HNHacker News
TopNewBestAskShowJobs

eugenekolo

1,188 karma · joined December 29, 2014

www.eugenekolo.com
submissionscomments
eugenekolo··on Ask HN: Do you celebrate failures at work?
Culture in a lab I worked at was to bring donuts in when you messed up. I don't think this is "celebrating" failure, so much as a fun way to say sorry for messing up.
eugenekolo··on Source code for Dutch DigiD app released under Dutch Open Government Act
This one's pretty fancy from the big GPT.

``` Here is an example of Python code that can print a loading bar at different completion percentages:

def print_loading_bar(percent): bar_length = 20 hashes = '#' * int(percent * bar_length / 100) spaces = ' ' * (bar_length - len(hashes)) print(f'\rLoading... [{hashes}{spaces}] {percent}%', end='')

for i in range(101): print_loading_bar(i) time.sleep(0.1) ```

eugenekolo··on Eggs are 60% more expensive than last year in the US
I'd wager closer to 80-100%. They were $2-$3 last year. Now they are $4-$6. Where do people get this data from? Can't be actually going to the supermarket and writing down a price...
eugenekolo··on NYC Slice
Anecdotally, I've felt the same way. Didn't properly record it.. but, slices these days in NYC (and outside) are definitely lacking in sauce lately. Some places even feel like they're cutting on salt and oil too.

I will add that the quality also highly depends on when you go. Generally, the busier it is, the worse the quality.

The author states that Joe's is one of the better ones, but I think the quality has gone down too. I was there in 2014, 2017, and 2022. Digging up my photos to review the sauce amounts, but I felt 2022 was very lackluster to previous memories.

eugenekolo··on Microsoft eyes $10B bet on ChatGPT
It was always "Open" for business and just a generic prefix to slap onto things.
eugenekolo··on Tell HN: I just received my Equifax breach settlement check
We got just the man, Barney Stinson. His job title will be PLEASE. Provide Legal Exculpation and Sign Everything.
eugenekolo··on Operation Charlie: Hacking the MBTA CharlieCard from 2008 to Present
Awesome article, really enjoyed reading it.

Only thing that ruffled my feathers at the end as a MA resident was the solution being additional personnel to monitor a non-problem.

eugenekolo··on Balloon framing is worse-is-better (2021)
I'm not sure forests being cut down is the problem these days. Wood is one of the most renewable and sustainable materials out there. Old growth has been cut down, or become out of most people's price range at this point in NA, but farmed fast growing pine is cheap and sustainable. Perhaps NA has more land to support such farms though.
eugenekolo··on Oh, the Places Your Apple ID Will Go
It's a little unclear what they mean here, but that can easily be because of a service/system server model. The third party apps use things like "icloud daemon" (not sure that one actually exists) which does the iCloud request and passes along the data back to the app. Because the logs are generated with a high privilege level, they are also including what icloud daemon did for those specific apps, but those apps did not get access to that DSID, it was kept internal to icloudd.

If the journalists or whomever wants to claim the DSID is leaky, then they need to show a POC with an app actually obtaining that DSID, and not only in a system logger that only saves files sandboxed locally, or sends to Apple.

eugenekolo··on Oh, the Places Your Apple ID Will Go
Can you show me where obfuscation was mentioned? The DSID is transmitted clearly in many web requests from iOS. SSL isn't a form of obfuscation.

I don't think there's anything wrong in transmitting an ID to a web service, but I'm not actually sure what Apple claimed about privacy.

eugenekolo··on Baker's Math (2009)
When did bakers first start using decimal? Was it always decimal? I'm surprised, since most things I've seen in the "real world" tend to be fractional.
eugenekolo··on Apple Announces iPhone 14 and iPhone 14 Plus
Android does have crash detection. I understand your claim as Apple values safety, whereas Google does not in their feature releases. But, that is not true. It is true that Google products are mostly garbage these days, so don't get me wrong there.

Android/Pixel safety features: https://support.google.com/pixelphone/answer/7055029?hl=en

eugenekolo··on Apple Announces iPhone 14 and iPhone 14 Plus
You don't even know for certainty that Apple doesn't have the same/similar problems in an unreleased device/OS....

I'm not saying they do have those issues, but how do you know they don't? You can't compare a released product to a marketing ad.

eugenekolo··on Prevent DoS by large int-str conversions
Could they not have modified the `int` function to `int(thingy, i_really_want_to_do_this=false)`?

Edit: Looks like they added a python argument to increase the limit. So if you really need this, I suppose you can search around until you figure out why it's not working and pass the correct argument to the python bin.

eugenekolo··on Rolling-PWN vulnerability affects all Honda vehicles
Isn't it potentially a replay attack the poster is describing?

In a simple form it seems like this: The attack is you have a briefcase that contains specific RF transceiving components in it. You turn the brief case on in a hidden place, leave it, it records data, you come back to it later, and then press a button(s) that replays those RF signals.

Perhaps, there's some very weak cars that don't even need a replay, but are vulnerable to a master key, or bruteforce, or something else.

eugenekolo··on Learnings from 5 years of tech startup code audits
I believe this might fall under "resume driven development"
eugenekolo··on Eve Online fans cheer Microsoft Excel features at annual Fanfest
Ballmercon is wild this year!

https://www.youtube.com/watch?v=ICp2-EUKQAI

eugenekolo··on Android loses 8% of its global OS market share in five years
At least in the USA, you have mainly three choices for "$500+ phones": Pixel, Samsung, and iPhone. The iPhone has been priced very competitively in recent years to the point that they are better hardware at cheap price points than Samsung. That has taken a large chunk of Android sales as people upgrade to iPhones instead of paying more for Samsung.

A thought: It seems that as people get richer around the world they move away from $200 Androids to what is more perceived as luxury: iPhones.

eugenekolo··on Updated Okta Statement on Lapsus$
Support tickets, or incidents, or escalations might require creating a new slack channel
eugenekolo··on Google Maps Hacks (2020)
You'd have to figure out how to get Google GMS installed, and bypass their virtualization/emulator detection. Doable, but a bit more than just boot up some emulators.
eugenekolo··on Google Release Chrome OS Flex
Will this version, like regular ChromeOS support a Linux Subsystem (Crostini)?

I've recently played a bit with a Chromebook I have for work, best I can describe it is as "ok". It's kind of fun to be able to write emails, or journal/blog in Google Docs. I really can't see how I would recommend it to anybody really with just that ability. Even non-tech people like to download the occasional program, and not everything is on the web. The Chromebook is able to run Android apps which makes it slightly more useable (Looks like ChromeOS Flex cannot?).

The ability to run Crostini makes it more developer friendly. I was able to set up Android Studio, Python, Gcc, and it's a fairly decent on-the-go dev machine... I don't live such a nomadic lifestyle, but I can see it being pretty fun if you do.

eugenekolo··on Google Is Forcing Me to Dump a Perfectly Good Phone
The pixel 3 doesn't stop working after support for it runs out. Same as how that 4th gen iPad hasn't received the last 5 major version releases. (It runs iOS 10, we're on 15 now)
eugenekolo··on New York City adds 629,000 people, defying predictions of its decline
Typo'd "non-Manhattan suburbs" -> "boroughs"
eugenekolo··on New York City adds 629,000 people, defying predictions of its decline
Anecdotally, many NYCers own cars as family units, especially common in the non-Manhattan suburbs. It's just not typically a 1:1 adult/car pairing like the suburbs are.
eugenekolo··on Don't encode POST bodies like GitHub Copilot, use URLSearchParams
I don't think the author does a good job explaining the security problem, but I believe what they meant is something similar to:

text="foo&sendPasswordTo=hacker" or text="foo&admin=1"

You can imagine a potentially dangerous parameter and value being passed.

eugenekolo··on After working at Google, I’ll never let myself love a job again
You typically get stock on a 4 year vesting cycle. After the 4 years a few things can happen: you get another 4 year stock vesting cycle, you get no stock, you get something else.
eugenekolo··on 'New car smell' is the scent of carcinogens
I'm more surprised the average American only commutes 1 hr (total?) each day to work. Considering most cities during rush hour seem like they take 30 minutes to go 5 miles, and most Americans cannot afford to live near prosperous jobs.
eugenekolo··on Malvuln – Malware Vulnerability Research
Minus the lulz, what is the point of this? It seems there's some possibility of remotely disabling malware... and then some more possibility of malicious piggy backing on already installed malware.

It's an interesting point that malware is typically poorly developed, but not sure what the point of this research is.

eugenekolo··on How America Bankrupted its Cities [video]
It does add value in the real market. It doesn't add value according to the town property assessor. There's a disconnect between reality and property taxes.
eugenekolo··on How America Bankrupted its Cities [video]
It's true that property taxes are based on the assessment of a home, but it's also not necessarily true that the assessment does a good enough approximation to consider that any house within 1mi of the train is worth 20% more than one 1.5mi away. From my hobby of looking at home appraisals in Boston towns it seems the biggest factor in most towns is square footage.

Another point to consider is that most towns in Massachusetts seem to use replacement cost as the main method of appraisal versus potential income/value. Meaning, 2 families appraise for nearly the same as a single family when they are in reality worth 1.5-2x more in potential income via rent or selling.

← PreviousPage 3 of 5Next →