HNHacker News
TopNewBestAskShowJobs

bgro

578 karma · joined July 20, 2021

CiDiloTiloTiloTiloTiloTiloTiloQg4paE4paE4paE4paE4paEIOKWhOKWhOKWhOKWhOKWhOKWhOKWhCAKIOKWiCDiloTiloTiloQg4paIICDilojiloTiloAgIOKWiCDiloTiloTiloQg4paIIAog4paIIOKWiOKWiOKWiCDiloggIOKWgOKWiOKWgOKWhCDilogg4paI4paI4paIIOKWiCAKIOKWiOKWhOKWhOKWhOKWhOKWhOKWiCDiloQg4paE4paA4paIIOKWiOKWhOKWhOKWhOKWhOKWhOKWiCAKIOKWhOKWhCDiloTiloQg4paEIOKWgOKWiOKWiOKWgOKWiCDiloQgICAgIOKWhCAKIOKWhCDilogg4paE4paE4paEIOKWiOKWiOKWgCDiloDiloTilogg4paI4paA4paA4paE4paEIAog4paI4paI4paI4paE4paE4paE4paE4paE4paI4paE4paI4paAICDiloQgICDiloDiloTiloggCiDiloTiloTiloTiloTiloTiloTiloQg4paA4paE4paI4paA4paI4paE4paE4paI4paEIOKWgOKWgCAgCiDilogg4paE4paE4paEIOKWiCDiloQgIOKWiOKWiOKWgOKWhOKWiOKWgOKWiOKWgOKWhOKWiCAKIOKWiCDilojilojilogg4paIIOKWgOKWhOKWhOKWgOKWgCDiloQg4paAICDiloTiloQgCiDilojiloTiloTiloTiloTiloTilogg4paI4paE4paI4paEIOKWgOKWgCDiloAg4paI4paA4paAIAogICAgICAgICAgICAgICAgICAgICAgIA==
submissionscomments
bgro··on Office is too slow, so Microsoft is making it load at Windows startup
Linux is working great for me. AMD supposedly works better but my nvidia driver doesn’t crash for videos like windows does and games seem to be working fine. Possibly except kernel anti cheat games. I have dual boot available as a backup.
bgro··on Office is too slow, so Microsoft is making it load at Windows startup
Windows update reinstalls office even if you never installed it or opened it or own it. It’s reinstalled through most updates and on reboot.
bgro··on Office is too slow, so Microsoft is making it load at Windows startup
What? This is what lobbying is. Intuit TurboTax. Realpage. Then entire insurance industry. TSA easy check or whatever it’s called.

Fully fabricated problems with fabricated solutions often becoming legally required to be purchased to avoid the problem they cause in the first place.

bgro··on Office is too slow, so Microsoft is making it load at Windows startup
Startup shortcuts are one thing to manage but it’s gotten pretty out of control for most standard software now. Perhaps it used to be one-off annoying programs like 15 years ago.

Now there’s scrolling through hundreds of scheduled tasks called dfddg.exe with no title or description and located in c:/windows or %appdata%. Disabling the wrong identically named one bricks your system or software licenses.

Then you also have to check the registry and group policy and environment variables and spot the unwanted item that is again often bundled into a critical windows dll. Usually with the same name as the dll and its permissions are set as SYSTEM so you can’t edit it by normal means.

Then after every change you have to do a full rebooting and review all steps again. Often, they will regenerate themselves if deleted in the wrong way or the wrong order.

After all the startup things are killed there may still be kernel level startup recovery processes for things like Adobe.

bgro··on Office is too slow, so Microsoft is making it load at Windows startup
This is the kind of genius move you get when all your devs play leetcode all day and then have leetcode battles as an interview service.

Hundreds of millions of hours spent microfussing over leetcode and gatekeeping work because your solution isn’t copied from the top 5 solutions character for character. Only for the same devs to just abandon all optimization in the real job where it actually matters and implement an o(n^2) fraudulent time metric bypass.

bgro··on Home washing machines fail to remove important pathogens from textiles
Are people perplexed by the prevalence of bacteria in residential washing machines? That’s what the smell is when clothes are left wet for too long or the door is left open, preventing drying.

Though I wonder what effect a standard load with bleach would have when used in a load or if that’s simply what the article refers to as their disinfectant test.

bgro··on Someone at YouTube needs glasses
A sea of perfectly crafted misleading YouTuber pog faces isn’t necessarily better than autoplaying previews.

The automatically generated thumbnails were often the best at conveying what the video actual is in combination with a title and description that is currently overlooked in place of thumbnails.

These went away when people started gaming the system with a thumbnail frame right in the middle to intentionally misrepresent the content of the video. Same problem with the current YouTuber pog faces. The next step is to automatically generate multiple random frames to preview.

The garbage stock footage doesn’t work well here because it’s not great content to begin with. It’s lazy filler often used to hit the bare minimum arbitrary adsense time limit which wastes countless amounts of user hours.

bgro··on Wyze pays $255k of tariffs on $167k of floodlights
It harms 100% of Americans which means it harms the 50% of Americans who advocate for science, education, and health. Anything that causes any harm to this group in any way at any cost is what that other 50% wants and derives the benefit from.
bgro··on Apple violated antitrust ruling, judge finds
Besides nothing, I wonder what penalty they’ll face.
bgro··on National Weather Service no longer translating products for non-English speakers
The cost of this is not the real reason it was removed.
bgro··on Overengineered Anchor Links
Chrome developers keep adding unhinged complicated “features” that nobody wants or asked for and immediately are abused and broken.

Numerous autoplaying video methods for example especially when they follow the mouse, play in the background, or use lazy loading to be unkillable.

Speaking of lazy loading or whatever hundreds of variations probably exist around it now, the terrible front end devs of the world have decided to use that for everything. Everything is a sliding panel full of sliding panels and there’s no way to use browser back features coherently.

Scrolling down a site now loads a new site and destroys your history. Even if you scrolled to move content up because an autoplaying video anchored to the bottom of the screen is blocking the view. Scroll down too far causes a jump and the site decides you’re done and loads the next thing with no way to navigate back.

How do these developers have a job? How are features like this even invented with no critical thought or understanding of real world use cases questioned. It’s again and again and again that we see this.

And the Google team is so proud every time with their demo videos that is painfully obvious they put no thought into it outside of their bubble of them deciding some random thing was technically possible to do as a proof of concept and should therefore be immediately released as a fully supported feature.

bgro··on Suspension of inbound parcels from China and Hong Kong
It’ll be circumvented with proxy shipments from other locations, or third party shipping companies. Just like Russian sanctions and anything else people prepanic about or think will have any effect good or bad.

Any raise in cost will disappear and be absorbed as profit in supply chain shrouds of smoke and mirrors, permanently. Unless it legitimately costs slightly more money or causes any inconvenience to companies and we hear about it on the news.

bgro··on US will ban cancer-linked Red Dye No. 3 in cereal and other foods
Why’s there no avenue for receiving risk appropriate compensation funds for having increased personal risk of death by consuming something a reasonable expert in the industry could consider dangerous?

If I skirt the law on technicalities to cause harm to an employer for example, such as knowingly implementing trivial security encryption on critical transactions, I feel I could be liable for damages. Why is this a game of spot the problem and then get off with a warning before going to the next preplanned technicality workaround that usually also causes cancer but will buy them a few years until the process repeats?

Shouldn’t mass risk of life be considered a terror level charge? Or rather, instead of saying no to that question because it didn’t appear to meet X criteria, why aren’t we finding ways it could meet that criteria? For example if it needs a political reason, we should ask how this could be a politically motivated decision rather than saying this doesn’t appear to meet any political agenda. That’s how the laws are always completely one sided abused against normal people anyway in a more extreme stretch than my example. I think it’s reasonable to do a reasonable-amount of application back.

bgro··on Gmail AI Agent: Automate Your Inbox with AI-Powered Telegram Commands
I haven’t used AI for sorting email yet but have over many attempts over many years tried to setup manual filters.

I try to make them as absolutely bulletproof as possible but I’m still running into problems because email is so rough.

Critical Microsoft emails for example constantly have random sketchy looking domains but are legit.

Or someone named “Don Otre Plyson” gets caught in the “DoNotReply” filter and I never see his important message.

I don’t know if I’d blindly trust AI to guess patterns better than me where I’d have no way of ever knowing if I potentially missed something.

bgro··on DeepMind debuts watermarks for AI-generated text
Couldn’t this be easily disrupted as a watermark system by simply changing the words to interfere with the relative checksum?

I suspect sentence structure is also being used or, more likely, the primary “watermark”. Similar to how you can easily identify if something is at least NOT a Yoda quote based on it having incorrect structure. Combine that with other negative patterns like the quote containing Harry Potter references instead of Star Wars, and you can start to build up a profile of trends like this statement.

By rewriting the sentence structure and altering usual wording instead of directly copying the raw output, it seems like you could defeat any current raw watermarking.

Though this hasn’t stopped Google and others in the past using bad science and stats to make unhinged entitled claims like when they added captcha problems everybody said would be “literally impossible“ for bots to solve.

What a surprise how trivial they were to automate and the data they produce can be sold for profit at the expense of mass consumer time.

bgro··on Flaw has Microsoft Authenticator overwriting MFA accounts, locking users out
I’ve been reporting major problems nonstop for the past like 20 years. It usually takes me less than 5 minutes when I first learn of some new security feature to find a problem with it. Most of that 5 minutes is physically writing my email to security highlighting major oversights. I don’t know how these people get jobs and gatekeep me out of both hiring or my scientifically accurate and backed feedback for not passing the buzzfeed security quizzes for certifications. I’m otherwise a full stack software engineer.

Even my simple requests like not auto flagging emails from confirmed and fully validated Microsoft services gets denied because it’s “too hard” so everything except internal users and random whitelisted services like github and azure AWS is instead flagged as suspicious, causing alertness fatigue.

I’ve reported major logic problems to many major companies and usually the only response I get is an indirect followup email through HR or some other non technical people sent to the entire distribution list as a followup saying how it’s technically better than what was there before (it’s scientifically and mathematically not) and that we just need to do it.

I never get recognized or win bug bounties because there’s always some loophole where I didn’t actually help them and they just magically fixed the long standing issue by coincidence after I reported it.

Most recently, I discovered a “feature” with Microsoft OAuth that has a severe flaw and could essentially shut down all MS OAuth functionality, and all consequences branching from that. Still no response.

I’m not even trying to find these. They just keep getting in my way of trying to do work.

For example, I have to authenticate up to FIVE times per authentication, per authentication —- Auth syncing can be slow leading to multiple auth requests that would otherwise only need a single one to propegate.

5 authentications * 5 programs needing individual (slow-sync) auth = 25 authentications I have to already pass to be able to start standup or pass in order to un-hard-freeze my live demo to potentially hundreds of engineers.

Imagine driving your car, and the steering wheel locks when it loses internet connection (like in a tunnel or just randomly) or because the re-auth period has passed. Security devs don’t want to full stop the car because they’ll get yelled at, so just lock steering so they can’t steer home.

Well now if you’re on a highway, that’s pretty stressful and dangerous. But it’s like they are just salting the wound by adding a series of glitchy minigames where you have to first read all the spammy popup dialogs, and then solve a Baldi’s Basics math puzzle, and then rotate a ball to not be upside down (?) and then manually match a missile launch code.

bgro··on M2dir: Treating mails as files without going crazy
I prefer the chaos of devs randomly storing data in appdata, programdata, the program files dir, the x86 program files dir with mostly but not entirely duplicate data, c:/games/game/game and ../, c:/game/game, ~/games, ~/game/game &./game, ~/documents/game, ~/documents/games/game, ~/game saves/games, etc...
bgro··on What happens to Google Maps when tectonic plates move? (2020)
I’ll have to add this to my long list of technical problems when people request a teleporting super power.

Some related problems are the planet’s location in orbit / the solar system’s location relative to the entire universe and how landscape changes over time (trees/towns/mountains/rivers appearing and disappearing).

On another related note, it’s worth noting that the ability to pause time is a universe-ending super weapon. Even if it worked like you intended, you wouldn’t be able to use any senses or breathe without moving.

Similarly, super speed would cause every human movement to have deadly force. You would go insane from the relatively slow action of everything operating at standard speed. TV might be hours per frame instead of frames per second, with incomprehensible audio to match.

bgro··on Android now lets you transfer eSIMs between your phones
Someone start a timer for the first 0 day exploit involving this
bgro··on Cruise wasn't hiding accident video from regulators – it had bad internet
This is like the scene in breaking bad where Skylar uses QuickBooks.
bgro··on Push notifications – What to push, what not to push, and how often
But but our notification policy is just “Do you want notifications, including security alerts, new messages, emergency information about your account, and promotional messages and advertisements, and you agree that we can sell all your data”?

There’s literally no way we could break that down! How can we guess what the user wants when they REFUSE to tell us! I guess we better just leave it so they can opt out if they successfully navigate all 6 toggles, but if they do that we better just flag their account for suspicious activity because I don’t know why anybody would ever opt out. Seems suspicious to me.

bgro··on Email addresses are not good 'permanent' identifiers for accounts
No developer working on account authentication for sites has ever used the correct regex to parse and validate a legitimate email. I wouldn’t be surprised to see things like if you’re at anything other than @Gmail.com the email gets flagged as invalid. Maybe there’s a manual approval step here but better just flag your session as suspicious activity or failed bot check for the time being.

Or in the spaghetti parsing, obviously nobody is going to have swear words in their email. Go ahead and blanket ban all of that. And then @JohnsonAssociates.com gets banned.

I’ve also seen email parsing rules get applied to login screens too. So the valid email rules get updated and suddenly you fail validation trying to log into your already existing account. Ran into this today actually.

So having your own domain might solve some problems but you may still end up needing multiple accounts with devs refusing to use correct parsing rules.

bgro··on Live proxy and VPN detection
Bad actors use windows computers. We should ban all windows users from the internet. And android. I don’t want these poor people racking up my bandwidth costs when they’re not profitable data cows I can exploit or at least compel to buy something.
bgro··on Live proxy and VPN detection
“Everyone who doesn’t use their SSN as their account name is literally STEALING from me because I can’t sell that information I’m entitled to for profit! If I can’t sue them for their theft then they should at least be banned from the internet!”

“I make my users have an account to view my content I automatically scrape from paid sites by scanning for changes 10 times per second. I have unfiltered ads in every unused pixel to optimize efficiency. I also like the ads that look real because they get more clicks and pay more. But my users are using Adblock! They’re literally STEALING from me! When I added a paid content as a service plan to combat this theft, my daily active users dropped by 99%! That must be because they were all fraudulent bot accounts just racking up my bandwidth costs! And the others now just don’t want to pay me for my work! Literally STEALING!”

bgro··on High school student allegedly uses device to turn off nearby iPhones
Interfering with radio (phone) signals seems to be one of those perhaps unexpectedly serious crimes especially for how easy it seems to be even by accident.

If only other similar service rights were given the same protection. Like the constant data leaks/thefts.

bgro··on A data corruption bug in OpenZFS?
It’s always amazing to me how frequently backups silently fail. Every backup software or general common tool to back things up that I’ve seen has many points of silent failure where it just gives up copying at some point in the process or skips over files for some reason without indicating what or why.

If you don’t delete files as you go, now you have an unknown partial backup state that basically doubles your needed space.

If you delete as you go, sometimes something happens and the process stops or corrupts so your data is now split and you may have lost something.

Even trying to log all the failures during the process is amazingly difficult and solutions to work around that specific problem, themselves, somehow introduce more and new types silent failure in some type of irony.

bgro··on The many faces of fsck (2007)
Log, version 4J final version 2 final D_2 FINAL VERSION v1.09 FINAL (1).doc
bgro··on Meta is banning people from advertising after running ads for Python and Pandas
Ah just like Microsoft who randomly locks my email I account I use only to receive spam email. Suddenly I’ve violated something in the terms of service and here’s a copy of the 200 page legal document. So my account is banned despite not sending emails or anything, just receiving spam email.

Oh unless I provide my phone number. Then they’ll unban me and I can continue presumably breaking the terms of service.

bgro··on Ask HN: Has meetup.org been replaced by anything?
I’ve been interested in trying meetup but I can never really find any groups I like.

When I find one that seems remotely interesting, there’s only like 4 people marked as attending. Usually a husband and wife and probably their good friend of 10 years.

So I’m hesitant about showing up for board games for example where everybody is extremely close friends except me and they just have this event continuing from when it used to be bigger and have more people.

It’d be fine if the hosts were engaging with new people but I don’t trust that to happen. In my experience the hosts usually don’t know they’re supposed to lead the events and introduce guests and spot and resolve awkwardness unless they were in a sorority.

I imagine I’d show up to scope out the group meetup, but it ends up being a niche location where anybody there is obviously for the meetup. Or worse, I don’t find out they’re close friends until a 3 hour long game already started so leaving would ruin the game.

Or I show up to have beers and hang out and they turn out to be hardcore serious terraform mars players who expect me to know the rules because “why else would you show up to a random board game night?”

This sounds like a lot of worrying but these are all actually based on prior events I’ve gone to with acquaintances from work or new friends I don’t know well. Or like flyers in my apartment for something like a hosted Halloween party.

I don’t think I’ve ever had a good experience unless I’m the one hosting the event and can introduce guests and such, or a very close friend is hosting something so I can call him out to be a better host… But it’s a lot of work to get people interested in doing anything except sitting at home watching Netflix. That’s even before all the planning for the event and doing the hosting.

bgro··on Removed as moderator of /r/Celebrities after over 14 years
This is a core critical problem. I suspect reddit has significant automated processes on top of this.

In my original comment I mention mods banning for hate speech in an abusive / ironic manner (so nobody is truly worried for their safety for example).

I think reddit used to automatically forwards reports for this category for admin review probably due to a legal requirement. Due to the mass quantity of reports vs staff, I suspect they automatically flag mod reports as credible. As such they have automatic admin superbans.

Admin reviewed bans are a higher level of ban and super bans and use every possible privacy exploit to go far beyond basic account or cache banning. It’s far beyond even IP banning.

These seem to be intended for truly extreme, severe, violent actions such as credible acts of immediate impending mass violence, coordinating true terror, promoting actual adult offensive exploitive content, etc.

Instead, they map hate speech and some other serious reports to this category. Technically, it sounds like it makes sense on paper, but this is abused so heavily that essentially meme reports are nearly sending automatic SWAT raids to people’s homes.

I’m guessing these are only summarized in a broad category to staff as “Mod reported + Admin reviewed. User banned for performing or conspiring terrorism / active police verified death threats / extreme exploitative adult content / active police verified mass murder / hate speech”

That last one technically fitting the rest if it’s used correctly (or at least one could argue) but as a chain of OR listed reasons, someone who was ironically banned because the mod “hated that they disagreed with the mod’s decision to ban scumbag steve memes from the meme subreddit” is suddenly flagged in the same category of true terrorists, as if Bin Laden himself had his own subreddit and was posting live content of his active mass public attack.

This is one reason they want people to download their app. Any association such as unique app combinations installed or other accounts (including non-reddit accounts) can be linked to a user even when they opt out of traditional tracking. They can then sell this data or use it in a magnitude of ways.

This is a specific core problem I’ve been tracking but this is a general template example of many of Reddit’s problems I’ve strongly disagreed with that go beyond general debatable business choices or general preferences.

← PreviousPage 2 of 6Next →