HNHacker News
TopNewBestAskShowJobs

pkaeding

1,345 karma · joined February 5, 2013

email: patrick [at] kaeding [dot] name
submissionscomments
pkaeding··on US blocks all offshore wind construction, says reason is classified
Yep, this is what I was thinking. It was part of the detente negotiated to end the "drone" hysteria about this time last year.
pkaeding··on Forget burner phones – you can join this new carrier with just a ZIP code
They operate on the t-mobile network, so they would be limited by that, at the very least.

I'm not sure if t-mobile operates in other countries?

pkaeding··on 4 billion if statements (2023)
I think the idea is to fill in the ellipses with even/odd numbers, up to 4B.

You know, to save the performance cost of processing the input as a string, and chomping off all but the last character.

pkaeding··on Mixpanel Security Breach
Like many in the US, I saw this somewhat late. Did the OpenAI disclosure come out first? Did Mixpanel notify OpenAI (due to contractual obligations), who then investigated and ripped Mixpanel out of their systems? And then OpenAI disclosed it publicly, forcing Mixpanel to disclose publicly?
pkaeding··on Google Antigravity exfiltrates data via indirect prompt injection attack
Yes, and get requests with the sensitive data as query parameters are often used to exfiltrate data. The attackers doesn't even need to set up a special handler, as long as they can read the access logs.
pkaeding··on Make product worse, get money
But similarly to you recommending the Osprey backpack to your friends because you are a happy customer, happy/successful customers of a dating site will spread the word.
pkaeding··on The reason GCC is not a library (2000)
I've always thought of it as: Stallman wants the code itself to enjoy freedom, more than caring about the freedom of the people who create and use that code.
pkaeding··on Amazon’s Ring to partner with Flock
See https://thisxdoesnotexist.com/ for some ideas!
pkaeding··on Apple takes down ICE tracking apps after pressure from DOJ
Because the employers are 'complicit' in paying these payroll taxes, and the employees are 'complicit' in supporting them by showing up for work.

/s

pkaeding··on Tinder, Hinge, and their corporate owner keep rape under wraps
They don't need to make the ban public. But not stating publicly that a person did something, they cannot have defamed that person.
pkaeding··on That Secret Service SIM farm story is bogus
This is interesting. Can you explain? What leads you to believe that? Do you have any references, or is this your area of expertise?

Cell networks are not my area of expertise, but cybersecurity is, so I am genuinely interested to learn more.

pkaeding··on Let us git rid of it, angry GitHub users say of forced Copilot features
They aren't really talking out of both sides, it is just all full-court-press marketing.
pkaeding··on It Looks Like a School Bathroom Smoke Detector. It Could Be an Audio Bug
https://archive.ph/kEJco
pkaeding··on Projects evaluated to see if they're as free and open source as advertised
They also used to offer source downloads to paying customers, but never claimed to be open source, because the licence they gave to customers to access that source did not allow for distribution. (It was meant for auditing, and help in building extensions, I think)
pkaeding··on Bypassing Google's big anti-adblock update
I tried to use Orion as my daily driver on Mac OS (instead of Firefox) but I couldn't get the simplelogin extension to work (it wouldn't authenticate to my account). Also, it was slower than FF (I know, everything says that it is super fast, but that wasn't my experience).

After a month or so, I gave up and switched back to FF.

pkaeding··on Covert Web-to-App Tracking via Localhost on Android
Does grapheneos prevent this? In what way? I know apps like ShareViaHTTP [1] are able to open ports (listening not just on the loopback address). If I installed a meta app, could it still run its listener that scripts on webpages could talk to?

[1]: https://f-droid.org/packages/com.MarcosDiez.shareviahttp

pkaeding··on Proton threatens to quit Switzerland over new surveillance law
This is a valid point, but emails between Proton users (or other users of PGP) will not be accessible. And, presumably, it will be harder to see your email if you use Proton, than if you used Google/Outlook if your adversary had to look through everyone else's email to find who corresponded with you.
pkaeding··on Uber to introduce fixed-route shuttles in major US cities
Cramming multiple unrelated people who are going a similar way into a regular uber vehicle sounds like uber pool, which has existed for a long time (unless they stopped it, and this is the reintroduction?).
pkaeding··on A server that wasn't meant to exist
It sounds like one of the VMs was a samba file server, to serve shared files for the workstations in the office. That was a common thing to run locally in the office, to keep latency down.
pkaeding··on Silicon Valley crosswalk buttons apparently hacked to imitate Musk, Zuck voices
Because TFA includes videos with sound showing the actual crosswalk signals are present at before the "PSA" plays.
pkaeding··on Interviewing a software engineer who prepared with AI
My advice is to ask to hiring manager who invites you to come in about the dress code expectation / norms, and try to be on the higher end of the range they give, without going over.

I agree no one will explicitly decide one way or another based on how you dress. But making everyone in the room feel comfortable with each other will help the whole process.

pkaeding··on San Francisco homelessness: Park ranger helps one person at a time
Your last idea reminds me of https://mlf.org/community-first/

From what I hear, it is quite successful, giving their residents the dignity and autonomy they need to stand on their own.

pkaeding··on Amazon workers to strike at multiple US warehouses during busy holiday season
I do it to try to keep the money flowing around in my local community.
pkaeding··on Backdoor attempt on Exolabs GitHub repo through an innocent looking PR
SLSA aims to achieve this, though, right? Specifically going from level 2 to level 3.
pkaeding··on Ask HN: Website with 6^16 subpages and 80k+ daily bots
Yes, but those of us also often have trouble solving captchas.
pkaeding··on 1 bug, $50k in bounties, a Zendesk backdoor
You can also create a non-email Google account as Bob+external@example.com, as long as you can get email sent to bob@example.com (ie, while you are employed by Example, Inc). Then, you leave your job, but still have a google account associated with an example.com email. Depending on how the app checks the login response, they might mistakenly assume you are part of the example.com org.
pkaeding··on Insider trader had all the answers
Yeah, it is pretty awkward.

My forst car, sure: Capital-double-you, dollar sign, eff, nine, you, bee, gee, capital kay...

pkaeding··on Starlink offering free internet access for 30 days for Hurricane Helene victims
Of course! The shadow from the blimp might impact the habitat of an endangered newt living in the now-wetland.

I mean, it might not, but you won't know until the environmental impact assessment is complete.

pkaeding··on NIST to forbid requirement of specific passwords character composition
> where you can't use a password manager (Such as a smart TV, games console, ...)

I just open my password manager on my phone and type it in. On these passwords, I am likely to avoid special characters, since they are a pain to type on these 'keyboards'

pkaeding··on Brazilian court orders suspension of X
I don't think opposing ideas cancel each other out, like so much electrical charge.

The more opposing ideas on a platform, the more ideas are spread, tested, strengthened, weakened, and grown.

An echo chamber is where ideas go to die.

← PreviousPage 2 of 6Next →