HNHacker News
TopNewBestAskShowJobs

pfooti

2,531 karma · joined September 7, 2014

Educational Technologist, Optimist, Feminist, Developer, Teacher.
submissionscomments
pfooti··on Hacking Subaru: Tracking and Controlling Cars via the Starlink Admin Panel
My Subaru, a 2018 outback, would be completely battery dead if I left it parked for more than a week or so. Happened once at the airport, after which I started carrying a battery pack car starter. The guy at the airport who have us a jump said it happened all the time with Subarus in long term parking.
pfooti··on Google’s OAuth login doesn’t protect against purchasing a failed startup domain
I think the problem is here in the doc:

I have worked with a few of these downstream providers to look for a solution. There is a documented unique user identifier (the sub claim) that could theoretically prevent this issue, but in practice, it's unreliable ... According to a staff engineer at a major tech company: “The sub claim changes in about 0.04% of logins from Log in with Google. For us, that's hundreds of users last week”.

The real solution is to use the sub claim, and not hd/email. If sub is unreliable, let's fix that. That said, I'm surprised sub is documented as unreliable here; I wonder if there is perhaps something else going on. I've done a lot of work with oauth and I haven't found sub to be so mutable, but then again, who knows maybe I just missed it?

And yeah, lapsed domains => domain takeover => email takeover and impersonation will always be a baseline problem, independent of oauth.

pfooti··on Dropbox Engineering Career Framework
I'm a line manager and tech lead at a big company. I have both direct reports and mentees that don't report to me but I'm helping with their trajectory who have that attitude ("I'm fine where I am") and it's mostly fine with some caveats.

One: you may actually be doing really well and deserve a promotion (or it would be relatively easy to get) but your imposter syndrome is blocking you from realizing this.

Two: you may not even be doing that well at your current level- promotion is out of reach, but we actually need to make sure you don't get out on a PIP or something. Not everyone is good at recognizing this in themselves. (Similar problem of metacognition, I suspect to point one).

Three: there is usually not enough L+1 work to go around on any given team, especially one in big companies that have been slowing down hiring juniors (if all the level 1 get promoted to 2 and not replaced, eventually the system will be too heavy). So this is mostly good, but if you don't communicate active interest in promotion to your manager, you're likely to get the least interesting (for some value of interesting, let's say at a minimum least promotable) work.

You may be fine with this, and as a manager I'm okay with it- someone has to do it and if I have some reports who aren't striving but are still solid, I can give them stuff to do and worry about the promotability of the reports who are likely to leave if they feel their trajectory is slowing down.

EDIT: the fourth caveat is, I'm just a line manager at some place. I don't speak for leadership (they may want to lay off all the non strivers, who knows) or even other managers.

pfooti··on A comparison to Waymo’s auto liability insurance claims at 25M miles
The waymos in SF seem to indicate that they see a pedestrian (when they are waiting to turn) by showing a pedestrian symbol on their spinning lidar hat. It's pretty obvious, but I don't know how consistently it is shown.
pfooti··on Why America's economy is soaring ahead of its rivals
https://archive.is/vt7sY
pfooti··on Hey, wait – is employee performance Gaussian distributed?
Those two assumptions are not particularly well-supported by data or modern thought on capabilities. Even the construct of "IQ" is probably a post-hoc explanation of data rather than a predictive thing. If you want an hours-long discussion of that in the context of the book, The Bell Curve, have a look at: https://www.youtube.com/watch?v=UBc7qBS1Ujo
pfooti··on M4 MacBook Pro
Yeah, for quite some time I played a lot of WoW because it was one of the very few games I liked / had for MacOS, and what I had was a mac. That and a really old version of heroes of might and magic N. (Maybe 3?)
pfooti··on Character amnesia in China
Time flies. I can't they're too fast.
pfooti··on Amazon reveals first color Kindle, new Kindle Scribe, and more
For me, they were drm free ebooks I bought legitimately and had to sideload via calibre because the kindle doesn't support epub. It's an old Paperwhite, and it only happens when I go out of airplane mode. However, I have to go out of airplane mode (or had to before I ditched the kindle for a kobo) to get library books and the occasional actual Amazon kindle book when I didn't feel like waiting for the library to get me to the front of the list.

*Edit to add: I believe the kindle won't delete epubs you sideload via the Amazon kindle email gateway, but I have no interest in doing that.

pfooti··on Amazon reveals first color Kindle, new Kindle Scribe, and more
Ooh, thanks for this. I was having all kinds of font and margin irregularities with my side loads, assumed I just had to power through and manually adjust the fonts in each book
pfooti··on Amazon reveals first color Kindle, new Kindle Scribe, and more
I have a pretty old paperwhite. When it started deleting books i had side-loaded via calibre, I decided to get a kobo. I have a libra color, and I have to say: price notwithstanding, it's a great device. I don't have a lot of experience with more recent devices, but compared to my 2nd gen paperwhite, it is _amazing_.

Color is good enough to read comic books on it, the google drive integration means it's not too hard to get my CBR/CBZ files on directly. The annotation / notetaking featureas are nice (I haven't leaned into them yet, but they work well even on the small screen size), plus all the regular stuff with normal book reading. Also, since it's kobo/rakuten, the libby integration is better (search and select library books right from the device).

The actual reading app is maybe 90% as good as reading on the kindle (or a more specialized reader like perfectviewer on android). There's some annoyingly fiddly features- font size is kind of weirdly variable, when going through CBR files there's no "read next in the folder" gesture nor is there a "this is read/unread" state in the google drive ui, so you always have to remember which book you are finishing when opening the next in the series.

I tried out one of those boox readers with the android apps, which would be even better software-wise, but the boox hardware seems like garbage (for an N=1 at least). My display came with several rows of stuck pixels, and apparently it's a good thing that I ordered from amazon instead of the boox store, because the reviews indicate getting an RMA from boox directly is a pain.

pfooti··on 1 bug, $50k in bounties, a Zendesk backdoor
This is the right answer for this problem. If you're not interested in being a paying workspace customer, get cloud identity free and verify your domain. You can then take over and/or kick out any consumer users in the domain.
pfooti··on Nvidia Announces Financial Results for Second Quarter Fiscal 2025
I really don't understand how fiscal years work. We are in Q3 of 2024. Is the AI just predicting what their Q2 2025 results will be?
pfooti··on Ask HN: Is there any software you only made for your own use but nobody else?
My spouse is a teacher. The science department at the school uses a relatively complicated grading mechanism called conjunctive standards based grading, which used to require a lot of spreadsheet magic to work. I wrote a gradebook app (firebase, angular) that handles the grade entry (not grading), conversion of assessment data into grade reports for students, plus charting and stuff so you can see student or course aggregate progress over time.

I originally thought more people might use it, but I have basically 6 teachers.

pfooti··on The man who bought Pine Bluff, Arkansas (2022)
> And you're worried about architectural drawings and building codes?????

Building codes, like several other categories of regulations that can at times feel oppressive or arbitrary, tend to be written in the blood of accident victims. See, for example the ghost ship fire in my recent memory of why they are important even if (especially if) you are using an under utilized space

pfooti··on Sell for half a billion and get nothing (2021)
This is me. I work at a FAANG, about half of my very good compensation is in RSUs. All the startup companies I've talked to (I don't turn down recruiters out of hand) seem to like my skill set, but cannot really meet my comp requirements without valuing options as if they were 100% guaranteed to convert at the current high valuation.

It's a bummer - startups do a lot of really cool stuff, but I'm at a point in my career where I can no longer really gamble that the options will pay out. I need the stability and mortgage paying power of actual comp.

pfooti··on Gemma: New Open Models
It's pronounced like "gif".
pfooti··on Our next-generation model: Gemini 1.5
I mean, Terry Brooks did it with the Sword of Shannara. (/s)
pfooti··on World model on million-length video and language with RingAttention
nit: UC Berkeley. Not Berkley.
pfooti··on Infinite Craft
I had a similar problem. I think the + in the item name is causing the backend to throw a 500 error.
pfooti··on Infinite Craft
i have discovered the mecha swamp witch
pfooti··on Wayne's Word
I was searching for some articles about wind blown seed dispersal strategies and found https://www.waynesword.net/plfeb99.htm and (a) it was useful and (b) I kind of stopped and looked at the site and thought, huh. This is a pretty rad site.
pfooti··on Why do programmers need private offices with doors?
When people are in a room you can have multiple voice conversations at once. When you are remote, you cannot. I know you can replace voice side channels with text, but this is a lossy proposition.

Turn-taking in general is better in person due to high bandwidth channels for nonverbal communication.

I say all of that as an autistic person who has trouble with all kinds of tacit communication (it may be that I have studied it so much in order to fit in that I really notice it), so yes there are downsides to being in person (I can pretend to make eye contact on a video), but I'm talking here about why the average developer or product person might have good reason to prefer in-person for a two pizza meeting.

Nice whiteboarding app affordances are great, but the low effort of onboarding to a physical whiteboard also encourages broader participation.

pfooti··on Google News is shutting down purchased magazine content, offering refunds
I was impacted by this, I have some digital magazines from the 2010s; Conde Nast Traveller. Honestly I don't care, like print magazines I read the issues a long time ago and haven't thought of them since.

I can download the PDFs and then reupload to drive if I want (the only annoyance here is that I have to do that, there's no simple "export to drive" button, or I can just pretend that I got them in the mail, read them, and tossed them in the recycling a decade ago.

If it were some magazine I really wanted to keep forever instead of inspiration for trips I already went on, it would be a bigger deal, but even then a nice pdf download is fine by me, slots in next to my big collection of old dragon magazines in PDF.

pfooti··on The Quiet Revolution of the Sabbath
Yeah, it took a few months of the 1 day sabbaths to really impact things. The first month I was back on twitter/x as soon as the sun went down, etc.

Nowadays, I'm a lot more intentional about when I use social media in particular. It may not be causation, the whole thing could just be correlations. But it feels almost rebellious to unplug like that for a day.

There was a Max Headroom episode (dating myself here) where someone got in trouble for having the ability to turn off their TV. Like all of society was structured around being in front of the TV at all times.

pfooti··on The Quiet Revolution of the Sabbath
My spouse and I do an internet / technology sabbath on Saturdays. No social media, no streaming services or video games. Mostly listen to the couple of records we have, read books, and do other analog things. I started after reading How to do Nothing, and thinking a lot about unplugging from the attention economy.

I find that it does a really good job of resetting / breaking the dopamine cycles. Going a day without being online every so often results in me at least being less tied to the Internet for well being the rest of the week.

pfooti··on Text editing on mobile: the invisible problem
One notable thing, I have linburg-comstock in my left hand, and this is apparently not uncommon (estimated to be around 30% of the population in one form or another, iirc).

This means I cannot curl my thumb without my pointer finger also curling. This is not something that can be stretched or relaxed or otherwise fixed without surgery- my tendons are cross-connected. The result is that typing on a cell phone keyboard ends up cramping my hand very quickly.

https://en.wikipedia.org/wiki/Linburg%E2%80%93Comstock_varia...

pfooti··on How to store a chess position in 26 bytes using bit-level magic (2022)
An interesting cognitive phenomenon: if you ask chess experts and novices to memorize and recall an arbitrary chessboard, the experts are significantly better than the novices _only if_ the board is a legal board that can be arrived at during play. If it is not a legal board, there's no particular difference between novices and experts. Original ref: Chase & Simon 1973, Perception in Chess.

This is usually taken to mean that the brains (or whatever) of experts see structure that can be used for compression that novices don't, but that compression has assumed invariants you cannot break.

pfooti··on Unexpected downsides of UUID keys in PostgreSQL
Weirdly, and this may be a side effect of writing code that uses Cloud Spanner, but I tend to think of uuidv4's random distribution through keyspace as a _good_ thing.

My instinct is to not use sequential-ish indices/primary keys, because I don't want to hotspot one part of the storage with all my writes for today in the same tablet.

pfooti··on Swing VPN app is a DDoS botnet
So is hola vpn: https://www.theregister.com/2015/06/10/hola_gets_holes_poked...

At this point one must assume that any "free" vpn software is free because it uses its install base for DDoS / other traffic abuse.

← PreviousPage 2 of 20Next →