HNHacker News
TopNewBestAskShowJobs

dsp1234

3,944 karma · joined September 11, 2014

submissionscomments
dsp1234··on macOS High Sierra: Anyone can login as “root” with empty password
The poster practiced Full Disclosure, which is also a valid disclosure policy.

Since we're just making up statements, I guarantee that Apple would never voluntarily disclose this issue if it was reported privately. So Full Disclosure is the only way to put Apple's feet to the fire, as it's the only way in which this issue would have had any visibility whatsoever.

https://en.wikipedia.org/wiki/Full_disclosure_(computer_secu...

dsp1234··on macOS High Sierra: Anyone can login as “root” with empty password
think of the impact to shared iMacs on university campuses.

I'm sure Apple will in the future.

dsp1234··on macOS High Sierra: Anyone can login as “root” with empty password
Number of mentions of "Linux" outside of your thread comment chain: 0
dsp1234··on Parents now spend twice as much time with their children as 50 years ago
I'll just go let my best friend know that the several CPS inspections she had to endure last year when she left her kids at the park unattended were not real.

Anyone can call CPS for just about anything, and having someone pick through your home and point out every little flaw, with the threat of taking your kids away is a real issue. Please don't downplay it, and don't downplay how shitty people can be to each other.

dsp1234··on Radio Attack Lets Hackers Steal Cars with Just $20 Worth of Gear
Radio waves move at the speed of light.

Light can move about 300 meters in one millionth of a second. It's easy enough to find a store where the parking lot is well within that distance from the middle of the store.

So whatever system that goes into place would need to possibly have accuracy down to the 1us level or smaller.

dsp1234··on Facebook deploys AI for early signs of suicide
Apple is not a covered entity under HIPAA[0], and thus has no liability for the data it collects.

"If an entity does not meet the definition of a covered entity or business associate, it does not have to comply with the HIPAA Rules."

[0] - https://www.hhs.gov/hipaa/for-professionals/covered-entities...

dsp1234··on Telerik gets Fiddler unlisted from Chocolatey
makes it legally OK for Chocolatey to package it than I think most people here are acknowledging.

Chocolately never distributed Fiddler packages. This is just a basic misunderstanding of how Chocolately works.

dsp1234··on Telerik gets Fiddler unlisted from Chocolatey
Ok, what do you feel about older Broadcom drivers for Linux?

Those drivers are not open source, and did not allow for distribution. So Linux distributions included scripts to download from the public sources (provided by Broadcom), and run the install. The only software "distributed" by the OS provider, was a simple download script (probably less than a couple dozen lines).

If you are Ok with that, then note that that is what Chocolately does. I linked to the actual source code of the Chocolately package in another comment if you want to see what it does.

dsp1234··on Telerik gets Fiddler unlisted from Chocolatey
Postman doesn't quite fill the niche, because it can't see all http/https traffic (ex: from other non-browser applications). Also, postman can't see anything that happens to the request after it's submitted (ex: by an anti-virus network filter).

Which is not to say that Postman is not good at what it does do.

dsp1234··on Telerik gets Fiddler unlisted from Chocolatey
What is your take on me posting the following on my blog:

"wget https://www.telerik.com/docs/default-source/fiddler/fiddlers... && fiddlersetup.exe"

redistribute their packages

Chocolately wasn't redistributing the Fiddler packages[0].

[0] - https://github.com/chocolatey/chocolatey-coreteampackages/bl...

dsp1234··on Telerik gets Fiddler unlisted from Chocolatey
I was definitely commenting the issue (and likely Telerik's) definition of "not public".

The two stated reasons (again, likely just citing Telerik's request), are "they own the ip" and "it's not public" are just bogus. Linking to a publicly accessible resource doesn't have anything to do with IP (using someone's trademark to accurately describe the thing or direct people to it is not a crime, at least in the US), and "it's not public" is just false, as shown.

All in all, seems like a cave on Chocolatey's part. Particularly since they have a whole section of their FAQ dedicated to vendor distribution rights[0], which goes through pains to show that most of the time, there is no distribution at all (since it's just automation scripts).

This is about as silly as Telerik saying that I can't write:

"curl https://www.telerik.com/docs/default-source/fiddler/fiddlers...

[0] - https://chocolatey.org/docs/package-triage-process#are-you-a...

dsp1234··on Telerik gets Fiddler unlisted from Chocolatey
do not have a public download url

The URL in question[0] provides a 200 response and an executable without requiring authorization/authentication. That's a particularly weird definition of "not public"

[0] - https://github.com/chocolatey/chocolatey-coreteampackages/co...

https://www.telerik.com/docs/default-source/fiddler/fiddlers...

dsp1234··on Telerik gets Fiddler unlisted from Chocolatey
Does wireshark allow for editing http requests and resending them?
dsp1234··on American Equity
You are just beating on the fact that I based the comparison on the total rather than the mean GDP available to an individual.

I addressed the comment you made, not the comment you didn't make.

dsp1234··on American Equity
Caveats: GDP is no way to calculate wealth, and comparing the total GDP to any one person's wealth is pretty useless.

Let's say the total GDP over the last 40 years was 300 trillion dollars. Also, let's say Bill Gates's wealth is 100 billion dollars (for ease of calculation).

100B / 300T = 0.003 = .3% of 40 years of GDP

Let's say that the average population of the US during that 40 year period was 170M[0].

170M * 40 years = 6.8B person-years of work (PYoW).

Bill gates contributed 40 PYoW to the GDP, which is 0.000000059% of the GDP.

However, he captured .3% of the GDP as current wealth (not including wealth spent during that 40 years)

That means his wealth capture is 5 million times the "average".

That 'tiny sliver' is anything but.

[0] - https://fred.stlouisfed.org/series/LFWA64TTUSM647S

dsp1234··on Driving for Uber and Lyft
All consumer rental car contracts in the US include a provision that disallows the usage of the vehicle for commercial purposes. Additionally, most personal vehicle insurance prohibits the use of the insurance for commercial ride sharing activities without a special waiver.

So as soon as that first fare is picked up (if not sooner), then the renter is in breach of contract. Any insurance from the rental agency is now void, and without special personal insurance waivers, the driver is now driving uninsured.

That is both illegal, and all liability will now be 100% on the driver.

So if someone is going to do that, then they need to calculate in the risk of an accident/arrest and all of the full liability that goes with that.

dsp1234··on Can the new Firefox Quantum regain its web browser market share?
This morning I came into work to a sluggish FF browser. One of the FF processes was using 1.6GB of memory, and one entire core of CPU. I had 1 pinned and 5 normal tabs open. I'm not particularly impressed with the reality of the new FF.
dsp1234··on Homes should not be abandoned after a big nuclear accident
Is there any evidence of reduced "life expectancy of future generations" for radiation exposure at the levels discussed? If not, then that may be why it was not addressed.

While I don't know if there is or not, these studies of the results of the Hiroshima/Nagasaki bombs[0] shows that the effects were limited to those currently pregnant, and without 1200 meters of ground zero of the blast. With no effect on the future children born to parents exposed to ionizing radiation of those levels.

[0] - http://large.stanford.edu/courses/2013/ph241/yapa2/

"The many studies that were conducted after the nuclear bombings of Hiroshima and Nagasaki determined that some of the risks that the public perceives to be associated with radiation exposure are non-existent, while others are in fact matters of concern. The cancer risk for children who were in-utero when their mothers were exposed is higher than it would be for others without this exposure, but children who were conceived after their parents were exposed to radiation had no increased cancer risk. Similarly for both birth defects and mental retardation, it was found that in-utero exposure possibly increased the rate of incidence of these conditions, but results from all studies are inconclusive, except for the case of pregnant mothers within 1200m of the hypocenter. All of the in-utero children born to these mothers experienced mental retardation. All three of these cases found that there is no increased risk of these conditions if the parents of the child were exposed to the ionizing radiation of the atomic bomb (child was not conceived at the time of the exposure)."

dsp1234··on Simple blood tests may soon be able to deliver news about your cognitive health
Alzheimers would result in a shrug, just like how you would shrug if someone told you you're gonna die one day.

Alzheimer's isn't like being dead though. It's an incredibly painful reminder to everyone you've every loved that you are no longer "you", but they have to take care of you every day anyways. Painfully re-opening wounds every time you don't remember who they are, or hurt yourself from confusion. It's a continuous living purgatory for your loved ones, with you gone but not gone.

I'd rather live the best, unhealthiest life, and hope I'm dead dead from other causes before I can cause so much pain to the ones I love.

dsp1234··on Magic: The Gathering Is Turing Complete (2012)
This is just a miscommunication of what "better" means in this context.

No one disputes that a modern computer implementing a Turing machine is going to calculate faster than manually manipulating MTG cards.

However, better here means 'more expressive'. Turing completeness is concerned with whether or not a computational system is 'universal' or not. In other words, whether that computational system can compute everything that another computational system could. If two systems can both be shown to simulate a Turing machine, then that means that those systems could compute the same exact set of things (given enough time).

So with regards to expressiveness (or the things a system could theoretically compute), since a modern computer can implement a Turing machine and a MTG game can implement a Turing machine, they are both the same, and thus neither is 'better'. In other words, the addition of electricity doesn't effect what a system could theoretically compute.

dsp1234··on Magic: The Gathering Is Turing Complete (2012)
oh boy. Wait until you hear about damage not using the stack...
dsp1234··on Magic: The Gathering Is Turing Complete (2012)
This is like saying, "Draw go" isn't talking about MTG. It's shorthand for all of the steps that you'd need to complete. Just like someone playing an Eggs deck is going to say "Casting KCI + IW, draw 2, float 2" or "Here is the main loop. I'm going to do that until I hit banefire, then hit you for infinite damage."

What's interesting is actual MTG gameplay uses a HUGE amount of shortcuts on every play, because saying every single thing you and the opponent have to do during each step and phase would be incredibly time consuming.

dsp1234··on The Fight to Mine Your Data and Sell It to Your Boss
If your employer knows you are looking for other opportunities, they could stop giving you projects and start transitioning you before you are ready, or just fire you.

That's a benefit to the employer, that probably is not a benefit to you, since you would likely want to quit on your own terms.

Another quick example is knowing that your employees are researching how to unionize, and thus knowing to bring in anti-union resources.

I'm sure there are more.

dsp1234··on Update on Stock Options/RSUs Vesting Issue
You seemed to have missed the part that said "the ACA's individual mandate, which is the foundation on which guaranteed-issue health insurance works.".

Without the individual mandate, insurance companies have three options for pre-existing conditions. First, they can not insure them (which would be illegal). Second, they can raise rates for everyone who does have insurance. Third, lobby to have the pre-existing conditions section of the ACA repealed (which will now be much more palatable politically because in the mean time everyone rates will have sky-rocketed in the mean time).

Since #2 is the likely outcome in the short term if this bill passes. Startup employees who have health insurance may see a windfall in the future with the options change, but they'll lose out month after month with increased insurance costs.

But #3 would be up next, and the insurance companies will lobby hard, noting that they have been clear since day 1 that covering pre-existing conditions is only possible with an individual mandate. So long term, repealing the individual mandate and not covering pre-existing conditions look pretty much the same.

dsp1234··on UK parliament to get binding vote on final Brexit deal
Except that the author didn't actually write that it's reversible in any way. That may have been the intent, but that's not what the actual text says, and that's not what all of the Treaty of Lisbon's signers agreed to.

Indeed, the text is so clear, it's hard to argue that there is any actual room for disagreement:

3. The Treaties shall cease to apply to the State in question from the date of entry into force of the withdrawal agreement or, failing that, two years after the notification referred to in paragraph 2, unless the European Council, in agreement with the Member State concerned, unanimously decides to extend this period.

The treaty will cease to apply upon a withdrawal agreement, or after 2 years, or after unanimous agreement to extend the period.

The only action that ends up with anything reasonably resembling a "reversible" Article 50 is for the UK to somehow convince all of the EU member states to unanimously agree to an unending extension. Meaning that the UK would be in a permanent state of leaving the EU.

dsp1234··on Apple Will No Longer Be Developing CUPS Under the GPL
Apple owns the copyright for CUPS.

Apple employs the original developer of CUPS, which is Michael Sweet.

Apple employees (Michael Sweet) made 150 commits in the last year and a half. The next contributor has 7. He has 50k+ additions/deletions. The next contributor has 8k.

It's safe to say that Apple develops CUPS.

edit:

Michael Sweet himself in this announcement also uses the terms "Apple is excited to announce" and "we"[0]

[0] - https://lists.cups.org/pipermail/cups-devel/2017-November/01...

dsp1234··on Explore Wealth and Income Inequality in the World Wealth and Income Database
You can't transfer a wealthy persons ability to generate wealth to another person or country.

Isn't that exactly the VC model?

dsp1234··on Waymo now testing its self-driving cars on public roads with no one at the wheel
No fitbit required. The interiors will have multiple video cameras of the interior. An automated system that flags unusual behavior, then alerts a human would be fine.

For emergencies where the passenger is more responsive, an "onstar"-like emergency button that calls emergency support staff would probably suffice.

dsp1234··on Parity Wallet security alert
Which is what the title, and the actual article say.
dsp1234··on ZFSin: A Windows kernel-mode ZFS driver
You joke but ReFS has been out since Windows 2012. Combined with Storage Spaces, there is a lot of overlap with zfs.
← PreviousPage 3 of 31Next →