Hacker News Reader

nickburnson Smart TVs take snapshots of what you watch multiple times per second

Yeah no, that's exactly what I mean (in context of the parent to which I've replied): streaming devices are likely capturing and phoning home screenshots of their own display output, too.

But yes, a smart TV programmed to do the same is even more unscrupulous given that it can 'spy' on everything it displays, to presumably include the input of connected devices.

nickburnson Smart TVs take snapshots of what you watch multiple times per second

What makes you think an internet-connected streaming device couldn't and isn't just doing the same thing?

I otherwise completely agree with everything else you've said.

nickburnson Some Suggestions to Improve Robots.txt

https://www.ietf.org/slides/slides-aicontrolws-some-suggesti...

nickburnson Linux man-pages project maintenance

non-ML discussion: https://lwn.net/Articles/989215/

link to this set of man pages: https://git.kernel.org/pub/scm/docs/man-pages/man-pages.git/...

nickburnson We have discovered antibiotics in the global microbiome with AI

https://old.reddit.com/r/askscience/comments/1ess914/askscie...

https://www.cell.com/cell/fulltext/S0092-8674(24)00522-1

nickburnson US Government wants to make it easier for you to click the 'unsubscribe' button

I understand TFA is about unsubscribing from paid services or subscriptions. But still relevant to this discussion—I don't even click marketing 'unsubscribe' links anymore unless it points to the entity's second level domain. And even then, 9/10 times the link is merely CNAME'ed to some third-party known data broker's 2LD. These links have basically turned into a form of data collection unto themselves. I.e., 'is anybody home?'

NB: Configure you email clients not to automatically download HTML unless you prefer to let senders know you're actively maintaining your inbox. I love receiving 'if you're still reading please click here, otherwise you'll soon be automatically removed from our ML.' I consider that the real unsubscribe non-button in 2024.

nickburnson No Salt

"Bizarrely, it’s apparently now required by the FTC for me to write, somewhere “As an Amazon Associate I earn from qualifying purchases.” So those links to books include Amazon referral tags, which you probably already know if you care about that sort of thing."

https://jakeseliger.com/about/

nickburnson The protein Reelin keeps popping up in brains that resist aging and Alzheimer’s

I would never use an ampersand in either context. I have more style than that.

All seriousness though—this pedant appreciates you giving me an English grammar rule to brush up on. My pronoun work has been strictly en el español of late.

nickburnson The protein Reelin keeps popping up in brains that resist aging and Alzheimer’s

My dad would really appreciate this crack. ;) Him and I got to see them live together before Walter Becker passed. :\

nickburnson Don’t let your domain name become a sitting duck

Agreed. Two big challenges. But to be clear—we're talking here only about zone file management, not registration transfer (if that's what you mean by migration).

In the case of a large-scale, multi-domain authoritative nameservers assignment change, only the DNS provider would be able to facilitate the process programmatically. And at that kind of scale (i.e. hundreds of domains), one would hope verification would not only be obtained through, but require some form of human-to-human contact coupled with thoroughly documented scope.

nickburnson Don’t let your domain name become a sitting duck

> the onus is currently on the domain owner not to leave their domains' NS records pointing at nameservers they don't control!

That's exactly right. That is how this "attack" happens. Bad actor exploits registrant's abandoned yet still authoritative third-party nameservers assignment.

Discussion elsewhere in this thread[1] of how some of that responsibility/risk could be spread/shifted onto the DNS provider.

[1] https://news.ycombinator.com/item?id=41126976

nickburnson Don’t let your domain name become a sitting duck

I personally keep my domain registrations and zone files separate as a matter of security policy. I place as much importance on vetting reputable DNS providers as I do registrars. Nameserver assignment remains with the ICANN-accredited registrar.

(I would also never maintain a registration nor a zone file with a web/cloud hosting service.)

nickburnson Creativity fundamentally comes from memorization?

Love this metaphor. To truly learn we must have a lick for ourselves, pun not intended.

nickburnson Don’t let your domain name become a sitting duck

Namecheap is not a losing registrar, HE is not a gaining registrar, and the transaction you describe with Namecheap requesting that they update your registration's nameservers to HE's is not a domain transfer. You're conflating registration with nameserver assignment.

nickburnson Don’t let your domain name become a sitting duck

The registrant's email address is made part of the WHOIS directories, whether obfuscated by a privacy service or not. It's publicly accessible information in accordance with § 1.1(a)(i) and (a)(iv) of ICANN's stated Mission.[1]

The DNS provider absolutely can send a notification to the registrant without having to 'go through' (meanining interact with) the registrar. Even a third-party privacy service merely exists as a notification broker. Any notification sent by the DNS provider would simply pass through onto the registrant directly.

[1] https://www.icann.org/resources/pages/governance/bylaws-en/#...

nickburnson Don’t let your domain name become a sitting duck

Registrant contact information is maintained by the registrar. The failure of a Registered Name Holder[1] to furnish up-to-date contact information with its Registrar[2] may result in the forfeiture of rights[3] up to and including the suspension or cancellation of the registration itself.[4]

Point being that, short of transfer Auth-Codes[5], a verification link sent to the registrant's email address by the DNS provider is the functional equivalent of nearly the most that a registrar may be required to do in order to contact and/or verify a registrant.

[1] https://www.icann.org/resources/pages/ra-agreement-2009-05-2...

[2] https://www.icann.org/resources/pages/ra-agreement-2009-05-2...

[3] https://www.icann.org/resources/pages/benefits-2013-09-16-en

[4] https://www.icann.org/resources/pages/registration-data-accu...

[5] https://www.icann.org/resources/pages/auth-2013-05-03-en

nickburnson Don’t let your domain name become a sitting duck

Verification link sent to registrant's email address. Change not processed until verification occurs.

This is generally the level of diligence (i.e. emailed verification link) that registrars are held to. DNS providers should be held to the same when the requesting account isn't the same account that created the 'earlier' zone file for a given domain at the very same provider.

nickburnson Creativity fundamentally comes from memorization?

> I have written up a fairly hefty dictionary of words they mispronounce or even just invent on their own because they don't know the one in their native tongue.

Ah, beautiful little displays of an attempt to understand, not merely memorize.

nickburnson Creativity fundamentally comes from memorization?

> A young child has basically nothing but figuring out what's going around him

Right—not simply memorizing what's happening around them. Those are fundamentally different activies. That is the gist of the parent comment's point.

They've also acknowledged expressly that rote memorization techniques are "valuable" and "have a place."

nickburnson Meta to pay Texas $1.4B for using facial recognition without users' permission

It's even more insulting than a fine. It's a voluntary payment in settlement that admits no liability or wrongdoing.

nickburnson The lie of music discovery algorithms

I actually do find this observation to be quite accurate for many of my own 'suggestions.' I'm regularly recommended 'new' and 'old' music that was clearly matched to my 'tastes' only by melody or, more noticeably, sample. It very much seems like if a song fits into a genre I listen to frequently or have been listening to lately, and it samples another song I've listened to before—cheap recommendation. And the greater the frequency of individual plays (i.e. the more times I've replayed any one song), the more likely that derivatives will be recommended to me.

It's easy to see how this would've been baked into a human-made algorithm when you consider waveforms. Speaking only to Spotify's algorithm here. And it doesn't really bother me for obvious reasons. But it is creating something of a musical echo chamber for me.

nickburnson The weird and wonderful world of DNS LOC records (2014)

I shall have a rest on this bench in honor of your friend if I'm ever in Astoria Park.

nickburnson Maglev titanium heart inside the chest of a live patient

ah. was confused by the timestamping on my end (i.e. 41080654 shows just '2 hours ago' and 41086952 shows '7 hours ago'). must be some other inner-workings. but thanks for pointing out IDs to me for future reference.

nickburnson Maglev titanium heart inside the chest of a live patient

dupe:

https://news.ycombinator.com/item?id=41086952

nickburnson Pilots said nothing as Southwest plane flew dangerously low over Tampa Bay

Good day, ladies and gentlemen. This is your, uh, captain (obvious) speaking. It, uh, couldn't be any clearer here, based on all the circumstances, that, uh—these pilots truly believed they had the runway in sight when it was, in fact, the Courtney Campbell Causeway.

nickburnson Ente Auth: open-source Authy alternative for 2FA

I truly did not mean to come off as rude. The 'content of the QR code' would've revealed the actual seed and so would corroborate your assumption if you did, in fact, verify as much. I merey stated a troubleshooting fact. No offense intended.

nickburnson Ente Auth: open-source Authy alternative for 2FA

You assume that because you were not able to overcome whatever error/s you encountered with Google Auth and Authy, that you were being forced to use MS Authenticator.

nickburnson What's in my location history?

that's a nice thing to have.

nickburnson What's in my location history?

> I ended up losing nearly 15 years of my Google Location history

genuinely curious—why would you want this?