HNHacker News
TopNewBestAskShowJobs

matsz

442 karma · joined January 3, 2020

https://mat.dev

contact@mat.dev

submissionscomments
matsz··on Google took three months to remove scam app that stole over $5M
At this point, Google should accept new sign-ups for critical products ONLY from countries that have a functioning law enforcement system when it comes to this - and check based on ID card/passport.
matsz··on The Trouble with __all__
Python's imports are the worst I've seen in any mainstream programming language by far.

Relative path imports are unnecessarily difficult, especially if you want to import something from a parent directory. There's no explicit way to define what you'd like to export either.

The syntax is inconsistent, too:

    from X import Y
    import Z
vs. (modern JS)

    import { Y } from 'X';
    import * as Z from 'Z';

Even C/C++ make more sense here.
matsz··on Ask HN: How are you finding the job market in July 2024?
I was searching for a job from April to June 2024 as a senior/lead front-end (React) dev in EU (Germany). In addition to the usual mid-year slow down, the market itself was tougher. It seemed like a lot of companies had weird standards, contradictory at times even; even though the salaries they offered were much lower than before.

Luckily I landed a great job in late June, but it took 60+ applications and countless interviews.

matsz··on Ask HN: How are you finding the job market in July 2024?
Same experience when it comes to LinkedIn, tons of InMail in 2022 and before, barely any in 2023 and afterwards.
matsz··on StreamPot: Run FFmpeg as an API with fluent-FFmpeg compatibility, queues and S3
Interesting that it uses a similar configuration syntax to Apache HTTPd.
matsz··on StreamPot: Run FFmpeg as an API with fluent-FFmpeg compatibility, queues and S3
That'd be a great solution, I'm using ffmpeg in my personal media server app to generate thumbnails and transcode media on the fly and I was wondering that too.

There are also a few things that I had to patch on top of ffmpeg (for example it doesn't do well with generating singular HLS packets on demand). Would be nice to have a pluggable architecture that can link multiple things together like that.

Might implement this myself if I end up having the time for that.

matsz··on Human neuroscience mustn't forget its human dimension
Tangentially, I wonder how much of the research chemical ("legal highs") market is just companies releasing things to gather data for compounds that could be then commercialized.
matsz··on Trading cards with e-ink displays (2023)
Oh, that makes a lot of sense. Thank you!

What a great low-cost idea for multiplayer games.

matsz··on Trading cards with e-ink displays (2023)
Since nobody in this or the original thread has asked this and I can't find any reference to it in the post - why is there a cable that connects the device to itself?
matsz··on Phishing scammers impersonate AH employee to drain crypto wallets
There is no way to prevent this on the OS level without making an OS as locked down as iOS.

Anything less, and the user will find a way to accidentally give admin permissions to random apps.

NB: I don't believe that it's the OS's job to protect the user from themselves. Shielding people from consequences of their own actions results in people making worse mistakes later on.

matsz··on Twenty, a modern CRM alternative to Salesforce
The world runs on subpar software, and will continue to do so... Windows being the best example of that.
matsz··on Microsoft's Nadella is building an AI empire
SteamOS (via Steam Deck) is surprisingly amazing for gaming. Most of the titles I tried worked perfectly fine without any configuration changes.

I haven't felt the need to use Windows for years now thanks to this.

matsz··on OpenAI and Apple Announce Partnership
Switching to 24-hour clock solves that problem.

Personally, 12h clock always confused me, so I wouldn't blame Siri.

matsz··on Alternative clouds are booming as companies seek cheaper access to GPUs
Oh no, I would never go AWS for dedicated. Should've specified that in my comment so people don't get disappointed if they try to get that from AWS.
matsz··on Alternative clouds are booming as companies seek cheaper access to GPUs
Yep, I'm renting two servers from Hetzner; have one in Germany and another in Finland. Both cheap (€40/month) and over the few years I've been using their services, I have nothing to complain about.
matsz··on Alternative clouds are booming as companies seek cheaper access to GPUs
This is precisely why I stick to dedicated servers for my own personal projects.

$40/month for a machine, doesn't get any more predictable than this.

matsz··on Breaking Bitlocker – Bypassing the Windows Disk Encryption [video]
This is particularly interesting considering that TrueCrypt recommended migration to BitLocker as the main option for Windows: https://truecrypt.sourceforge.net/

IIRC Apple's version of TPM (Secure Enclave) should be immune to such attacks (since it's on the SoC, but I'm not sure whether the communication is encrypted or not), and the main data encryption method for GNU/Linux (LUKS) does not utilize TPM by default (might depend on distro though).

EDIT: I believe that the method in the video only works for volumes that aren't password/PIN-protected.

matsz··on 240-Gbit/s sub-THz wireless communications using ultra-low phase noise receiver
If you live in a small/medium apartment then 6E is quite good. I've been using one of those "enterprise" tri-band APs for around a year and my experience has been also amazing, with just one AP in the entire flat.

Enabling all bands should allow your device to just drop to 5GHz/2.4GHz when needed. This has been seamless for me.

matsz··on Tsdocs.dev: Type docs for any JavaScript library
> it might be nice to still show the README (and package.json metadata if added) of the original package-name

This would be great, @types/* docs are rarely ever useful. Although it'd be still nice to indicate that the types are not available in the original package.

matsz··on Show HN: Beeper Mini – iMessage client for Android
The spam iMessages I've received had the "iMessage" text above, were sent from a seemingly normal phone number and had a "Report Junk" button at the bottom of the screen (which text messages don't have).
matsz··on Show HN: Beeper Mini – iMessage client for Android
There's already a ton of those operating, I get iMessage spam at least once per day.
matsz··on Show HN: Beeper Mini – iMessage client for Android
Great job! Just from taking a quick look at this, what you have here is much bigger than iMessage itself.

This could literally allow things like Universal Clipboard to work on Linux and Windows - by using the method presented here to access the iCloud Keychain and generating Continuity keys and placing them there - then the iPhone will broadcast its clipboard data encrypted with those keys via BLE. If I understand all of this correctly.

matsz··on You don't need JavaScript for that
True. As an user, I just don't visit websites that disrespect me, though.

I keep JavaScript always on and if I see a website abusing my trust, I just blacklist the entire website from my browser and never visit it again.

As a developer, all of my publicly available personal projects feature no tracking, no advertisements, and no third-party JavaScript in general. JavaScript is a really good tool, but as any tool can be, JS can be misused.

matsz··on You don't need JavaScript for that
> (Don't make me needlessly enable JavaScript to use your site.)

Only a very small but vocal minority of users disable JavaScript, as it's not a default setting in any of the web browsers with a market share higher than the rounding error.

In a lot of cases, designing a no-JS website disadvantages both the service provider and the users:

- the service provider has to support a higher load to render the page and process the data on the server,

- the user has to endure longer processing times for their data, since their request necessitates a round trip from/to the server adding additional latency.

For example, let's think of an image processing web app. All of this can be done on the client side (and this gives the user a higher sense of privacy since their data doesn't need to reach the server). It's much faster there, reduces the server load - allowing the service to be used by more people at once.

And there is no value in appeasing the no-JS minority, since either maintaining a no-JS version of the app in parallel, or building the entire app without JS, outweighs the potential ROI from the <1% of users[1].

If you disable JavaScript because of tracking and ads:

- browser extensions exist to only prevent tracking JS from running without affecting the websites,

- you can still be tracked server-side.

[1] https://gds.blog.gov.uk/2013/10/21/how-many-people-are-missi... - 0.2% of users of the UK online government services had JavaScript disabled. Based on the research I can find online, most of the no-JS users are using TOR, which isn't a terribly profitable demographic for commercial websites.

matsz··on Improving deep sleep may prevent dementia, study finds
Could you describe the steps you took to perform this experiment? I'm curious and would love to do that myself.
matsz··on Localsend: Open-Source Airdrop Alternative
I was able to copy 4GB+ files over WebRTC from Safari (iOS) to Firefox (Linux) without hiccups. The speed is not great though most of the time.
matsz··on Localsend: Open-Source Airdrop Alternative
Have you tried clearing cache? (I've configured the server to be a bit more aggressive about caching to improve load speeds, but JS bundle updates should be available instantly.)

I've just tested on Chromium 118.0.5993.70, Firefox 118.0.2 and Safari (iOS 17.0.3) and the issue seems to be gone.

matsz··on Localsend: Open-Source Airdrop Alternative
My apologies, this is not intentional, just has been an issue I have had always forgotten about. I'll take another look at it now.

Thanks for reminding me.

Update: Fixed. (Expected this to require a rewrite but... it was just a matter of passing one option to react-router.)

matsz··on Localsend: Open-Source Airdrop Alternative
Could you add https://drop.lol to the list (also open source)?

Disclaimer: I'm the author of drop.lol.

matsz··on GA of the new Microsoft Teams app (sans electron)
It's interesting that they didn't use WebView2 before, knowing well that they could guarantee its availability (since they own the OS).

They do not ship a version for Linux, and macOS has its own WKWebView, so I'm not sure what was stopping them before.

← PreviousPage 2 of 3Next →