HNHacker News
TopNewBestAskShowJobs

dpifke

3,032 karma · joined August 4, 2008

My name is Dave. My handle is my first initial followed by my last name; to send me email, use my first name at my last name dot com.

[ my public key: https://keybase.io/dpifke; my proof: https://keybase.io/dpifke/sigs/KuMWBJfGH_TWY1BWLB4luWLnVqnG6BZbXR5Y427QR4o ]

submissionscomments
dpifke··on Scammed out of $130K via fake Google call, spoofed Google email and auth sync
"Extraordinary claims require extraordinary evidence."

My reply involved the effort of sending a test message from my Chase account, to capture the exact text used. If you want people to engage with you in good faith, you should put similar effort into your replies, rather than just use Reddit-speak for "I think you're wrong."

dpifke··on Cloudflare Email Service: private beta
Not true, at least for ARIN. If you have an IPv6 allocation, you can obtain one or more IPv4 /24 allocations, so long as their stated purpose is to provide IPv4/IPv6 compatibility (e.g. for dual-stack services or NAT): https://www.arin.net/participate/policy/nrpm/#4-10-dedicated...
dpifke··on Cloudflare Email Service: private beta
FWIW, a huge percentage of the spam I get is via Sendgrid, and at some point in the past year or two their abuse reporting mechanisms all turned into black holes, so mail sent via Sendgrid is heavily penalized in my spam rules.

Sending reputation is just as applicable if you're using a third party as if you're hosting it yourself, but much less under your control.

dpifke··on Cloudflare Email Service: private beta
I've run my own mail servers for many decades and have never had any deliverability issues. I've also never used bargain basement cloud VPS services with horrible reputations.

The best way to ensure a good reputation is to obtain your own address space from a RIR. Barring that, you need to choose a provider with a decent reputation to delegate the space to you.

dpifke··on Beyond the Front Page: A Personal Guide to Hacker News
My uBlock Origin rules use almost identical syntax (but there are a lot more of them, since I hide stories from TV news and clickbait sites):

https://pifke.org/hn.txt

(I also would love to know if there's a way to consolidate rules.)

dang has previously indicated receptiveness to built-in killlist functionality for sites/users/titles, similar to what this list accomplishes. My offer to build this (for free) stands, if anyone at YC was willing to provide access the HN codebase.

dpifke··on Scammed out of $130K via fake Google call, spoofed Google email and auth sync
The signin 2SV SMS verbiage used by Chase is: "Chase: DON'T share. Use code 12345678 to confirm you're signing in. We'll NEVER call to ask for this code. Call us if you didn't request it."

I assume in the case where the customer initiates the call and support is verifying their identity via SMS, they use different text (i.e. not "to confirm you're signing in"). Otherwise, that'd be pretty ridiculous.

dpifke··on Recreating the US/* time zone situation
14 states have more than one time zone[0].

I live in South Dakota, which is one of them—the Mountain/Central timezone boundary within the state follows the Missouri river. (Locals refer to "East River" and "West River" to refer to the two halves of the state. The capital, Pierre, is technically East River, but is right on the banks, almost dead-center.)

[0]: https://simple.wikipedia.org/wiki/List_of_U.S._states_and_te...

dpifke··on SpaceX's giant Starship Mars rocket nails critical 10th test flight
The ground equipment is the longest lead-time item for future flights. If you accidentally blow that up, it sets the program back months.
dpifke··on Installing a mini-split AC in a Brooklyn apartment
I haven't personally had need to do it (yet), but I know multiple people who got the EPA certification to be able to service their own equipment. It can be obtained by taking an online test.

https://www.epa.gov/section608/section-608-technician-certif...

dpifke··on Objects should shut up
I was curious, so I just checked the FMVSS requirements for these[0]:

Must be activated when the ignition switch is energized and reverse gear is engaged. Must not be energized when the vehicle is in forward motion.

Seems that should be amended to not allow use when the vehicle is in park, just as they are prohibited while in drive. I'm tempted to write to the NHTSA and propose this change.

[0]: https://www.ecfr.gov/current/title-49/subtitle-B/chapter-V/p...

dpifke··on FOKS: Federated Open Key Service
For all of GnuPG's faults, the usage you've described is exactly why I still use it. I have my master PGP key copied to several offline Yubikeys (one of which is stored offsite), and two day-to-day Yubikeys (one of which is always with me on my physical keychain) containing my current signing and encryption subkeys. The signing subkey is also used for SSH authentication. The second slot on the day-to-day Yubikeys is used for WebAuthn/Passkeys. The master key is brought out of storage only if I need to rotate or revoke a day-to-day subkey, or attest someone else's key for web-of-trust purposes.

I sign all of my Git commits, as well as Debian packages. I occasionally sign and encrypt email. My most important encryption use case is file backups, which are encrypted to my public key and copied offsite.

I'm excited about FOKS if it can serve as a modern alternative to the above, with fewer footguns that GnuPG.

dpifke··on Let Kids Be Loud
A few months back, my wife and I had our windows open and heard some neighbors' kids playing drums and guitar in their garage. They were TERRIBLE.

We're sad we haven't heard them again recently. I was hoping to follow along as they got better.

dpifke··on Is the doc bot docs, or not?
You elided the part where TFA claims you can't test "unconventional email formats" via test orders. The full quote is:

Shopify doesn’t pro­vide a way to test uncon­ven­tional email for­mats without actu­ally placing real orders, so I did my cus­tomary dance of order-refund, order-refund, order-refund. My credit card is going to get locked one of these days.

The person who wrote the above knows a lot about Shopify, so if you're going to contradict them, it'd be nice to point to some evidence as to why you think they're wrong.

dpifke··on Running a Certificate Transparency log
I pay roughly $800/mo each for two 10 Gbps transit connections (including cross-connect fees), plus $150/mo for another 10 Gbps peering connection to my local IX. 2-3 Gbps works out to less than $200/mo. (This is at a colo in Denver for my one-man LLC.)
dpifke··on The Evolution of Caching Libraries in Go
Otter can be used as the backing store with groupcache-go, which is a fork of the original groupcache: https://github.com/groupcache/groupcache-go#pluggable-intern...
dpifke··on Why Koreans ask what year you were born
I have a very common first name (Dave) and a very uncommon last name (Pifke, pronounced PIF-key). The majority of my close friends call me by my last name, since there are several other Daves and Davids in our friend group.

My brother's friends do likewise, since his first name is Mike and he runs with a bunch of other Mikes and Michaels.

There's a naming collision when my brother and I hang out together, but since we live in different states, the system usually works.

dpifke··on GPS Needs to Toughen Up, or Get Trampled Down
From https://news.ycombinator.com/newsguidelines.html:

Please don't complain about tangential annoyances—e.g. article or website formats, name collisions, or back-button breakage. They're too common to be interesting.

dpifke··on Curl: We still have not seen a valid security report done with AI help
Per WHOIS, it's assigned to Alibaba Cloud (could be a VM there):

  inetnum:        139.224.0.0 - 139.224.255.255
  netname:        ALISOFT
  descr:          Aliyun Computing Co., LTD
  descr:          5F, Builing D, the West Lake International Plaza of S&T
  descr:          No.391 Wen'er Road, Hangzhou, Zhejiang, China, 310099
  country:        CN
  admin-c:        ZM1015-AP
  tech-c:         ZM877-AP
  tech-c:         ZM876-AP
  tech-c:         ZM875-AP
  abuse-c:        AC1601-AP
  status:         ALLOCATED PORTABLE
  mnt-by:         MAINT-CNNIC-AP
  mnt-irt:        IRT-ALISOFT-CN
  last-modified:  2023-11-28T00:57:06Z
  source:         APNIC
dpifke··on My dream thermostat (2024)
I have two of these (for separate HVAC systems on top and bottom floors of my house) and can highly recommend

The killer feature of Home Assistant vs. my previous Nest setup came when I added door and window sensors, and programmed HA to pause heating/AC whenever doors or windows are open. I no longer turn into my father, who I remember shouting at us kids, "close the door, I'm not paying to air condition the outside!"

dpifke··on Sneakers (1992) – 4K makeover sourced from the original camera negative
"Setec Astronomy" is the SSID of my home wifi network.

The password is the missile launch code from War Games.

dpifke··on The curse of knowing how, or; fixing everything
There's a quote I learned when doing theatre, which I've seen attributed to either the stage magician Doug Henning or possibly Stanislavski, describing the process of art as taking something that's difficult and making it habit, then taking something that's habitual and making it easy, and then taking something that's easy and making it beautiful.

For example, as an actor, you learn your lines by rote (they become habit), then you gain an understanding of the character's motivations (remembering the lines becomes easy, because of course that's what your character would say), then you work to tune your performance so the audience shares in the emotion and unspoken meaning of the lines (that's beautiful/art).

As this relates to software, I think it goes something like: you learn the magic incantation to make the computer do what you want (solving a hard task becomes habit), then you learn why that incantation works (solving it becomes easy), then you figure out better ways to solve the problem, such that the original friction can be removed completely (you find a more beautiful way to solve it).

dpifke··on I wrote to the address in the GPLv2 license notice (2022)
From https://www.irs.gov/e-file-providers/free-file-fillable-form...:

Attaching statements — This program does not allow you to attach any documents to your return, except those available through the program. If you need to attach any such documents, you will have to print and mail in the return.

Especially with business returns, it's common to have to attach statements to certain forms, for example if you choose the de minimis election for equipment repairs that would otherwise have to be capitalized, or when the § 174 changes went into effect and everyone had to start amortizing software development expenses over multiple years. You can't do that on Free File Fillable Forms.

dpifke··on Ninth Circuit Takes a Wrecking Ball to Internet Personal Jurisdiction Law
(I deleted my original reply, which was maybe conflating several different arguments. I'll try to restate my point more succinctly. IANAL, so it's quite possible I'm misunderstanding the legal issues at play.)

The linked opinion's discussion of jurisdiction seems to be about whether the case can be heard in any court, not if there's an alternate venue that would be more proper. FWIW, the retailer's web site[0] does not seem to contain a terms of service or anything with a choice-of-law provision. If the argument is that no court has jurisdiction in which the plaintiff can seek redress, that seems equivalent to saying that the law doesn't apply to the defendants.

Shopify already exercises a huge amount of discretion as to which businesses it's willing to provide services for, and how much it charges them. It does not seem unreasonable to me that the company would either a) be willing to answer to California courts, or b) stop selling its services to California retailers.

[0]: https://www.iambecoming.com/pages/who-we-are

dpifke··on Ninth Circuit Takes a Wrecking Ball to Internet Personal Jurisdiction Law
Could a tort claim under California state law be heard in any other court (assuming no accompanying Federal claims)?
dpifke··on Ninth Circuit Takes a Wrecking Ball to Internet Personal Jurisdiction Law
The "online retailer" (IABMFG) in this case is based in California.

A company in California, selling to a customer in California, shouldn't be able to say "California law doesn't apply because my payment processor is Canadian." And if Shopify wants to take a cut of every sale from retailers based in California, they should be willing to comply with California law as well, at least insofar as it applies to the services provided via those California-based retailers' web sites.

(The actual opinion is linked at the bottom of the submission; I humbly suggest folks commenting here should read it first: https://cdn.ca9.uscourts.gov/datastore/opinions/2025/04/21/2...)

dpifke··on How to quickly charge your smartphone: fast charging technologies in detail
Adaptive Charging on Pixel devices gets most of the way there: it will learn how long it's typically on the charger each day, and automatically slow the rate of charge to match, so that it finishes approximately an hour before you usually unplug it.

There's a manual option to turn it off (charge at full rate this time only), but not to manually turn it on (such as giving it a target time to be fully charged). Older Pixels used what time the alarm was set as the target time to finish charging, which I preferred as someone who doesn't wake up at the same time every day; I'm not sure why they took that away.

dpifke··on Cheating the Reaper in Go
Related: discussion around adding "memory regions" to the standard library: https://go.dev/issue/70257

(Previous arena proposal: https://go.dev/issue/51317)

dpifke··on Leaked Meta data reveals campaign to remove pro-Palestine posts
It's unfortunate that turning off flags for a story empowers the people who want to use this site for ideological battle. "dang made an exception once for <my pet topic>, so the guidelines forever more don't apply to it!" There were several variants of this sentiment expressed on the tomhow welcome thread.
dpifke··on Are people bad at their jobs or are the jobs just bad?
UPS in my area (South Dakota) is terrible, way worse than FedEx or USPS. They're so bad that I will choose a different retailer if possible if the only shipping option is UPS.

UPS has repeatedly lost packages, delivered things in crushed or shredded boxes, held packages for more than a week due to "local weather" (there was no rain or snow), made it impossible to pick up packages that are being held, and damaged my trees by backing into them after delivering to a neighbor's house.

USPS is fine in the summer, but they won't come all the way up my road if there's any snow or ice on the ground, so I had to get a PO box for regular mail.

FedEx is fantastic, I have never had any problems with them.

(We don't have DHL here.)

Edit to add: my wife works for a small online retailer that ships perishable goods nationwide from a distribution center in Missouri, and they exclusively use FedEx now. They canceled their contract with UPS due the cost of lost or delayed shipments. She says their FedEx experience has been significantly better.

dpifke··on Tell HN: Announcing tomhow as a public moderator
Dan and Tom can speak to this, but by my reading of the guidelines, "criticism of the current administration" and "views on topics like gender" are both explicitly prohibited:

"Please don't use Hacker News for political or ideological battle. It tramples curiosity." (https://news.ycombinator.com/newsguidelines.html)

It has nothing to do with being on the side of "the opposition" or "the man," it's because those sorts of posts inevitably lead to the same, repetitive, off-topic debates and flame wars.

Flagging should be used as a cudgel against posts that break the rules. There are plenty of places on the internet to debate politics and gender; HN is not one of them.

← PreviousPage 2 of 18Next →