HNHacker News
TopNewBestAskShowJobs

heffer

321 karma · joined June 12, 2014

[ my public key: https://keybase.io/fk; my proof: https://keybase.io/fk/sigs/9TuZef8KsIsAxbigRONpST7drGEHoMLAvRX0XHY10gY ]
submissionscomments
heffer··on German credit agency earns millions through unlawful customer manipulation
I do feel they are increasingly modelling themselves after the US system, seemingly only impeded by stricter data protection laws. Schufa, as you said, used to be mostly the exchange of negative-only debtor information (i.e. Schufa having no information about you is a good sign for your creditworthiness). I'd say in the last 15 years (or so) we've arrived at the point where Schufa having no information about you is about as bad as having negative information. Exactly like in the US. The only difference being that for their main consumer product you are still fine to get the "Nothing negative to report" document, as that is what's accepted by most landlords.
heffer··on Podman Desktop 1.6 released: Even more Kubernetes and Containers features
podman works great with docker-compose through the docker socket emulation. I just use the upstream vanilla docker-compose with it (also works with docker compose as a plugin for Docker CLI).

Podman Desktop also offers to set the socket emulation and Docker compatibility up for you, if you like.

heffer··on Podman Desktop 1.6 released: Even more Kubernetes and Containers features
"By default, the VM distribution is Fedora CoreOS except for WSL which is based on a custom Fedora image. While Fedora CoreOS upgrades come out every 14 days, the automatic update mechanism Zincata is disabled by Podman machine."

Source: https://docs.podman.io/en/latest/markdown/podman-machine-ini...

heffer··on I bricked my Christmas lights
This is what I was really afraid of when I reverse engineered my fireplace BLE controller last year. Especially since the "Set password" command accepts raw bytes for input but the OEM app only ever sends length-limited numeric data.

Luckily, it seems to completely forget anything that happened to it after a brief power loss.

Which is probably why most of the BLE controllers of the same brand simply stay at the default password of "0000". A power outage will eventually get you back to that. If you're really bored that'd probably make for some great BLE wardriving.

But I, too, ended up putting the results of my reverse engineering into a Home Assistant integration (https://github.com/kaechele/napoleon-efire) and documented the system and protocol (https://bonaparte.readthedocs.io/en/latest/index.html).

heffer··on Canada Inches Closer to 'Right to Repair' Reform
I'd argue this cost has always been there and was never zero to begin with. Mass producing non-repairable, cheap throwaway items is an excellent way for industries to externalize a lot of the lifecycle cost of an item onto society.

So you get to choose at which point you'd like to pay for it. Directly and very visibly in an item's price (maybe even making you reconsider if a purchase is actually necessary). Or later, in taxes or a decrease in quality of life due to the increasing overexploitation of our resources.

heffer··on Windows 11 Update 23H2 is stealing users' IMAP credentials
Cloud Native, the only type of native that matters these days ;-)
heffer··on ESP32 Wemos D1 Mini – Sprinkler Controller Open Source
You'll find many varieties of boards with different SoCs being sold mentioning the D1 Mini in their model number or product description, as it initially defined the form-factor being referred to. Similar to the ESP-12F, which you can also get with ESP32 SoCs, if you want, even though the ESP-12F originally is an ESP8266 board.
heffer··on Keystroke timing obfuscation added to ssh(1)
Here's an explanation: https://cvs.afresh1.com/~andrew/o/why-cvs.html
heffer··on Make a low-cost Bluetooth LE packet sniffer with Wireshark
As an application developer I not always have a need to observe protocol traffic as it happens on the air.

So for reverse engineering BLE protocols (especially between IoT devices and their apps) I've usually found my Android phone with developer mode and Bluetooth HCI snoop logging enabled to be very convenient. Wireshark can read the files my phone spits out and because I see the unencrypted packets when captured directly off the HCI it's very easy to work with.

heffer··on Rust on Espressif chips
For a second I thought this would be about an issue with damage from iron oxide on Espressif chips.

Yes, it's a weekend and also a holiday today ;-)

heffer··on Profits are driving inflation. When will politicians and the BoE admit it?
And the IMF blog post that is the source of that article is here: https://www.imf.org/en/Blogs/Articles/2023/06/26/europes-inf...

I recommend reading that instead, as the original submission provides no additional value over what is written in the primary source.

heffer··on Coroutines make robot code easy
Python is slated to become a choice for the 2024 season: https://wpilib.org/blog/bringing-python-to-frc
heffer··on When “free forever” means “free for the next 4 months”
Depends on your jurisdiction. In Germany, for example, a court has recognized that Facebook enters in a contractual relationship with you when you register on the platform. As such, Facebook agrees to store and let you access your information on the platform in exchange for the permission to use that data for its own purposes. The highest court in Germany (BGH) confirmed this in a court case that Facebook lost where parents were denied full access to the Facebook account of their deceased daughter (they were only allowed to view the memorialized profile but not log in and read the chat messages, for example). The court found that the parents rightfully inherited the contractual relationship with Facebook in its entirety and as such had to be given access to the data that Facebook agreed to store and make accessible to its user.

Full ruling available here (in German):

LG Berlin https://openjur.de/u/870262.html, which was appealed by Facebook and then went to the BGH (highest court) which ruled in favour of the parents: https://openjur.de/u/2110135.html

Edit: Added links and distinctions between the different courts at the end.

heffer··on iOS 17 app sideloading might only be available in Europe
> Not to mention such a disparity in feature between different regions is pretty huge.

And at the same time not at all that uncommon. If you are in a market outside of the US I'm certain you will have experienced this first hand more than once. I have.

heffer··on CAN Injection: Keyless car theft
> what drives them

Don't know. A stolen car presumably?

heffer··on Ask HN: Best way to “donate” dev hours to charity?
If you're in the US or Canada check out FIRST Robotics Mentor Network: https://info.firstinspires.org/mentor-network

You would be helping out teams of high school students build and program their robots for competitions. This generally happens around January-April but most teams also work on their skills in the off-season.

I do this in an in-person capacity but virtual mentorship opportunities are available as well. Topics that are helpful for the team to learn in the coding space would be Java and code management best practices (mostly Git). If you have a bit of mechanical knowledge that can help as well.

I just came back from a competition happening on the weekend and it's a very rewarding experience.

Note that you'd need a Youth Protection screening (in Canada it's basically a Vulnerable Sector Screening with the police) because you'd be working with kids.

heffer··on Establishing a UART Root Connection to a TP-Link Wireless Router
Good 'ol UART.

I was thinking of maybe doing a write-up of how I reverse engineered my Fireplace controller's UART using a sniffer cable and two USB-to-UART dongles.

I've documented my findings here: https://bonaparte.readthedocs.io/en/latest/system_informatio... But I thought maybe a write-up of how to approach a project like this would be beneficial for beginners, like I was when I started this project a few months ago.

I'd love to hear feedback from people more knowledgeable than me on this. I was struggling especially with finding and using the accurate terminology to describe things like packet (or is it message?) formats and such.

heffer··on Establishing a UART Root Connection to a TP-Link Wireless Router
I have not had any problems with the newer CH343. See this tweet by WCH Technical Director Patrick Yang: https://twitter.com/Patrick_RISCV/status/1516015859877093376

WeAct Studio makes a beautiful compact CH343P adapter that comes with USB-C.

heffer··on Iceland long term visa for remote workers
The path from Permanent Resident to Citizen in Canada is pretty straightforward in my eyes and most Permanent Residents eventually do become Citizens [0]. Given that there are many pathways available for people to immigrate to Canada and Canada also looking to increase immigration in the coming years I am not sure what you mean by "not friendly or welcoming". Are you referring to the fact that there is a selection process in place and not everyone may qualify due to it?

[0]: https://www12.statcan.gc.ca/census-recensement/2021/as-sa/98...

heffer··on The FTC wants to ban tough-to-cancel subscriptions
Yes, other countries too, like Germany.

It's supposed to compensate banks for lost profit from you not paying interest for the entire term. Equally, a bank can't cancel your mortgage before the term ends for the sole reason that it would be able to charge higher rates for a new mortgage.

heffer··on Stanford’s war against its own students
I understood it as meaning a social and academic environment that is supporting them in getting into Stanford.
heffer··on Book publishers won't stop until libraries are dead
> Books and publishing industries are a result of a technology: paper, printing, binding. Now in the digital age an ebook should cost close the the amount the author get 1$-2$/book.

This is a very technocratic view of book publishing. I think you're leaving out a lot of what goes into creating, marketing and distributing a book which is not labour of the author. Even in the digital age.

Sure, authors could contract those services out using their (expected) revenue on a book. But at some point you'll inevitably get companies offering to manage that process for authors because it creates overhead that distracts from the creative process or thought process: Publishers.

There are lean alternatives to big publishers out there, so it's easy to get self-published. But the weight a big publisher can put behind a release, the distribution network they have, can - even in the internet era - still affect a book's success heavily.

heffer··on New York City Prices Make $100k Salary Feel Like $36,000
> and almost all major medical advances and research comes out of the US

Are you're basing that on the number of clinical trials compared to other countries or regions using the data from the WHO [1]?

As someone who worked for a large pharma company for almost 10 years I'd say it's easy to think that when in reality it's just easier to conduct clinical trials in the US compared to, for example, the EU. With the US market having the highest margins for pharmaceuticals and no ban on ads for prescription medicine it's also important to spend as much time in the US market while still under patent protection. A quicker way to enter the US market is by doing clinical trials in the US.

The company I worked for is global (like most pharma companies) and, depending on the indication, the research is actually more likely to not have been conducted in the US.

[1]: https://www.who.int/observatories/global-observatory-on-heal...

heffer··on Tesla Price Drop Angers Current Owners
This sentence doesn't necessarily imply she currently owns two Teslas. She may have bought them consecutively. Heck. Semantically her first electric vehicle could have even been a different brand. English is a weird language.
heffer··on Bill Gates: I'm literally losing sleep over Java (1996)
There are a few examples of where this is done. One that comes to my mind would be JOSM: https://josm.openstreetmap.de/ You download one JAR file for any platform you intend to run the application on. There are installers for convenience but the JAR file works just as-is.
heffer··on Thunderbird for Android preview: Modern message redesign
I'm mentally preparing for the inevitable "Microsoft Office Ribbons UI"-esque resentments from the power users in the comments.

Give it time.

heffer··on Apple Rankings
I agree with your assessment. I am not US American though. I live in America (Canada specifically) but I was born and raised in Europe. I'm afraid the cynicism in my original comment requires this context to be received.

In my opinion it seems to reflect an expectation in culture in general. Most movies filmed in Canada do not actually depict Canada. I lived in Toronto for a while where there are almost as many NYPD cruisers as there are TPS cruisers and as many Yellow Cabs as there are Beck Taxis. International YouTubers translating things into Imperial Units and US Dollars in videos is another often seen accommodation to this.

heffer··on Apple Rankings
Exactly my point.
heffer··on Apple Rankings
US is the default on the internet. So unless explicitly mentioned I tend to assume content is geared to a US audience.

But I did not know Poland was big in apples. Interesting. I noticed the strong regional variances in Apple availability ever since moving to Canada. I have had a very hard time finding an apple that works well for baking, as Boskoop Apples aren't a thing here.

heffer··on Barilla passive cooker
German in Canada here. I used mine to cook water for pasta as it's usually faster and more efficient than my electric cooktop. Bought one in Canada and it's close to useless for that purpose. My German kettle would bring 1.7L of tap water to a rolling boil in about 4 minutes. My Canadian one needs about 10 minutes to achieve the same.
← PreviousPage 2 of 4Next →