HNHacker News
TopNewBestAskShowJobs

lq9AJ8yrfs

337 karma · joined August 7, 2022

lq9AJ8yrfs@apipocalypse.com serious inquiries only. No bots, no sales, no marketing, no offers, no drama.

I am kind but I don't forgive easily.

submissionscomments
lq9AJ8yrfs··on Australia withdraws fines amid 3D printed plate surge
I could see that.

I guess if you were a municipality you might respond by increasing the frequency and coverage of ANPR and imtegrate alike systems, like you suggest garage records and location tracking, to compensate. TPMS has been used in traffic flow management, and a lot of places have transponders for tolling or private access.

Increasing surveillance might be controversial but maybe less so in .au?

License plates do seem anachronistic, ANPR notwithstanding.

Depending on the sophistication of the operation it opens up some interesting angles - if you can pay a gig worker to wait in line or chauffeur you, seems like it wouldn't be much more to pay someone to put on a plate and drive around safely. A /get out of tickets/ service.

lq9AJ8yrfs··on Australia withdraws fines amid 3D printed plate surge
There is some novelty, to me at least, in matching the plate to a similar make / model. a 3d printer isn't ostensibly needed to make a fake plate but perhaps makes an "attractive nuisance", or perhaps is just more widely available skill among the criminally inclined than traditional manufacturing techniques.

From the article it's not clear entirely how you'd set about to clear your name / title if you were on the receiving end of a fine issued on the basis of a fake plate. Similarly not clear whether drivers could claim fake plates to get out of legit traffic citations.

lq9AJ8yrfs··on How Scientific Empires End
Neither US political party has a monopoly on Lysenko-style academics, unfortunately.

At least one of them seems to have an introspective capacity, at some level. So that's nice?

Genuinely I wonder if this would make for good charity? Where can I donate to promote political introspection? I'll consider any mainstream spot on the political spectrum.

lq9AJ8yrfs··on Tuning the Prusa Core One
Have you tried BOSL2? [1] Adds a lot to openscad, enough to keep me going at least. Fillets, chamfers, rounding, common parts, anchoring options, and it makes use of parent-child relationships between parts.

Not entirely perfect and some compromises, for example faceting isn't always consistent and hashtag highlighting doesn't seem quite right, but overall still it's good enough for me. The wiki on GitHub is pretty good, and with the source in hand I have had an easy time understanding what it does and tweaking it as needed.

For openscad itself, there are nightly builds with the new geometry engine, which too mostly works for me and is a huge speedup over the older CGAL engine. Renders that took minutes in CGAL now take seconds with the new engine. I like to take faceting through the roof for nicely rounded curves, but that kills CGAL apparently.

[1] https://github.com/BelfrySCAD/BOSL2

lq9AJ8yrfs··on The first non-opoid painkiller
Ibuprofen is possibly worse than that, it seems that it may interfere with sex hormones. [1]

This 2017 study I found in 30s of searching is seemingly underpowered at n=30 or so, but the (preliminary) implication is awful enough that I won't give my boys ibuprofen at all. Out of abundance of caution.

They can have naproxen or acetaminophen instead -- we keep those out of reach and teach our children not to touch them without adults.

Perhaps there is some more recent research?

[1] https://www.pnas.org/doi/abs/10.1073/pnas.1715035115

lq9AJ8yrfs··on Bot or human? Creating an invisible Turing test for the internet
> It is a self policying system that require some level of cooperation.

How hard is it to obtain one of these certificates as a bot?

What you are describing though is possibly comparable to Privacypass.

Apple seems to be on board with Privacypass, perhaps they'll include a digital voucher of some kind with their devices and that presumably contributes to old devices getting worse as the voucher is spent down.

Just imagine if the whole web can contribute to planned obsolescence and you can pay for a fast, hassle free internet experience again just by buying a new phone.

And then you can dump the old ones on eBay for cheap as long as you don't plan on using them to access online services. Unless you are willing to settle for basic economy web experience.

lq9AJ8yrfs··on Getting ready to issue IP address certificates
So all the addressing bodies (e.g., ISPs and cloud providers) are on board then right? They sometimes cycle through IP's with great velocity. Faster than 6 days at least.

Lots of sport here, unless perhaps they cool off IPs before reallocating, or perhaps query and revoke any certs before reusing the IP?

If the addressing bodies are not on board then it's a user responsibility to validate the host header and reject unwanted IP address based connections until any legacy certs are gone / or revoke any legacy certs. Or just wait to use your shiny new IP?

I wonder how many IP certs you could get for how much money with the different cloud providers.

lq9AJ8yrfs··on Bot or human? Creating an invisible Turing test for the internet
You are not wrong.

The article is more of an intro piece for newcomers and doesn't discuss at all the state of the art or where the competition is--the high end of the market is pretty saturated already but the low end is wide open.

There is a bit of a spread in the market, and the specific detection techniques are ofc proprietary and dynamic. Until you have stewed on it quite a bit, it is reasonable to assume everything you can think of has a- been tried b- is either mainstream or doesn't work well c- what working well means is subtle.

Bots are adversarial and nasty ones play the field. Sources of truth are scarce and expensive to consult, and the costs of false positives are felt acutely by the users and the buyers, vs false negatives are more of a slow burn and a nagging suspicion.

lq9AJ8yrfs··on Free open source Jira alternative? OpenProject 16.0 comes with many new features
How does OpenProject compare to Huly?

I just set up Huly self-hosted [1] on a raspberry pi. Just a little coddling to get it to run with podman-compose (e.g., had to backport podman from Stretch) instead of docker-compose. Huly has a lot of compelling isms, a little opinionated but not bent. The biggest difference vs Jira to me is emphasis on milestones instead of sprints.

Versus Wekan and several of the others I looked at, Huly seems to be a fairly complete project management suite with teams, calendars, products and product components, releases etc. Didnt look at OpenProject though.

Issue dependencies and issue relationships are the main feature for me - in Huly issue relationships are present but not well explored. Would be nice to have a query DSL too, if there is one I haven't found it yet.

There are some ambitious features around ERP and personnel, chat and conferencing (Livekit etc), haven't played with them yet. I wouldn't be upset to have on-prem Slack and Zoom alternatives.

[1] https://github.com/hcengineering/huly-selfhost

lq9AJ8yrfs··on Why are banks still getting authentication so wrong?
Hard disagree. If the only the state can give you an identity, then the state can take away your identity.
lq9AJ8yrfs··on The Web Is Broken – Botnet Part 2
I went to your website.

Is the premise that users should not be allowed to use vpns in order to participate in ecommerce?

lq9AJ8yrfs··on Against Transparency
But this is the same problem!

The GDPR and such define PII so broadly that more or less everything in web server logs is included in the definition.

Not sensitive PII, but still PII that the individual has rights and interests over.

That is more or less on purpose, and they do have a point.

Rogue debugging on the other hand is not what they are worried about vs using the data in web logs for targeting, profiling, etc.

If you could sell your web logs, would you? Vs how much would someone pay reddit or github for theirs? And would you be ok with that if your browse history was in there?

lq9AJ8yrfs··on Milwaukee M18 Battery Reverse Engineering
Seems like this is the kind of thing that could be the basis of a community?

It feels like there is a segment the tool co's are selling toward, that leaves another segment underserved.

Eip if this is something you want to hobby-horse on.

lq9AJ8yrfs··on Fake job seekers are flooding US companies that are hiring for remote positions
> A LOT of people are far worse at interviewing than they think they are.

This works both ways right? Would it be fair to say that interview processes don't differentiate good hires from bullshit artists? Feels like framing the problem differently might make it tractable.

lq9AJ8yrfs··on Open-sourcing OpenPubkey SSH (OPKSSH): integrating single sign-on with SSH
Authentik supports this [1] too, kinda. It seems you can set it up to register you based on a bona fide kerberos auth, and logs you in (maybe? would have to check) with kerberos but seems to keep a parallel synchronized authenticator in its own database for OIDC and "modern" auth. Doesn't seem to embed kerberos-isms as "claims" in OIDC either. Might be awesome if it did? Or terrible, depending on how you look at it.

[1] https://docs.goauthentik.io/docs/users-sources/sources/proto...

lq9AJ8yrfs··on I Went to SQL Injection Court
In the new language proposed in SB0226 (as linked, didnt search for authoritative sources, can't tell how durable that link will be for posterity, arrgh archiving the web is hard etc), doesn't that language leave open a hole for excessive complexity to be a reservoir for FOIA resistance?

Feels like there is an important theme here that SB0226 is dancing around --could government be legible in addition to being "plain-text" transparent?

"plain-text description" of "each field of each database of the public body" and "specific database queries" may not do what you mean.

Not sure how to fix it though.

I could see gratuitous ORMs and database-of-databases patterns winning tax dollars with taunt-them-with-the-schema listed as a feature.

lq9AJ8yrfs··on America's National Security Wonderland
I have not spent time in mainland China but I have spent time in Hong Kong and while there sought out and immersed in Chinese "propaganda" there. Which was conspicuous and omnipresent. Have had a good amount of exposure to Chinese nationals professionally and socially, probably in the vicinity of 10% overall of each.
lq9AJ8yrfs··on America's National Security Wonderland
President Xi's writings are full of humanism that would make at least one of the US political parties blush. Versus his tactics seem to be the envy of the other -- and in spite of the polarization in the US they probably could be brought to admire Xi's values.
lq9AJ8yrfs··on America's National Security Wonderland
In history class I was taught in the 60s and 70s the US preferred and encouraged China to develop itself, partly (or mainly I guess depending on your view) as a foil to the Soviet Union, partly because of internal humanistic values and belief that prosperity is good for people.

From a 50+ year historical standpoint it seems even more than philosophy that the two should get along.

Not confident in my understanding though, isn't there more to current politics than recent events and the last 30 years? Wondering if and suspecting there's something with more predictive value than online headlines and pundits.

Demographics clearly -- TFR types of analysis seem compelling, although that's on a longer time frame than current tensions.

lq9AJ8yrfs··on America's National Security Wonderland
Can someone explain the root of tension between the US and China? Is it just vanity and inevitable that two major powers will fight? Resource scarcity?

Beneath a few layers of culture it seems the internal values of the two countries are very similar and fairly compatible.

Maybe that breeds contempt but seems like there is plenty of room for the two countries to play together nicely especially if they make progress on their faults. In spite of the online acrimony, each side seems to understand well enough its own and the other's faults, and they generally seem to be trying to work on their own faults as much as working on each others'.

This seems like a relationship that may come to blows but should be salvageable, especially if the blows can be softened or avoided perhaps altogether.

lq9AJ8yrfs··on CAPTCHAs: 'a tracking cookie farm for profit masquerading as a security service'
You are not missing something, you are finding it: the game theory of bots vs anti-bots is subtle and somewhat different from regular software engineering and cyber security.

For the most part bots wish to be hidden and sites wish to reveal them, and this plays out over repeat games on small and large scales. Can be near-constantly or intermittently.

The bot usually gets to make the first move against a backdrop that the anti-bot may or may not have a hand in.

lq9AJ8yrfs··on A dose of MDMA transformed a white supremacist
If bad trip includes overdose or drug interactions, serotonin syndrome [1] is possible. The wiki even cites mdma as a cause.

[1] https://en.m.wikipedia.org/wiki/Serotonin_syndrome

lq9AJ8yrfs··on Ross Ulbricht granted a full pardon
Maybe Thoreau? That's more authentic and gets at similar themes. On more than one level considering his circumstances and run-ins with law enforcement.

”Under a government which imprisons any unjustly, the true place for a just man is also a prison."

lq9AJ8yrfs··on Inconvenient truths about the fires burning in Los Angeles from two fire experts
Yes.

They are clearly preferring to save their money on insurance and keep the chance to lose all their belongings and be displaced. That is a fair way to say what happens when people with the option to buy insurance don't. Including people both whose houses burnt down and whose houses didn't burn down.

In economics there is a difference between stated preferences and economic or "revealed" preferences. It shows what people say they want and what people do with their money are not always the same thing.

Sometimes especially what people say and what people do with their money differ in predictable ways.

It can be fun to juxtapose the observed behaviors with what people say. Makes for very compelling and sometimes cynical commentary.

lq9AJ8yrfs··on One of Florida's most lethal python hunters
Lenses are a thing in the thermal spectra, but you have a point that they are very expensive if your desired objective doesn't coincide with someone else's bulk use case. They are also typically hard to care for and some of them are toxic.

For magnification at least, doesnt help with hunting pythons probably, you can use the focusing lenses for laser cutters, which typically work in thermal wavelengths, to turn a handheld thermal camera into a microscope. Or is it a "milliscope" i guess owing to the limit imposed by the coarser wavelegths.

I wonder how much optical solutions could be solved with the "wrong" lens paired with a well trained transformer or similar modern AI. If google or apple can deblur your family photos is it unrealistic to think you could deblur a thermal image acquired using found lenses?

Crystallography algorithms might even work out of the box? Or be adaptable hopefully?

lq9AJ8yrfs··on Working in the office 5 days/week to build company culture is a myth: PwC report
I saw examples of both your and GP's experiences in my experience at a big4.

Unfortunately none I saw (sample size: a handful in detail and perhaps dozens to a skim) followed even basic statistical practices I had learned in undergraduate studies at a well-respected university.

There were clues that at least some of the parties involved knew better, but the imperative to publish completely overwhelmed any instinct for academic rigor.

It was dressed up as "eminence", which came after sold work and delivered work (in order) in annual reviews. Statistical rigor would probably help eminence, but there were faster paths to eminence.

lq9AJ8yrfs··on Radar Detector Legend Michael Valentine Has Died
All the economic evidence of risk homeostasis, and general consistency around the subject, suggests your preferences writ large are at odds with and part of a battle with human nature. That's fine for an opinion but the implications are pretty dire for interventions - like squeezing a balloon there will inevitably be side effects.

Not trying to diminish the consequences of said risks.

A successful strategy probably involves accounting for and maybe even improving the competing economic interests rather than picking one and stifling it.

lq9AJ8yrfs··on Hypermedia Controls: Feral to Formal (PDF: ACM HT'24)
What does one do with a formalized definition of hyper media controls
lq9AJ8yrfs··on Making your own hot sauce
Thank you.

Botulism in food is a well-studied subject.

Even particular foods like garlic, notwithstanding aspersions cast in other comments, have empirical studies e.g. [1] that look pretty plausible. Several more reports from reputable sources turn up in the first few pages of internet searches around just garlic.

It is true that there are a lot of traditions and implicit knowledge around food safety, but it seems like a strawman fallacy to ignore what is explicitly known.

We're in a golden age of knowledge, people!

[1] https://www.ncbi.nlm.nih.gov/pmc/articles/PMC4348254/

lq9AJ8yrfs··on Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224
Serverless and CDN style edge compute are two scenarios that this may be relevant to, where untrusted or semi-trusted code may run in some construction on top of V8. Especially providers of those services are probably tuned in right now or ought to be.
← PreviousPage 2 of 3Next →