HNHacker News
TopNewBestAskShowJobs

jorams

4,053 karma · joined August 1, 2014

You can reach me at hn at joram dot io
submissionscomments
jorams··on Don’t let your domain name become a sitting duck
That's probably because they won't host your DNS without having the domain registered with them.
jorams··on Show HN: Shadow IT Scan – Uncover SaaS Apps, Users and Risky OAuth Scopes
I don't think that's possible, the "Start Trial" button immediately redirects to Slack.

This does seem like a weird restriction. Nothing about the product otherwise seems Slack-specific.

jorams··on SVG Triangle of Compromise
There's an important caveat with this: It does not work cross-origin, and there is no way to make it work except for including some JS like svg4everybody. CORS does not apply.
jorams··on SQLite: 35% Faster Than the Filesystem
> To read/write blobs, you have to serialize/deserialize your objects to bytes. This process is not only tedious, but also varies for different objects and it's not a first-class citizen in other tools, so things kept breaking as my dependencies upgraded.

I'm confused what you mean by this. Files also only contain bytes, so that serialization/deserialization has to happen anyway?

jorams··on Cloudflare reports almost 7% of internet traffic is malicious
Cloudflare likes using their extensive knowledge of everything on the internet for marketing purposes. When it comes to their customers they suddenly know nothing. I think calling it out until they change either side of that is reasonable.
jorams··on Mercurial is simply too good (2020)
I don't think being too good is the reason it didn't beat git. I think Mercurial didn't beat git because it's only marginally better. Not nearly enough to overcome network effects, but also just not enough to make people move for personal use. It is always advertised as more intuitive, and it might be, but the list of "very intuitive verb commands" largely matches git for the most common actions.

In addition the different kinds of branches are confusing. Once you understand git branches they're simple. Once you understand Mercurial branches you understand just one of the branching models it offers. I believe "bookmarks" are the most similar to git branches, but good luck finding out about them from the website without already knowing they exist. Instead it tells you all about keeping around a bunch of copies of the source tree.

jorams··on Zed on Linux Is Here
It's pretty self-evident that Linux support can't be expected to mean Windows support. If something is broken in the Windows simulation of a Linux GUI stack you should be complaining to Microsoft, not to the developers of a program that works fine in a normal environment.
jorams··on Entering text in the terminal is complicated
For the complaint to make any sense in the first place there needs to be an expected alternative way to go back to the beginning and end of a line. Otherwise it would be "it took me maybe 15 years to get used to being able to go to the beginning or end of a line in one keystroke". The two such options I'm aware of are Home/End (on macbooks I believe that is Fn+arrow keys) and Ctrl-a/Ctrl-e.

What alternative key combinations do you expect to work for the purpose?

jorams··on Entering text in the terminal is complicated
I wonder what terminal that is, because the Home and End keys, which I'm pretty sure are the expected alternatives, work fine in every terminal for me on Linux.
jorams··on Ente Auth: open-source Authy alternative for 2FA
Aegis allows you to create groups and put codes into them, and then you can filter the list to any number of groups. Works quite well for me.
jorams··on Pharma firms stash profits in Europe's tax havens
> R&D is one thing, but most drugs fail at the clinical trial stage. This money (hundreds of millions per drug) is just gone, unlike R&D which might result in new tech or at least a patent.

Are you saying the clinical trial stage is somehow not part of R&D spending? It sounds like quite obviously research to me, but I'm not familiar with how it's actually reported.

jorams··on Postzegelcode
I found an article[1] from before it was launched. Translated:

> The most important reason for the introduction of the Zegelcode is that about 20% of our customers indicates they don't have a stamp on hand when they want to send something.

[1]: https://www.internetkassa.nu/postnl-verwacht-digitaal-franke...

jorams··on All web "content" is freeware
> run simple, non-intrusive activation procedure (not from Microsoft)

> No cracks needed.

These are contradictory statements, and I'm not sure why you'd think otherwise.

jorams··on Counterscale and the New Self-Hosted
Self-operated makes some sense, but if the idea is that you don't have anything to operate maybe self-deployed is better?

I'm not sure where to draw the line to differentiate it from a SaaS. For example Salesforce is clearly SaaS, but is also an application platform with a built-in database.

jorams··on Counterscale and the New Self-Hosted
Yeah calling this self-hosted is confusing. Everything about it is built on non-portable, proprietary products exclusively available from and hosted by Cloudflare.
jorams··on Microfeatures I love in blogs and personal websites
> (btw, just checked for Firefox and Safari, and the scrollbar is visible at all times, unless the website explicitly hides it)

There is a setting for this called "Always show scrollbars" and I know it defaults to off for me. The underlying about:config rule is specific to GTK though, so this may be platform-specific.

jorams··on A ChatGPT mistake cost us $10k
Yeah this is not a good thing to advertise.

- They were under large time constraints, but decided a full rewrite to a completely different stack was a good idea.

- They copy-pasted a whole bunch of code, tested it manually once locally, once in production, and called it a day.

- The debugging procedure for this issue so significant it made them dread waking up involved... testing it once and moving on. Every day.

The bug is pretty easy to miss, but should also be trivial to diagnose the moment you look at the error message, and trivial to reproduce if you just try more than once.

jorams··on De-googling, so far
That's an odd sticking point. Domain registrars that don't do all those things are an exception. For the vast, vast majority of them the primary things they do aside from registering domains is offering email and hosting.
jorams··on Worklenz: Open-Source, All in one project management tool
What I'm saying is that they will have to be as soon as they accept an external contribution. The code they accept will be licensed under the AGPL by the contributor. A hosted-only version including both the contribution and hosted-only features would be a derived work, and thus require source disclosure under the terms of the AGPL.

(It is possible to keep stuff out of the "standard" distribution and only disclose when asked, but that seems like a whole lot of effort to maintain two identically licensed code bases.)

jorams··on Worklenz: Open-Source, All in one project management tool
I'm not sure what to tell you other than to click on the submission link, which goes straight to the GitHub repository containing the source code.
jorams··on Worklenz: Open-Source, All in one project management tool
It's licensed under the AGPL, they welcome pull requests and don't seem to require a CLA, so open core is not really possible.
jorams··on Microsoft PlayReady – Complete Client Identity Compromise
Indeed I can't, just like you cannot prove, or cite any research, showing it wouldn't have been 1,000 if the content was accessible without arbitrary artificial restrictions on the devices consuming it.

By all means keep taking down illegal streams. I'm not excusing the people providing them. I'm saying maybe stop treating every paying customer as if they're going to do that to the detriment of the service provided. Because it is negatively affecting the service.

jorams··on Microsoft PlayReady – Complete Client Identity Compromise
> Don’t cite a sloppily-produced research paper

I'm not, I'm citing their own comment in which they describe taking down 20,000+ illegal streams of their already DRM-"protected" content on launch day. He's describing it not being effective at all.

Glass windows, speed limit signs, the tax system (what?) provide value to the people affected by them. DRM is a pure negative for customers.

jorams··on Microsoft PlayReady – Complete Client Identity Compromise
The argument from the other side is at least as frustrating.

> ...nothing has convinced me that if we turned off DRM we'd: 1) save money 2) not have issues with piracy proliferation

> That night our anti-piracy team took down 20,000+ illegal streams

You already have enormous issues with piracy proliferation. The money you spend on DRM may be "relatively insignificant", but it's still money being wasted on "protection" that has already proven to be utterly ineffective.

I am in neither of your three groups. I want to pay for content. I pay for a lot of music, for example. But you're not going to bully me into paying for your shit by making it as user hostile as possible. As a paying customer I expect at least the level of service that piracy groups have no trouble providing, but instead I'm treated like an enemy every step of the way.

In practice this means I avoid TV shows and movies, but when I do want to watch one I have absolutely zero moral qualms pirating a product that is not for sale. I'll even go out of my way to look for a DRM-free copy I can pay for first. This takes more time than pirating it once I inevitably find out that's not available.

jorams··on Microsoft PlayReady – Complete Client Identity Compromise
If that were true it would be possible to watch in 4k resolution on Netflix on Linux. But it's not.
jorams··on DNS traffic can leak outside the VPN tunnel on Android
Well I don't know how many IP addresses each of Mullvad's servers have, but they list a domain name, IPv4 and IPv6 address for all of them publicly[1].

[1]: https://mullvad.net/en/servers

jorams··on TfL's simple pop-up message led to a significant drop in paper ticket sales
- Being able to use an OV Fiets. This requires putting a free subscription on the card.

- Automatically adding money to the card's balance when it runs low

- Getting back the money on the card when it expires

- Senior discounts for people over 65

- Being able to add a subscription when you do want one for a while

jorams··on Some Fritz!Box modems might have been hijacked
Skipping over the bad idea that this fritz.box-domain is for a bit, this seems like a pretty major failure on the part of ICANN to prevent name collisions. IIRC they had a whole bunch of plans and policies to prevent name collisions 10 years ago, but somehow a popular brand of modems failed to come up?
jorams··on AltStore. The first Apple approved alternative App Store
What you're saying is that you are not interested in solving what you describe as "The key problem with iOS app distribution".

I am not claiming Android is perfect in any way; I don't think a truly good usable mobile option exists. I will claim that the differences in quality are minor in comparison to the problematic level of control Apple exercises over iOS.

jorams··on AltStore. The first Apple approved alternative App Store
The problems you talk about are deliberately created by Apple and only fixable by Apple. If you buy an iOS device you're opting in to whatever bullshit Apple comes up with that isn't explicitly regulated away, and when regulation is introduced Apple has made clear that they will do whatever they can to avoid complying with the spirit of said regulation.

The creator of Delta is pushing the first regulation-protected route they have for distributing their app. You started this thread saying you wish they didn't.

Dealing with notarization, timeouts, yearly developer account subscriptions, it's all terrible. The only hope to ever get away from it is to put up with as little of it as possible, which currently means an alternative app store. Or you can stop buying Apple devices.

← PreviousPage 9 of 28Next →