HNHacker News
TopNewBestAskShowJobs

beshrkayali

3,336 karma · joined April 3, 2010

Software guy
submissionscomments
beshrkayali··on Discord Desktop App RCE
This might be true, and in certain contexts I’d agree that defaulting to the secure option -while potentially breaking- could be the safer one.

But I have to disagree with your point about reading release notes, this should be the expected behavior from developers working on the product, maybe not every single dependency but at least the main ones. Being an Electron app mainly, discord devs should’ve known and understood what they’re working with. Of course mistakes happen, but the main issue here is developers missed reading the docs properly, not whatever the default value is.

beshrkayali··on AWS forked my project and launched it as its own service
I sympathize with the author of course, and tasteless tactic from AWS, but this is also why it's important to choose the appropriate license for what you want out of your project.
beshrkayali··on Facebook account banned after linking Oculus account
I wasn’t really trying to prove that point, I also didn’t think it needs proving. But your point somewhat does it I think. There are many examples in tech specifically over the last couple of decades on how free unregulated competition was the reason why we had accelerated development, lower cost, and “democratizations” of tools and information. As long as there’s no regulation preventing others from coming up with a better solution (however “better” is defined), there’s no reason why others can’t come up with a viable alternative. Friendster -> MySpace -> Facebag. IE -> FF and Chrome. Nokias -> iPhone and co, and so on.
beshrkayali··on Facebook account banned after linking Oculus account
Unpopular opinion: although I hate how oculus sold out to Facebook (possibly backstab of the decade, after the initial crowdfunding), and although I’m a strong advocate of leaving Facebook regardless of their VR BS, there’s really nothing wrong with them requiring a Facebook account to use it. I have no idea how much the manufacturing/R&D costs of Quest are, but I doubt it makes sense for Facebook to sell it this cheap without requiring users to link/create a Facebook account. Don’t expect stuff to be free/cheap for no reason.

My point is that regulating this space of tech will only lead to less innovation. There’s an extremely easy solution that every single one of us can do: don’t buy it, don’t be tempted by the cheap price Facebook is offering. I closed my Fb account ~5 years ago now (after being on it for about 10 years) and I’m very tempted to buy Quest 2, but I won’t. If enough people do this, what ever scummy plan Facebook is weaving will fail, but even if it doesn’t, you’d be out of it.

beshrkayali··on A psychologist rethinking human emotion
I can’t tell if you’re being snarky or genuine. I rarely read “the guardian” but if you’re going to claim “reams of scientific data” exist, I’m going expect a link to something, or a quote from the book, or anything to back up this claim. Whether it a a tweet or a random book review.
beshrkayali··on A psychologist rethinking human emotion
You can easily non-scientifically argue that that’s just a form of repression and the blow back will be magnificent.
beshrkayali··on A psychologist rethinking human emotion
> Chief among these misconceptions is the view that feelings are innate and universal, and can be consistently measured. So, anger, for example, is thought of as a fundamental building block of human nature with a tell-tale physiological “fingerprint”; all we’ve done is gone and named it. But that idea is categorically untrue, Barrett says, and reams of scientific data now back her up.

What scientific data? Not a single link in this entire article for anything to support these (like many have said already) preposterous or obvious claims.

beshrkayali··on Someone has stolen my Instagram account
Regardless of the technical aspect if this is possible or not (I like how a random commenter here claiming he’s from Instagram is asking people not to trust a random tweet with a screenshot), I don’t see the problem as some suggested with the lack of regulation in social media. The issue is really in the blind trust people have put in these companies. Losing the username is one thing, but losing access to messages and potential private images on there is the actual pain, maybe not for this guy specifically but fun general. Having your private conversation on these platforms, your entire business or a huge portion of your marketing, or as a main way to “connect” with others is the problem, it’s like leaving your door and windows open for a week and then being surprised that your house got robbed. It might not happen, but it’s a huge risk. The solution is easy: don’t entirely depend on these platforms and don’t store valuable data there.
beshrkayali··on Wikipedia is getting a new look
The most underrated thing about websites that have kept a working design/ui/ux/whatever for a few years or more is that people are used to them. I know where the search bar is, I know where to switch language and where to exactly point my attention to find what I’m looking for. Even if something is not exactly right, or doesn’t make sense to some expert UI designer, you really don’t have to change it. I’m seriously weary of multi year redesign projects undertaken by websites used regularly by a lot of people. It almost never works. PayPal didn’t get it right, Spotify constantly messes with their app and changes where things are, everyone can probably add something to this list.

Shouldn’t UX be a lot more about how the thing looks? Work on enhancing your copy if people find it difficult to understand.

beshrkayali··on We hacked 28,000 unsecured printers to raise awareness of printer security issue
Yeah that’s an ad stunt for their blog. Nothing interesting really. Probably shodan and a little python script. Yes, IoT has a security problem but you shouldn’t be going around using people’s ink to make an already made point.
beshrkayali··on Apple just kicked Fortnite off the App Store
As much as I know people who use windows would hate it, there’s really nothing preventing them from doing so morally. It’s their software, they steer it as they see fit. It would end up pushing a lot of people into Linux probably, or inspire the rise of something new.
beshrkayali··on Show HN: Deck for Reddit – A Reddit client optimized for desktop
Interesting! But doesn't work on Firefox if you have Enhanced Tracking Protection enabled. Maybe this would work better as an extension? Similar to RES.
beshrkayali··on Reasonably priced color e-ink display
Are there any alternative e-ink displays with lower screen refresh time? 15 seconds is a bit much. Or at least one that'd allow partial refresh? Not necessarily with color.
beshrkayali··on Disabling Google 2FA doesn't need 2FA if you're already logged in
No. It's not. It's possible for people to forget themselves logged in on others machines, happens to the best of us. Requiring the user to reenter their password when changing it but not requiring 2FA when removing 2FA is silly.
beshrkayali··on Don't close your MacBook with a cover over the camera
Apple should probably make a physical camera cover. I have it on my Thinkpad X1 carbon and I love it. What's missing is physical microphone and wifi switches, I don't know if there's a modern machine that has all three.
beshrkayali··on App suddenly crashing on startup due to FBSDKRestrictiveDataFilterManager.m
How/why does Spotify app use Facebook iOS SDK?
beshrkayali··on Fig: Visual Apps and Shortcuts for Your Terminal
It might not be directly related to this, but I think it's way better for learners to actually read the docs/manpage and then try to craft the command themselves (getting it wrong a couple of times as well). This is kind of like copy/pasting the answer, which solves the immediate problem but is terrible for learning what's going on or how it works.
beshrkayali··on Only 9% of visitors give GDPR consent to be tracked
I agree. I’m certainly taking it from my own point of view, and I might be overloading “swindle”. It’s probably a bad choice of a word here. It would have to be on case by case basis anyway, but even with the inflexibility of the system and the impossibility of jail time for every theft case, I think it would have to be at least an option when the intent on scamming for the purpose of selling the data (like those mailing lists) is clear.
beshrkayali··on Only 9% of visitors give GDPR consent to be tracked
DockerHub uses a company/product called "TrustArc: TRUSTe" and they have _exactly_ this method. The slowdown is intentional. People who come up with sort of tactics and those who implement them should go to jail. It's beyond infuriating. I've decided to not upload my images to dockerhub because of this.

Edit: jail time is not for anger obviously, but for intentionally swindling people. It'll be handled on a case by case bases obviously, but data is worth something, people who swindle you out of your data are like those who scam you in the street for your wallet, and as far as I know, there's jail time for that.

beshrkayali··on Only 9% of visitors give GDPR consent to be tracked
I honestly don't trust governments/bureaucrats to be able to come up with a solution for this issue. This is one of those problems that evolves very quickly, and the solution probably needs to be done by a private company or by each person individually.
beshrkayali··on Only 9% of visitors give GDPR consent to be tracked
Which is why GDPR, although theoretically a good idea, is pretty much useless in practice. I'd like to see how many websites offer a reasonable consent widget that doesn't opt you in by default, keep nothing checking but a huge button to tick and accept, or the usual million-and-one checkboxes to untick, and many other cheap tricks that even the most vigilant of consumers will fall to at some point.

I use everything I can to prevent tracking on my machine. But for a general solution for everyone, I don't know what would be the answer, but I don't think it's GDPR. If it's to work, acts forbidden by GDPR need to be handled very fast, and without interaction from user nor legal mumbo jumbo. Without a zero-tolerance policy, the cheap tricks will only grow stronger.

Edit: So apparently if you criticize gov/bureaucrats on HN you get downvoted.

beshrkayali··on DuckDuckGo browser seemingly sends domains a user visits to DDG servers
I'm surprised at how you're handling this. DDG is supposed to be friendly to privacy-aware users. You're dismissing people's valid points and asking them to trust you, just like any other privacy-non-friendly service would do.

Edit: I'm speculating here. But specifically because of the way you've replied here and on Github, my actual level of trust in DDG team went down.

beshrkayali··on Linear – A fast issue tracker
Looks a bit broken on Firefox.
beshrkayali··on When you type realty.com into Safari it takes you to realtor.com
Safari lost it when it stopped showing full url in address bar.
beshrkayali··on Ask HN: Thoughts on new GitHub layout?
On a 3840x2160 res it looks horrible, extremely stretched and honestly it looks like someone's first web design, and if you zoom in it looks unbalanced.

There's no reason for the major layout change.

Sadly, this seems like yet another case of designers/project-managers having nothing to do and wanting to feel useful every once in a while so they go about redoing the design. Paypal, slack, spotify, and many others do it all the time it, so why not github.

beshrkayali··on Elevator.js – A “back to top” button that behaves like a real elevator
Playing music is a terrible idea.
beshrkayali··on I Am Deleting the Blog
It's more like media analysis I think. Both John and Adam take clips from main-stream/internet media and try to examine it. I think they do a very good job at that. There's a long donation segment because the show is produced by listeners. Sound effects and such started out as a joke but listeners like it, and almost everything around the show is done by the community, including the website, shownotes, and transcripts.

Adam was on Rogan in March. I recommend watching that episode.

https://www.youtube.com/watch?v=NaPKrZTUoUs

beshrkayali··on I Am Deleting the Blog
I don't think so, but I've been listening to them for years. They criticize all sides, but one needs to listen to a few episodes to get into it, because they do have their own style of inside-jokes/jargon that might make first-time listener feel a bit lost, but that's the case with most indie/alternative media I think.
beshrkayali··on I Am Deleting the Blog
Exactly. The main problem is MSM with corporate money behind it. Getting things wrong is normal, getting things wrong intentionally (or recklessly) is malicious.

There are many. But they're difficult to find and get into. My favorite is http://www.noagendashow.com/.

beshrkayali··on I Am Deleting the Blog
This is exactly why people are losing faith in journalists and the media in general. NYT has been going downhill for a while now so this is not surprising. It's not the doxxing itself, but it's the hypocrisy. I'm willing to bet that the same person would not hesitate to call out anyone else of a differing opinion (especially politically) on how wrong doxxing is.
← PreviousPage 6 of 13Next →