HNHacker News
TopNewBestAskShowJobs

rhblake

863 karma · joined December 28, 2011

submissionscomments
rhblake··on The Nightmare of Replacing a Battery on a Mac Laptop
That battery is $75 on Newegg and Amazon.
rhblake··on Some analysis of the 1M most popular sites on the web
> The request for the code contains a referring url which tells the entity hosting the script who is visiting your pages and which pages they are visiting (this goes for all externally hosted content (fonts, images etc), not just javascript)

This can now be mitigated thanks to Referrer Policy [0]:

"The simplest policy is No Referrer, which specifies that no referrer information is to be sent along with requests made from a particular settings object to any origin. The header will be omitted entirely."

Voilà:

  <meta name="referrer" content="no-referrer">
It's a W3C draft, but it's supported by latest FF/Chrome/Safari, and Microsoft Edge [1], although currently, with Edge, you'll want to use the legacy keyword "never" instead. (AFAIK "never" works with all the aforementioned browsers.)

> Google analytics junkies in particular will have to weigh whether they feel their users privacy is more important to them than their ability to analyze their users movements on the site.

There's a nice alternative - Piwik [2]. It's very much like GA, but GPL and self-hosted, and with various options for privacy [3]. You can even use it without cookies, if you don't mind the somewhat reduced accuracy and functionality.

Regarding fonts from Google Fonts, it's super-easy to host them yourself. There's a nice bash script [4] that downloads the font you want in all its formats/weights and generates the proper CSS. There's also the google-webfonts-helper service [5], and Font Squirrel has a webfont generator [6].

[0] https://w3c.github.io/webappsec/specs/referrer-policy/

[1] https://msdn.microsoft.com/en-us/library/dn904194%28v=vs.85%...

[2] https://piwik.org/

[3] https://piwik.org/docs/privacy/

[4] https://github.com/neverpanic/google-font-download

[5] https://github.com/majodev/google-webfonts-helper

[6] http://www.fontsquirrel.com/tools/webfont-generator

rhblake··on The Coder Who Encrypted Your Texts
I've used TextSecure since sometime last year and my impression is that development has been speeding up in the past few months. [0] Seems like there's a new version every week. Most recent update brought a nicer UI, week before that "quick reply" from notifications, .. it really is very slick these days, and it works so well as a drop-in replacement that I've had no problem making my whole family (and various friends) use it. Not much explaining needed: you send texts just like before, but if the other person also uses TextSecure it's - well - secure (and free) and you don't have to think about it.

[0] https://github.com/WhisperSystems/TextSecure/commits/master

rhblake··on European Parliament rejects EU plan to axe Freedom of Panorama
Depends. In France, a building can in itself be copyrighted, meaning you'd technially need permission from the "author" to publish a picture of it, unless the copyright has expired. [0]

Here's a funny one: in France, the Eiffel Tower copyright has expired; however, courts have deemed that the lighting display on the tower is a protected work, still copyrighted. Meaning you are allowed to publish pictures of the Eiffel Tower taken at day, but not at night -- unless you have permission. [1]

[0] https://en.wikipedia.org/wiki/Freedom_of_panorama#European_U...

[1] https://en.wikipedia.org/wiki/Eiffel_Tower#Image_copyright_c...

rhblake··on Securing access to Wikimedia sites with HTTPS by default
> This seems good, but too limited. Why not make it so that wikipedia can only be served over HTTPS?

That's what they're doing. From the second paragraph: "We will also use HTTP Strict Transport Security (HSTS)"

rhblake··on WooThemes joins Automattic
CCK has been part of Drupal core since version 7 (2011). Now simply known as "fields". Fields+views is simply fantastic compared to what WordPress - including its plugins - gives you. (Views will by the way be in Drupal 8 core.)
rhblake··on MySpace: what went wrong – by its former VP of online marketing
Steve Albini (the noted musician and producer) had a great talk about the Internet and the music industry at a conference a few months ago. The Guardian wrote a nice a recap [0] and published a full transcript (enriched with pull quotes and some images) [1].

[0] http://www.theguardian.com/music/2014/nov/17/steve-albini-at...

[1] http://www.theguardian.com/music/2014/nov/17/steve-albinis-k...

rhblake··on Email Encryption Software Relies on One Guy, Who Is Going Broke
Don't know about Moxie's situation, but Werner Koch also has a young child and a wife [who's not working, according to the article] to support.
rhblake··on Spending by the UK government on the siege against Julian Assange
Well, you could ask roughly half of the world's sovereign states the same question.

http://en.wikipedia.org/wiki/File:United_States_extradition_...

rhblake··on Spending by the UK government on the siege against Julian Assange
Yes. There is nobody in Sweden with the power to make such an advance promise. It's simply impossible, by law. This is generally a good thing.
rhblake··on Applying an experimental procedure to fall in love
The Art of Loving, while feeling a bit dated in some parts (especially Fromm's views on homosexuality), is on the whole a fantastic, short little book that I reread every few years or so. I always liked his definition of love: "Love is the active concern for the life and the growth of that which we love. Where this active concern is lacking, there is no love."
rhblake··on Run to Stay Young
> 7 years later he died of a heart attack while jogging at the age of 52.

> His death doesn't mean running is a bad idea - a single anecdote is statistically insignificant - but perhaps it can remind us that nothing we do can guarantee a long and healthy life.

Or one could see it this way: His father had a heart attack at 35 and died of another heart attack at 42. Jim Fixx, who had a genetic condition, was a heavy smoker until age 36, etc., might very well have bought himself an extra ten years or so.

rhblake··on Stop Changing UIs for No Good Reason
This needs more attention. I was pleasantly surprised to discover that Nokia's HERE recently became available in beta for all Android users (free): http://here.com/beta/android/?lang=en-US

Having used a Windows Phone for some time before switching back to Android, the HERE maps app was the one thing I missed the most. Offline support is a must for me and Google Maps' offline 'support' is a joke. (I'm currently in Paris, without mobile Internet access. Google Maps is useless as soon as I leave the house.) OsmAnd/Maps.me do offline properly, but their UIs are lacking and both have serious GPS issues on my Nexus 5.

HERE just works great. There are many lovely little features.

Like, if I click on a subway station nearby, Google Maps (Lollipop) will show me the name of the station and how long it takes to get there, and if I swipe up it will also tell me the lines going from that station and show some share/depart buttons and street photos.

If I click on the same station in HERE, it will overlay the routes of the station's subway lines on the map so that I can at once actually see where they are going. Incredibly more useful, especially in big cities like Paris or Berlin where there can be a dozen subway lines or more.

I wonder if small features like these and the whole offline thing reflect where the developers come from? It seems like the Google Maps team doesn't take public transport very seriously, and that they can't imagine people ever being without Internet access.

rhblake··on Leica M Camera Timeline
> The best film camera Leica ever made was probably the M3, which it produced for 12 years. If you buy a second-hand M3 today, it will be the best camera you've ever owned and will last for decades.

For some values of "best". :) It's certainly the most iconic. Certainly not the most convenient, what with the cumbersome film loading (three-hand procedure) and the terrible film rewind (uncomfortable, slow knob instead of the M4+ rewind lever). And framelines only for 50mm and longer.

Last for decades? Perhaps. Watch out for finder separation and other fun issues. Hope that there are still capable Leica repair technicians around in 30 years. They are a dying breed.

I miss mine, though. Jungle wisdom says you should never sell a Leica, because you're only going to buy another one for more money later anyway.

> the only option for photographers who want good quality film cameras is to buy them on Ebay

There are still options if you want to buy new, like Cosina Voigtländer's Bessa R2M/R3M/R4M. Leicas they ain't, but they are of good quality and in many ways functionally superior. And I much prefer the R3M/R3A 1x finder to any Leica finder.

The pro camera of all 35mm pro cameras, the Nikon F6, is still in production. In 2012 they were making about 50 per month. Reportedly handled by two (2) people in Sendai!

Nikon FM10 (actually produced by Cosina) is also still being made. Vivitar still makes a similar SLR. I believe Fujifilm is still producing one or a couple of their premium compacts.

More worrisome is the availability of film in the future, although this Kickstarter does get my hopes up: https://www.kickstarter.com/projects/filmferrania/100-more-y...

rhblake··on Leica M Camera Timeline
Exactly. Leicas are Veblen goods.[1] Cameras that a lot of people, including A-list celebrities, like to be seen with.[2] Leica sells exclusivity, style, elegance. Fuji/Sony do not. You'll never see a $50k Fuji Edition Hermès. (Hell, Leica was even part-owned by Hermès for a little while.)

[1] http://en.wikipedia.org/wiki/Veblen_good

[2] http://www.nytimes.com/2012/09/20/fashion/leica-cameras-favo...

rhblake··on Attacked By Thugs (2004)
It should be noted that this is (obviously) not a general directive in Sweden but rather about certain types of crimes in certain poor, problematic areas where distrust of police (and other government agencies) is very high.
rhblake··on LibreSSL – An OpenSSL replacement
Audience recording of the talk: https://www.youtube.com/watch?v=GnBbhXBDmwU
rhblake··on Elite Hacker Barnaby Jack 'overdosed on drugs'
Or more (?) famously, http://en.wikipedia.org/wiki/Speedball_%28drug%29
rhblake··on Cash machines robbed with infected USB sticks
The actual talk, "Electronic Bank Robberies - Stealing Money from ATMs with Malware", from 30C3 a few days ago: http://media.ccc.de/browse/congress/2013/30C3_-_5476_-_en_-_...
rhblake··on Valve joins the Linux Foundation
I used Photoshop CS6 in a Windows 7 VirtualBox VM, often for editing large RAW pictures. Slower than native, of course, but it was totally OK for occasional photo post-processing. Perfectly fine for typical web design work. This was on a 2011 Thinkpad X220 (i7, 16 GB RAM, no SSD).

Lightroom felt too sluggish and I didn't even bother trying Premiere, but at least having Photoshop available kept rebooting to Windows to a minimum.

rhblake··on Dell’s Linux Ultrabook gets more pixels, European availability
That depends on the laptop. On my Thinkpad X220, pressing the Fn key triggers a normal KeyPress event with keycode 151, so no problem remapping.
rhblake··on How to Write an Opening Sentence
Love the Gibson one. Another classic opening line, one of the few that I can still quote verbatim, is from Gabriel García Márquez's One Hundred Years of Solitude:

"Many years later, as he faced the firing squad, Colonel Aureliano Buendía was to remember that distant afternoon when his father took him to discover ice."

rhblake··on Login to your Google account by scanning a QR code
Cool, didn't know you could pre-print lists. I think I prefer the FastMail way though. With Google, as I understand it, 2-step authentication is either on or off; you have to use it all the time, or not at all. (Application-specific passwords are an exception but not relevant to the issue with keyloggers and public computers.) With FM, you can always sign in with just your master password, _or_ totallydifferentpassword+one-time-password (and you can have multiple sets of alternative logins).

I don't want to deal with 2-step authentication on devices I trust (e.g., my encrypted laptop). I could switch it on and off every now and then, but with Google I'd always be typing my normal password (for me, generated by KeePassX and impossible to memorize) when doing the 2-step thing, right?

rhblake··on Login to your Google account by scanning a QR code
I switched from Gmail to FastMail partly because they offer neat features like one-time passwords. (Two-factor auth with SMS - which FM also has - is nice but not always convenient/possible.)

You choose a "base password" (different from your master password) and it then generates 100 one-time passwords that you can print out and put in your wallet. So to login, the password you enter is "<base password><one-time password>". Works great. You can also make it restricted so that one-time logins can't delete anything, or change any options.

← PreviousPage 5 of 5