HNHacker News
TopNewBestAskShowJobs

cmg

1,061 karma · joined September 14, 2010

Personal & small-org security, Rails/PHP/JS development.

Former Technology Director @ Trans Lifeline. they/them

@cmg on the bird site

submissionscomments
cmg··on Always Own Your Platform (2019)
> It's really hard to be better than Twitter.

It is, but right now people don't care as much about privacy as features and community. It's not what people who focus on openness or privacy want, but it's the reality. Where are the celebrities and brands? Where are the conversations happening? Where are my friends? This is the challenge.

cmg··on Tim Hortons app violated laws in collection of ‘vast amounts’ of location data
To buy the information that's been stored about you specifically? Probably not. But in general:

https://www.vice.com/en/article/m7vzjb/location-data-abortio...

> SafeGraph calls the location data product “Patterns.” In total, the data cost just over $160. Not all Planned Parenthood locations offer abortion services. But Motherboard verified that some facilities included in the purchased dataset do.

> SafeGraph’s data is aggregated, meaning it isn’t explicitly specifying where a certain device moved to. Instead, it focuses on the movements of groups of devices. But researchers have repeatedly warned about the possibilities of unmasking individuals[0] contained in allegedly anonymized datasets.

And related to [0]: https://www.nytimes.com/interactive/2018/12/10/business/loca...

[0] https://www.nature.com/articles/srep01376

cmg··on Reasons to ditch Chrome and use Firefox
I'm going to have to give this a try. I manage multiple Google Workspace accounts for clients and have stuck to Chrome for those as I have a profile set up for each account. Yes, you can log in to multiple Google accounts in any browser, but then it defaults to the first account for new windows.

The two final things that would get me off Chrome entirely:

* When I'm using my external USB microphone in a web-based conference system (mostly Cleanfeed but I've also seen it with Streamyard and Jitsi) my audio gets extremely robotic after a few minutes and it somehow impacts my entire system - I have to unplug the microphone to fix it.

* Dropbox, for some reason, hangs at 1 second left when uploading larger files (appx 60MB or so)

cmg··on The triple dot syntax (` `) in JavaScript: rest vs. spread
Oh that's interesting. I assumed people copy/pasted titles when they submit!
cmg··on The triple dot syntax (` `) in JavaScript: rest vs. spread
Interesting, does the HN system replace three dots (...) with a space in titles? The title of the article contains (`...`), but the title here just has a space.
cmg··on Including “And. And. And. And. And.” in a Google doc causes it to crash
Interestingly, "Or. Or. Or. Or. Or." doesn't trigger it.
cmg··on Heroku resetting passwords for “a portion” of their users immediately
For another data point, I got an email yesterday from "Salesforce" about a Heroku dataclip. I had recently deleted it, so maybe the email was queued up a couple days before. The email says, in part, "We recommend that you update and refresh the unique URL used with dataclips using Shareable Links as soon as possible."
cmg··on An Ode to Apple’s Hide My Email
It has the benefit of being at a general domain, icloud.com, instead of one that is (in theory) traceable to you for someone who cares enough to do so.
cmg··on ∑ Xah Code
I hadn't heard the name in quite some time, but I distinctly remember similar behavior on other mailing lists. I think it was one of the Omni Group's Mac lists - macosx-talk or -admin or -dev, I can't quite recall.
cmg··on Ask HN: Is Apple down?
They're fine for knowing that something is going on, but not great for knowing exactly what the cause is.

For example, when Facebook's services went down in October, people were reporting that AT&T and other cell carriers were down because they couldn't open the apps. As far as I know there wasn't an outage with any of the carriers that day.

cmg··on “O, so sorry. I need more time. my country defending Russian invasion”
The 6 minutes makes perfect sense to me - it could be one of those "If I don't reply to this ASAP I will never have time" situations. The notification is right in front of you.

I don't think it's fair to assume any malicious intent here. What would the maintainer gain? People are already extremely aware of the situation. It's not a huge repo, there's no ask for financial donations or anything like that.

cmg··on An unsolicited streaming app spec
I like this a lot and agree with pretty much all of it.

I'd add: Figure out a way to detect that I'm doing a re-watch of a series and do something with the progress bar on episode previews to reflect that. So if I've watched all of a series/season and then watch episodes 1, 2 and 3, maybe the progress bar on episodes 4+ reset themselves to an unwatched state or have some kind of greyed-out tint to show where I left off this time around.

cmg··on Laravel 9
I went kind of in another direction a few years ago - CodeIgniter's routing/sessions/etc base was plenty for most of my projects, but I wanted a real ORM. So I integrated Eloquent from Laravel and ignored the built-in CI database layer. A bunch of these sites are still running smoothly on modern PHP.
cmg··on Installing Every Arch Package
I just installed ncdu via homebrew and ran in in my home directory - very snappy and helped me clean out some old caches.
cmg··on Suicide hotline shares data with for-profit spinoff, raising ethical questions
Thank you, ketzo. Unfortunately I'm no longer with the org and can't say for sure that they wouldn't ever try to do something like this. I'm working with a new group now on open source peer support software that also values privacy.
cmg··on Suicide hotline shares data with for-profit spinoff, raising ethical questions
Former Technology Director for TL here - I maintained and deeply extended their hotline software. We took confidentiality and anonymity very, very seriously. Operators never, ever see the phone number of the caller, and vice versa. Only admins can even look up a caller by phone number. There were other technical measures as well, but I'm not going to give them up in a public forum, hope that's understandable.
cmg··on Ask HN: What is your home networking setup?
Yes, thank you - I did mean powerline. My fault.
cmg··on Ask HN: What is your home networking setup?
Thanks for this! I have doubts about our old building's power being able to support PoE properly but I might give them a shot and see how it goes.
cmg··on Ask HN: What is your home networking setup?
I'm glad to see this answer. I'm in the same situation - my ISP sent me a modem/router. I use that. Don't need much else. It's even got a guest network (not that we've had many untrustworthy visitors in the past couple years).

But I'm also glad to see the other answers here because we recently moved the home office to another room slightly further away and we're going to need to throw some WiFi boosters/repeaters in here.

cmg··on Ask HN: How to learn about text editor architectures and implementations?
Just this morning I needed to do a global find/replace for a string in a 3GB .sql file. I was in VS Code anyway so tried that - but the app choked on it. Ended up going with sed and it worked perfectly.
cmg··on Everything I googled in a week as a professional software engineer (2019)
I recently got a new job where I build solutions on top of an open source CRM-type product. It's been around for a while and has a good online community but it's still pretty niche, so a Google search isn't nearly as likely to turn up answers to a non-trivial question as reading the source is. My Google search history has always (and still does) look like this on a regular basis.

The whole situation has really made me appreciate search engines, forums and sites like Stack Exchange.

cmg··on All hyped up for Hypercard: further adventures with an Apple legacy format
Your comment made me go search for a short article that I'd seen in the past [0] with a text version at [1]. "Use of LSD-25 for Computer Programming"

"While stimulated by the LSD I was able to get the entire system wholly in my mind at the same time. I spent some time mentally visualizing various aspects of the compiler, the language and the processing which would take place. I did discover three or four design inconsistencies while being stimulated by the effect of the LSD, and I made notes for later checking."

[0] https://maps.org/news-letters/v18n1/v18n1-MAPS_24.pdf [1] https://slidelegend.com/use-of-lsd-25-for-computer-programmi...

cmg··on Abolish Yale
Ah, sorry - yes, a Board of Alders is an elected legislative body. We have the Mayor of the city as the executive while the BoA makes laws and such.

I also agree that students should be able to vote where they live, by the way!

> It's very difficult for a resident population of 140,000 to resist the will of an institution with massively more wealth and more income than the residents

At about 134,000 residents (and I believe this includes ~30,000 Yale students, faulty and staff), this statement does resonate with me.

cmg··on Abolish Yale
Very interesting! Yale doesn't have a Congressional or state representative (directly, anyway) but take a look at this map [0] and zoom in on Ward 1, in the center. That is pretty much all Yale territory.

Two blocks (Chapel to Elm, Church to College) are taken up by the New Haven Green, which isn't residential (though many homeless residents do live at/near it). From College through Park Street, as well as between Elm and Wall Streets are Yale dorms and academic buildings. Chapel to Crown are primarily restaurants, clubs, and a bit of shopping with some expensive apartments above them.

People who live there are extremely likely to be Yale-affiliated in some way.

2020 election results [1] show that there are 728 people who are eligible to vote in that ward, of which 173 or 23.76% did. They get one of 30 representatives on the Board of Alders. Another thing about New Haven is that nearly all of the Board is people who relate to Yale in some way, including members of unions.

[0] https://www.arcgis.com/apps/webappviewer/index.html?id=20871...

[1] https://www.newhavenindependent.org/index.php/article/partia...

cmg··on Abolish Yale
> There’s something unsettling about Yale, about the way it operates, about its very existence.

I am a New Haven resident, have been for over a decade and spent most of my social time for the 5 years before that in the city. This analysis is quite spot on. I often say that even if you don't go to Yale, Yale comes to you. Yale New Haven Health System is actually the largest employer in the entire state of Connecticut. The University, Health System and Hospital occupy three spots of the top five employers in the city.

Yale is not a campus on its own at the outskirts of the city (like Southern CT State University, or to a lesser extent University of New Haven). Students and residents alike walk next to each other on city streets from one building to another. The University buildings are on major roads downtown. Unlike universities in large cities (NYU comes to mind), Yale doesn't suddenly get lost in a forest of other buildings. It is the city in many regards.

As a result, the Yale Police Department is deputized by the New Haven PD. They carry guns, have their own lockup, and have the ability to operate in pretty much every area of the city, whether officially "Yale" or not.

And the Yale Corporation owns a significant amount of commercial real estate as well, regularly raising rent to drive local businesses out and bring larger chains in. Small restaurants, diners, record and book stores replaced by Barnes & Noble, Urban Outfitters, Tarry Lodge and the like.

Yale doesn't pay taxes on the majority of its property. Instead, it makes a voluntary contribution to the city that is significantly less than the tax value of its properties. Meanwhile, it has a $42 billion endowment that the University proudly says had a 40.2% return on investment over the last year.

And still as the author writes, people are hungry and homeless on the New Haven Green a block away from Yale's historic buildings and fancy shops. The unions of Yale workers along with community residents have fought admirably for Yale to commit to training and hiring more workers from New Haven itself, but the University has pushed back and lied at every opportunity.

The question for many of us isn't about tearing Yale down, though. It is making Yale subservient to the City rather than the other way around. "change has been made by groups instead of individuals" absolutely rings true of every struggle we see here that directly or indirectly involves Yale. It's not about getting Yale to be better on its own - Dunson is absolutely right to suggest that's an impossible task.

cmg··on AWS us-east-1 outage
It's brilliant until the information is bad.

When Facebook's properties all went down in October, people were saying that AT&T and other cell phone carriers were also down - because they couldn't connect to FB/Insta/etc. There were even some media reports that cited Downdetector, seeming without understanding that they are basically crowdsourced and sometimes the crowd is wrong.

cmg··on Things I learned from building a production database
Assuming I'm not the only one who's never heard of Delos or Cubby: https://engineering.fb.com/2019/06/06/data-center-engineerin...
cmg··on Only 90s web developers remember this (2014)
As a recent interviewee I can say that I'd be asked about code I was proud of. The last place I worked for was well-known enough or could be looked up easily and was small, so I explained what our main solution did, a particular issue we faced and how I planned and implemented a fix. Led to some good conversations with pseudocode, and didn't break any NDAs.
cmg··on Only 90s web developers remember this (2014)
I'll always have a fond memory of window.status, which still exists but doesn't do anything on the majority of browsers anymore as they don't have status bars to modify the text of.

https://developer.mozilla.org/en-US/docs/Web/API/Window/stat...

cmg··on Show HN: Nestly – A simple nested time tracker
Do you have any recommendations for good macOS time trackers? I've tried Clockify but the desktop app is extremely lacking and doesn't feel native at all. I've ended up just keeping a browser tab pinned.
← PreviousPage 3 of 9Next →