HNHacker News
TopNewBestAskShowJobs

mindcrash

1,610 karma · joined May 19, 2013

formerly in tech (various roles), early retired, still loves tech; hates nonsense; political orphan; neurodivergent, trying to adapt stoicism in a world gone insane.

Key philosophy about tech: "A two-bladed sword is neither inherently evil nor good; its moral alignment depends entirely on how it is used and by whom"

submissionscomments
mindcrash··on Retailers will soon have only about 7 weeks of full inventories left
April 27 2025: Port of Seattle - EMPTY

April 30 2025: Port of Rotterdam - Congesting shipment containers originally inbound towards the United States but halted (by Chinese exporters?). Also risking storage and transhipment of containers inbound to Rotterdam. (Heard on local news a few minutes ago)

If Trump keeps this up, within ~12 weeks he is not going to destroy the economy of the United States but the entire West...

mindcrash··on Show HN: Neuro Tools, a collection of tools to help neurodivergent people
Goblin is even better, the backing AI model for example recognizes, and properly responds to (!), foreign language while the OP does not.

For example when I add the major task "Pannekoek bakken" ("Baking a pancake" in Dutch) and break it down into subtasks Goblin breaks down the task in Dutch.

OP's tool does realize what I want to do but responds in English which could be a bit of a problem for people who are not that foreign language savvy.

mindcrash··on Your phone isn't secretly listening to you, but the truth is more disturbing
"Tweets near me" was based on people sharing geolocation with Twitter (one of the things you can opt-out of when setting up your profile).

I didn't share any geolocation with Twitter. At least not voluntarily.

mindcrash··on Your phone isn't secretly listening to you, but the truth is more disturbing
IP isn't exposed by the Twitter API.

Also, sharing geolocation has been turned off by said user because reasons -- which make sense if you look at the location in the screenshot.

Geolocation has been turned off by me and others aswell.

mindcrash··on Your phone isn't secretly listening to you, but the truth is more disturbing
Mine was even creepier.

This one used data shared by the user (opt-in on sharing geolocation in the app or browser), which then is publically exposed through the API (like this feature says it would).

Mine doesn't give a shit, geolocation was shared even when turned off by the user in Twitter.

mindcrash··on Microsoft is rolling out Copilot+ Recall to all compatible devices next month
Although they should have made this crap nobody wants opt-in anyway:

"You are always in control and can choose to remove Recall completely from your device by following these steps (under “Recall as an optional component.”). With removing any feature, Windows may keep temporary copies of non-executable binaries of the feature that are eventually removed over time."

How to remove:

"Recall is an optional feature for Windows. It is available by default for devices that aren’t managed by an organization or school.

To remove Recall, type Turn Windows features on or off in the search box on your taskbar. Uncheck Recall from the dialog and restart your PC. Any snapshots that were previously saved will be deleted when Recall is removed.

To re-enable Recall, type Turn Windows features on or off in the search box on your taskbar. Select Recall from the dialog and restart your PC."

Note this particular bit:

"It is available by default for devices that aren’t managed by an organization or school."

It's absolutely fucking absurd and sickening that MICROSOFT DOES NOT SEEM TO ENABLE THIS BY DEFAULT for business workstations, but home users, who very likely don't even know how to uninstall features from their PC, are fair game...

mindcrash··on Your phone isn't secretly listening to you, but the truth is more disturbing
See screenshot: https://xcancel.com/kpcuk/status/601451439215353857

Do note that at first it was assumed just Chrome was involved, but then people started to message me that they also saw it when using the apps, Firefox, Safari and other browsers aswell.

mindcrash··on Your phone isn't secretly listening to you, but the truth is more disturbing
Someone from X Support replied, basically told me to fuck off and that this would happen after my second or third appeal... so no.
mindcrash··on Your phone isn't secretly listening to you, but the truth is more disturbing
Believe it or not, I wrote about it on my now permanently suspended Twitter account.

Here is a remnant from someone who replied at the time:

https://xcancel.com/kpcuk/status/601451439215353857

By the way: somewhat later we (thanks to a group effort) figured out it wasn't "just" Chrome as mentioned, and this basically led to the strong assumption there was some serious data sharing involved.

And yes that screenshot from this person is 100% real; my pins for example were sprinkled all across Brighton in the UK near places with Wifi access (I recently went on a city trip there at the time), and my home town in the Netherlands.

mindcrash··on Your phone isn't secretly listening to you, but the truth is more disturbing
Way back then I exposed massive data collection from Twitter by Google which made it possible to plot locations at which you used Twitter in Google Maps by simply putting your Twitter handle into the search field. Somehow they knew about these locations even when you opted out of sharing location data with Twitter (I checked) -- so this was only possible by Twitter privately providing this information to Google.

This "experiment" has since then been shut down, but exposing this and many other other forms of activism permanently has cost me my Twitter account, to the point that asking to reinstate it several times because I was permanently suspended for no valid reason led to X Support directly rerouting every attempt to appeal this decision into the digital trash can.

Let's say nothing surprises me anymore.

mindcrash··on Whistleblower: DOGE Siphoned NLRB Case Data
I am Dutch and know of at least one pretty harsh lawsuit against a former employee of Tesla with autism against Tesla in the Netherlands regarding the work environment, sooo...

Also baffled they can still do shit like this with Senate and Congress looking the other way...

mindcrash··on Offical XRP NPM package has been compromised and key stealing malware introduced
Official and thorough support for SBOM* within major package repositories can not come sooner.

* https://en.wikipedia.org/wiki/Software_supply_chain

mindcrash··on Linux is now the best gaming system
Also note there's a escape hatch by running Windows 11 in a KVM virtual machine, and providing direct access to the graphics card (PCI pass through) through Looking Glass:

https://looking-glass.io/

I recently saw someone booting up a Windows 11 VM, launching Steam within the VM and then commencing to launching and playing Cyberpunk 2077 from Steam.

It absolutely blew my mind. (for real.)

mindcrash··on Whistleblower: Doge came in, data went out, and Russians started to login
I would have set a security policy which does not allow any kind of inbound admin related traffic from any unknown IP or device at all, including domestic IPs (and VPNs).

But that's just me, I don't know what the preferences of other dev(sec)ops engineers are.

mindcrash··on Whistleblower: Doge came in, data went out, and Russians started to login
Yeah, but it's actually not that straightforward to successfully turn the security of a heavily hardened Azure tenant to dogshit unless you know your way around and know exactly how Azure security works and what to strip out of it.

That's my point.

Same applies to properly hardened AWS and GCP tenants aswell.

mindcrash··on Doge cuts spark questions as employees supporting Musk space launches spared
According to the article deep cuts were made everywhere except launch support staff.

So yes, that surely might raise proverbial eyebrows.

mindcrash··on Whistleblower: Doge came in, data went out, and Russians started to login
> Also looks like they're kids and don't have the hang of security

According to the testimony they know enough to almost completely compromise a Azure tenant to the point that a foreign actor almost, ALMOST, could gain access with high privileges with a DOGE created username/password combination without being noticed because all monitoring was disabled.

The only thing which prevented that to happen was a luckily still enabled security policy restricting access to US IPs only (!) and flagging suspicious activity.

Believe me you'll need to have to know a shit ton about how Azure security works to pull something like that off without leaving evidence. I've got quite some experience in making sure this kind of shit doesn't happen.

mindcrash··on What "Silicon Valley" TV Show Knew About Tech-Bro Paternalism
That's because Silicon Valley had actual story consultants from the Valley.

Among them:

- Todd Silverstein, founder Vizify

- Tsachy Weissman, Professor Electronic Engineering, Stanford University

- Dick Costolo, frmr CEO Twitter

- Jonathan Dotan, founding director of the Starling Lab and Fellow at the Stanford Center for Blockchain Research, Stanford University

And more.

mindcrash··on Microsoft: Anyone who deleted mysterious folder after update must put it back
Might have something to do with legacy WSUS code still being part of the stack, which relies on IIS.
mindcrash··on RFK Jr.: 'By September we will know what has caused the autism epidemic'
You don't need to wait for a cause until September: Birth defect.

I can say this because I have been diagnosed with autism (or "cognitive development disorder" way back then), physical damage, congenital brain damage, and non congenital brain damage.

mindcrash··on Jamie Dimon says Gen Z has no reason to be depressed
"Qu'ils mangent de la brioche"* vibes.

* https://en.wikipedia.org/wiki/Let_them_eat_cake

mindcrash··on Nintendo pulls Switch 2 pre-orders in US over Trump tariffs
All preorders of the Switch 2 at most, if not all, big retailers in the EU are sold out...

So no.

mindcrash··on .NET library MassTransit going commercial with V9
As NServiceBus is more or less the defacto standard in this area (commercial distributed system platforms for .NET) and has a huge established customer base already, I don't really see that this will end well.

The huge charm of MassTransit _was_ that it was OSS.

mindcrash··on Facebook Is Hiding Heather Cox Richardson's Posts
This is what happens when Zuck really starts to dislike you.

When you contact Facebook they will either simply say "Whoops, probably a bug" or nothing at all

Happened earlier to a long term internet friend of mine.

mindcrash··on Hillary Clinton: How Much Dumber Will This Get?
I am old enough to remember something about a severely unsecure Windows Server running Exchange in her house.

And BleachBit.

mindcrash··on Ask HN: Has anyone moved away from Mac?
If you ask me: A recent Ryzen based Framework laptop with Linux is pretty damn sweet....
mindcrash··on It's five grand a day to miss our S3 exit
David wrote about that earlier. They are running on just about 8 racks in each DC (and they use 2).

That might exclude the new Pure Storage setup, though.

https://world.hey.com/dhh/we-stand-to-save-7m-over-five-year...

mindcrash··on Microsoft Math Solver
Archived: https://archive.org/details/msmath4
mindcrash··on Moving away from US cloud services
As a Github alternative you could consider self-hosting Forgejo (https://forgejo.org/) which is the underlying system powering codeberg (mentioned earlier) and some other public instances (https://codeberg.org/forgejo-contrib/delightful-forgejo#publ...).

As a plus they provide Forgejo Actions (https://forgejo.org/docs/latest/admin/actions/) which is pretty much similar to that other Actions, and which should make migrating that much easier. (you could replace the Alpha state Forgejo runner with the Gitea forked act runner -- as they are both essentially act runner forks); or you could run any of the CI/CD tools mentioned here: https://codeberg.org/forgejo-contrib/delightful-forgejo#ci-c...

mindcrash··on LLM crawlers continue to DDoS Sourcehut
If the crawler respects 301 status codes you can literally make a party like OpenAI DDOS themselves :>

Disclaimer: This should be considered satire, not advice.

← PreviousPage 8 of 25Next →