HNHacker News
TopNewBestAskShowJobs

pmh

1,071 karma · joined May 15, 2009

submissionscomments
pmh··on Yoti age checks share facial photos and device fingerprints with third parties
The paper is https://mikespecter.com/assets/pdf/AgeVerification.pdf (good on them for linking it)

The rest of the IEEE Symposium on Security and Privacy papers are listed at https://sp2026.ieee-security.org/accepted-papers.html

pmh··on Is it a pint?
> not only are the glasses typically much smaller (this is fine) but they also leave massive gaps at the top

I'm wondering if this is due to the prevalence of cask ales vs bottle/keg conditioning. The former is relatively uncommon in Belgium and you want the head from the latter.

That said, oversized glassware (e.g. Duvel's tulip for aromatics) and/or fill lines are also used to accommodate the head while still not cheating the customer out of volume.

pmh··on GM dealers aren’t happy future EVs won’t support CarPlay
In-vehicle infotainment system
pmh··on InfluxDB Cloud shuts down in Belgium; some weren't notified before data deletion
> scream test

I didn't realize there was an actual name for this, so I'll add another for the thread that I haven't seen brought up: email is evil in operations (EIEIO, like the nursery rhyme)

pmh··on Calculate past stock investment value today
Not to take away from OP, but https://www.portfoliovisualizer.com/backtest-portfolio has that among other features
pmh··on How You Wound Up Playing ‘The Oregon Trail’ in Computer Class (2016)
https://www.mobygames.com/browse/games/educational/ might be a good start
pmh··on DoorDash removing 1-year cliff for equity grants
It's RSUs vesting at:

- 5% after 1yr

- 15% at 2yrs

- 20% every 6 months for years 3 and 4

The 401k match also has a 3 year cliff.

But as they said, years 1-2 you typically get a signing bonus

pmh··on How to find a job as Software Developer in Germany
Since the tax changes in 2017, it's effectively not deductible in the US for most
pmh··on OAuth 2.0 Authentication Vulnerabilities
From a quick glance, it doesn't look like a protocol per se, but a user management system akin to Keycloak. Those solve a slightly different set of problems than OIDC or OAuth
pmh··on Security.txt
It's likely some kind of caching issue. tools.ietf.org at 4.31.198.62 responds with the draft, but 64.170.98.42 404s
pmh··on Select a muscle and it provides the exercises to workout the selected muscle
Yea, it's a bit odd. There are only a handful of gender-specific exercises in the directory[0], but that seems to be down to having a video for it.

[0]https://musclewiki.com/Directory

pmh··on Select a muscle and it provides the exercises to workout the selected muscle
I see dumbbell rows listed for lats.

If you don't have access to a dumbbell, substitute a heavy bag of some sort with a short handle. Google has some ideas on other alternatives as well, but I'd recommend against using canned food goods (or anything else you don't want to dent/break).

pmh··on Show HN: Read The Count of Monte Cristo and others in installments in your email
It's the anniversary of the publication of (the first volume of) The Count of Monte Cristo
pmh··on Building the ultimate home office again
In the post, but easy to miss:

>I do a lot of data processing in SQL Server which can be really memory intensive (no, the cloud is not always the solution to this, I've got a draft blog post on that)

Add to that: video/photo editing, live-streaming, development, and general purpose usage, and it's not an unreasonable setup.

pmh··on Germany to meet EU guidelines to ban single-use plastics by 2021
> Yes you can buy thicker re-usable bags (sometimes made out of textiles or a mixture of textiles and plastic) but by far many people bring their own bags

This has been my experience shopping in Austin, but it may vary based on neighborhood. The vast majority bring their own reusable bags. Those that forget to bring bags buy the plastic reusable bags (unless the store also offers free paper bags).

pmh··on A detailed look at the router provided by my ISP
> I don't see a point to being able to provide my own cable modem

Other cable providers (e.g. Comcast) charge you a monthly fee (~$5-15) to rent their modem. Buying a modem gets cost effective pretty quickly.

pmh··on Tesla’s success in Europe catches industry off guard
> how I can bend the seats and carry a ton of stuff in the back

I don't think I've ever been in a sedan that doesn't have this feature, but you usually get a little more space out of a hatchback if the roof-line doesn't taper down.

pmh··on New Guides for Terraform Modules
FWIW, the "Learn" link on terraform.io goes to the same codelabs in the blog and there's some existing guidance in the docs. I don't mind separate domains for these kinds of things, but I agree that they should at least add links in the docs.
pmh··on Every bookmark manager ever made
I see it there under "No longer active (Tag-Based)", but listed as "Delicious" instead of "del.icio.us".
pmh··on Personal and social information of 1.2B people discovered in data leak
Maybe in the future it will, but it uses Have I Been Pwned. From the FAQ[0]:

How does Firefox Monitor know I was involved in these breaches?

Firefox Monitor gets its data breach information from a publicly searchable source, Have I Been Pwned. If you don’t want your email address to show up in this database, visit the opt-out page.

[0] https://support.mozilla.org/en-US/kb/firefox-monitor-faq#w_h...

pmh··on A tiny pharmacy is identifying problems with common drugs
https://news.ycombinator.com/item?id=19828317

tl;dr: 1.1.1.1 doesn't pass along any client IP information for privacy reasons and archive.is won't return a good DNS response without it

pmh··on Expertise in the Age of YouTube
Do you have a list of videos/channels you've found useful for these projects? I would find it useful and I'm sure others would appreciate it as well.
pmh··on Open-source apps removed from Google Play Store due to donation links
I thought that was opt-in still (https://support.google.com/googleplay/android-developer/answ...) unless you use app bundles, but that article makes it sound like you can bring your own key too. Do they still modify the signature in that case?
pmh··on YouTube isn’t for kids, but kids videos are among its most popular
It looks like a family plan (https://support.google.com/youtube/answer/7507349?hl=en) may solve most of that, but you still may have to lie about the age.
pmh··on Slack Security Incident
Password rotation in this context is for the infrastructure, not normal user accounts.

There are other options for securing/managing infrastructure access (e.g. PKI, Hashicorp Vault), but if you're using passwords, it's a good idea to rotate them if only to encourage good practices around automation.

pmh··on Ask HN: What is the best chair for developers?
You're likely seeing that from a third-party seller, similar to Amazon's marketplace or ebay. At the least, I wouldn't expect the chair to be brand new at that price.
pmh··on Samsung TVs should be regularly virus-checked, the company says
Earlier discussion here: https://news.ycombinator.com/item?id=20201485
pmh··on Hollywood Upended as Unions Tell Writers to Fire Agents
Previous discussion here: https://news.ycombinator.com/item?id=19570735
pmh··on What does WhatsApp’s upcoming monetisation mean for the company and its users?
Not since last year. See the previous discussion https://news.ycombinator.com/item?id=13691050
pmh··on Show HN: MicroMDM – Open Source MDM Server for Apple Devices
If you don't care about the managed Google Play store, you could always use Google's TestDPC app (or create your own) to create a work profile ("do-not-use-in-production" warnings notwithstanding): https://play.google.com/store/apps/details?id=com.afwsamples...

That said, it might be more straightforward to just use another user on your device

Page 1 of 5Next →