HNHacker News
TopNewBestAskShowJobs

nedt

281 karma · joined October 1, 2014

submissionscomments
nedt··on Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign
But then at the same time you should always update because it might fix a security vulnerability. Otherwise you end up running nodejs 10 because you don't need the new stuff.
nedt··on Apple's accidental moat: How the "AI Loser" may end up winning
You have a lot of private data. So running it locally makes you use less credits and then you also don't have your emails as training data for cloud models.
nedt··on The End of Eleventy
Wordpress can be part of a SSG setup - it's not versus.
nedt··on Age verification as mass surveillance infrastructure
Really seems to be a government issue. I have an app on my phone where I can generate a QR code which proves my age. Nothing else is transmitted - no birthdate or name. And it's based on an open standard. You can read any verify everything yourself. You just can't fake it as you can't sign it without the private key.
nedt··on Oracle slashes 30k jobs
Yeah, I understand where you are coming from. I'm just also thinking about the human side that is discussed here so often and having a more pessimistic view on hiring might be bad for the job market. Especially in countries that are not considered a social state. So while it's not good for the company itself it might not be so bad for people overall if those billionaire companies are wasting some of their money - at least until investors start to complain.
nedt··on Oracle slashes 30k jobs
So you are saying they shouldn't have given those 30k people a job to begin with? I don't know if that's any better.
nedt··on Oracle slashes 30k jobs
People tend to be bad in estimating the performance of others and are almost always bad in estimating their own performance. So you end up with people asking themself why it wasn't them and if they will be next. And management can't tell you you are safe, because it might change - and if they promise they can only do that once.
nedt··on Oracle slashes 30k jobs
Managers do know. Some of them are better at it than others. But even for the best it never is easy. And they are still humans, don't go to harsh on them with your blame.
nedt··on Axios compromised on NPM – Malicious versions drop remote access trojan
Now I'm curious, because we have a big server side code base using fetch(). What are you using that doesn't work with fetch? Especially since axios nowadays has a fetch adapter.
nedt··on “Your frustration is the product”
Also the companies selling the ad platforms aren’t knowing their own technical documentation. They tell everyone you need to load JS as heavy and blocking as possible and collect as much user data as possible because they can’t read their damn documentation. That’s also why news pages always say ad only works with massive tracking, which isn’t true and not even that effective.
nedt··on Axios compromised on NPM – Malicious versions drop remote access trojan
Before that we had node-fetch. If you already use a dependency why not one that's pretty much what will come natively to every JS runtime soon.
nedt··on Meta’s AI smart glasses and data privacy concerns
They can just take the glasses off and stop being a thread. What about you?
nedt··on I'm reluctant to verify my identity or age for any online services
That's more for age verification and prove of identity, especially in the real world. It's weird that the wikipedia page is talking about drivers license, because I have the Austrian app and I use it with my normal ID card.

To access government service we have something different. Here in Austria it's called ID Austria and you sign with an app when you try to access government services, but also others like health insurance etc.

nedt··on Meta’s AI smart glasses and data privacy concerns
If it say "punch me in the face" then you have bigger problems. And after you got recorded showing what it says to you they might be growing. Tell them what you think but don't forget "Pretty, I feel pretty, ..." - just in case.
nedt··on I pitched a roller coaster to Disneyland at age 10 in 1978
This sounds like this old xkcd comic https://xkcd.com/832/
nedt··on Americans are destroying Flock surveillance cameras
That title is so weird. I thought there are camera that are watching groups of birds. I know the company name is what it is but even more so it would be important to make the title clear. Not the whole world can keep up with all silly things happening in the US and now that flock surveillance can be anything but birds.
nedt··on I found a vulnerability. they found a lawyer
It's not only about pressure, but also telling all the people whose data can be read AKA the public.

And still it's also about the pressure. I was found a pretty bad injections/XSS in an online banking website. Told them, got no response. After waiting blogged about it (without specifying what he actual issue is). Then someone contacted me and said I need to take down the wrong information. Send back a PoC and only then they started fixing it. In the meanwhile every customer could have gotten emails stealing their login data.

nedt··on I’m joining OpenAI
You don’t need the lucky shot. But luck needs room to happen. What you need to grow into is becoming a leader. Mentor others, lead by example, suggest new things and build prototypes for show and tell. All that is actually the growth path for good senior software engineers, not becoming a middle manager creating Excel sheets.

And that’s more or less all he did. Had an idea, build a prototype, showed to the world and talked about it - even inspired people who are now saying „I could have done that“. Well do it, but don’t just copy. Improve the idea and great something better. And then very early share it. You might get lucky.

nedt··on I’m joining OpenAI
Well you don’t see the real value of coding tasks during interview. What gets tested are your communication skills, how you think and express your thinkings. You will be working in a team so you need at least fit and work with others. You are right that no one cares about your FizzBuzz.
nedt··on The Day the Telnet Died
If that really affects them it's better to take them offline.
nedt··on The Waymo World Model
It's not like only that the transit system is losing money? Every trip that's done with a car is also not fully paying for itself. We just keep ignoring how much hidden cost individual car rides have especially considering their use. Obviously heavier road users are even generating more costs, but they might have more use (like in delivering goods to a supermarket).
nedt··on We can’t send mail farther than 500 miles (2002)
Also TO doesn't need to match. When you send to a group of BCC the envelope To has to specify the exact recipient, but the DATA doesn't. Similar with the envelope From and the one in the DATA - also useful to control bounces or who gets a reply.

Yeah I know the protocol and can do that manual, because I had to debug it often enough.

nedt··on Apple testing new App Store design that blurs the line between ads and results
Yeah that was very visible when HBO Max launched here in Austria and Germany. The top result was HBO Max FYC (which by itself is a very bad name, but it's not for normal customers), then came other results with even other streaming services and only after scrolling a bit you got the normal HBO Max app. Didn't matter if you searched for "hbo" or the full name "hbo max".
nedt··on If you put Apple icons in reverse it looks like someone getting good at design
OS X had a lot of icons that were detailed illustrations but you‘d only see it when you zoom in. Yet they also worked as small icons. You can have both and Apple did. The textedit icon is a great example.
nedt··on I replaced Windows with Linux and everything's going great
Is this still news? I did the same thing with Windows 98, so it has been some time. Also had dual boot with Windows 95. That was on my 486.

But after a while I switched back to Windows 2000 on my notebook, because of hardware support. So it would be interesting if they do the same after a while.

Since over 20 years I‘m now on mac, which has great hardware and a Unix underneath. Don’t let that stop you from going Linux desktop.

nedt··on Poison Fountain
Just look at real people. They can get the valid data from sources with a good reputation. Instead they rather want to believe what they get from a random telegram channel. Having valid data doesn't stop the existence of idiots.
nedt··on Many hells of WebDAV
I once implemented a WebDAV server in PHP. The standard isn't that bad and clients are more or less following the standard. It's still horrible how they are doing that. I saw behaviors when opening a single file like:

  - does / exists?
  - does /path/to exists?
  - does /path/to/file exists?
  - create a new file /path/to/file.lock
  - does /path/to/file.lock exist? 
  - does / exist?
  - does /path/to/file exists?
  - lock /path/to/file
  - get content of /path/to/file
  - unlock /path/to/file
  - does /path/to/file.lock exist? 
  - remove /path/to/file.lock
(if not exactly like that it was at least very close, that was either Finder on OS X or Explorer on Windows). Without some good caching mechanism it's hard to handle all of the load when you get multiple users.

Also the overwrite option was never used. You'd expect a client to copy a file, get and error if the target exists, ask user if it's ok, send same copy with overwrite flag set to true. In reality clients are doing all steps manually and delete the target before copying.

It was satisfying seeing it work at the end, but you really need to test all the clients in addition to just implementing the standard.

nedt··on My productivity app is a never-ending .txt file (2020)
Well the PHP from 20 years ago was much better than the from 25 years ago. But there have been a lot of nice additions since then, including the last 5 years.
nedt··on Cloudflare was down
Everyone trying to access a site behind Cloudflare is forced.
nedt··on RCE Vulnerability in React and Next.js
But then there are packages like htm that are doing basically the same thing with just tagged templates.
← PreviousPage 2 of 10Next →