HNHacker News
TopNewBestAskShowJobs

ikonst

91 karma · joined June 11, 2012

https://github.com/ikonst
submissionscomments
ikonst··on Traps to Developers
yaml: https://www.bram.us/2022/01/11/yaml-the-norway-problem/

bash: errexit depends on caller's context, will utterly fail you one day: https://lists.gnu.org/archive/html/bug-bash/2012-12/msg00093...

ikonst··on Russian airlines ordered to stop selling tickets to Russian men aged 18 to 65
same for the railways: https://www.kommersant.ru/doc/5571565

not unthinkable such things will follow, but so far might be fake news

ikonst··on Reliability of police mobile phone evidence questioned after hack
It's the news article that was already widely published and a local take (not by any government body, "campaigners have called") in Scotland.
ikonst··on Oldest 'nearly complete' HIV genome found in forgotten tissue sample from 1966
Same (growing up in Israel). Didn’t realize it’s “gay” until much later.

Here’s from 1992: https://youtu.be/rQTbSFojYRE

ikonst··on Google Chrome is ditching its XSS detection tool
Reminds me of Perl's taint mode
ikonst··on Lyft lobbying to prevent Portland from regulating impact of ride-sharing
So it's not a status but just a per ride assessment -- if you appear disabled when the driver comes to pick you up, he should ask not to receive surge pay for that particular ride?
ikonst··on Lyft lobbying to prevent Portland from regulating impact of ride-sharing
Many of the bullet points are somewhat vague, but one is strangely specific:

> Prohibiting companies from charging passengers with disabilities higher prices during busy times.

First of all, what constitutes 'disability'?

How will passengers identify themselves as 'disabled' to the apps?

How would the companies store this highly private information? (think medical-info grade, not credit-card grade)

What will indemnify the companies from claims of discrimination, claims possible in light of the companies being aware of users' disabilities, information they never wanted to keep in the first place?

And finally, not to make it the main topic, but who would pay for this? That "surge pricing" you pay is, in turn, being paid to the drivers. The drivers are "chasing the surge'.

ikonst··on Slack: Other browsers require significant effort so we're focused on Chrome
Maybe not for the operation they're running, of which VoIP is only a small part.
ikonst··on Slack: Other browsers require significant effort so we're focused on Chrome
WebRTC is somewhat new and complex, and browser support varies greatly. I don't know what kind of unlimited resources behemoth you imagine Slack to be, but I can definitely see how doing consistently working cross-browser WebRTC would be too much effort to be able to pull off at a given time.
ikonst··on The Refuseniks
Yeah, I was somewhat surprised by those. "Classes" on domestic flights in the USSR?! And yeah, GUM was (and still is) a department store for Soviet citizens - https://en.wikipedia.org/wiki/GUM_(department_store).
ikonst··on Ask HN: Why is Stripe's 'Remember Me' considered secure? Or Lyft's sign up flow?
re Lyft: We detect recycled phone numbers, and we'll challenge you (or "not you") for further identification.

Phone recycling has been a much bigger problem for non-fraudulent cases, e.g. you pop-in a new SIM card and naively sign up for Lyft, getting the account of someone else (e.g. a tourist's). Fraudulent takeover of passengers' Lyft accounts hasn't been happening that much — fraudsters have a much easier time stealing credit card numbers than Lyft accounts.

ikonst··on The Ultimate in Garbage Collection (1995)
https://sites.google.com/site/normanhcohen/
ikonst··on French historian Henry Rousso held for 10 hours and threatened with deportation
This was done under previous administrations just the same. Telling a CBP officer that you're come to be "paid to lecture" is usually the kind of honesty that doesn't pay off.

CBPs are triggered by the word "work" and "get paid". For example, when you come to volunteer on a WOOOFing farm, you're advised to say you've come for a learning experience rather than "to volunteer" (= CBP hears this as "to work"): https://wwoofusa.org/how-it-works/#will-wwoof-help-me-get-a-...

ikonst··on French historian Henry Rousso held for 10 hours and threatened with deportation
I've read similar stories before the current administration. Telling a CBP officer that you're going to be "paid to lecture" is not recommended. This is a kind of honesty that doesn't return a favor.
ikonst··on Making More Outside The App Store
I think Rogue Amoeba was already doing serial numbers etc. for their other products.

re Payments: Have you ever seen how easy Stripe is?

ikonst··on SF blasts Uber, Lyft for downtown traffic congestion
I think you're talking about the BART that's much more than SF. The Muni underground tram is rather quiet.
ikonst··on Auto Safety Regulators Seek a Driver Mode to Block Apps
Make you perform a challenge that's possible with two hands but impossible with one.

See https://www.youtube.com/watch?v=9aMXEOAvfb4

ikonst··on Israeli firm can steal phone data in seconds
Does anyone track? I guess as much anyone tracks any "U.S. tax dollars" going to any other US government stuff one doesn't like or agree with. (In other words, probably not much.)

Cellebrite doesn't "target" the U.S. It happily develops forensic tools to target Chinese, U.S.-ian, heck, even Israeli phones (if there were any to speak of).

Furthermore, Cellebrite don't sell exclusively to the U.S. They will sell to Canada, UK, France, Germany or any legit law enforcement agency that has budget. U.S. law enforcement may refrain from buying Cellebrite wares. They might decide to buy from a competitor, like Swedish firm MSAB. Heck, they may decide it's "unethical" to own such tools.

While it might adversely affect Cellebrite's bottom line, I think it will first and foremost adversely affect U.S. police departments' capabilities.

ikonst··on Israeli firm can steal phone data in seconds
Cellebrite got its start with the UME, a phone memory transfer tool for carriers' (POS and support). Carrier-oriented tools are a major part of its operations, though there have been some talks about spinning this off to a separate company.

Cellebrite gets early access to phones NOT due to its forensics operations, but for UME, since carriers (and that's lots(!) of carriers worldwide) are very much interested in good consumer experience on the devices' launch day.

I actually doubt it's been particularly significant to its forensics operations.

ikonst··on Fork: Fast and Friendly Git Client for Mac
The web page lacks any screenshots of the change staging screens.
ikonst··on Fork: Fast and Friendly Git Client for Mac
Yeah, not sure what "fast" refers to.
ikonst··on Museum of Soviet arcade machines
I've been to the one in Saint-Petersburg. Probably worth a visit, but do expect most machines to be under-maintained, and keep you wondering if the game is even receiving your inputs...

Though, I suppose, when those machines were placed in random "palaces of culture" across the USSR in the 70-80s, their state on average wasn't any better.

ikonst··on Why we kept our startup in Australia
Uh, wait, does the US have a "startup visa" now?
ikonst··on The improbable rise and fall of Couchsurfing
For me, it greatly depends on the location. At locations where hostels are readily available and cheap, I had easy time couchsurfing, e.g. Mexico, and had a very good time (that was last summer, 2014). In SF, yeah, good luck, and better be a handsome girl/guy (and maybe get some unwanted advances).

Though, actually, back in 2010 I did find a CS host in Brooklyn, NY within maybe 5-10 requests, so YMMV.

Israel, I've been told by my guests, is very easy.

ikonst··on SSD: How to Optimize Your Solid State Drive for Linux
How recent is it? I see his BIOS screenshots are from a curved CRT.
ikonst··on United Airlines bug bounty program
Exactly what you'd expect from an airline:

"Bugs or potential Bugs you discover may not at any time be disclosed publicly or to a third-party. Doing so will disqualify you from receiving award miles."

It's as if it was designed in the same spirit as a frequent flyer program -- really stingy payout, with lots of strings attached. I can't see how this can incentivise anyone to do free penetration-testing for them.

ikonst··on Ask HN: I got rejected from Facebook, Dropbox, Microsoft, Quora, What's Wrong?
Internships in European countries are entirely plausible. US visa situation is an exception to the rule among developed countries.

For example, Facebook has London offices, which is their go-to solution for US visa troubles.

Egypt might be "3rd world" in somebody's book, but I've never heard about the visa process being particularly racially biased (at least US visa process).

ikonst··on USCIS Completes the H-1B Cap Random Selection Process for FY 2016
It guess this mostly matters for people who meant to apply through the Master's cap (graduates of US colleges with Master's degrees). Since there were more than 20k (as USCIS stated), the rest are reduced to regular applicants.

But it's not like they're "taking your spot" in the lottery; if there was no preferential treatment for Master's, they'd still apply as regular applicants.

ikonst··on GNOME 3.16 on OpenBSD [video]
How does one patch KDE2 under FreeBSD?
ikonst··on The Windows Driver Frameworks are on GitHub
Last time I checked, code signing certificates could be had for $400 a year, not an exorbitant price to many tech enthusiasts.
Page 1 of 2Next →