HNHacker News
TopNewBestAskShowJobs

aroch

3,561 karma · joined May 21, 2013

submissionscomments
aroch··on MyPayrollHR CEO Arrested, Admits to $70M Fraud
They have a 2.5% fee, which again means you're paying to have the privilege of paying someone.
aroch··on Simjacker: SIM card flaw lets hackers hijack any phone by sending SMS
This is for the exploit release is probably more helpful: https://news.ycombinator.com/item?id=20951578
aroch··on Let’s Encrypt to transition to ISRG root
From the Caddy release announcement that supports wildcards[1]:

"This release introduces support for wildcard certificates, a new offering from Let's Encrypt. Getting a wildcard certificate requires enabling the DNS challenge. Fortunately, that is extremely simple with Caddy, and it works with over 20 different providers!"

1: https://caddyserver.com/blog/caddy-0_10_12-released

aroch··on Warp – Mobile VPN
1.1.1.1 doesn't use eDNS and likely never will: https://developers.cloudflare.com/1.1.1.1/nitty-gritty-detai...

So geo-specific things will break... BBC.com should load though since its for out-of-UK people

aroch··on Python urllib CRLF injection vulnerability
Not the OP, but deploying code on government servers that interact with the public web means that minimizing the required modules saves you piles of paperwork and meetings. I'd rather spend the extra two days writing/testing my own code then filling out paperwork and waiting weeks
aroch··on JMAP: Like IMAP but Not Really
You can have all the domains under one fastmail account per user (I have ~8 domains, and ~20 users). But yes, you still have to pay for each person
aroch··on Reddit Security Incident
Phone company reps are notorious for ignoring any and all such notes on accounts, we can't know for sure if Reddit had this in place but it probably wouldn't be much of a hurdle
aroch··on Reddit Security Incident
I don't think it was up to Reddit. Some providers offer no way to do MFA without mandatory SMS involvement in some way -- either primary delivery is by SMS or you can "reset" / get back up codes via SMS.
aroch··on GitLab Ultimate and Gold now free for education and open source
They're not paying you to move, they're offering a discount... Semantics aside, this is a pretty common thing for a competitor to do when something negative comes out about their competition (Either giving out blanket discounts regardless of social media or having you verify a tweet some how)
aroch··on Show HN: A little eye-candy for the terminal (in Go)
I'd recommend spaceship prompt if you want an actively maintained prompt with similar features.

https://github.com/denysdovhan/spaceship-prompt

aroch··on iOS 11.3 update breaks iPhone 8 devices with third party-repaired screens
There's a major difference here: a 3rd party computer part drawing 5% more current than expected probably won't cause issues (There are however many of cases where they do...) whereas a component drawing 5% more current on a phone may cause a shutdown.
aroch··on Nanopore MinION – $1k solid-state DNA sequencers
A MiniSeq or MiSeq would be cheaper by the time you do the 3 flow cell/person (minimum -- they claim 10-20GB/flow cell but that's bullshit -- so at least ~4K, probably closer to $8k of chemistry/person). You can get a used MiSeq and for ~$50k then its ~1500/person
aroch··on Motel 6 routinely gave guests' information to immigration officials
This is about them voluntarily giving guest information to ICE without informing the guests. Which caused actual harm to at least 6 residents in the state of Washington. There's no federal law saying that hotels must provide detailed guest info (name, DOB, drivers license, car license plate, room number, and other info) and the hotel. So my plain reading of their terms would suggest that data should only be shared "during the discovery process in litigation [or] pursuant to a court order"

Washington state however has a statute that protects consumers from such data sharing.

(Also, I added a link to the terms in an edit that also fixed formatting. Wasn't my intention to be deceptive by omitting it)

aroch··on Motel 6 routinely gave guests' information to immigration officials
Well it's a violation of their own privacy policy, which is why the Wa. state AG is suing them:

   From: https://www.motel6.com/en/faq.html | https://web.archive.org/web/20171124044157/https://www.motel6.com/en/faq.html
   What we will and will not do with Guest Information

    1.     We will not sell trade or rent Guest Information to 
   parties outside the Company, our franchisees and affiliates, 
   or permit our affiliates to sell such information to parties 
   outside of our group of companies, franchisees and affiliates.
aroch··on Apple Agrees to Deal with Ireland Over $15B Unpaid Tax Issue
At least in the US, the IRS does negotiate with pretty much anyone who owes back taxes: https://www.irs.gov/payments/offer-in-compromise
aroch··on OVH increases pricing with the rise of their next generation DDoS Protection
>The issue is that it became a refugee for sites that could not stay online on other providers due to DDoS - so they were getting hit often.

Eh...not really. OVH has and will just blackhole your IP(s) in BGP and terminate your service......But not before logging into your server with the OVH root key they install by default and seeing what you're up to of course (yay backdoored by default)

OVH has a lot going for them, but reasonableness and consistency in business are not one of them. They have no problems dumping larger BW clients even if they're following the FUP/TOS.

aroch··on Apple fires engineer after his daughter’s iPhone X video goes viral
The video was taken on Apple's new campus....
aroch··on No human genome has ever been completely sequenced
The new rapid kits (R3) have significantly worse performance than the R2 kits it seems.

I'm also extremely put off by how they handle support -- that is via a forum where they do their very best to barely answer anything

aroch··on Show HN: Arxiv Vanity – Read academic papers from Arxiv as responsive web pages
bioRxiv doesn't expose LateX files, they explicitly only use PDFs to make things easier. Which means you're going to need to reflow PDFs (a la https://docushow.com/), and I would guess there are a lot more edge cases there
aroch··on Swift-Keylogger – Keylogger for MacOS written in Swift using HID
No, you're reserving all rights that a copyright indicates and then granting specific exceptions (i.e. "I won't enforce my copyright against you if you follow these rules") without giving up those rights
aroch··on Eternal Terminal: Remote terminal for the busy and impatient
I think that sentence implies they're using OpenSSH not that they're rolling their own?

--Edit--

A quick glance at the repo suggests they're using NaCl to handle the encryption + the SSH server for auth

aroch··on Nile.js – A Peer-to-Peer Live Video Streaming Library built on WebTorrent
It doesn't really matter all that much if some viewers of a live stream are ~30-60s behind others. Heck, ESPN's online offerings can have 2-3minutes of lag. As long as this isn't used for real-time chat / video conferencing, there's really no need for super low latency
aroch··on Ask HN: Google Doc email virus?
DMARC basically doesn't work, many mailservers don't look at it and those that do frequently ignore the policy -- even setting a REJECT policy typically results in mail being passed through like nothing happened.
aroch··on Dropbox on Mac now updates itself with a process in background
I believe that some of the `pro` or their custom hosted offering's features aren't necessary in the open source code base. But the majority of the functionality is
aroch··on Dropbox on Mac now updates itself with a process in background
Seafile works pretty well, they install a client a lot like the Dropbox client and sync away. And it is even mostly open source

seafile.com

https://github.com/haiwen/seafile

aroch··on AMD Zen and Ryzen 7 Review: A Deep Dive
And you're also stuck with a $200/month power bill and the full home heater....

Don't get me wrong, I have a bunch of rack pull servers and they're great for the price but I colo mine for less/server than the power bill/server would be at home and have them ona faster connection. I stick with low power options for light in-home usage

aroch··on China tightens Great Firewall by declaring unauthorised VPN services illegal
You must be doing relatively small commits (100mbit on a 1Gbps commit?), though I suppose connecting from India may be more expensive than intra-EU. I've been quoted <$2/mbit for UK-Hong Kong for 40Gbps on a 100Gbps commit
aroch··on Opera Neon concept browser
^d in Firefox and Chrome also bookmarks the page

Both Firefox's awesomebar and Chrome's omnibox let you go to a shortcut by typing its name

aroch··on Tim Cook assures employees that Apple is committed to the Mac
Eclipse is just super janky under macOS, and the GUI doesn't even work the same as its Windows counterpart -- which makes teaching classes with Eclipse a study in pain
aroch··on Frequent sauna bathing can reduce the risk of dementia
Heat shock proteins are really a response to abnormal protein folding (generally speaking) and are found upregulated in a number of stress response scenarios; including cold, heat, and oxidative stress
← PreviousPage 3 of 34Next →