HNHacker News
TopNewBestAskShowJobs

danjoc

2,643 karma · joined January 10, 2016

submissionscomments
danjoc··on Germany’s Failed Climate Goals a Wake-Up Call for Governments Everywhere
Mann did finally admit to being wrong about the hockey stick.

>We conclude that model overestimation of tropospheric warming in the early twenty-first century is partly due to systematic deficiencies in some of the post-2000 external forcings used in the model simulations.

https://www.nature.com/articles/ngeo2973

danjoc··on Founders and CEOs need to be proactive about diversity and inclusion
I think you misunderstood my comment. I can apologize for it being unclear, but not for having an unfavorable opinion of violent protestors. Whether you accept that apology is up to you.
danjoc··on China’s Mass Internment Camps Have No Clear End in Sight
I specifically limited it to

>People who are this violent

not an entire population. You're intentionally misreading the comment if you insist otherwise. The point is very simple. It's not okay to kill people at a protest, and re-education for people who support murder at protests seems like a reasonable option to me. Go ahead and ban me dang. My opinion is "murders at protests are bad." That's not changing.

danjoc··on China’s Mass Internment Camps Have No Clear End in Sight
>Are you aware that your comment comes across as extremely racist?

It's not racist at all. You're trying to discredit any discussion of moral upbringings by calling it that. Han Chinese and Uighurs were killed. Re-education seems like an appropriate response for people who support such violence on either side.

danjoc··on China’s Mass Internment Camps Have No Clear End in Sight
>As police have struggled to round up enough Uighurs to meet internment quotas, the tiniest signs of potential disloyalty to the authorities, such as giving up drinking or not greeting officials, have become grounds for disappearance.

This overlooks the surveillance state aspect of the story. People say dumb things online when they think their communications are private. I can't imagine China being able to produce a list as big without the aid of mass surveillance. The article paints 2008 like it's the olden days. It was not. They were recording then too.

>Ten years ago, bans on the Uighur language in schools, popular novels (often printed by government-run presses), and private prayers and rituals seemed unenforceable. Local teachers ignored rules about language use, banned books were easy to find in private bookstores, and illegal rituals like Sufi dance remained common.

If I had to speculate, I would say what has happened is their words online have come back to haunt them. Maybe they secretly chuckled online about the attack that left 200 dead. Now they get written up and taken off because they "stopped drinking" or some other excuse. The first rule of parallel construction is don't talk about parallel construction.

>That is a very very far cry from a prison, which is what you seem to be implying these camps are.

Reeducation is kinder than what we did to more than half a million Iraqis in the name of 9/11 and WMDs.

danjoc··on Twenty-two states ask appeals court to bring back net neutrality
The ISP paid for the network. They have the right to do what they want with it. That's internet freedom. The government has no business telling me how to run my personal network. It has no business telling ISPs how to run theirs. On top of it all, FAANG are direct competitors eroding those ISPs' cable tv business in most cases. So it's not just a matter of the government telling the ISPs how to run their network, it's the government picking a winner.

Tell me, if FAANG has a problem with internet freedom, why don't they just build their own ISPs? Answer, that's expensive. That's why Google quit building fiber after a half dozen cities. So instead, they want "net neutrality" which is where ISPs pay for the networks, FAANG takes all the money, and ISP customers get stuck with rising prices. No thanks.

danjoc··on Someone Is Waging a Secret War to Undermine the Pentagon’s Huge Cloud Contract
Why would the Defense Dept. choose Google or Microsoft cloud? I wouldn't put US military cloud on GCP or Azure after the Project Maven and ICE thing. Even if they were cheaper. Those companies are full of people who have demonstrated willingness to sabotage America's defenses. Their names are on anti-America petitions around the internet.

Amazon has proven willingness to assist military and law enforcement using cloud facial recognition technologies in the face of criticism from detractors. Of course AWS will win.

danjoc··on Twenty-two states ask appeals court to bring back net neutrality
>The system seems broken when

When it does stuff you disagree with personally. That's a pretty universal feeling. While you may get plenty of internet points from your friends that agree with you, you have to realize, you are the one with the unpopular opinion this time.

>50% of the population

Counting illegals. 22 states isn't 50% either. This is the "not my president" argument all over again.

The people won. ISPs won. FAANG lost. It's time FAANG pays their share for video streaming bandwidth. It's not like they don't have plenty of money parked in offshore banks to cover the gap. This is just a tactic for them to sow more division and hope for a favorable future election outcome. Pretty disturbing to watch actually if you agree with Ajit Pai and internet freedom.

danjoc··on Docker cannot be downloaded without logging into Docker Store
>Docker Hub is also blatantly in breach of the GDPR.

Truth is, no one cares. GDPR is an overreach designed to shake down American mega-corps. Docker has no money so the EU isn't going to do anything to them.

>I’d report them to the Information Commissioner‘s Office myself if I didn’t think they were about to fold anyway

I'm sure they're inundated with complaints from unsuccessful companies trying to shoot down their biggest competitors already. Adding one more to the pile is only going to waste your time and that of EU regulators.

danjoc··on As Cars Collect More Data, Companies Try to Move It All Faster
They shouldn't be collecting the surveillance data in the first place. It's an abuse of our freedom.
danjoc··on 'Coerced into tipping'? How apps are changing the culture of tipping in SF
How do you know who gets the tip? Panera used to refuse tips. Now I go in and I'm presented with tip amounts at the point of sale. Who get's that tip? The cashier? The person in back making my food? The person who comes by and busses my table? Or none of the above? Is Panera just pocketing what I'm willing to throw in extra? Maybe it is market research, they figure if I'm willing to tip 20% instead of 15%, then the should charge more for the sandwich?
danjoc··on Blocking Compromised Passwords on PyPI
Fig leaf. Implement package signatures.

>ESLint

Glass houses. SSH Decorator was much worse, it stole SSH keys.

danjoc··on Climate change has doubled the frequency of ocean heatwaves
Watching the renewables and nuclear proponents fight each other is interesting, isn't it? Divided they fall.
danjoc··on Amazon in Running to Acquire Landmark Movie Chain
The newspaper made some sense in a newsvertising sort of way, the grocery store chain was a stretch, but a movie chain is just hubris. "I'm good at computer stuff, so I'm good at everything!" Things haven't been going so well at the grocery either, have they?

https://www.businessinsider.com/whole-foods-employees-reveal...

I only expect things to get worse. Oddly enough, this story really is beginning to sound a lot like manna,

http://marshallbrain.com/manna1.htm

danjoc··on Climate change has doubled the frequency of ocean heatwaves
This is the part where I'm supposed to shill for lower cost nuclear to win the argument, isn't it?
danjoc··on Founders and CEOs need to be proactive about diversity and inclusion
No mention of ageism. Disappointing.
danjoc··on Reliable, Secure and Universal Backup for U2F Token
>Please clarify.

OPs problem is he needs his crypto keys at all times, because without them, he cannot sign up for a new service AND enroll them all. Now he's forced to carry his backup everywhere, making it just as prone to loss as his primary. Valid point.

Alternatively, if OP could carry a key ring of public keys for all his crypto keys, his backup crypto key can stay home, or in a safe deposit, or buried in a virgin forest of maple trees. While U2F may use ECDSA, or whatever other public key algorithm, it is not possible to carry just the public key and enroll it, is it?

The following is not 2FA, obviously: To illustrate the public key point more clearly, when I sign up for Github, I don't need all my private SSH keys on hand. I only need all my public keys to enroll them, and a single private key to use SSH. If at any time one of the crypto keys is stolen, I can remove the associated public key and use one of the backup crypto keys instead.

danjoc··on Climate change has doubled the frequency of ocean heatwaves
Nuclear. That's the point of the endless drone of climate change articles. To convince you that something must be done, and that maybe Blinky the three eyed fish is actually kinda cute. They really don't have any other solution waiting in the wings. Renewables have never been enough to meet global demand. It has to be nuclear. You're okay with radiation, right? Cool, let's do it. Nuclear.
danjoc··on Reliable, Secure and Universal Backup for U2F Token
FireFox based browsers support pkcs11 for smart cards like Yubikey. The right way can be built today. Popular services never built it. Maybe when security keys are more popular, they will. I believe trying to make the wrong way work at any cost will only entrench the wrong way. I'd rather point out that there is a better way in hopes that others will adopt it.

Your article makes a valid point about the catch 22 of U2F keys. I simply disagree with your conclusions that it is the user who should try harder to make U2F work. It seems like you are pointing out that U2F is fundamentally broken, but you haven't accepted that yet.

danjoc··on Reliable, Secure and Universal Backup for U2F Token
My key is stolen. I have to revoke it, but I need my duplicate to log in to do it. The attacker stole my key and phone, because they were in the same place. I've only got a few minutes to go out to the remote forest and dig a meter down to find my key before the attacker uses it with the phone back at bad guy headquarters to launch the nukes. Did I bury it next to this tree or that one? Damn it, they all look the same now. Dig fast, but careful not to smash the key with the shovel. Gosh, the water table is higher than when I buried it. I hope it still works. Christ, it's all tangled in roots! Pull!! Got it! Now log in, revoke it, reflash the key, re-enroll. Phew! Humanity is saved.

With PKI, I contact my spouse. Honey, can you revoke the key I'm carrying? It's been stolen. Thanks sweetie! See you tonight.

I'll admit the duplicate approach makes for a much better movie. The PKI solution is positively boring. Maybe we could throw in a spouse kidnapping to keep it interesting?

danjoc··on Reliable, Secure and Universal Backup for U2F Token
I don't believe the Yubikey is the problem as much as the U2F spec. Public key crypto solves this nicely, because one can carry all the public keys and only a single private key. When I think of backup keys, I think multiple keys, not duplicate keys. Having a duplicate of the U2F key is a bigger problem for security than those outlined here. Being unable to duplicate the Yubikey is a feature, not a bug.
danjoc··on Ask HN: Cities underserved by tech jobs?
Detroit is such a great city. Housing is insanely cheap. Great for sports. Great lakes. Close to Canada so you can get cheap meds. You should consider it. They're really hungry for tech talent, and it's a swing state.
danjoc··on Silicon Valley should stop ostracizing the military
You not working on them is entirely different than Google not working on them AND the looming threat of a Google patent lawsuit preventing anyone else in the country from working on them too.
danjoc··on US housing market hit a ‘significant slowdown’ in recent weeks, Redfin CEO says
Ah, understood. I remember shopping for houses after the crash, and it seemed everything was either a trash heap, or in foreclosure. The bank wouldn't take an offer, preferring to cash auction to investors at the starting price of the highest offer they had. No cash, no house, no matter how good the credit rating. The cheap house thing was basically a myth from my vantage point.
danjoc··on US housing market hit a ‘significant slowdown’ in recent weeks, Redfin CEO says
It gets worse than that,

https://www.lendingtree.com/home/mortgage/interest-only-mort...

danjoc··on US housing market hit a ‘significant slowdown’ in recent weeks, Redfin CEO says
That's not really what happened in the last crash though. The people who bought, held. The only people who got hurt were home owners who go underwater and then lose a job. They can't afford to wait it out, they can't afford to make the payment, so they end up in foreclosure. Then the bank holds and it ends up as a zombie home.[1] The zombie falls to pieces, so the bank gets a bail out, the home is written off, and the market is just as tight as it ever was. All the flippers are going to do is rent the places out while they hold on for the next run up. At least, that's what I witnessed in the last crash.

https://newyork.cbslocal.com/2014/07/25/zombie-homes-without...

danjoc··on Silicon Valley should stop ostracizing the military
I choose to judge people by their actions. Their actions are not up for debate. They are working against the US military and law enforcement community through their actions, while the American born Bezos is impartial in assisting US government. That's a huge difference and will be attributed to their national origin by many American born citizens. Those two CEOs are not be eligible to run our country as president under the constitution, but they are running two of our most powerful institutions as president and using those institutions to weaken US military readiness. At some point soon, this becomes a national security matter.
danjoc··on Microsoft threatens to stop hosting Gab unless posts are removed
>Actions like this serve to placate the public.

I'm not placated. According to Microsoft,

>After an initial review, we have concluded that this content incites violence, is not protected by the First Amendment, and violates Microsoft Azure’s acceptable use policy

If the posts were illegal, why isn't the poster being arrested? Where are the real police in this matter? Why are California cops deferring action to the Redmond internet police?

danjoc··on Silicon Valley should stop ostracizing the military
>Sundar Pichai and Satya Nadella are US citizens who live in the US. They are not foreign nationals.

Correction, foreign born.

https://en.wikipedia.org/wiki/Sundar_Pichai

https://en.wikipedia.org/wiki/Satya_Nadella

>Blatant factual inaccuracies

You're assuming bad faith.

>Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith.

https://news.ycombinator.com/newsguidelines.html

danjoc··on Pi-Hole: Why You Need a Network-Wide Ad-Blocker
Web ads are the new spam. In response to email spam, all ISPs blocked port 25 by default. ISPs will ultimately do the same to web ads using traffic prioritization techniques like PiHole.

Users in general aren't sophisticated enough to do this themselves. ISPs will offer it for a price and users will pay more to have ad free internet while simultaneously benefiting ISPs with bandwidth reductions. Some ads will be allowed through of course, but with significant costs associated with the advertising, the volume will be reduced significantly, like the difference between spam email volume vs that of postal junk mail.

If big sites like Facebook decide to fight it in a cat and mouse game, ISPs can hit them with advertising fees directly or throttle their traffic in retaliation for cheating the system. If browsers like FireFox try to defeat it by doing DNS over HTTPS, then ISPs can funnel 1.1.1.1 directly into the trash. AT&T did this and said it was an accident. I'm sure it was more like a test. They are aware of what underhanded scheme FireFox is up to. Mozilla isn't fooling anyone with their "security" cover story.

← PreviousPage 2 of 27Next →