higher, yeah, I don't see this realistically working.

Maybe OP (?) can explain if I'm wrong (very likely). There's probably something I'm missing.

aneutron··on Monoio – A thread-per-core Rust async runtime with io_uring
I think you're being sarcastic, but I'm not totally sure.
aneutron··on Django 4.0
I genuienly have not heard about either one of the three. I guess I remain stuck in PHP, Phalcon Framework, Symfony and Django / Flask.
aneutron··on Google 20% time volunteers have been rewriting the ITA Matrix flight search app
It's far from mobile compatible. But I'll try it once I'm on desktop.
aneutron··on Adversarial image attacks are no joke
While I do agree that security theater does have a connotation for things that have no reason to be done, I only meant that it's not enough. It's theater in the sense that it would only provide a sense of safety, not solve the actual underlying issue or vulnerability class.
aneutron··on Adversarial image attacks are no joke
What you are proposing are what I think would be called a security theater.

It gives the illusion of security, but they would absolutely not deter a determined threat actor.

The only reason that the water supply isn't poisoned is it's unpractical for a single person to conduct the whole exploit chain: Construct the poison in enough quantities, gain access to facilities supplying the water, and actually throwing the compound in it. It's unpractical even for "underground" types. Especially the quantities required.

Mathematics and computer science is a different story in my opinion. You cannot restrict science or thought. You can try, but good luck. The most you can do is delay it. If there is an attack that enables someone to flip a Tesla on the road (as suggested below), the security theater will hide the attack from common folk, but determined actors will reach it eventually, and at that point, they can deploy it as they wish. And in contrast to the water plant, the logistical endeavor to exploit it is absolutely easy in comparison: slap a sticker on your vehicle.

Security by obscurity or by theater is rarely a good strategy in my opinion. We should absolutely be transparent about these kind of things, and allow researchers full access to develop attacks against these systems, and effectively communicate when they are found.

aneutron··on Piracy release group EVO ‘blames’ movie industry for its popularity
From what I gather Google Chromecast w/ Google TV is a good performer in this regard. However, the issue remains that you'd have to pay almost 10€ per platform, for a total of 3 platforms, per month. That's simply not economivally viable.
aneutron··on The Humble Brilliance of Italy's Moka Coffee Pot (2018)
You're not. Not if you heat your water before putting in the grounds. Practically speaking, once you heat your water, it's a matter of seconds to get the coffee rolling.

You should try it.

aneutron··on The Humble Brilliance of Italy's Moka Coffee Pot (2018)
First of all, thank you for sourcing it. I don't have access to the paper, but the synopsis is very interesting.

I do however find it very weird. For example, how far-spread is Alzheimer's in Italy, where the Al intake must be through the roof. If this was to be believed, then all italians would have AD. (I am fully aware that logically, this is not correct, and that they could perhaps have developed some sort of immunity).

The same could be said about soda/beverage cans. Their use is so widespread that virtually everyone in America should have AD.

The scientific argument may have some truth to it, but I still find it weird that it's not "evident" in populations where Al intake would be through the roof.

aneutron··on The Humble Brilliance of Italy's Moka Coffee Pot (2018)
I came here to say this. I tried the adapter very briefly, and it's very convenient (especially if you already heat your water before putting the grounds in).
aneutron··on The Humble Brilliance of Italy's Moka Coffee Pot (2018)
Okay what are you going on about ? Care to source this ?
aneutron··on PlayDate Fulfillment Delayed
That's ... what they did. They say so in the article. They swapped the CPU on a revised board.
aneutron··on WhatsApp end-to-end encrypted backups security assessment
Okay, my remarks on the product (the e2e encrypted backups):

> Weak 512 bits RSA key signing key

That's unprofessional at best, negligent at worse. I understand that it's quite a bit more calculations at more key lengths, but still, 512 is simply looking for trouble.

> It enforces a maximum number of user login attempts, in order to prevent brute-force of a user PIN/passphrase; after ten unsuccessful attempts to log into an account, the account is locked and the backup data is irremediably lost.

That's essentially a denial of service waiting to happen. So if another actor can access my account (e.g. has access to the telephone operator), they can destroy my backup. I would understand a delay between retries (maybe a week ?), but just throwing out the backup is just bad.

aneutron··on Pfizer's oral Covid-19 antiviral cuts hospitalization, death by 85%
In my untrained eyes (from an edipemological point of view), it depends on many things. It's a slippery slope anyway ... But I sort of view it from a "practical ethics" point of view if you will ....

First thing I noticed is these result actually select people who had the antiviral administered to them within 3 days of the symptoms appearing. I have personally known people who unfortunately died in a week tops after contracting the virus (they had pre-existing conditions, namely hypertension and diabetes).

Which brings me to my next point: Suppose the antiviral exists and is viable to even beyond 85%. How much will it cost ? I'm not a US citizen, but I'm thinking insurances will rush to trying not to cover anyone who's not vaccinated or some shady shit because they always do. And how about 3rd world countries like the one I come from. We can't even get RNA vaccines, let alone an experimental drug like this.

And now my final and target point: Suppose you don't want to get the vaccine and you can afford the drug. We do have proof that even if the vaccine doesn't protect you from the virus completely, even in the unfortunate case where you do contract it, you'll end up infecting less people. Now if you choose to not get vaccinated, then you really do risk potentially contaminating more people that will either have no access to the antiviral within a reasonable effective timeframe(and that maybe not vaccinated either) or just plain infecting more people overall.

Not the cleanest reasoning, and not a mathematical proof by any means, but I believe it's one of those "mathematical" problems where the proof is finding an edge case (sorry studied in french, really don't know how they say it in english).

aneutron··on Stockholm parents built their own school app, then the city called the cops
It still boggles my mind how ANYONE would sign off on a setup like this. How does no one see that this will fail without a single doubt.
aneutron··on Stockholm parents built their own school app, then the city called the cops
I audibly chuckled at your comment. Thanks for the laugh !
aneutron··on I introduced my 5-year-old and 2-year-old to startx and xmonad (2012)
I don't understand how you can objectively qualify a tiling manager as "broken".

1st of all, tiling managers are a matter of personal preference, no wether it's "broken".

2nd of all, I've used i3 plenty, and the amount of power it gives me when I'm working is immense. I no longer need to alt+tab 7 times to get to the terminal for the monitoring servers, I always know they're on screen 4. I need my web browser ? I know it's in screen 2. Heck, I can pin apps, and even screens to specific monitors. When I'm working on an incident, my throughput is basically multiplied by 3 as a result of how streamlined my work environment is.

That is simply not possible with other environment where the mouse is the main device. Yes you have virtual desktops, but try having 15 open terminals without having them pinned in some form. Just a simple swipe to the corner and your GPU will heat-up from the 3D acceleration required to show all the windows :D

All-in-all, I genuinely believe that tiling wms are an amazing godsend, but for my use case. And I cannot emphasize this enough. It's a personal preference. Yes it's a bit of a pain to set up (although I literally used a two-part youtube video to set up i3, and never touched it again, not even need the Arch wiki), but if you don't have to tinker in your configuration are you really running linux :D

aneutron··on What is the inverse of a vector?
Can confirm, before I was anywhere close to serious computer science, I basically did an undergraduate degree in mathematics / physics.

And it goes through some very advanced subjects in both. It basically prepares you to be an engineer in whatever field you choose, be it a structural engineer, or a computer scientist.

← PreviousPage 3 of 11Next →