HNHacker News
TopNewBestAskShowJobs

hundchenkatze

885 karma · joined December 11, 2011

submissionscomments
hundchenkatze··on USPS Selects Oshkosh Defense for Next Generation Delivery Vehicle Fleet
I think there are rural routes were battery capacity becomes an issue.
hundchenkatze··on Epic will pay off class-action loot-box settlement with in-game currency
That loot boxes are the same as gambling, and encouraging minors to gamble.

> Epic was faced with a class-action lawsuit alleging, among other things, that it had "psychologically manipulate[d] its young players into thinking they will 'get lucky.'"

hundchenkatze··on Living Like It's 99: No Social Media, No Smartphone
> Windows XP first release was in 2008

Not the 90s, but XP was released in 2001.

hundchenkatze··on Brave Browser leaks your Tor / Onion service requests through DNS
The comments in that thread... is ramble the new parler?
hundchenkatze··on Tauri: An Electron alternative written in Rust
previous discussion from 7 months ago: https://news.ycombinator.com/item?id=23769424

Looks like they're making good progress!

hundchenkatze··on Browsers eating RAM
It doesn't work in Firefox desktop either. I guess they only test with webkit based browsers.
hundchenkatze··on Why did I leave Google or, why did I stay so long?
That's still a ton of entitlement...

"Oh no! I make hundreds of thousands of dollars a year, and I have to live in my tiny apartment, buy food, and I might have to get a bigger apartment."

vs

"Oh no! I don't have a job, and I'm about to lose my apartment because I can't pay rent."

hundchenkatze··on Dyson air purifier outperformed by cheap DIY box fan filter in Marketplace test
> before being passed on and still works

They said it's still working, so seems like its lifetime is greater than 10 years.

hundchenkatze··on TV Size-to-Distance Calculator and Science
Maybe, but the article is still useful for people that read it in it's entirety.
hundchenkatze··on TV Size-to-Distance Calculator and Science
I think it's useful outside of an academic thought experiment. It hasn't encouraged me to get a bigger tv, quite the opposite. My takeaway isn't that I need a bigger tv, it's that I can get by with a smaller screen and lower resolution.
hundchenkatze··on Cambridge Bitcoin Electricity Consumption Index
But a heat pump gives you about 0x the amount of bitcoin.
hundchenkatze··on Proprietary Software Is Often Malware
I get your point, but I think in this case the distro would be the malware not emacs.
hundchenkatze··on Firefox 85
Yeah, it doesn't make much sense. They already have the a context menu when you long press a tile. I don't know why they don't allow you to pin from there.
hundchenkatze··on Firefox 85
I think you're referring to the "Top Sites" feature. These will change based on how often you visit sites. You can pin sites so that they don't change.

https://support.mozilla.org/en-US/kb/customize-firefox-home-...

hundchenkatze··on Firefox 85
The way mine is configured allows me to get to top sites in 3 taps if I'm already looking at a site.

You can disable "Scroll to hide toolbar" in Customize to remove step 1. Steps 2 and 3 are still required but moving the address bar to the bottom keeps your taps closer together (The plus actually ends up right over the boxed number so you can double tap pretty quickly). You can also get rid of step 4 by disabling "Show search engines" in search settings. Now when you tap (+) the address/search bar will still be focused but the top sites are still accessible.

hundchenkatze··on Plex Arcade
Here's the official one for ios, not tvos though. https://apps.apple.com/us/app/jellyfin-mobile/id1480192618
hundchenkatze··on What You Should Know Before Leaking a Zoom Meeting
At first I thought they meant Bang & Olufsen, a high-end brand that prefixes all their products with Beo [0]. But I guess the industry is making Beryllium drivers now [1].

[0] https://www.bang-olufsen.com/en/headphones/filter/over-ear

[1] https://blog.masterdynamic.com/article/know-your-sound-tool-...

hundchenkatze··on GPT-Neo – Building a GPT-3-sized model, open source and free
Apart from that, hopefully the people building training sets use gltr or something similar to prevent training on generated text.

http://gltr.io/

hundchenkatze··on An Immoral, DIY Rape Kit Startup
Here's some additional reporting on this:

https://www.motherjones.com/politics/2020/04/diy-remote-rape...

hundchenkatze··on Show HN: A low-code alternative for Stripe/Twilio Integrations
Except in this case Stripe provides a way for 3rd parties to access your Stripe account without giving the 3rd party your password.
hundchenkatze··on Show HN: A low-code alternative for Stripe/Twilio Integrations
Okay, Why can't you use the Stripe Connect[0] oauth api? It's generally considered bad practice to ask for and store passwords for other services.

[0] https://stripe.com/docs/connect

hundchenkatze··on Show HN: A low-code alternative for Stripe/Twilio Integrations
Oh, wow I didn't realize that. I'm a little surprised it's a common thing. Stripe's secret key is the "keys to kingdom" so to speak. This means someone with the key can get up to all kinds of funny stuff.

Stripe also says not to do it:

> Your API keys give you access to Stripe’s systems and a global financial network. That access is what card testers want to exploit, so it’s important to keep your keys safe and put safeguards around the functionality those keys provide to prevent fraud and other malicious activity.

https://stripe.com/docs/card-testing#stripe-mitigations

> Your secret API key can be used to make any API call on behalf of your account, such as creating charges or performing refunds. Treat your secret API key as you would any other password. Grant access only to those who need it. Ensure it is kept out of any version control system you may be using.

https://stripe.com/docs/keys#keeping-your-keys-safe

hundchenkatze··on Show HN: A low-code alternative for Stripe/Twilio Integrations
Best case, this is a well meaning project by someone that doesn't understand the implications of sharing secrets. Unfortunately it could be a ruse to harvest api secrets from people that don't understand the implications of secret sharing.

A couple of dashboard screenshots:

Stripe key collection:

https://i.imgur.com/q6evqlT.png

Plan Upgrade:

https://i.imgur.com/nwBZ2wL.png

EDIT: In the case of Stripe keys, I wonder if it's a strategy to bypass Stripe's "carding" detection? It seems like spreading out test transactions across multiple stripe accounts would make detection more difficult.

https://stripe.com/docs/card-testing

hundchenkatze··on macOS malware used run-only AppleScripts to avoid detection for five years
EDIT: Whoops I misread, I thought you were saying that "run-only" was just a flag of sorts.

osacompile[0] does actually produce some form of bytecode when you pass the "x" execute only flag.

Here's a script that opens Safari[1] and the compiled output[2].

[0] https://ss64.com/osx/osacompile.html

[1] https://pastebin.com/raw/u94cwDj7

[2] https://pastebin.com/raw/9uuF39jW

hundchenkatze··on macOS malware used run-only AppleScripts to avoid detection for five years
Yes if it's compiled as a standalone script or script bundle and then run using osascript.

You can also compile osa scripts into .app bundles, since these are new, standalone apps they need to have a valid signature.

hundchenkatze··on Dns.Watch: Public DNS Servers
Sorry, this is off topic. I hadn't seen the looped square symbol used beyond the Mac command key, but it turns out that it signifies a place of interest in many locales.

https://en.wikipedia.org/wiki/Looped_square#Modern_use

hundchenkatze··on Dns.Watch: Public DNS Servers
I can't fully speak to their credibility, but I doubt it's an attack on HN users. I've heard of them outside of HN. If it is an attack on HN users specifically, then they're playing the long con. The first post to HN was 6.5 years ago.

https://news.ycombinator.com/from?site=dns.watch

Previous discussion: https://news.ycombinator.com/item?id=8060156

hundchenkatze··on I Downvoted Because
Here's the way I think they should be used:

Up == agreement

Down == disagreement

Flag == violates community standards

I generally try to add a thoughtful response to anything I downvote, but I am guilty of downvoting and moving on a couple of times.

I think requiring a response to downvote would be better than removing downvoting entirely.

hundchenkatze··on Response to “WireGuard: great protocol, but skip the Mac app”
You should give Windows Subsystem for Linux a try. It's what I'd choose in your scenario.

https://docs.microsoft.com/en-us/windows/dev-environment/ove...

hundchenkatze··on Citing 'Censorship' Concerns, North Idaho ISP Blocks Facebook, Twitter
It doesn't matter who's doing it, it's still censorship.
← PreviousPage 4 of 13Next →