HNHacker News
TopNewBestAskShowJobs

frei

168 karma · joined February 26, 2017

submissionscomments
frei··on I Don't Have Spotify
The first song I tried mapped incorrectly. Even though there was a green verified checkmark!

> https://open.spotify.com/track/1Pfc1Qpj0s9vQumI0JvpBp

mapped to

> https://music.youtube.com/watch?v=ogoeWS6CDbI

but it should have mapped to

> https://music.youtube.com/watch?v=dfgKYWrRfoc

frei··on Juno – A YouTube Client for Vision Pro
Maybe it was a UX bug that hampers the experience to the point that where the website is a better experience, and they felt that a bad app would hurt the brand more than no app.
frei··on Show HN: Play a pen-and-paper game that is almost unknown in the US and Europe
Unfortunately the bot is not very good. Just by reading the rules I was able to beat it every time on multiple rulesets.

The matchmaking is also difficult to find a partner since the rules are so customizable, and there's no way to tell what rules potential partners could be searching with. Maybe a list of games that are looking for an opponent would be good.

frei··on Ubuntu Linux snuck into high-end Dell laptops
I had to search "developer edition"

https://www.dell.com/en-us/shop/dell-laptops/xps-13-plus-dev...

frei··on YouTube: Community contributions will be discontinued across all channels
I've done some translating on YouTube. What it means is if your translation is in draft mode (you're still working on it) on 9/28 it will disappear. The video creator shouldn't need to do anything here.
frei··on You don’t need SMS-2FA
The prescriptions in "If you’re a security conscious user..." make sense to me. If you use a unique password, sms/totp adds very little benefit.

However the section for "If you’re a security conscious vendor..." doesn't make sense. Credential stuffing is so common, and sms/totp is a great tool against it. You could prevent users from setting their own passwords, but that seems a little "too different" from existing sites that it could harm usability.

frei··on You don’t need SMS-2FA
All the arguments in the post against SMS 2FA are also arguments against TOTP
frei··on Tesla worst for reliability in American driver survey
It's a great judge of "Initial Quality", but a poor judge of "Reliability". When someone says their car is reliable, they mean it hasn't needed service for a decade.
frei··on Tesla worst for reliability in American driver survey
>The J.D. Power US Initial Quality Study, which gauges problems encountered in the first three months of ownership.

A very questionable definition of "reliability".

frei··on Launch HN: Legacy (YC S19) – we help men test and freeze their sperm
I've tried Dadi and Sppare.me in the past and had good results on the front-end (I haven't retrieved any samples yet). I'm not sure the service could have been improved. What are you doing differently than existing mail-in sperm analysis/freezing companies?
frei··on Disabling Google 2FA doesn't need 2FA if you're already logged in
U2F doesn't protect you from an untrusted machine, it protects you from untrusted websites.

https://security.stackexchange.com/questions/157756/mitm-att...

The security model relies on the browser validating the origin.

frei··on Disabling Google 2FA doesn't need 2FA if you're already logged in
I just enrolled in advanced protection, and was then able to unenroll without 2FA re-auth....

I agree that requiring 2FA re-auth on trusted devices to disable 2FA would be a terrible default for users with only one method, but Advanced Protection should do more.

frei··on Is WebP really better than JPEG?
This is kind of neat, but when I think of "HEVC-based image codec" I think of Apple's .heic format. Unfortunately I didn't see a high-level comparison to HEIC on Bellard's site, so I'm not sure what the advantages of BPG are. Wouldn't I want to use the more common format?
frei··on Mozilla VPN
Complaining about a reproducible issue on a public forum works. Even if you don't get direct feedback, there's a good chance it will get quickly forwarded to an teams' internal mailing list.

A lot of google engineers read hacker news comments, reddit threads, etc. all the time, and generally try and route good feedback where it belongs.

frei··on Show HN: Puree – Password-based Uniform-Random-Equivalent Encryption
It's not an actual file, it's unmarked in the free space of the first volume. If you mount only the first volume, it will appear normal, and data loss will occur if more space is used.

https://www.truecrypt71a.com/documentation/plausible-deniabi...

Also, as jchw mentioned above, the headers are indistinguishable from random data already, and truecrypt supports full volume encryption already. This nesting feature is on top of the "volume looks like random data" feature.

frei··on Revolut staff claim they’ve been told to quit their jobs or be fired
If the bad behavior is skirting the labor reduction laws, we should get rid of the labor reduction laws to reduce bad behavior?

This argument doesn't make sense to me.

frei··on Revolut staff claim they’ve been told to quit their jobs or be fired
It sounds like the employees are foreigners who are probably unfamiliar with the polish legal system, with no income or health insurance as more pressing issues.
frei··on Students are failing AP tests because the College Board can’t handle HEIC images
If they were submitted in time, but then rejected a day later, it seems like those cases can be resolved by some manual work by collegeboard to convert them
frei··on The evidence behind putting money directly in the pockets of the poor
Social security is "slight of hand" too. If you make an average of just $1k/mo before retirement, your SS benefit is $900/month. But if you made 10x ($10k/mo), your SS benefit is only 3x as much [0], despite you paying 10x the taxes during your career.

While this is nowhere near as progressive a tax as regular income tax, it's still a wealth transfer from high earners to low earners.

0. https://www.ssa.gov/OACT/COLA/piaformula.html

frei··on AMD Ryzen 5 3600 Review: Why Is This Amazon's Best Selling CPU?
Yes, they call them APUs

https://www.amd.com/en/processors/athlon-and-a-series

An 8-core zen 2 APU is expected

https://www.tomshardware.com/news/amd-ryzen-7-4700g-desktop-...

frei··on Let's guess what Google requires in 14 days or they kill our extension
You could try that. Long term, it should also be possible to route this communication through the internet, or use the Chrome/Firefox/WebExtension NativeMessaging API [0][1].

0. https://developer.chrome.com/apps/nativeMessaging.

1. https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...

frei··on Stripe records user movements on its customers' websites
That's true, but the data collection doesn't have to be this automated. It's a tradeoff for ease-of-use.

Everyone used to use Paypal, right? That doesn't track anything on your site in the default flow, but it requires sending the user to paypal.com, where they will have to enter even more information. But at least it doesn't collect mouse movements on all users on non-payment pages.

frei··on Senate Stock Watcher
Why do we want to disincentivize career politics? I feel like raising the incentives will improve the ability of the average politician.
frei··on Show HN: DNS over Wikipedia
Pretty neat! Similarly, I often use Wikipedia to find translations for specific technical terms that aren't in bilingual dictionaries or Google Translate. If you go to a wiki page about a term, there are usually many links on the sidebar to versions in other languages, which are usually titled with the canonical term in that language.
frei··on IRS delays tax-filing date to july 15, matching payment deadline
My point wasn't about withdrawal ordering. I'm not saying you can't withdraw the direct contributions first without penalty.

I'm saying, the law doesn't care that you left the part you over contributed uninvested, and that it was some other money in the account that grew.

I'm saying, to avoid penalty, you have to withdraw (direct contributions first) equal to [excess * (current value/value at date of excess contribution)].

This amount could be higher or lower than what you contributed, depending on how the existing Roth IRA investments in the account changed in value between the time of excess contribution and the withdrawal.

frei··on IRS delays tax-filing date to july 15, matching payment deadline
It will be liquid, but it will still have attributable gains if the account value increases. That amount will also need to be removed, which will come from previous contributions, before your actual tax deadline, which may be extended to October. Just a heads up.
frei··on Time to Ban Wet Markets
This author is making a bunch of tenuous equivalencies. A wet market does not have to have exotic animals, live birds or live mammals, undomesticated animals, or be dirty.

There are markets that get emptied out and thoroughly cleaned every night, and sellers bring fresh fish and domesticated slaughter every morning.

A call for the wholesale ban of wet markets without acknowledging that plenty of safe wet markets exist is hard to take seriously.

frei··on Waymo raises first external investment round
Waymo does have it's own stock.

I don't know how it works, but it does. I have friends who worked at Waymo and got Waymo stock (well, options that can be exercised for stock). I suppose that would make it not a wholly owned subsidiary, considering that some of the employees own some of it?

frei··on Waymo raises first external investment round
The "leaked" Waymo value is supposed to be approximately equal to "added" value of the cash they raised.

Theoretically, raising a round should not be a net negative for existing investors.

frei··on Google veterans: The company has become ‘unrecognizable’
Are you thinking of SVP?
Page 1 of 2Next →