HNHacker News
TopNewBestAskShowJobs

clawoo

189 karma · joined February 22, 2011

submissionscomments
clawoo··on Germany pauses AstraZeneca vaccinations as a 'precaution'
> we in the UK have administered a lot of this stuff, and you'd think someone would have noticed a serious side effect like this

Apparently EU vaccines are produced in Europe, maybe there's something wrong in the local production facilities that's causing this. UK has only used AZ vaccines produced in the UK, afaik.

clawoo··on Show HN: Gleek diagram maker – UML class, Sequence, ER diagrams, Flowcharts
Maybe I am missing something, but I'm having difficulty figuring out what a proper diagram definition is supposed to look like.

You could take inspiration from plantuml-editor (https://plantuml-editor.kkeisuke.com/#) and add a template/demo button that allows user to get a predefined diagram so they can experiment with it.

clawoo··on Wikimedia narrows down the app sendin 90M requests to a pic of flower
> it fetches the image from Wikimedia Commons but does not display it

If I were to guess, they use the picture as a connectivity/speed test. They probably figured Wikipedia has unlimited free bandwidth, so they didn't care.

clawoo··on FATCA Pushes “Accidental” Americans to Give Up US Citizenship
Yeah, I was surprised the article completely glossed over why nobody outside the US wants to deal with FATCA, because on face value it sounded like a good tool to prevent money laundering and tax haven stashing.

But based on FATCA, only the other countries have a responsibility of reporting wealth information about US citizens, while if you are a Russian or a Brit or whatever you can safely stash all your wealth in the US if the tax regime is more lenient than your own country.

clawoo··on AirPods Max
I sometimes have the same issue with my Bose QC35, usually resolved by turning the headphones off and on again.
clawoo··on 1% of farms operate 70% of world's farmland
> Germany opened its borders at the height of the first Covid-19 wave to allow workers from Romania to come, when Romania was a hot bed for Covid-19.

Just a small correction, you've got your data the other way around. Early to mid April when Asparagus-Gate happened, Romania had at the very worst 500 new daily cases for a population of 19 million, while Germany regularly had 4-5000 for a population of 83 million.

So in essence Germany was a hotbed.

clawoo··on IoT Unravelled Part 1: It's a Mess but Then There's Home Assistant
> There should be regulation that forces all vendors to use a public standars, instead of letting them develop their own.

Forcing them to use public standards and forbid them to develop their own? You can't possibly believe that, you're literally stifling innovation. A much better approach would be to force them to make their standards public.

clawoo··on Diagram Maker: Open sourcing IoT visualization
Have you considered PlantUML[0]? There's plenty of examples on planttext[1].

It's my go-to tool whenever I need to document something visually, whenever I have a meeting with my peers and I want to get them quickly up to speed with the process I have in mind, I just create a quick sequence diagram and we can hit the ground running.

[0] https://plantuml.com/state-diagram [1] https://www.planttext.com/

clawoo··on The AN-225: How the Cold War created the world's largest airplane
Presumably because that would push them into the hands of Russia (whether they want it or not).
clawoo··on Show HN: Briefing – Anonymous, secure, open source WebRTC group video chat
> This outer layer of DTLS-SRTP encryption is removed while packets are traversing Jitsi Videobridge

What this means is that the packets are encrypted between you and the video bridge and the packets travel unencrypted within the videobridge infrastructure, but at no point does the outside world see the unencrypted stream. Talking to the Jitsi video bridge is just a regular WebRTC session as far as clients are concerned (so any DTLS encryption WebRTC has, the Jitsi call has), I know this because before they had a decent SDK I had to manually wedge my WebRTC calls into it.

If you're looking to add e2ee to your project, you're pretty much left to choose between Olm and Signal Protocol, which are quite similar, but libsignal is GPLv3 while libolm is Apache 2.0.

I've used Olm more intensively over the last two years. While it works, it's great, when it randomly wedges a session for no apparent reason you feel like throwing it out the window.

clawoo··on Show HN: Briefing – Anonymous, secure, open source WebRTC group video chat
I think you are very much misinformed on the subject.

You're not sending unencrypted streams to Jitsi, as it uses hop-by-hop encryption, meaning you send an encrypted stream to the server where it gets decrypted and re-encrypted for the rest of the participants. At no point you are sending "plaintext" data. What you might have heard is that Jitsi will be introducing end-to-end encryption, but it doesn't mean it doesn't have encryption at the moment.[1]

I think it's a misnomer to say WebRTC end to end encrypted by default.

If you cannot guarantee end to end encryption during the negotiation phase, you cannot trust that the party you're encrypting for/receiving encrypted content from is the actual party you are expecting to communicate with, hence the need to independently verify over a trusted channel whether the fingerprint in the SDP offer/answer matches.

After the negotiation is complete, the streams will indeed be encrypted, but if the offer/answer SDP has been tampered with by the signaling server, which is under the control of a rogue/compelled provider, and another DTLS certificate has been inserted, the encryption is useless as far as complete communication security is concerned.

[1] https://jitsi.org/blog/e2ee/

clawoo··on Lightweight API Design in Swift
And a proper IDE and a faster compiler.

Xcode is dreadful with its strange fetish for recompilation even if there were no changes and the compiler is slower with every iteration. The solution put forward for this always seems to be "buy newer hardware".

clawoo··on Software Won’t Fix Boeing’s ‘Faulty’ Airframe
The article reeked of anything but credible journalism as soon as it opened with "The saga of Boeing’s 737 MAX serves as a case study in engineering incompetence, and in engineering ethics – or the lack thereof."

By this point's it's obvious to everyone that the engineering of the plane is pretty far down the line of causes which lead to this.

There was a Twitter thread[1] a few weeks ago which explained it very clearly:

Some people are calling the 737MAX tragedies a #software failure. Here's my response: It's not a software problem. It was an

* Economic problem that the 737 engines used too much fuel, so they decided to install more efficient engines with bigger fans and make the 737MAX.

This led to an

* Airframe problem. They wanted to use the 737 airframe for economic reasons, but needed more ground clearance with bigger engines.The 737 design can't be practically modified to have taller main landing gear. The solution was to mount them higher & more forward.

This led to an

* Aerodynamic problem. The airframe with the engines mounted differently did not have adequately stable handling at high AoA to be certifiable. Boeing decided to create the MCAS system to electronically correct for the aircraft's handling deficiencies. During the course of developing the MCAS, there was a

* Systems engineering problem. Boeing wanted the simplest possible fix that fit their existing systems architecture, so that it required minimal engineering rework, and minimal new training for pilots and maintenance crews.

The easiest way to do this was to add some features to the existing Elevator Feel Shift system. Like the #EFS system, the #MCAS relies on non-redundant sensors to decide how much trim to add. Unlike the EFS system, MCAS can make huge nose down trim changes.

On both ill-fated flights, there was a:

* Sensor problem. The AoA vane on the 737MAX appears to not be very reliable and gave wildly wrong readings. On #LionAir, this was compounded by a

* Maintenance practices problem. The previous crew had experienced the same problem and didn't record the problem in the maintenance logbook. This was compounded by a:

* Pilot training problem. On LionAir, pilots were never even told about the MCAS, and by the time of the Ethiopian flight, there was an emergency AD issued, but no one had done sim training on this failure. This was compounded by an:

* Economic problem. Boeing sells an option package that includes an extra AoA vane, and an AoA disagree light, which lets pilots know that this problem was happening. Both 737MAXes that crashed were delivered without this option. No 737MAX with this option has ever crashed.

All of this was compounded by a:

* Pilot expertise problem. If the pilots had correctly and quickly identified the problem and run the stab trim runaway checklist, they would not have crashed.

Nowhere in here is there a software problem. The computers & software performed their jobs according to spec without error. The specification was just shitty. Now the quickest way for Boeing to solve this mess is to call up the software guys to come up with another band-aid.

I'm a software engineer, and we're sometimes called on to fix the deficiencies of mechanical or aero or electrical engineering, because the metal has already been cut or the molds have already been made or the chip has already been fabed, and so that problem can't be solved.

But the software can always be pushed to the update server or reflashed. When the software band-aid comes off in a 500mph wind, it's tempting to just blame the band-aid.

[1] https://threadreaderapp.com/thread/1106934362531155974.html

clawoo··on iPad Pro
Billions of dollars in research and industrial design, thousands of man-hours sourcing the perfect materials, hundreds of thousands of hours of engineering that give a device a most perfect feel.

Only to be placed in a $10 case with bunny ears so it won't crack if you accidentally drop it.

clawoo··on Diagrams: A diagram editor for the Mac
I was just about to recommend it. I've been using it on a Mac for a while now and it's been more than enough for my diagramming needs.
clawoo··on How to defeat Ed25519 and EdDSA using faults
Anyone have any idea how does this affect Olm[1] (and possible NaCl and libsodium)? I know it uses Ed25519 signatures for both the device fingerprint and the one time pre keys.

[1]: https://git.matrix.org/git/olm/about/docs/signing.rst

clawoo··on Apple Engineer Talks about the New 2015 Macbook (Spanish Parody)
That's true, the guy in the video was a Spanish comedian and he's talking about one time when he was tasked with cleaning the paelleras (the pans in which paella is made) and he placed them on the beach for the seawater to slowly clean them up. He didn't account for the tide coming in later that evening and taking the paelleras away.
clawoo··on An iOS Developer Takes on Android
Actually there is a difference. If you create a table with a considerable number of cells (say, over 20) that contain a couple of labels and maybe an image when you swipe really fast the scrolling will hang, even if you are using the dequeue mechanism.

The alternative is to paint the contents of the cell manually (that is without using UILabels and the such) using CoreGraphics.

Check out the drawContentView: method here: https://github.com/ferostar/fast-scrolling/blob/master/Class...

clawoo··on Why Can't Developers Estimate Time?
From an older Slashdot comment on the subject: I multiply all time estimates by pi, to account for running around in circles.
clawoo··on Poll: What do you use to track your bugs?
Looking forward to that. In the meanwhile I find Redmine absolutely wonderful after I've configured it after our needs and process.
← PreviousPage 2 of 2