HNHacker News
TopNewBestAskShowJobs

eks391

342 karma · joined April 6, 2022

submissionscomments
eks391··on Google to pay $93M in settlement over deceptive location tracking
I deleted my history several times back when I used a google account. It can be done in two places, but the easier is, starting from any google application, click ProfileImage > Manage your Google Account > Data and Privacy. On that page is Location History, in the Things you've done and places you've been category. In there your options are Delete all, or Delete activity older than <range>. And it can be recurring deletion as well.

In the same Privacy page, you can easily delete or download anything you want.

eks391··on It’s infuriatingly hard to understand how closed models train on their input
> I'm going to get the Qwitzatteracht discussion going on the three internet forums.

I used to play Qwitzatteracht with my friends as a schoolboy and love following the stats of players as an adult. With it being dropped from Sky news, I've been looking for other outlets on the sport... Where are you going to talk about this golfing varient? I would love to be more connected in the Qwitzatteracht world.

eks391··on Mastodon provides the highest (over 12%) engagement under posts
> And then I use libredirect (https://libredirect.github.io/) to avoid hitting the actual Twitter website so I don't have to log in (don't have an account anyway) and don't see nonsense recommended posts.

Thank you for this! I know of and use some of these already, just from luck of discovery, and having a compilation of several more is so freeing!

eks391··on California spent $17B on homelessness – it’s not working
Obviously there's going to be some abuse of this system (by the homeless), but overall I think this is really cool, and I fail to see how this makes bank for any of the orchestraters involved.

Cities that deal with high levels of homelessness are usually places that are deemed unaffordable anyways by the common American. Also if the place is warm, has easy access to drugs, and generous help with minimal requirements of the beneficiary to receive that aid. I awknowledge there will always be individuals who would rather have awful living standards than assume any responsibilities, but for those people who actually want to forge a better life for themselves, who fell through the cracks and are homeless perhaps to poor decisions but otherwise want to stand back up, this is awesome.

The article you labelled "SF -> ??" Specifically said it was tranporting them to family or friends who know that person, ie. someone who would have individual concern for them to get them back on their feet.

> “We consider a person being removed from the street and reunited with a stable, loving family as the best possible outcome,” Hussey said. “This is not shifting the homeless problem to other cities. This is a person being removed from the street and being helped by the people who love them the most — their families.”

"NV -> CA" ironically goes against your statement, because the article is saying that Nevada stopped sending people to SF. Also they were trying to replicate what SF was doing, sending them to families, but in the worst possible way that was guaranteed to fail, because they sent them to a location without contacting any family or even seeing if any lived where they were putting them.

> Homeless patients are no longer bused to other areas and state officials want to move forward

"NY -> Hawaii" is similar to the "SF -> ??" one because despite the title, they were sending them nationwide, not just Hawaii. Their approach was the most easily abused, because they paid for a year's worth of livelihood. However, for people who have real intentions to improve their lives, this provides great hope in that dream because they get a fresh start, and in a place that is not impossibly expensive to live in and guaranteeing future impoverishment.

Regarding "WY -> UT", SLC, where they are being taken to in UT, is one of the few places where they focus on rehab rather than perpetual homelessness, and basically all homelessness programs are focused on addiction recovery, and acquisition of a job. It is illegal to beg there, or to give money to homeless, because the only possible way to be homeless there is by refusing rehabilitation. I have no proof of these comments of SLC, as this perspective is based on what I've heard from others, so it could be wrong, but I've heard nothing to the contrary. So I am again optimistic for this approach from Wyoming, although I think it'd be better if they just adopted the same system instead of overloading another states rehabs.

The last article you posted has no relevancy to the topic, as it discusses migrants and the border issue, not homelessness, so I will skip it.

eks391··on Potentially millions of Android TVs and phones come with malware preinstalled
I considered buying a xiaomi 5 years ago and this makes me glad I didn't
eks391··on The day you became a better writer (2007)
> I get the order of the words mixed up to the other language.

I'm trying to piece whether this would be anicdotal evidence for or against the previous statement of

> All brains work that way.

Since there are many ways this could be occuring, would you say that you are ... • putting the 2nd language in the order of your native language (or opposite) • putting word order in active voice (or passive) regardless of which language you are speaking • or putting the words in the order of whichever language has been dominate at the time. Like if you are somewhere where you mostly have been speaking Language A, and suddenly switch to Language B, you accidentally use Language A grammar

eks391··on Launch HN: Clearspace (YC W23) – Cut back on screen time
I have dreamed of ditching the phone but haven't because so many sites that require a phone number to make an account, and some that use that number to validate your identity. How do you get around this?
eks391··on Launch HN: Clearspace (YC W23) – Cut back on screen time
15 seconds isn't very long. By making those seconds not boring (engaging the user), I feel that would cause the opposite effect of the intended self-reflection and friction the 15 seconds are supposed to create
eks391··on Every web search result in Brave Search is now served by our own index
I have two email relays from DDG and have never installed their extension nor even knew they had an extension when I got their relays. (I know now but at the time I didn't) If you download the app on your phone, you can get a relay and then immidiately uninstall the app.
eks391··on Digital clutter: Learning to let go and stop hoarding terabytes
I've had the same folder system for nearly a decade, which is a while for me, as I am young. Four main folders which are: -Activity: social planning, ideas, games, holiday stuff, etc. in respective subfolders. -Education: gradeschool, higher education, certificates, trainings, religious notes, etc. also organized by topic/semester as applicable. -Management: responsibilities, work, taxes, health, family, housing, and all other boring but needful things. -Media: mostly pictures and videos, organized by year. Some other stuff like journal entries. I use the same system in my email and really any program that allows compartmentalization. I also keep other folders empty, like downloads, so I never have to guess where a file could be.
eks391··on U.S. and China wage war beneath the waves over internet cables
Most war operations are nonviolent - what you are thinking of is called kinetic warfare. What determins if it is a war or not varies by country policy but can usually be boiled down to whether there are militant operations involved or if a leader has publicly or nonpublicly declared it.
eks391··on Things I learned after getting users
Although difficult and not well known about, fingerprinting can be randomized[1]. I have been successful creating a random fingerprint on only Brave so far, but I did need to tweak some browser settings.

1 check your fingerprint details here: https://coveryourtracks.eff.org/

eks391··on Why Not Mars
Love your perspective. It reminds me of the technological advances from the space race to the moon as well. We aren't taking casual trips up there ever, but the tech that came from it was revolutionary
eks391··on Google to pay Indiana $20M to resolve privacy suit
As a user of GrapheneOS, I strongly recommend. I did a few tests to check that it is doing what it claims, and as far as I can tell it is, and better than I expected. I will be staying with GrapheneOS for the foreseeable future.
eks391··on Tell HN: Google Cloud lets anyone add you to a project without your permission
For personal stuff, it is daunting but degoogling is definitely sustainable. I have been unsuccessful getting every person to contact me on my new email no matter how many times I remind them though. There are great ecosystems out there for contacts, maps, storage, whatever, that don't rely on google, and if the spam bothers you, I recommend giving it a go for awhile to see. Change the email last though in case you decide not to make the change so you don't have to tell people twice to change their contact for you. For the people who don't change their contact for you, you can make a quick filter in gmail to forward mail from them to your new email, respond from that, and maybe they'll change your contact someday.

Also if you don't want to completely degoogle but just want to rid yourself of some of the spam, you can use services from other ecosystems, as part of a suite, and connect the email from that suite to a google account, so you can still use googles' services and the other suites' services. Then when randos add you to things like spam in your calendar, you won't actually see it because you are using a calendar from a different suite.

eks391··on Not Getting Hacked
Just generic spoofing. Like you pointed out watching for google.com.evil instead of google.com, and theres also email phishing where they try to replicate a companies email and get you to click links, etc. Theres so many ways to spoof things, and I can't imagine it being impossible to spoof oAuth. It wouldn't affect people with 2FA enabled, but for the majority of users with poor security practices or are not tech-savy it would do harm.

Just off the top of my head I can think of one possible way: Send an email pretending to be a popular company, with some excuse to need an oAuth (like "Your oAuth for ImportantApp is expiring, please renew access. Act fast so you don't lose access to ImportantFeature!" Or "Our policies are changing. Please confirm oAuth to authenticate your acceptance to continue using ImportantApp") It doesnt need to be fancy, just enough to fool people who don't know that oAuth is not relevant to the email. Then they click a link in the spoofed email to the host server, with a spoofed copy of the target website. oAuth isnt going to suggest the credentials because the url is wrong, so don't ask for the credentials to the target website. Instead ask them to verify access of the website on your fake oAuth, then to confirm your decision with their gmail password. Then say it worked and redirect them to the real site. You already have their email, but now their email password as well. Automate this with bots, and then you have tons of peoples 2FA, since most peoples 2FA for website log ins is their email. Next you just do the "I forgot my username" which always asks for an associated email. Then "I forgot my password" which, on unsecure sites, also uses the email. Boom. Free accounts.

Obviously there are ways to secure yourself from any basic attack like the one I just described, but for the general public that trusts tech to be flawless without their concerted effort, traps are just a matter of someone with time and motivation to make them. No trap is flawless, but there are enough people for that to not matter.

eks391··on Not Getting Hacked
I just realized you are the author! That explains your curiousity, and I'll get into the nitty gritty details.

A part of my previous comment isn't clear: when I say I didnt have 2FA, I meant I didnt have it enabled at all, not that I had it enabled and lost access to it.

Also I was thinking about it more, why google was always suspicious of my log ins, even before I was locked out. I remembered that my settings back then deleted cookies upon browser close, blocked 3rd party cookies and pixel trackers, but because my fingerprint matched, it appeared to google that I was on a different but similar device at every log in.

When you know you password, pass the captcha, but google still doesn't trust you and you don't have 2FA, google pings every device you have that is signed into it that is on, asking you to verify that you are trying to log in on a different device. I know this well because I had to click "Yes, it's me" on my phone every time I logged into any google service on my old laptop. So that's what I meant when I didn't have my devices to confirm me. It's googles 2FA for people who don't enable it. When I degoogled, I stayed that way even till I had replaced my phone (same cell #, new device, not signed into any google service) and so google didn't recognize anything, couldn't ping me, and so it decided to just not let me in.

To your question about getting back on, yes. It was awhile ago so idr what I did, but if I had to guess, I used a family members laptop that I used at some point so it had the fingerprint and cookies, and I had my password am the ability to pass captcha. Then I could verify my new laptop from there. Google still has trust issues with my laptop now that I'm even more locked down on website/browser permissions, so I have another browser with custom settings that I use so google doesn't get upset and lets me use their services when I occassionally need them. They still don't have my number and never signed into from my phone.

Btw I like your article. I think you provided good tips for the causal internet user. I am curious when the day will come when phishers spoof the oAuth though. Personally I believe in security through obscurity, but to be obscure also means there can't be a streamline solution. So whatever fits each persons needs I guess.

eks391··on Not Getting Hacked
I mean the devices themselves.

When you visit a site, details about your device are sent to the webserver, such as screen dimentions and resolution, processors, gyroscope information (orientation of screen), location, default language, and more, so the website can cater to you - rendering it to a good fit for your screen, using a protocol that works with your GPU, with relevant ads, etc. This data is called your digital fingerprint.

Companies that deal with high security data (banks), advertising profiles (google), or bot abuse (everyone), will store the fingerprints to every device used by you on their webservers, so they know if it is a new device and to throw a captcha, 2FA, etc. I refuse to give out my number to most sites, which is sometimes the only 2FA option, so for most of my stuff, I just don't use 2FA.

Despite knowing my password and passing 5+ captchas, having a different fingerprint and not having 2FA was too much for gmail and it decided I was still not verifiable. Idk if they decided I was a user in constant attack or something, but even when I had the old laptop they were always slow to accept that I must be me, making me fill capchas everytime and reinput my password.

eks391··on FEA Solver that doesn't need defeaturing
I don't work at this company, but know some of the people involved and I think it is really cool. For those not in the know, most FEA programs require the model to be simplified and a custom meshing put on it. They also have difficulty solving traction between two objects. Coreform's IGA can create a mesh on any shaped volume and solve traction between two surfaces easily.
eks391··on Study finds AI assistants help developers produce code likely to be buggy
Lol sure. I've never worked in design so I really am not the best source of insight but I will give the best advice I can as a casual internet user.

Feel free to email me at eks391@opayq.com

eks391··on Study finds AI assistants help developers produce code likely to be buggy
> I asked a good friend who started learning to code a few months ago to try it, and she was way less successful with it versus reading documentation.

This was my experience. As a learning programmer, I determined it is easier to read the documentation than learn from chatGPTs code snippits

eks391··on Study finds AI assistants help developers produce code likely to be buggy
Btw I dont want to dis on the functionality of the website itself. You have a cool little tool there, and the site is fully functional for friends and family you share it with who know you and what you are working on. The problem and suggestions I am providing are needed if you want to open the horizon to people who arent your friends and family or know what you are working on. All these principles I suggested are basics in the local advertising for yourself. They also aren't going to appeal to everyone because I'm not a professional persuader or contect creator or anything, but my hope is it'll at least transform your website from unapproachable by strangers to approachable by the curious. I cant give real advice for promoting among a target audience
eks391··on Study finds AI assistants help developers produce code likely to be buggy
Hi ilaksh, I was able to view your video on an android device. That said, I did have to watch it several times before I understand what was going on because a lot is happening everywhere in the screen. With the video and the minimalist intro on the site, I was still left guessing what was being offered and how it works.

Usually before signing up for any website, I want to check out all of the information I can find on it on the website, perhaps online forums if the site isnt clear, and competitors so make sure what I'm signing up for is something I actually want. I also read any terms and conditions and the privacy policy if they ask for anything from me, such as an email address. Pretty much none of this was available.

The first thing I noticed/recommend is changing the lack of tabs. It reminded me of scam sites that barely have enough to make a site appear legit so they can get at least someone to sign up for something. Also just for the persuation aspect of the site, there should be helpful tabs, like one with an example of a person using it (I know thats what the video is, but it's not intuitive for a non-user, which I'll get to in a second). One of the other guys gave the idea of having images with commentary of whats going on between each pic, which I think is a great idea if implimented properly. Maybe that page could have a longer video under the photo tutorial with audio of someone explaining a basic how to, in the form of them showing what they want to do and how they did it. Then building a simple button with a counter would be enough. Maybe a tab could be a contact page with the T&C, PP, would be nice. And another explaining how it works - like your little comment mentioning the APIs is more information than what is on the website and makes me more willing to try it out than your site did.

So onto the site itself, after log in. Because of the previous bullets, I would not have been willing to sign up, but to give hopefully a helpful response to you, and knowing I'd need to see more of the site, was the only reason I made an account. Btw the UI of your little program is very nice. It's stylish, mostly quick to grapple, and simplistic.

Anyway when I first saw it, again due to the front page lacking any info, I was surprised that it was exactly the video. The video wasn't clear whether we were looking at a feature, the whole program, or what really. It was just visual noise without explanation on the main page. Giving it a title like "this is exactly what you'll see" will not help it though, again because it isn't clear what is going on and the video by itself is more unclear in use than the actual program itself. In fact, if you had a tab where users can actually use the program without making an account, but it just doesn't save their work and is a demo, that would already be a huge help because people would instantly see how easy and fun it is to use and it would rid like 90% of the questions caused by not having any information.

Anyway, I saw the program and thought, oh its just the front page video thing. I can use this! And I proceeded to try to use the top right portion and wondered why it didn't work. Then I kinda clicked randomly until I realized the in-prompt area is actually the top-left part. Not exactly a fatal flaw, but a clear tutorial would have led me to understanding the program faster. Like the fact that every input is its own section of code, and so my input needs to follow an orderly pseudocode format. As a person not familiar with how good AI devs are, I am not already in the know if I can have inputs be rearranged, have a correcting input (say, if I didn't like the previous input) be a new input after the prev one or if I have to edit the previous input directly. The rules of using the AI are just unclear. Speaking of edits, and I recognize that since I was using a phone to use the program, so some features are more difficult to use, I couldn't figure out how the editing works. I simultaneously was getting a glitch where the green loading bar would almost reach the end then restart, and then was going back and forth like a spring after I tried editing, and wouldn't submit anything. It was unclear if I was trying to edit wrong or there was a different bug I was running into. The already lack of clarity had ate up my patience so I didn't bother to figure out what I was doing wrong.

TL;DR:

In summary, you need 3 tabs on the front page explaining what it does, how it works and how a user uses it, and maybe another tab for T&C, PP, and contact. Since the landing page is already a attempt at that, it could be changed to why a person wants to use it. I can think of 3 reasons off the top of my head for a potential target audience and I don't even know the full uses of the program so I'm sure you can think of more.

After log in, there needs to be an additional tab with detailed tutorials, like how to think when giving info to an AI dev, how to make corrections, etc. Since you'll have a contact page, people will find more things that aren't unclear that you can use to either improve the tutorial or have a common Q&A section (which depending on the content would go on the page before logging in or after, or accessible to both). Lastly you'll want a bug submission area as well, since in the few minutes of use, I ran into bugs, and you'll probably want to separate general contact from bug submissions.

eks391··on AI chatbots are not a replacement for search engines
> Today I have zero confidence in chatGPT, OR my ability to evaluate and correct it's inaccuracies strictly from within its interface.

Definitely not within chatgpt itself. I was using chatgpt recently for the first time and came to the conclusion to take its output with the weight of a trusted friend. I was asking questions on topics I had genuine curiousity about and that I didnt know the answer, and it led me to some information that I thought interesting, so I wanted to know more. Thats where I turned to my fav search engine and looked into, continuing my session with chatgpt to clear passages it spat. It steered me in a direction I didnt know existed, and I used the internet to verify the information and acquire me detail. Yesterday I tried out asking it for help on a coding project, and it introduced me to a helpful package I didnt know about, but the code it suggested using didnt actually work and was riddled with errors as I tried to use it in the way it suggested. I would have been blown away if it worked, so this was no big deal. I think I would have been faster just using stackexchange though.

> So today I don't see it replacing search engine for me.

I will continue to use the resources I already use to find respective authenticatable information, but I do think it is still useful for those things where I have no idea where to begin, so it can set me in a direction where resources already exist.

eks391··on Free, P2P, disposable group video calling app for the web
Brave has something similar to this baked in
eks391··on LastPass user vaults stolen in recent hack
> So then you'd at least have to enter your password once on (browser) startup so it can load the list and keep that in memory, and you won't be able to automatically sync things either.

Correct. However this is how it ought to be. If someone acquires my laptop, I dont want logging into my accounts to be as easy as opening the browser

eks391··on LastPass user vaults stolen in recent hack
> if more services start supporting products like Yubikey, I'll be able to ditch the phone altogether.

It is my dream to ditch the phone. I would replace it with a yubikey in a heartbeat

eks391··on Not Getting Hacked
My pw manager does not offer this. Which do you recommend that has this feature?
eks391··on Not Getting Hacked
Perhaps my anecdote is not as strong because I got locked out rather than blocked out, but it still was inconvenient. I degoogled my life some time ago, long enough to have a new phone and computer. At a point I needed to log into my old gmail acct, and I couldn't because it was a new device, the old devices were gone to verify my identity, and knowing my password and passing several captchas wasn't enough. Months later I went to log into fb/ig for something and similarly wasn't allowed in and also don't have access to my gmail for verification. Luckily during my degoogling adventure, I had changed the email for all important accts, so the impact is minimal, but I would not like to imagine the impact if I had ever relied on oAuth
eks391··on A new AI game: Give me ideas for crimes to do
Beats me. I looked on wikipedia to see if GPTs framework is described without luck. It did say the parameters file (comparable to a csv, very lightweight) is nearly a terabyte, which is absolutely insane. Although I want to guess that it is more than an rnn because of how good GPT is, it could be successful solely to its sheer size
← PreviousPage 8 of 9Next →