HNHacker News
TopNewBestAskShowJobs

novas0x2a

395 karma · joined July 4, 2009

mike[at]fluffypenguin.org

[ my public key: https://keybase.io/novas0x2a; my proof: https://keybase.io/novas0x2a/sigs/kjTAsnST-L6qfThObrqWVNdOcFE1JjA4q0O62SZBSyM ]

submissionscomments
novas0x2a··on To Delay Death, Lift Weights
What sort of timescale do you mean by "soon"? When you start doing a new exercise regime, it's really common to experience DOMS[1] for the first few weeks. It really feels like the end of the world (personal experience) but it's not actually an indication of real injury and it's generally safe to push through it if you can (and doing so can actually alleviate the pain, at least temporarily). Distinguishing between DOMS (where it's safe to push through) and real injury (where you definitely should not) comes with a bit of practice, and honestly, compared with the few times I've hurt myself for real... DOMS felt worse. Except when I slipped while holding weight and broke my toe. Strongly recommend against that :)

If you're experiencing exercise-induced injuries immediately during a workout (and if you have a budget for this), it might be good to talk to someone about what you're trying to do. Some gym plans include a bit of consultation time with a staff trainer, and they can probably help you work around whatever the problem is, sometimes simple adjustments can help (particularly anything involving preexisting shoulder damage, most of the commonly-recommended shoulder exercises have substitutes that are less risky for already-damaged shoulders).

1. https://en.wikipedia.org/wiki/Delayed_onset_muscle_soreness

novas0x2a··on Linux kernel in-tree Rust support
From the horse's mouth: https://www.theregister.com/2020/06/30/hard_to_find_linux_ma...
novas0x2a··on Cloudflare outage caused by bad software deploy
Might have been a misdirect reply (although useful), but yeah, agree, linear-time regex engines are generally a much better idea.
novas0x2a··on Cloudflare outage caused by bad software deploy
Some regex languages allow backtracking, and backtracking is usually the thing that causes regexes to blow up in resource cost: https://www.regular-expressions.info/catastrophic.html
novas0x2a··on Apple is making corporate ‘BYOD’ programs less invasive to user privacy
I could be mistaken, but I think this is a somewhat weaker version of Android for Work, which shipped about two years ago, I believe (couldn't find the exact date). Perhaps Apple is doing something that AfW isn't already doing, but it's hard to tell from this article, which doesn't mention AfW at all.
novas0x2a··on Jack White bans phones at gigs for “100% human experience”
First, let me say that I'm not panicking about the probability of this actually happening, but: "I'm more likely to get killed by a fall in the tub than by a terrorist" is only true of an _arbitrary_ attack at an _arbitrary_ venue and time (and an _arbitrary_ bathtub :)). Events that use Yondr announce it ahead of time, waving a big flag that says "no one here will be able to call for help." The probability of an attack at such an event would be much higher compared to an arbitrary one (although, definitely still small, which is why I'm not exactly panicking...)
novas0x2a··on Mars, Moon on Google Maps
I don't think they're available in the web client, but if you 1) download google earth 2) View -> Explore -> Moon 3) In the layers panel, Moon Gallery -> Apollo Missions -> [Double-click the logo of your favorite] -> Click a Camera icon -> Click the Panorama itself, you'll fly into the terrain-aligned panoramas taken during the mission. (Sorry it's so confusing to find, we (joint google/nasa project) did this in 2009 for the Apollo 11 40th, when the tools weren't quite as good as they are now). Enjoy!
novas0x2a··on Apple’s content blocking is chemo for the cancer of adtech
Do you remember when the only way to make your site discoverable was to 1) get yahoo to add you to their hand-curated list of sites or 2) trade banners with a super scummy link exchange? If we still had that internet, the only sites that would get any traffic at all would be the ones that could justify their existence with traffic, i.e. these[1]. How do you get traffic if you can't get listed? You can't unless you advertise through other media.

Is everything better? No. Privacy's worse, signal to noise is worse (that's a natural consequence of availability, anyway). Are a lot of things better? Yep. Niche sites can get traffic in a way they never could before. That's the natural consequence of taking humans out of the loop- instead of having to interest Jerry or David, now your only requirement for indexing is to interest anyone who is also interesting.

Let's keep working to make things better, but let's also not forget the improvements that have already been made.

1. https://www.quantcast.com/top-sites

novas0x2a··on Google Removes Amazon’s App Listing from Google Play Search
Good. When I traveled out of the US, I noticed my phone battery life was terrible. Inspecting via catlog, I noticed that the amazon appstore (which I didn't actually have installed directly) was hitting an amazon url in an extremely tight loop, and getting a 403 Forbidden every time (you know, one of the errors that means "don't try again without fixing yourself").

My only explanation is that the amazon appstore has some sort of geographic restriction on the server-side, and the app wasn't written to handle that. I couldn't tell which app was actually responsible, so I just disabled or uninstalled every Amazon app, even though I find some of them useful (rapid package delivery notifications are pretty helpful in a city, when your package is probably sitting on the stoop unprotected). Doing so restored my battery life.

Hopefully this means Google is watching for Amazon's overreach now, and I'll be able to safely get my notifications again.

novas0x2a··on Apple Accidentally reveals iPad Air 2 and iPad Mini 3
And if you're using some common Linux fonts (I'm pretty sure it's dejavu, in this case) that character renders as the Klingon Empire logo.

0xF8FF is in the Unicode Private Use range, so any font is allowed to put whatever they want there :) (If you're curious what your current font has: http://www.unicodemap.org/range/78/Private_Use/)

novas0x2a··on Code.NASA
Do you still have any contacts there? I'm one of the (former) developers of vision workbench, and it's kind of a shame that code.nasa links to a fork that's almost 3 years behind (https://github.com/nasa/visionworkbench), rather than upstream (https://github.com/visionworkbench/visionworkbench). It gives the impression that it's a dead project :/
novas0x2a··on Good laptops for Linux
I'm going to replicate the comment I made on the reddit thread here:

Strongly recommend against [System76]

1) They only test against one version of ubuntu, and they seem to patch the acpi bios specifically for that one, so good luck changing distros or versions.

2) Their bios has fun bugs, like how my serp7 (Serval Professional) turns itself off after 20 minutes on battery because it thinks it's about to die, even though the battery itself thinks otherwise. (It's not happening at the OS level, I already have that part configured correctly, it's the bios coordinating with the EC itself).

3) They don't bother to actually hook up the acpi bios correctly, so many of the generic acpi platform functions (e.g. get_brightness/_BQC and set_brightness/_BCM) don't work correctly. Instead, they rely on (going back to #1) the platform map that Seems To Work As Detected except that it's detected as something similar, but not correct. I had a bunch of things break on kernel upgrade due to the mapping having a bugfix to make it work correctly for the hardware it was intended for, which made it work incorrectly for the serp7 that was squatting on it.

4) When I called support about #3, their answer was "reinstall the ubuntu version it shipped with and try again." I asked for enough documentation to actually solve the problem- I intended to implement a system76-specific acpi driver (think "thinkpad_acpi.ko"); I was informed that that information was proprietary and would not be released under any circumstances.

5) These laptops are fragile. My company bought three different system76s (on my recommendation, ugh) and of those, only mine still works.

novas0x2a··on NASA paywalls first papers arising from Curiosity rover – I am setting them free
Don't forget about PDS! The Planetary Data System is where all NASA-funded data ends up eventually: http://pds.nasa.gov/
novas0x2a··on A Cautionary Tale: Do not move or rename your iCloud folder
Much to my surprise, rsync on osx (with the --link-dest arg, iirc) can create directory hardlinks. I was unable to figure out any other tool to delete them; I ended up having to rsync an empty directory on top.
novas0x2a··on As Curiosity touches down on Mars, video is taken down from YouTube
If it was a content id takedown (which it sounds like it was, and Ars thinks so too), the DMCA is not involved at all; Google's content id system allows takedowns that do not use the DMCA system and thus do not expose the filer to a perjury charge. Google might penalize the company some other way, but it doesn't seem like it from the outside.
novas0x2a··on OnStar Begins Spying On Customers’ GPS Location For Profit

  for any purpose, at any time, provided that following collection 
  of such location and speed information identifiable to your Vehicle
They store the data tied to your identity. A data breach (quite common these days...) would be a Big Deal. GPS tracks of everywhere you've gone in your car, ever? That's worth quite a bit of money in the right hands.

  He gave no evidence that they were not anonymizing the data properly, 
  he just assumed they were not.
Zipcode, birthday, gender: identifies 87% of Americans[1]. Your (Home,Work) gps tuple? Unique[2][3]. His assumption is quite safe; every "anonymized" dataset that's been released into the public (that I know of) has been de-anonymized. Why would this one be special?

1) http://arstechnica.com/tech-policy/news/2009/09/your-secrets...

2) http://crypto.stanford.edu/~pgolle/papers/commute.pdf

3) http://33bits.org/2009/05/13/your-morning-commute-is-unique-...

EDIT: In response to parent edit and below comments

I have no proof of these, but factoids I believe to be true (so feel free to base a research paper on them :D)

1) To identify commuters: (Highway-Entrance-Location, Average-Highway-Entrance-Time, Highway-Exit-Location, Average-Highway-Exit-Time) -> some derived values: approximate (home,work), average speed, average driving aggression

2) Really, now that I think about it, any dataset where multiple gps tracks (for a single person) are tied together is out. If you can get any single Average-Location-at-Specific-Time data point, (plus point #3 below) you've reduced the unique set to quite small. Then you just stand on that street corner at that time (or, for the police, use the red light cameras...) and you're done.

3) This is an OnStar dataset we're talking about, so you're looking for GMC-manufactured cars, made in the last ~10 years (or whenever onstar started going into cars). I'm willing to bet that just that data point is enough to reduce any other lukewarm/weak de-anonymization to a solid match.

4) Anyone who buys onstar as an option is quite concerned with their safety at all costs (... my bias, I guess, since I consider it a waste of time), so look for e.g. families with small kids or other dependents.

I'm running out of steam for this single comment, but name is certainly not necessary for unique ID. Ongoing research is cracking this stuff wide open. When the netflix dataset came out, who would have thought that movie ratings could uniquely identify a person?

novas0x2a··on The Embarrassing Naked Photos On Your Stolen Laptop May Not Belong To The Thief
I apologize if this seems like I'm attacking a strawman, that's not my intent. (If I did hit the strawman, please tell me how I've misunderstood...)

The problem with this sort of ideology is it ignores deterrence as a force for stability. If the only acceptable response to an application of force is an equal, opposite force, then why shouldn't I steal someone's car for a week rather than rent a car? If the only punishment is that I am forced to pay for the "rental", then I'm afraid the logical thing to do is to steal a car from the nearest parking lot rather than go through the rigmarole of taking the shuttle to the rental car parking lot.

You could counter-argue that the equal-opposite force would take that into account, but then, how do you calculate that? Does it cost exactly the same as a rental of an equivalent car would have? (In which case, no deterrence). Is there an additional charge for the theft? The calculation of opposite force starts to take on characteristics of our current civil legal system: calculation of the cost of a wrongdoing.

novas0x2a··on DEF CON 19 - hackers get hacked
It's not the same scope as a claimed 4G attack, but you can already intercept voice and some data on every US GSM network with openbts/gnu-radio; it's pretty trivial to set up an IMSI-catcher with them. This[1] is from Defcon 18 in 2010; I've recently watched someone set up a rogue tower in a lab environment.

(This probably goes without saying, but I'll say it anyway; if you do this in the wild and you don't take precautions for handling emergency calls, you're probably a bad person.)

GSM implementation insecurity hasn't affected iphone or blackberry enterprise deployment, not sure why it would affect android.

1) http://www.tombom.co.uk/blog/?p=244

novas0x2a··on 23andMe finds Parkinsons only 24% heritable
Citation? I got in on the $99 + $5/mo deal at Christmas, and I have not once received an upsell request. I have, however, received updated results every month since then. Now, either they're holding results back in order to keep me on the hook, or they're actually running new tests as new papers are published.

I just checked a few of my recently-updated results, and all of them had new papers cited with recent publish dates. I spot-checked a few upstream from the most recent update, and it seems that half of the updated results had papers published in the last three months, and half of those were published in June.

I don't know where you got your information, but I've been quite happy with 23andme.

novas0x2a··on GitHub, Collaboration, and Haters
While I don't really approve of the anti-sourceforge attitude, I do understand it; when SF had essentially a monopoly on open source project storage, they chose to milk it and rest on their laurels rather than improve themselves. People complained about how SF broke wget with their download portals for something like four years before SF did something about it. SF's forced review of every project creation (and their gigantic delay in doing so) had a strong chilling effect on open source project creation in general.

A lazy monopoly has a way of generating extreme hatred due to the impotent rage of the people that use it because they have no other option. SF may have drastically improved in the presence of competition, but it's no surprise that some people are still angry.

novas0x2a··on Fukushima 'Full Meltdown' Made Official
You can get this from wikipedia, but the short answer is that the graphite moderator Chernobyl used ignited. The burning graphite released smoke fallout, which spread very far due to wind. Fukushima released about an order of magnitude less nastiness, and it hasn't spread as far in quantity (though some of it is in the ocean).
novas0x2a··on Stolen Camera Finder
You might have "minimize embedded metadata" checked in the export options; uncheck it and I bet the serial will survive the export. Also, if you want more control over exported metadata, Jeffrey Friedl made a plugin[1] for that. I haven't used this particular plugin; I do however use his flickr and geocode plugins, and they're both great.

1) http://regex.info/blog/lightroom-goodies/metadata-wrangler

novas0x2a··on Why GNU grep is fast
One thing to check: what is your current locale? GNU grep is much, much slower when it's multibyte-aware, even if you're searching for an ascii string. Try repeating your test with LC_ALL=C grep (don't forget to take the filecache into account).

You can check the current values of your locale with `locale`.

novas0x2a··on How My School and District Failed its Students
If you want a more visceral account, "The Corner" by David Simon is a non-fiction chronicle of the Baltimore drug culture's effect on the people who live in it. Simon spent about year (~1993) following and interviewing the people who lived on a specific drug corner in Baltimore; one of those he followed was a high-school-age kid whose description is much like this teacher's description of M.W.

There's also an HBO miniseries based on it (which I haven't watched, so I can't vouch), and Season 4 of The Wire is partially about a Baltimore inner-city school (The Wire is fantastic). Simon also spent a year embedded with the Baltimore police homicide division, which became a book, a TV serial (called Homicide), and informed much of The Wire.

Some people are commenting that the solution to the problems at these schools is to completely give up on the troublemakers; I don't think it would be that clear-cut for you after you read or watch these. The kids you give up on are the ones lost to the hardcore drug culture forever. Those same kids are the ones that perpetuate the problem- there's a terrible feedback loop going on.

novas0x2a··on First-ever images of the entire Sun
If you install CFITSIO[1], you can rebuild GDAL with FITS support. GDAL is the crazy-format swiss army knife. Some caveats[2] apply, though.

1) http://heasarc.gsfc.nasa.gov/docs/software/fitsio/fitsio.htm...

2) http://www.gdal.org/frmt_various.html#FITS

novas0x2a··on First-ever images of the entire Sun
You do not really want the raw data (it generally looks something like this[1], from the COR telescope, "FITS" format[2]. Warning: mix of ascii and binary). Anyway, this[3] links to where they are putting the raw and first-order-derived mission data they have released so far (if you want more of what you saw, you probably want SECCHI). And here[4] is an example of said derived data. And this[5] seems to be where they seem to be putting highlighted derived products for public outreach.

Generally, there is very little money and little expertise for polished public outreach efforts (they are scientists, not web developers, after all). There is a good chance the scientists behind [3] are doing some of it in their "spare" time. Feel free to drop them an email and let them know it is appreciated :)

1) http://sharpp.nrl.navy.mil//postflight/lz/L0/a/seq/cor1/2011...

2) http://fits.gsfc.nasa.gov/

3) http://stereo-ssc.nascom.nasa.gov/data.shtml

4) http://cdaw.gsfc.nasa.gov/movie/make_javamovie.php?img1=stb_...)

5) http://stereo.gsfc.nasa.gov/gallery/gallery.shtml

novas0x2a··on Alienware Evaluating Customers' Interest in Linux
Yes, I would. Why is that weird? It's not just about the money. Linux users are clearly willing to spend more for some things. Even though it's probably a symbolic gesture, the humble indie bundles show that.[1][2]

Not to mention that it will cost Alienware quite a bit of money to start shipping Linux. As I put in the "additional comments" box in the survey: I would pay (up to $150) extra only if every installed hardware component (sans video card) worked properly with stock Linux. That includes webcam and HDMI audio out. Video card is sort of a special case, though :(

1) http://www.wolfire.com/humble 2) http://www.humblebundle.com/

novas0x2a··on Ask HN: Who is hiring interns? (October 2010 Edition)
Intelligent Robotics Group, NASA Ames Research Center, Mountain View, CA. (http://irg.arc.nasa.gov)

We do satellite image processing (mostly Moon and Mars), computer vision, and robot software. We like developers and/or researchers. (mike.lundy@nasa.gov)

Some projects we have our hands in, in no particular order:

- Mars/Moon 3d in Google Earth (http://earth.google.com)

- WorldWide Telescope Mars (http://www.worldwidetelescope.org)

- GigaPan Robotic Camera (http://gigapan.org)

- Mars/Moon 2d (http://mars.google.com / http://moon.google.com)

- Robotic Follow-up (http://lunarscience.nasa.gov/robots)

novas0x2a··on Kindle found to be worse than paper textbooks
So wrong. Page-at-a-time is the /only/ way you use textbooks during class in higher ed. You're expected to have already done the reading before class; you don't /read/ the textbook during a classroom discussion. You use it to shore up an argument (see the proof on page XX) or visualize a point (see the diagram on page YY).

If the Kindle doesn't handle random seek well, it's no better than a textbook in that regard (textbooks also fail at random seek).

novas0x2a··on William Gibson: "Google's Earth"
When I first appeared on the Internet (with my Geocities account!) I created an alias very close to the one I'm using now. My alias and my real name never appeared in the same place for years, and I don't think my now-self could have penetrated my then-self's anonymity.

Eventually I stopped caring, but my decision to drop the cloak was a conscious one. I think it may have coincided with the creation of my Google (then just GMail) account, where it became obvious that my alias and my True Name would be appearing together on (at the very least) mailing list posts.

It became more useful to me to have one reputation, rather than two (or more). The methods I employed then would not work for me now; I've become accustomed to a certain level of service and community, and creating a new identity for every site would break some of what makes the modern Internet interesting.

I think it's much more useful if people just get used to the idea that we change over time. Checking the date stamp needs to become automatic behavior. Permanent data storage is a new thing for humans, but we can learn to adapt.

Page 1 of 2Next →