HNHacker News
TopNewBestAskShowJobs

fmx

393 karma · joined May 12, 2011

submissionscomments
fmx··on How Did Sam Bankman-Fried Get Bail?
So a defendent accused of massive fraud was released on the mere promise to pay $250 million if he does not show up to court? Money that he himself says he does not have? I get most of the reasoning, but that part really makes no sense to me. Yes, his parents would be bankrupted, too, but still.
fmx··on Elizabeth Holmes is sentenced to more than 11 years for fraud
Even now she does not admit any responsibility. "I failed", not "I maliciously, knowingly, willingly committed crimes". Not surprising give that she plans to appeal, though. She is trying (as usual) to have her cake and eat it to: get credit for remorse during sentencing and still be able to claim she's not guilty at the appeal. Hence this cringeworthy non-apology apology.
fmx··on Enclave: An Unpickable Lock
It certainly seems like a simpler, cleaner design. So did LPL try to pick it? (Edit: I see you wrote elsewhere in the thread that he never replied.)
fmx··on Google, Meta, others will have to explain algorithms under new EU legislation
Yes: https://www.msn.com/en-us/autos/news/yes-it-seems-amazon-did...
fmx··on What to know about the stock market (2007)
Why S&P 500 specifically? Is it just because they have the lowest fees you've found? There are many index funds all over the world to choose from. What if I could find a fund with with even lower fees than VTSAX somewhere? I often hear "don't pick stocks, just buy 'the index'" - but you're still picking an index, aren't you?
fmx··on DuckDuckGo has had 0 search warrants since founding in 2008
Thank you for documenting it so thoroughly. My experience totally agrees with this. DDG often returns a lot of irrelevant results and they are not irrelevant because they're not personalised to me, but because they do not include terms in my query - even when those terms are in quotes! I simply cannot tell DDG: "unless that exact string is in the page I don't want to see this result"! (To be fair, I cannot tell Google that, either, but it still returns better results.)

Today's example: I searched for

> linux nic bonding "bond-mode"

The second result is https://access.redhat.com/documentation/en-us/red_hat_enterp... which does not include the string "bond-mode" (nor "bond mode").

fmx··on Let’s Talk OpenZFS Snapshots
zfs-auto-snapshot is a simple one that does what I need. I run it from cron to:

- take snapshots hourly and daily

- prune old snapshots (--keep option)

- send the snapshot to a remote host (--post-snapshot=zfs send ...)

fmx··on The Framework Laptop is now shipping
Speaking of website bugs, whenever I change any options on https://frame.work/products/laptop-diy- edition/configuration/edit it reloads a page, scrolling to the top. Probably not something that would stop me from buying if I was going to, but annoying nonetheless.
fmx··on The Framework Laptop is now shipping
> I can't source a replacement keyboard when the "S" popped off.

> All examples I gave are real life examples which I've encountered.

Real life for me, too. The S key on my laptop no longer works. I took apart the keyboard to clean it one day, put everything back together, it all worked, except one key - S. Is there something about that specific key or is this just a weird coincidence?

fmx··on Try This One Weird Trick Russian Hackers Hate
I tried those on Windows 7 and after rebooting couldn't log in anymore - it just kept saying my username or password was incorrect.

It took me quite a while to figure out that this was because I had set my keyboard for the logon screen to Cyrillic. I confirmed by overwriting sethc.exe with cmd.exe and enabling high contract - the text I typed in the command prompt window that opened was in Cyrillic. (Not my own trick, but a very useful one for recovering access to Windows without directly editing the registry files!)

That's quite a downside, I would say! Turns out all those Microsoft warnings that say "do not modify the registry unless you know what you are doing" had a point.

fmx··on Google Is Eating Our Mail
I struggle to see how your analysts could do this without looking into specific instances of the problem. Perhaps you intend to contact the author of the article to ask for this. That might work in this case, but in the general case there is absolutely no way for people to report this problem to Google!

Yes, I'm yet another person with the same problem as the author of the article - running my own mail server for years, only I send mail from it, very low volume, everything set up properly, etc. The difference is that my emails go to spam, rather than being rejected by the SMTP servers, which to me is even worse, since I never know whether an email I sent to GMail has been delivered or not. Since GSuite is so popular now, I never know this for any unfamiliar domain, unless I do an MX lookup.

You say all the right words, but Google's actions on this issue (or lack thereof) speak much louder. It's very difficult to believe that the situation will improve and many comments here reflect this skepticism.

fmx··on Socially Engineering Myself into High Security Facilities
Thanks for this! The animated GIFs all over the original page are really distracting.
fmx··on What If We Put Warnings on IoT Devices?
I use "dumb". Sure, it sounds negative, but when used in context it's easy to understand for anyone that knows about "smart devices".
fmx··on Show HN: TorProxy, a kernel module which routes all network traffic through Tor
If you do that then you may as well just use two VMs - Tor router and client - and that's basically Whonix.
fmx··on VLC maintainer has refused “several tens of millions of Euro”
How did those users come to learn about VLC Player and what would stop them from learning about the fork the same way?
fmx··on VLC maintainer has refused “several tens of millions of Euro”
I couldn't decide how much to donate, so I decided to donate RANDBETWEEN(1, 50) euros.
fmx··on Are You a Robot? Introducing “No CAPTCHA ReCAPTCHA”
I was curious about the CAPTCHA solving, too, so I tested WebVivum out on ~8 reCAPTCHAs.[1] It solved all except 2 of them, taking 20-60 seconds each time. In 2 cases it reported failing to solve the CAPTCHA, but it never gave an incorrect result. That is, whenever it gave a solution the solution was correct (in my brief test).

So, while it's some way off their claim of "instant" CAPTCHA solving, this is definitely a very useful addon, especially for those people who cannot solve CAPTCHAs at all. Thank you for pointing it out.

[1]https://www.webscript.io/examples/recaptcha

fmx··on “Invalid username or password” is a useless security measure
True, but many site use the email address as the username and require you to validate that email address before you can do anything anyway. Those sites, at least, have nothing to lose by adopting this approach.
fmx··on “Invalid username or password” is a useless security measure
Some sites don't. They instead say "if an account with that email address exists we've sent you an email with the reset link". That seems like a nice touch, but it's pointless if you can still find out that a given email address is a registered user in some other way (such as by trying to sign up with it). So it's just another variant of the "invalid username/password" message.
fmx··on Become Estonia’s e-resident
Even (physical) residence will not allow you to vote, only citizenship will. From the site: "This [e-residency] will not entail full legal residency or citizenship or right of entry to Estonia."
fmx··on How to Beat High Airfares (2011)
No, you are not buying what they are offering. They are offering a ticket on certain conditions, which include not doing this. If you do not accept those conditions then you are not allowed to buy the ticket.
fmx··on The Story Of Larry Page's Comeback
> I think the problem in the end is the narrowing definition of normal behavior.

Not exactly. The problem is that anything outside that narrow definition is seen as "illness".

If you instead see it as a different, but equally valid, way of perceiving the world then the fact that so many people seem to have ASD, ADD or other "D"s makes much more sense.

This is not a matter of politically correct terms - I'm talking about a genuine difference in attitude. ASD is a very broad spectrum. Some people on it really do have an "illness" in the sense that they cannot function independently. Others are just a bit "different" and you may never even know they're not normal unless you happen to see them at their worst. Is it still worth diagnosing those? Generally, yes, because it allows them to get the help they need when they need it or, at least, understand themselves better, so they can help themselves.

fmx··on BitBucket was down
It's back online now.
fmx··on The way we board airplanes
I do this as well, at least when flying economy, because I want to spend as little time in that plane seat as possible. Overhead bin space has rarely been a problem, so I take that risk. Maybe I've been lucky or maybe it's because my carryon is fairly small and soft (squashable!)
fmx··on Is Your Site HSTS Enabled?
I tried that cipher suite list with Apache 2.2 and got my grade reduced from A to A-:

The server does not support Forward Secrecy with the reference browsers. Grade reduced to A-

Maybe I need to upgrade to Apache 2.4.

fmx··on An FBI Hostage Negotiator Buys A Car [audio]
IANAL either, but it's unlikely that a salesman responding to an email with a price would be binding. It's more likely an "invitation to treat"[1]. Even if it was, technically speaking, binding, it would have to be the deal of a lifetime to be worth taking the case to court.

[1]http://en.wikipedia.org/wiki/Invitation_to_treat

fmx··on Free DNS Tools
Thanks you, a very useful site. These tools all exist elsewhere, but it's really handy to have them all in one place, and right on the home page, too.
fmx··on What does randomness look like?
You couldn't possibly miss all 8 pieces. As soon as you make one attempt you'll get one piece.
fmx··on Getting Real book is now free PDF
I don't want a relationship - I just want a one-night... transaction. If I just want to download the file I'll use a disposable email address just for the principle of the thing, even if it's a company I normally wouldn't mind hearing from.
fmx··on Raganwald's "How to Do What You Love" is free today
It's great that Leanpub makes it so easy to register, but it would be even better if you didn't have to. I don't want to provide my email address to download a file. I used a disposable one and I'm sure some others did, too. That's just going to add (a tiny bit of) work for the Leanpub email server and make their stats look a little better than they really are.

Also, the site creating a "profile" for me when all I did was download a book makes me feel "sucked in" a little. I know, rationally, that there's really no downside to it for me, but I still can't shake the feeling that this is more than I agreed to.

← PreviousPage 2 of 3Next →