HNHacker News
TopNewBestAskShowJobs

michaelt

39,092 karma · joined June 20, 2012

Greetings from London, United Kingdom! I'm Michael.

http://www.mjt.me.uk

hn@mjt.me.uk

submissionscomments
michaelt··on Where did all the public bathrooms go?
Some measures that mitigate a problem are associated with places where said problem is a frequent occurrence.

If a place has tornado drills and tornado shelters, it's a safe bet that tornados are at least somewhat likely.

Some safety and security measures have the effect of making a place feel unsafe and insecure, for this reason.

michaelt··on Ask HN: Why do corporate failures always seem to punish the wrong people?
If an army general orders a disastrous assault that completely fails, they might get demoted or relieved of command. The infantry that were ordered to charge the machine guns pay a much higher price (as do the junior officers that lead the charge). Hell, perhaps nowerdays they'll have a 'blameless postmortem' to 'learn lessons' and there won't even be a demotion.

Us folks who work for a living aren't charging any machine guns, thankfully - but if my boss's boss's boss can't get our division to make a profit the entire division is at risk, no matter how good my area of the division may be.

Or hell, maybe nobody in my 'chain of command' made any mistakes at all. We could be the world's greatest manufacturer of airplane seats - but if the plane they're put into has a few crashes, and orders dry up, there's no money to pay my wages.

Is it just? No - it's just the nature of work.

michaelt··on Why is Anthropic's public writing style so unlike Claude's?
AI companies seem eager to perpetuate the fantasy that all users carefully review all LLM output, and supervise all tool calls.

Anthropic certainly isn't planning to take responsibility for Claude's mistakes - that's the user's responsibility. Describing everything as 'collaborating' is I think part of their efforts to emphasise the user's role in the process.

michaelt··on Wi-Fi 8 is the first wireless upgrade in years that isn't chasing speed
If wired Ethernet shows less than 1Gbps, something is wrong. This stuff is super reliable.
michaelt··on Iranian hackers shut down UK power plant for 4 days
Those same MPs decided, for example, that it should be mandatory for EV chargers to be internet connected.

They could do with a dose of reality, IMHO.

michaelt··on Canada will match US tariffs 'dollar for dollar' as trade talks break down
> Manufacturing has never really declined in US, not in absolute terms.

Is a factory making 2GB RAM chips twice as productive as one making 1GB RAM sticks?

Because if manufacturing output is merely constant while chipmakers’ output has skyrocketed (on paper, as PCs went from 32MB RAM to 32GB over a few decades), other manufacturing output must have fallen a great deal.

michaelt··on Felony charges for citizen deleting phone data at US Border
> Reliable deletion of data requires setting it up to be reliably deleted later on

I mean - yes? If you design a subtle duress pin that only hides certain things, users would have to choose what.

I myself want the bank apps, password manager and email to disappear without a trace, but I don’t care about the social media, photos or web browser history. Other people, though, will have different priorities.

michaelt··on Felony charges for citizen deleting phone data at US Border
I mean, it sounds like it would be even better if the duress response was more subtle.

A duress code might let me wipe my phone when someone holds a gun to my head and demands I unlock it. Problem is, there’s still someone holding a gun to my head.

michaelt··on WPD won't replace stolen Flock cameras, citing public trust
> I mean ALPR's have worked wonders in my town [1]. So I'll keep supporting them

With flock, citizens are concerned by the privacy implications of the state keeping a dossier of each citizen’s movements.

But once we assure citizens the flock cameras have already issued 500,000 speeding fines in a single town this year, no doubt they’ll come to support the cameras.

Perhaps the cameras could also automatically issue parking fines, to garner even more popular support!

michaelt··on AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint
> I'm assuming "playing silent audio" is a sufficiently common thing for websites to do to have motivated browsers into doing the slightly more complicated thing of actually analyzing audio streams for content

When most sites do browser fingerprinting using audio, they use an 'OfflineAudioContext' - which unlike a normal AudioContext, doesn't run in real time and send its output to system's loudspeakers; instead, it runs faster-than-real-time and outputs to an AudioBuffer. So the browser can easily tell no sound is being played.

For example - you can tell the browser to create a 10kHz square wave, feed it to a GainNode then a DynamicsCompressorNode, output to a buffer, then hash the contents of that buffer - which gives you a browser fingerprint, because of subtle differences between browsers.

michaelt··on OpenRouter is joining Stripe
The other thing OpenRouter gets you is: Access to loads of models via a common API/sign-up/prepayment mechanism.

I want to know which vendor/model does best at my extracting-facts-from-text task? Which does best at my OCR-a-text-document task? Which can deal with a safe-for-work beach photo without a censorship system false alarm?

OpenRouter lets me run my tests against openai and anthropic and google and x and bytedance and qwen and llama, with a single sign-up and a single payment.

michaelt··on Being ambitious and being a dad
'Ambitious' often means doing optional things that take time.

A single person who cuts back on time spent doom scrolling / tv watching / beer drinking to teach themselves enterprise Kubernetes sysadmin best practices is ambitious.

A new parent who cuts back on time with their kids to teach themselves enterprise Kubernetes sysadmin best practices needs their head checked.

michaelt··on How to disable or avoid intrusive AI
I suspect it's also a defensive move.

Imagine you make a widely hated product targeted at huge corporations. Workday, Jira, Oracle Financials, anything like that.

Then you find that all your users are using ChatGPT to automate their interactions with your product. Instead of your product being crucial to your customers' business and almost impossible to replace, it's turning into a dumb pipe connecting LLMs - and looking very much threatened.

After all, data lock-in is a core part of your business strategy.

Getting people to use your AI tool, though? That makes your product stickier, and lets you charge more too.

michaelt··on Build a Stratum 1 PTP Grandmaster on a Budget
PPS into GPIO will get you sub-millisecond error levels - you've got interrupts, after all!

Sub-millisecond jitter isn't perfect, but it should lock quite happily, you can get a lock on time sources with orders of magnitude more jitter.

michaelt··on Buyer cancels showing after Deflock shows two cameras utilized by the HOA
In many places, the government maintains the roads and similar infrastructure. Property owners pay 'property tax' for this.
michaelt··on Buyer cancels showing after Deflock shows two cameras utilized by the HOA
There are a bunch of other options. Cameras with agreed-upon privacy blackout areas. Realistic fake cameras. Non-camera security products, like lights and fences. Get a dog.
michaelt··on Buyer cancels showing after Deflock shows two cameras utilized by the HOA
The majority of the time in the US when the power of the state is expanded at the expense of the rights of voters, it's done by providing big optional benefits to voters, and starts out with strong privacy protections which are salami-sliced away.

Tracking people by their smartphones? Voters get smartphones out of it, and the state supposedly needs a warrant to track them (except when they don't). And they can always just not get one.

Tracking people's every purchase? Voters get credit cards, cashback, purchase protection and online shopping out of it. And they can always just use cash.

Tracking people's media consumption? Voters get free/super cheap ad supported media, the widest selection the world has ever seen. And they can still buy in stores with cash if they want.

Access to people's photos, no warrants required? Voters get great quality cameras on their phones, and free basic cloud backup in case their phones are ever damaged or lost. And you can always disable it.

An always-on microphone in every home? Voters get huge, incredibly cheap TVs with 4K netflix/Disney/whatever, incredibly cheap smart speakers etc. And the microphone only turns on when it hears certain things.

Flock's problem is they've done the big power transfer without providing the corresponding payoff, and too quickly.

michaelt··on People are worried about America's solvency
Yes, in the 1970s-1980s the GOP came up with the idea of "starve the beast" [1] which allowed them describe unfunded tax cuts and deficit spending as "fiscally conservative", like a parent taking away a child's allowance.

Complete nonsense in practice, obviously - but political gold! Voters get all the same public services, lower taxes, and to think they're being responsible with money. And if you're a 65-year-old legislator, you'll be dead and buried before the consequences start to bite.

[1] https://en.wikipedia.org/wiki/Starve_the_beast

michaelt··on How do I permanently disable random Google Photos popup to backup photos? (2024)
For photos, it's kinda fine?

You can store 2TB for $14 per month; to fill that with photos you'd have to shoot 0.5GB/day for 10 years.

You can spend less - Google Drive and iCloud will offer 2TB for $10/month - but they don't really want power users who use their whole quota, so they don't make things like command line / API access easy.

Likewise Backblaze has an 'unlimited' backup option - but it's desktop mac-and-windows only, and it's selective about what it backs up - only 'user generated' files.

michaelt··on Asus Bike Booster
I suspect people who are enthusiastic enough cyclists that they're doing 20mph+ club rides even in the winter have separate summer and winter bikes.

And yes, once your winter 'proper road bike' has mud guards, tyres with treads, and an all-weather-riding design people might start calling it an 'adventure bike' or 'gravel bike' instead.

michaelt··on Asus Bike Booster
> Only commuter and bikepacking bikes have mudguards, almost nobody puts one on a mountain bike or a proper road bike

I suspect this depends on the weather in your area - road cycling clubs near me often require mudguards for "winter club rides".

michaelt··on Firefox is now the last major browser that still supports uBlock Origin
> I want my browser to prevent random extensions from directly reading web page data.

To be honest, to me it sounds like you don't want browser extensions then.

To me, directly messing with web page data and browser behaviour is the whole point of a browser extension - what else is a browser extension for?

michaelt··on uBlock Origin is giving up the fight to keep ads off Facebook
I for one pay for content I enjoy, when it's reasonably priced and available to pay for. Two sources of print journalism, a few dozen patreons, paid youtube, etc - not to mention one-off purchases like books. [1]

And I'd encourage other people who can afford to, to do the same.

I'm not sure how scalable my approach is within the status quo, though - I've never seen a subscribers-only article go viral on social media, and almost all of my subscriptions began with me enjoying a generous free tier. And I've tried a number of micropayment systems but none of them seem poised to take off for various reasons.

[1] I don't pay for facebook, because fuck 'em

michaelt··on Illinois just passed a law that puts Linux on the hook for age verification
The idea of a 'user agent' where the 'device owner' decides 'what should be displayed and how' is ancient history, grandad.

Modern social media is delivered through 'apps' which are like web browsers, except without ad blockers or privacy settings, and with push notifications to make them more addictive, and they only show one website, and they're each 5x the size of a web browser for some reason.

michaelt··on What Happened to HackerOne?
CISO: "We're going to invite random strangers from all around the globe to hack us, and pay them for their findings"

CEO: "I'm not sure I like the idea of us inviting people to hack us - or paying a 'bounty' to hackers holding a knife to our throat. Will they at least agree to a binding NDA and terms of engagement, in advance?"

CISO: "No, they won't."

CEO: "Well, at least if the hackers are in poor countries, a $500 payout for a critical bug will be plenty, right?"

CISO: "No, critical issues will be 10-100x that"

CEO: "Well will the average quality of these reports better than those we get from our hired pentesters?"

CISO: "On average these will be the lowest quality reports you've ever seen. But 0.1% might be gold. Oh, and I need to hire 3 more guys to sift through these terrible reports. Also our sifters might miss the gold."

CEO: "Oh. Well at least we won't be breaking the law though, right?"

CISO: "Uh, about that..."

michaelt··on What Happened to HackerOne?
Italy has progressive taxes on salary, with marginal rates from 23% to 43%. The latter on income above €50k

And if you've got taxes like that on earned income - shouldn't people with unearned income pay just as much? If your tax on investment gains is too small, you end up with an economy where the salaried worker renting a house pays more tax than their landlord, who owns ten houses.

michaelt··on What Happened to HackerOne?
It's not just the transfer of cash.

It's also complying with tax and employment laws in the country the hacker is in, to the satisfaction of your legal and finance teams.

Sure, in western-style legal systems you can call them a contractor and they can pay their own tax. Just don't employ them full time for long enough to trigger 'sham contract' rules that would make them employees.

But your corporate legal team doesn't have anyone trained and licensed to give advice on Tajikistan tax and employment law, so they can't approve this proposed contract without hiring an outside legal expert. And of course all suppliers, regardless of country, must agree to our anti-slave-labour policy which permits audits of...

One might say "skip that nonsense, just send the money" - but the larger the company, the more their in-house infosec becomes a load of uptight squares who love compliance and audit. And the kind of companies that can pay out five-figure bounties tend to be pretty large.

michaelt··on Ask HN: My dev blog has 11k followers. I stopped writing it. What would you do?
> I had a couple of people/companies ask to buy it and a few more wanting to advertise in it.

I'm sure it depends on the size of your readership, but in my experience these kind of offers are a drop in the bucket compared to the salary of an expert programmer - let alone someone who's had their company acquired.

I also felt that, just like you recognise that the blog boosted the reputation of your startup, that if a blog with my name on it started pushing snake-oil product or making sketchy SEO posts, that would have the reverse effect.

I'd leave it exactly as it is. If you want to pick it up again in a few years time, you can.

michaelt··on My phone detects going on a run as “someone snatching my phone and running off”
Societies often try to address low-probability-high-cost risks.

City fire departments, car seatbelts, motorbike and bicycle helmets, video doorbells/home CCTV, car steering wheel locks etc etc.

The dangers are uncommon enough that the vast majority of people will live their entire life without ever having their house burn down or crashing their car. But they're common enough that in a city of several million people, the fire department might attend 100 incidents a day.

michaelt··on Nashville uses eminent domain to block data center near zoo
> The funny thing about data center concerns in Chicagoland, where I'm hearing it, is that data centers are better neighbors than almost any other commercial real estate.

Data centres are better neighbours than a steelworks, or a pet food factory, or a fish processing plant, or an oil refinery, or a big distribution centre. By the standards of industrial zones they're low noise, low smell, low traffic, low injury, low pollution, low disaster risk. Low jobs and low tax too unfortunately, but you can't have everything.

The thing is, data centres are often built on open fields. So from the perspective of locals it's not data centre vs dark satanic mills, it's data centre vs open countryside.

← PreviousPage 3 of 34Next →