Hacker News Reader

dwightgunningon Norway became a global salmon behemoth. Now it's facing the consequences

Perhaps a happy accident.

dwightgunningon Netherlands – Capital Growth Tax and Capital Gains Tax for Box 3

That's not a tax, that's the expense ratio, which is basically describing fees captured by the fund manager. Funds accessible to Dutch investors involve similar ERs. It's not an alternative.

dwightgunningon Show HN: Every problem and solution in Beyond Cracking the Coding Interview

Proud to have helped work on this. Happy to field any questions.

dwightgunningon Bitwarden SDK relicensed from proprietary to GPLv3

Is there a robust Syncthing app for iOS? Last time I checked there was only an affiliate project and their story wasn't convincing.

dwightgunningon Baltimore's Key Bridge struck by cargo ship, collapses

I had a hunch this was the bridge featured in The Wire s2e1, "Ebb Tide". Classic McNulty; a great season opener.

https://en.wikipedia.org/wiki/Ebb_Tide_(The_Wire)

dwightgunningon Baltimore's Key Bridge struck by cargo ship, collapses

DALI (IMO: 9697428) is a Container Ship and is sailing under the flag of Singapore. Her length overall (LOA) is 299.92 meters and her width is 48.2 meters [1].

Based on the track, it appears the ship changed course slightly and slowed as it approached the bridge [2].

[1] https://www.marinetraffic.com/en/ais/details/ships/shipid:28...

[2] https://www.marinetraffic.com/en/ais/home/shipid:2810451/zoo...

dwightgunningon Sound Map of Amsterdam

The Sound Map of Amsterdam shows the (calculated) noise load for the most important traffic sources in the city.

dwightgunningon Amsterdam to use “noise cameras” against too loud cars

Gemeente Amsterdam publish a handy noise map (along with some other great public data). Check it out: https://maps.amsterdam.nl/geluid/

dwightgunningon (In)Security of the “Pass” password manager

They don’t have access to the ssh private key. They have access to the encrypted password file (and presumably not the password used to encrypt it).

The attack works when the user doesn’t realize they’re sending their SHH private key through the password form of malicious-site.com.

Something like accidentally putting your Google password into the Dropbox login form. Dropbox have now seen your Google password.

dwightgunningon The MTA’s armored money train that ran from 1951 to 2006 in NYC

Seems logical to move smaller sums more frequently.

dwightgunningon Ken Block Killed in Snowmobiling Accident in Utah

So many ads I can’t even get to the obituary.

dwightgunningon Ask HN: How do you manage your passwords in 2023?

For a long while I've trusted and used various KeePass ports/forks on my phone and laptops and stored the password file in cloud storage.

With the recent LastPass exposure, the supply-chain attack on PyTorch, needing to be vigilent and avoid granting apps access to my cloud drive, I've actually just been reviewing my setup and workflow.

Here's what I'm planning to change...

Phone: Switching from MiniKeePass to KeePassium. I've found it's not too difficult to build KeePassium from source and install without needing an Apple Developer subscription. This means I can properly audit the code and control/verify all updates.

Laptops: Start building KeePassXC from source. In the short term, I'll be more diligent in obtaining updated versions from trusted sources and using PGP to verify the package.

File sync: Start storing the password file on a self-hosted file server. Having recently setup Tailscale on all my devices, it's now convenient to manage Samba and remove cloud storage from the system. In case the SMB share is inaccessible, I'll fallback to the backups kept by KeePassium and use cron+rsync to maintain an secondary copy on my laptop.

Backups: I'm planning to periodically backup to a hardware keypad encrypted USB drive. In comparison to a regular USB / external drive, the hardware encryption makes it harder for somebody to quickly make a copy of the password file and take it away to be brute-forced.

Would welcome any pointers on things I may not be considering or suggestions for improvement!

dwightgunningon Compromised PyTorch-nightly dependency chain between December 25th – December 30

As explained in another thread, nothing went wrong with the tooling and namespacing. The PyTorch devs misused a feature intended for a different use-case.

I took a look and the vulnerability that was exploited is warned about and described in the documentation.

> Warning > Using this option to search for packages which are not in the main repository (such as private packages) is unsafe, per a security vulnerability called dependency confusion: an attacker can claim the package on the public repository in a way that will ensure it gets chosen over the private package.

https://pip.pypa.io/en/stable/cli/pip_install/#examples

dwightgunningon Distributor cancelled an order and we need to move 30k bags of coffee [updated]

> This coffee is still good. It was roasted in June and July 2022 with a one year best buy date.

Still good but hardly fresh for a specialty.

Anyway. There’s a 6x number in here that somebody (or somebodies) completely missed…

Seems like what they thought was a fair-to-good deal was actually a such a terrible deal that, given their incorrect definition of a unit, the numbers in their model lined up.

That might be something the consultant could have spotted, since they’d seen the numbers around previous deals. I’m not sure it’s their duty/obligation to.

dwightgunningon Act: Run your GitHub Actions locally

That’s a great example and suggestion. Thank you!

dwightgunningon Act: Run your GitHub Actions locally

Can you elaborate with some examples of workflows that it is incapable of?

So far I’ve not found any limitations or issues using Ubuntu runners on my OSX dev machine. A couple examples from my workflows: - building docker images - provisioning VMs with the Digital Ocean cli / http api - hardening VMs with ansible - creating/managing k3s clusters with k3sup - deploying apps with helm

I like your suggested approach of using tmate to access the worker mid-way through a run. This should make it faster to develop/debug the steps that make up the workflow. Though this doesn’t address the cycle time of push-to-GitHub/queue-workflow/watch-for-result.

I’m actually going to try combining the two techniques - use tmate to develop inside a local act runner.

dwightgunningon Demystifying financial leverage

+1. So glad I found this group.

But it’s just a data point… gotta do your research.

dwightgunningon Django: Reformatted code with Black

This is right. Black emerging from beta was discussed on the Django mailing list in the last week or so, and triggered the work.

dwightgunningon Ask HN: Firefox connection problems after enabling DoH?

I’d only installed it ~24hrs ago onto a new MBP. So my fix was `brew uninstall` and then reinstall. That worked.

dwightgunningon Dutch cities want to ban property investors in all neighborhoods

This is still in place for PPOR. Does not apply for investment properties AFAIK.

dwightgunningon Japan developing wooden satellites to cut down on space junk

Even if it were feasible... it seems like it would just defer the problem to a later time or place the burden on other intergalactic citizens.

dwightgunningon Photocatalyst splits water into H and O2 at quantum efficiency near 100%

Thanks both for taking the time to acknowledge and explain the subtlety. Helps somebody like me who’s casually following along to better understand both scenarios.

dwightgunningon Zoom announces a $599 touchscreen device for remote workers

> While $599 may seem like a steep price to pay for a Zoom-calling device when you can already Zoom from a phone or computer, the idea seems to be that it’s an easy way for newly remote employees to jump right into Zoom without having to deal with installing the software or setting up any complex equipment.

Hang on a minute... their partner manufactured hardware product is easier to setup than their own software?

How hard is it to install on the major OSes?

Seems like a strange angle.

dwightgunningon Twitter, Reddit support challenge of visa applicant social media requirement

I submitted a DS-160 application for a B1/B2 this past Friday and which asks for all social media handles in use over the past 5 years. The implication is that this a request for accounts you've used, not those that are still "active".

dwightgunningon Show HN: A basketball hoop to maximize shots that go in [video]

Thanks for a great anecdote. While I feel I'm pretty good at recognising that "done is better than perfect", I'm not as good at realising when "near enough is good enough". For some reason approximations usually don't sit well with me... something I can work on for sure.

dwightgunningon NPM Is Joining GitHub

My first reaction was ... “so Microsoft”. I’m with you on the positive path Microsoft have been on with OSS but also recall the not-so-recent history. It’ll be interesting to see how this plays out.

dwightgunningon Ever-growing cars: why they keep on getting wider

Mini owner here, often think about this too. There’s an MGB that gets around my area which has been converted to electric.

It’ll be interesting to see if converting classics will become more common. Here’s hoping.

dwightgunningon For Children With Peanut Allergies, F.D.A. Experts Recommend a New Treatment

I once shook hands with a new acquaintance who, unbeknownst to me, had just been snacking on a few peanuts at a bar: https://photos.app.goo.gl/7tvD65JmV45M4Mpw5

dwightgunningon Ask HN: Freelancer? Seeking Freelancer? (July 2019)

SEEKING WORK --- Software developer and technical leader with an entrepreneurial spirit. I love building effective teams, solving technical challenges, and shipping great products. --- Technologies: HTML, CSS, JavaScript (Angular|React), Python (Django|Django Rest Framework), APIs and integrations, Postgres, AWS (EC2|S3|Lambda|RDS|CloudFront|R53)

Github: https://github.com/dwightgunning

Résumé/CV: https://www.dwightgunning.com/static/downloads/Dwight_Gunnin....

Email: dwight@dwightgunning.com

Location: Amsterdam, The Netherlands (permanent residency; Australian citizen)

Remote: Yes

Willing to relocate: Yes (US, Australia)

dwightgunningon Ask HN: Who wants to be hired? (July 2019)

Software developer and technical leader with an entrepreneurial spirit. I love building effective teams, solving technical challenges, and shipping great products. ---

Location: Amsterdam, The Netherlands (permanent residency; Australian citizen)

Remote: Yes

Willing to relocate: Yes (US, Australia)

Résumé/CV: https://www.dwightgunning.com/static/downloads/Dwight_Gunnin....

Email: dwight@dwightgunning.com