HNHacker News
TopNewBestAskShowJobs

cmg

1,061 karma · joined September 14, 2010

Personal & small-org security, Rails/PHP/JS development.

Former Technology Director @ Trans Lifeline. they/them

@cmg on the bird site

submissionscomments
cmg··on Technologies I thought my son would never use
15 years ago, the office I worked in received daily menus via fax from local delis and restaurants with their specials, in case we wanted to get lunch. I have no idea if this is still a common practice but it seemed to be at the time.

This even had the slight benefit over sending email to a random address because a fax can just be posted on a common board in the office space, rather than someone having to take the step of printing the email first.

cmg··on Show HN: This website moves your mouse cursor
Found a fun Firefox issue where after putting FF in the background I tried to command-click that button to trigger it. My mouse cursor disappeared across the entire OS even though Firefox wasn't the active application! Had to bring Firefox back to the front to see my cursor again.
cmg··on Ask HN: Who wants to be hired? (April 2021)
Location: Connecticut

Remote: Yes!

Willing to relocate: No

Technologies: PHP, Ruby on Rails, JavaScript (ES6), Bootstrap, Twilio, Heroku, semantic HTML, CSS/LESS/SASS, SQL (PostgreSQL/MySQL), git

Résumé/CV: https://chrisgaraffa.com/resume

Email: chris@chrisgaraffa.com

I'm looking for full-time employment or contract opportunities. I've been writing code for over 15 years and have experience as a solo developer and in the non-profit world, as well as a manager of a small team of 5 staff/volunteers, but want to be able to focus on code. While I love Rails and have a long history with PHP, I consider myself to be mostly platform-agnostic as I love to learn: At my last position, I had to pick up Rails + Heroku and had the basics down in just about a week.

cmg··on Permission.site
The magazine doesn't, but advertisers are interested in using this as yet another way of fingerprinting you: https://www.cs.cmu.edu/~anupamd/paper/NDSS2016.pdf [PDF warning]
cmg··on Bitwarden releases “emergency access” feature
I downvoted this at first, but I've undone that and am going to respond.

If you have family, extremely close friends (as adults, life-long friends), these can be options. Consider keeping your 'binder' in a safe deposit box and setting up access via your bank.

If not, an attorney or even CPA may be able to keep this information for you.

cmg··on Linux Running on Apple M1
You might like the discussion. It was posted 13 days ago, so many people were a little preoccupied with US events.

https://news.ycombinator.com/item?id=25673631

cmg··on Ask HN: What are you working on?
I've forked a dead open source project and am working on modernizing it and adding features.

Pockethotline is software for creating a hotline: callers call in and get connected to an available operator. It's anonymous in that the caller and operator don't see each other's numbers.

The original project was based on Rails 3 and Ruby 2.2; I've updated it to modern versions of both, and updated Bootstrap from 2 to 5. Currently working on adding a number of features including call logging, categorization, tagging, reporting, operator "teams" and more.

Progress has been slow around the holidays but I'm picking it back up!

https://github.com/chrisgaraffa/pockethotline/

cmg··on Matomo: Open-source analytics platform
Worth noting that they also have a WordPress plugin that handles all of the installation and related setup: https://wordpress.org/plugins/matomo/

I use it on a personal project site and it works very well.

cmg··on Print this file, your printer will jam (2008)
I wonder if this was related to a kernel panic bug I ran into in Chrome around the same time! Long story short, we were using a library (Modernizr) on our web product that checked for some kind of OpenGL support that we didn't actually need, and just running that code would trigger a driver bug. Disabling that fixed it!
cmg··on Adding Encrypted Group Calls to Signal
Sorry, my point is that I'd prefer if the app didn't crash. I should have said 'when' instead of 'if'.
cmg··on Adding Encrypted Group Calls to Signal
My biggest issue with calls on Signal is that if the app crashes, the call disconnects. This has happened to my on my up-to-date iPhone (10S) if I'm on a long call and get another Signal message, which means I need to unlock the app again.

On the desktop, I really wish that you could resize the contacts sidebar to just show the sender's icon, as you can in iMessage, but the maintainers don't seem to be particularly interested: https://github.com/signalapp/Signal-Desktop/issues/2510

cmg··on Akku: Experimental Bluetooth headset battery monitoring application for macOS
Very cool! Works with my Sony WH-CH510 headphones. Looking forward to checking out the source.
cmg··on Show HN: I made an alternative to Google Alerts that listens to social media
This is really, really cool. And I love the home page! Being able to see results before signing up is great.

I'm not a potential customer right now, but the text on the pricing page "If you find a payment bug (incorrect charges, broken UI, etc), let me know and I'll give you the full version of PMAlerts for free, for life." would absolutely give me pause.

A simple addition if you're actually dealing with payment issues would be to add "I'll make sure your billing is straightened out ASAP - and never charge you more if you've been undercharged."

But ultimately, get your payment system functioning ASAP. I would not be comfortable putting my card info into a system that tells me ahead of time it might have bugs.

cmg··on Ruby on Rails in a week
I wish I'd had this post a couple years ago. I got into my current job by starting as a contractor, helping a friend out in an emergency situation. I've done PHP for over a decade, but had never written Ruby beyond some basic CLI scripts! I spent a few days learning how Rails works, and then how Heroku works (ephemeral filesystems were a new idea to me at the time), and finally got it all together. I also wish I'd put something like this together based on what I went through, but I'm glad this exists for others.
cmg··on Leaving Mozilla
Internet Archive has it: https://web.archive.org/web/20201007112514/https://davidwals...
cmg··on Don't close your MacBook with a cover over the camera
It's a multi-stage concern.

Sure, someone could grab all my files, email, etc. That would be damaging.

But if I'm having a sensitive conversation in my home/office with someone and the camera and/or microphone come on, that could be damaging as well.

FWIW, I use a camera cover and Oversight[0] to tell me when an application uses the camera or microphone. It doesn't prevent it from happening, but at least I'm aware if something is going on. The weirdest thing I've seen yet is that the iOS Simulator uses the microphone.

[0] https://www.objective-see.com/products/oversight.html

cmg··on Ask HN: What is the best way to target restaurants and small businesses?
I spent 7 years (ending late 2018) as the web developer at an agency that did branding & design for local restaurants. Unfortunately I don't have access to any of the analytics accounts anymore to give actual numbers -- but I can say that yes, people do go to the websites.

If you're just looking for hours and address you can get that via search (especially on mobile), but a properly-developed website will also provide sub-navigation in Google results for menus, contact info, events, etc.

Menus were also a big part of it. Dropping a PDF (or worse, a JPEG) of a menu onto a website sucks for usability. The sites used responsive design to lay out the menus in a way that was actually readable, and my CMS made it easy for the chef/manager to update on a regular basis. The menu pages were highly popular among first-time site visitors.

For restaurants that host private parties (larger or more complicated than what OpenTable & company will handle), the website was the primary way that people contacted them to start the reservation process. Many more people did that than message on Facebook.

Gift cards around the holiday seasons (mother's/father's day, graduation, December holidays) are also particularly popular.

cmg··on The irony of Apple homepage and Safari WebP support
Browsers tend to advertise what formats they accept outside of a very basic set to the server on requests via the HTTP Accept header: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Ac...

For example, Firefox on macOS sent this Accept header for this request: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8

Chrome sent text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.9

cmg··on Ask HN: What's the best corporate password manager?
Echoing what so many other people have said, we use 1Password for staff at our organization. I moved us from LastPass last year because LP was just confusing and frustrating for everyone.

The one issue we've run into with 1Password vs LastPass is that sharing works differently. If you share a password (not by putting it in a Vault) with an individual in 1Password, it makes a copy - so updates don't propagate. Thankfully we are a pretty small and tight team so adding people to other department Vaults isn't necessarily an issue, but it could be for others.

cmg··on Chrome deploys deep-linking in latest build despite privacy concerns
I think the idea there is that there would be lazy-loaded content from another site that would only load when someone scrolled far enough to see the highlighted word, which will automatically happen with this feature.

The title of the Forbes article is too hyperbolic for my tastes and while this could be a security concern in very specific situations it's being overblown.

cmg··on Ask HN: How do you protect your parents from tech scammers?
This is how I approach it at work (a non-profit where we deal with sensitive data). Every new employee and volunteer goes through a 30-minute training webinar on security when they start: spotting phishing emails, choosing good passwords, 2FA etc.

At the end, I tell them that if something just feels off, even if they can't figure out why, I'd rather they call or message me on Slack than ignore it. It absolutely never bothers me when they do it - in fact, it makes me feel better. Maybe 1% of reports are actual issues, but I'd rather deal with 99% false positives than miss even one thing.

cmg··on Agner Krarup Erlang
We use the Erlang B formula at my employer (one of our services is a peer & crisis support hotline) to try to estimate how many operators we'll need in a given week over 2-hour shifts. We've got a crude implementation but it works well for us!
cmg··on Homebrew 2.2
The opt-out does seem to be preserved after an upgrade. I had it off, ran the upgrade, and checked with `brew analytics`.
cmg··on Apple’s iPhone Software Shakeup After Buggy iOS 13 Debut
> Why the fuck did they let this happen in the first place?

Blame the annual expected release of a new iPhone that Apple trained us on and that markets and consumers now expect. For those phones to be ready to ship on the date that Apple promises, they have to be produced and boxed up. The phones require a new version of iOS for hardware support (which makes sense) meaning there's a certain time before the phone release date that a GM of the newest version of iOS has to be released to manufacturing.

cmg··on NoSnoop – Find out if your HTTPS traffic is being monitored
Interesting. I tried on my home WiFi (Comcast) on my Mac - green page (no MITM).

On my iPhone, (AT&T LTE) - red MITM page.

iPhone on my WiFi - red MITM page even with the cellular antenna disabled(!)

Tethered my laptop to my phone - red MITM page.

cmg··on List of websites and whether or not they support 2FA
Ah, thanks for the clarification. I didn't read/parse your original comment properly.
cmg··on List of websites and whether or not they support 2FA
Wouldn't that fall under the "Hardware Token" column, or is that a different technology?
cmg··on Psychological Effects of a 1-Month Meditation Retreat
I wasn't able to find any reference to wealth or income, either. People who have the ability to do a one-month retreat end up with better mental health - is this surprising?
cmg··on Catastrophic effects of working as a Facebook moderator
I spent most of last Friday keeping an eye on 4chan's /pol/ after finding out that morning that users were planning an attack on my job.

Even just looking for one day, it took a serious emotional toll on me. I've definitely seen some awful things on the Internet but the constant bombardment of hate speech, racism, anti-Semitism, and all sorts of disturbing images and text over the course of 6 hours made me feel physically sick a number of times, and I had to take extra care to rest the next day.

This is anecdotal of course, but I can't imagine what the Facebook moderators go through having to process at least one ticket a minute.

cmg··on WTF – A personal information dashboard for your terminal
Interesting! If I have cool-retro-term on my external display (27" Thunderbolt display at 2560x1440), it's all messed up like that.

On my MacBook Pro's built-in display, it looks like this: https://imgur.com/BbVcyA7

← PreviousPage 5 of 9Next →