HNHacker News
TopNewBestAskShowJobs

bbatsell

5,421 karma · joined February 2, 2010

Hi, I'm Brock, a hacker/developer/sysadmin/photographer in Austin. Would love to chat about infosec, machine learning, public policy, food, beer, or pretty much anything else.

hn@brockbatsell.com || https://brockbatsell.com

-

[ my public key: https://keybase.io/bbatsell; my proof: https://keybase.io/bbatsell/sigs/_HwLLWndCOi_jNgT2aIWlLQ0M3G2wy610Syr0v8ppNo ]

submissionscomments
bbatsell··on The Seattle Public Library is reducing maximum digital holds
They are reducing the number of media items a single person can have on hold, not the total number of holds on a single item.
bbatsell··on Thames Tideway Tunnel super sewer completed
Due to industrialization and cars, stormwater runoff, especially what’s called the first flush, is very polluted. If we had unlimited resources, treating both wastewater and stormwater runoff + strict impervious cover restrictions and on-site storm retention systems would be the best option. The reason a combined sewer isn’t generally preferred now is because the maximum capacity must account for torrential rain, otherwise the system will outflow raw sewage, and a polluted first flush is preferable to raw sewage. The cost to retrofit London’s sewer to be separated would be several orders of magnitude more than upsizing the combined sewer to handle predicted rain events. If they got the capacity right, then it is the best option.
bbatsell··on Hetzner GPU Server
They do. But since most miners would just ignore the license, they implemented LHR (low hashrate) beginning on GeForce 3000-series that detects the types of ops used for mining and artificially slows the GPU to about 25% of its actual speed.
bbatsell··on Jury awards climate scientist Michael Mann $1M in defamation lawsuit
It’s just an unfortunate fact pattern. Compensatory damages are by design supposed to be a quantifiable number that you can directly point to on a ledger somewhere. Mann claims to have lost grants, and indisputably lost reputation, but has remained employed at a seemingly proper level throughout his career. Scientists don’t get kickbacks from grants, so no quantifiable losses _to Mann_ there. Loss of reputation is hard to quantify, though it is sometimes done by having a PR expert testify “this is how much it would cost to restore a person’s reputation to its previous state”, but considering Mann’s previous state was “unknown to the public”, that’s also tough to do. IIRC, Mann has had to have private security at various points, but that was paid for by his employer, so Mann can’t be compensated for it. It seems like in the absence of hard numbers like that, the jury decided to compensate using punitive rather than trying to make up a number, and no party is allowed to tell the jury that that will get struck down.
bbatsell··on Costs of running a macOS app studio business
The entire article is discussing annualized numbers, so $50/month, a fairly middling Hetzner server.
bbatsell··on Substack on Nazi Views
Popehat’s nuanced response that is well worth reading:

https://popehat.substack.com/p/substack-has-a-nazi-opportuni...

bbatsell··on Unity is offering a runtime fee waiver if you switch to LevelPlay
Except that Genshin will not be subject to it. Genshin Impact is made by Mihoyo, a Chinese company. In order to sell Unity licenses to Chinese customers, Unity Technologies created a joint venture called Unity China, and, as is standard Chinese government policy, it must be majority-owned and controlled by Chinese entities. The majority owner of Unity China? Mihoyo.

(On top of that, it makes no sense — Genshin would be a poster child for revshare: a single entity that has made billions off microtransactions and that can be easily audited in one go.)

bbatsell··on X sues Calif. to avoid revealing how it makes “controversial” content decisions
That is something oft-repeated in conservative circles without a shred of basis in law. In fact, Section 230(c)(2) of the CDA does the exact opposite. It was written to explicitly _grant_ immunity when companies moderate in good faith.

https://en.wikipedia.org/wiki/Section_230

bbatsell··on Consumers defrauded on Zelle are left high and dry by the banks that created it [pdf]
No, the scammer stole someone’s credentials and the bank clawed back the payment. The bank can always reverse it at any point in the future. The consumer never, ever can.
bbatsell··on PSA: Intel Graphics Drivers Now Collect Telemetry by Default
They are jokingly referring to macOS, which is descendant from a fork of BSD with the Mach kernel.
bbatsell··on LK-99 is an online sensation but replication efforts fall short
There were people complaining in earlier threads that bigger publications haven't been reporting on LK-99 — this article is a perfect distillation of why. It is already significantly outdated, missing out on multiple interesting findings that were posted yesterday which would almost certainly have resulted in a much different piece had they been available when it was reported out and sources asked for comment.
bbatsell··on List of APIs that require declared reasons
Since you kept the same phone, that was probably DeviceCheck, which gives you 2 bits to store “fraud” related flags.

https://developer.apple.com/documentation/devicecheck/access...

bbatsell··on List of APIs that require declared reasons
No, you can scope it to an App Group shared across all apps in one account (Team ID). Google uses this to aggressively fingerprint — if you’re signed in to Google Voice, your actions in Google Maps will still be associated to your account even if you’ve never signed in.
bbatsell··on Byron Bay data breach victim told to pay Adidas, NBA $1.2M by US courts
No, ex parte means not requiring a party that would normally be required. It is _also_ used in emergencies because the process of pleadings, answers, and replies would be too slow, so you are asking the court to temporarily ignore the rule that the other party respond before the court issues some sort of order or response.
bbatsell··on FreeWilly 1 and 2, two new open-access LLMs
The benchmarks towards the bottom are of ChatGPT-4, according to the footnotes.
bbatsell··on TSMC warns over deepening slump in chipmaking sector
Could you elaborate on what you’re referring to? I’m certainly not an expert, but my understanding was that the vast, vast majority of TSMC’s revenue comes from production of completely custom wafers on newer nodes, and I’m hard pressed to think of something in the industry with _longer_ lead times.
bbatsell··on JPEG XL: How it started, how it’s going
One of the three main authors of JXL works for Google. But in the Google Research Zurich office, so he might as well not exist to the Chrome team, I guess.
bbatsell··on Delta flight lands in Charlotte without front landing gear
No, it's entirely the engines — there are a lot of moving pieces of metal that have to safely expand and contract in understood cycles. The brakes and wheels are fine with tight turns (assuming you don't have to use max braking). Southwest operates on a very similar timetable, and in fact flies a few of the more-trafficked Hawaii island hops. The difference is that Hawaiian's 717s _only_ fly island hops all day, every day. Southwest rotates its planes, so any given plane will do at max two island hops before it flies the 6 hours back to mainland and gets plenty of cooling time, e.g., LAX -> Honolulu -> Hilo -> Honolulu -> LAX.
bbatsell··on Delta flight lands in Charlotte without front landing gear
Delta and Hawaiian are the two US operators. Hawaiian loves it, and is struggling to replace it. They use them for island-hopping. Modern airliners don't do well in this use case — modern engines have been engineered to tight tolerances to extract fuel economy, and their thermal designs rely on the cold air at cruise altitude to keep them healthy. Island hops are too short and too low for that to hold. The engines on the 717 handle it just fine, but anything else on the market will require the planes to sit on the tarmac for a significant length of time between landing and takeoff for them to cool enough, and would destroy Hawaiian's current network design, which has lots of quick flights and tight turns.

Delta announced retirement a long time ago, but has been not-so-secretly buying up as many as they can get, mostly as spares for parts to keep the fleet going because it's so useful for them. Also, the A220, its replacement, has a single engine, the Pratt & Whitney Geared Turbofan, which has had an incredibly rough entry into service — everyone was concerned that the gearbox would be an issue, but it has been mostly rock-solid, and it's the engine core that's had dozens of issues. An airline in India has over half of its fleet grounded and filed for bankruptcy last month because P&W can't repair their engines.

bbatsell··on Bill to allow corporate landowners to vote in elections in Seaford, Delaware
To elaborate a bit, "City of London" is not the city of London as one would normally imagine. It is a district only about a square mile large that contains the central business and financial district. It has very little residential zoning and fewer than 10,000 residents (compared to 10 million in greater London). A recent change in law *increased the number of businesses receiving voting power to 32,000, and they nominate a number of voters that scales with their number of employees (and the total far outweighs residential votes).

* Corrected wording to clarify that law change only increases the number of businesses — businesses have had the franchise in City of London for centuries. h/t JumpCrisscross

bbatsell··on Reddit App – Suspicious high number of recent 5 star, one word reviews
If #1 were true, literally _anyone_ in spez's position would shut up and get on with things. The fact is that he initially did that — and then as the week has gone on, he has begun giving more and more unhinged interviews with the press. He's not saying "it blew over", he's blaming anyone and everyone he can think of, making objectively false statements about history and his own actions, and making overt threats to his perceived enemies.

It is very plainly having a much bigger impact than spez anticipated.

bbatsell··on Addressing the community about changes to our API
> Important note: currently, our rate limit response headers indicate counts by client id/user id combination. These headers will update to reflect this new policy based on client id only on July 1.

https://reddit.com/r/redditdev/comments/13wsiks/api_update_e...

bbatsell··on Apollo will close down on June 30th
> That is I see no deliberate "lying" coming from the reddit CEO.

Days afterward, spez got on a conference call and falsely claimed that Christian was blackmailing him. An employee of Reddit itself affirmed that he said it in a summary of the call they posted to a (private) sub of high-level moderators, replicated here:

https://old.reddit.com/r/ModCoord/comments/143rk5p/reddit_he...

(The summary in the main thread was written by members of the community on the call, the comment I linked is Reddit’s own summary.)

Reddit has also repeated the same claim off-the-record to multiple journalists.

bbatsell··on Apollo will close down on June 30th
The “free” limits are per-app, not per-user. Any API call using Apollo’s OAuth client_id and client_secret is attributed to Apollo’s limits and then API usage, whether it comes directly from a user’s device or through another server.

Reddit has never provided access to its ads to third-parties, and now third-party apps are banned from showing any advertising at all.

bbatsell··on Apollo will close down on June 30th
Nearly every element of your comment is blatantly wrong, some directly addressed by the post this comment thread is discussing.

- Reddit is charging the equivalent of 20x its published revenue per user for the API.

- The new API agreements ban the display of any advertising by API users. (Apollo did not show ads, but other third-party clients did, and Reddit claims the low quality of ads was harming Reddit by association.)

- Charging $5/month would be break-even given the API pricing, and only for new customers. Apollo would still have to serve earlier subscribers at a huge loss. API fees would certainly not “drop by 50%” — the vast majority of people subscribing to Apollo are power users, so the average API usage per customer would _increase_.

bbatsell··on Docker for Mac Without Docker Desktop
I haven't tested it, but Lima purports to support it:

https://github.com/lima-vm/lima/blob/master/docs/multi-arch....

bbatsell··on Hash collision in Apple NeuralHash model
No, the threshold encryption only allows for the 30+ cryptographic “vouchers” to be unlocked, which contain details about the hash matching as well as a “visual derivative” of the image. We don’t know any details about the visual derivative.
bbatsell··on An Open Letter Against Apple's Privacy-Invasive Content Scanning Technology
> There has to be some incentive somewhere for Apple to do this. They know it's wrong, they know it will be abused.

The most positive spin I can put on it is that it has become clear behind the scenes that NCMEC and partners have put enough pressure on Congress that Apple believes that on-device scanning for CSAM content will be soon be required by federal law, and this is their attempt to define the parameters in as privacy-preserving a way they can before the actual legislative language is drafted and can't be changed.

Even if all of that is true, I don't think this was the best way to do it and it is a huge own-goal to concede ground before there's even been a public debate about it.

bbatsell··on Amazon US customers given one week to opt out of mass wireless sharing
Far be it from me to defend Comcast, but it's not equivalent in the slightest. Comcast creates a separate network, with a separate IP, using their cable modem and the DOCSIS bandwidth available on their network. Its third-party usage does not count against your data cap, and any nefarious usage would not be associated with your own account and possibly subject you to civil or criminal sanctions.
bbatsell··on Uber charges driver for completing a 13-mile fare
Here are screenshots of the “service fees”:

https://twitter.com/TheSofaaa/status/1399070201925312512?s=2...

← PreviousPage 2 of 10Next →