HNHacker News
TopNewBestAskShowJobs

scrose

1,240 karma · joined April 4, 2019

submissionscomments
scrose··on Every single Onewheel is being recalled after four deaths
I have a 2017 Evelo Quest One that’s wrapping up it’s 6th year now. It’s been almost entirely hassle free besides general maintenance and a battery replacement after ~4 years. It looks like the company replaced it with the Evelo Dash.

There’s lots of good folding electric options right now, but if your budget allows for it, I’d *highly* recommend looking for folders with Gates drives. You will be able to roll and hold the bike folded between your legs without worrying about wiping grease all over your pants(or some unfortunate soul who bumps into it). It’s also one of the few things that lives up to its hype — it’s been entirely maintenance-free over the last ~6years I’ve been riding

scrose··on Every single Onewheel is being recalled after four deaths
There are plenty of compact options for sure, but I haven’t found any as ‘hassle-free’, at least when I reach my final destination :)

I also have a folding e-bike which has larger and wider wheels than a scooter, which is preferable in my opinion. The problem with scooters and e-bikes, even folding ones, are that a lot of buildings will not let you take them indoors. Or most will have you use a freight elevator, which is operated manually AND has set hours that it’s run.

There’s also the difficulty of storing/locking them if you go out for dinner or some other event. Something as small as a Onewheel that you could pick up and walk with, and is small enough to store under a table, or take on a train without blocking anyone is a dream in this sort of environment.

Edit: I should also note that I’m speaking from my very NYC perspective.

scrose··on Every single Onewheel is being recalled after four deaths
The board would completely disengage and the nose would drop. The best I can explain the feeling is that it felt like I’d go from tapping the gas to pushing the clutch all the way down. There would be no ‘pushback’ from the board beforehand. Sometimes it’d happen even when starting from a standstill.

From what I remember, the blue power light would be on, but it would take restarting the board for it to engage properly again.

scrose··on Every single Onewheel is being recalled after four deaths
I have emails talking with Future Motion support as early as 2017 when my Onewheel+ was nosediving randomly at medium/low speeds (ie. Idling back and forth at a red light).

I could never get them to acknowledge it was a defect. I put over 2,000 miles on the board, so I was no stranger to how it should ride. All of my close calls came from it just suddenly powering down on me and are why I lost enough trust in the board to get rid of it.

If not for that defect, it would have been the best tool for commuting in the city. It could ride off curbs, over torn up roads, through grass, and best of all, I could actually bring it inside any building without needing to go through a freight elevator

scrose··on Show HN: I made a MailChimp alternative that connects to your database
I mostly agree, but do want to emphasize that it really depends and there are multiple ways to secure this that range in complexity and maintenance overhead.

The top thing that comes to mind is creating a separate ‘read replica’ DB that logically replicates target table(s) from the source DB, creates a materialized view with a subset of the replicated data in the replica db, and then exposes only the materialized view to a specific 3rd party user.

That way you:

1) Run your primary db in a private subnet — addressing your concern with ip whitelisting

2) Run the replica in a public subnet with extremely limited access(ip-whitelisting and limited access controls to data).

This is definitely a more complex setup to reason about and creates more moving parts that can fall out of sync, but it does greatly decrease the blast radius of a breach, and for some orgs, that may be a worthwhile trade-off. In my opinion, the OP would probably benefit from some basic security walkthroughs on these different implementations to help engineering teams get onboarded/make a better case for their solution if they hit friction with legal or security teams.

scrose··on The Drivers Cooperative: New York’s driver-owned ride-hailing app
> I have wondered if a pure market making app would work... let drivers and riders place bids... a driver can lower their bid to get hired faster and a rider can increase their bid to get picked up faster. The app would just take a fixed cut.

There’s a service in Ukraine called Uklon[0] that does pretty much exactly that. If you bid very low, it’d both take longer to find a ride, and the car/driver would usually not be great. Think a 25+ year old daewoo with no ac that smells like smoke on the lowest end vs. newish Camrys or other regular fleet cars on the mid-higher side.

[0] https://uklon.com.ua

scrose··on Squad Solar City Car
> An average car has a stationary footprint of around 10 m2, a very inefficient use of the scarce space in city centers. A Squad has a footprint of only 2,4 m2, or 1,2 m2 per person. 3 Squads can easily park on 1 car parking spot.

This is the biggest issue in the US in my opinion. I believe Smart cars and just generally smaller cars like the Fiat 500 would have been far more successful if US cities allowed cars under a certain size to be able to park facing the curb and extended other benefits like reserving corner spots near the crosswalks for small cars(to improve daylighting intersections)

Massive ‘cars’ didn’t come out of nowhere. US policies and subsidies at the federal, state and city level all incentivize them at practically every turn.

scrose··on The DOJ detected the SolarWinds hack 6 months earlier than first disclosed
The Cuckoos Egg[1] round 2? A bit funny how several decades later, some things just don’t change…

[1]https://en.m.wikipedia.org/wiki/The_Cuckoo%27s_Egg_(book)

scrose··on Experts warn yearly checkups carry risks and do not reduce mortality
Private healthcare is optional in the UK, and that’s what the OP was referring to.
scrose··on 50% of new NPM packages are spam
It was too early for me when I posted this :)

There were two ideas in mind that were conflated: 1) A list for blocking the subpaths of these packages in npm that could be imported. 2) A list for blocking the malicious URLs in the repos themselves. Ie they mentioned that the repos have malicious URLs that navigate you off the page. This is where something like pihole could come in handy.

scrose··on 50% of new NPM packages are spam
It would be great if Sandworm listed these malicious repos in a text file that could be imported into a blocklist in a service like Pihole.

I’m not worried about hitting these URLs but definitely worry about the less tech savvy people in my family stumbling across these accidentally

scrose··on One of the biggest landlords in Los Angeles just defaulted on $755M
‘Affordable housing’ is an overloaded term at this point. There are people who qualify for ‘affordable housing’ in NYC who are making ~$180,000 and will be paying $3,000/mo or more in rent after their ‘low-income subsidy’ is factored in.
scrose··on Bing AI can't be trusted
I understand the current hype-cycle around AI is pitching it as some all-knowing Q & A service, but I think we’d all be a bit happier if we instead thought of it more as just another tool to get ideas from that we still ultimately need to research for ourselves.

Using the Mexico example in the article, I think the answer there was fine for a question about nightlife. As someone whose never been to Mexico, getting a few names of places to go sounds nice, and the first thing I’d do after getting that answer is look up locations, reviews(across different sites), etc… and use the initial response as a way to plan my next steps, not just take the response at face value.

I’m currently dabbling with and treating ChatGPT similarly — I ask it for options and ideas when I’m facing a mental block, but not asking it for definitive answers to the problems I’m facing. As such, it feels like a slight step above rubber-ducking, which I’m personally happy enough with.

scrose··on Connecticut parents arrested for letting kids walk to Dunkin' Donuts
> As backwards as it sounds my time in near-autocratic 3rd world I've felt the most free. Worst case scenario the police can be bribed for a crisp $20. As long as someone isn't doing some horrible shit (like real violence) a lot can be overlooked.

In the US, flashing a PBA card[0] or the fire department/ambulance alternative will get you out of most of what police consider ‘low-level’ infractions(ie. Covering a license plate, speeding, etc…).

Or in less corrupt cases(like the ones I unfortunately have used mine for), it gets the cops to leave you alone or listen to you when you get profiled for no good reason.

I guess it’s technically not a bribe since no money is exchanging hands, but last I checked, each PBA card raises ~$150/year for the police union.

[0] https://www.the-sun.com/news/4212777/what-is-a-pba-card/

scrose··on How a cup of coffee contributes to climate change
To put the study in perspective, driving a single mile in your car will emit the same amount of CO2 as brewing 8 of the least efficient cups of coffee listed in the study, and using a single gallon of fuel emits 360 inefficient cups worth of CO2[0].

So basically if you want to ‘offset’ a years worth of daily coffee, drive approximately 20-30 less miles per year.

[0] https://www.epa.gov/greenvehicles/greenhouse-gas-emissions-t...

scrose··on Fewer than 40% of New Yorkers earn a living wage
It’s less likely that they’re doing something ‘wrong’, and more likely that factors such as household size and living location drive up the overall cost of living past what potentially their single salary can withstand. A single-earner with a spouse and kid to support living in Manhattan can struggle to keep up even with a $150k+ salary.

Rents and basic living expenses(ie. Food) in particular have spiked citywide since the pandemic, which further exacerbates the issue.

scrose··on If we all cycled like the Dutch, global emissions would drop 700M tonnes
> Also Ebikes are more expensive to buy, maintain, and run. I doubt they last even half as long too. I'm still using a hybrid buy I bought 10 years ago for 200 (exdisplay).

Do you have any stats to back that up? Sure, an ebike will be more expensive than an equivalent non electric version. But if you’re more likely to take it out over a car or paying for public transit, that’s much cheaper per mile of use.

For some anecdata, I bought an ebike 4-5years ago for about $1600 and put a little over 1,000 miles a year on it mainly in NYC. In total I’ve spent $600 on repairs and upgrades, with $300 being a new battery after 4 years. The rest was just replacing brakes and changing some of the stock items, mainly for aesthetic reasons. This bike replaced $40-60 cab rides to other boroughs and my unlimited metro card($130/mo). In less than a year it paid for itself and more, and I definitely would not have put as many miles on my regular bike.

scrose··on Detangle: AI-generated summaries of legal docs
I’ve had ChatGPT tell me how to do something one way, and then give an example that omitted the specific syntax it had called out. It was only until I told it that the example didn’t reflect what it wrote that it basically said ‘oops! Here’s the corrected version’. I can’t even begin to imagine how poorly that could go in a legal context.
scrose··on Tell Cloudflare: You're Breaking Tor/VPN/Shared IPs Again
I’m sure everyone on this site can come up with reasons why some online businesses should support a worldwide audience. That does not mean every online business needs to set out to support the entire world when it makes no sense for them or 99.999%+ of their legitimate users.
scrose··on Tell Cloudflare: You're Breaking Tor/VPN/Shared IPs Again
Chances are they won’t block IPs in the countries they have employees, and/or they’ll require a VPN for them.

I’m honestly a bit surprised to see so many people attempting to counter the idea that some businesses don’t need to be accessible from every region in the world.

scrose··on Cached Chrome Top Million Websites
They may be using a self-signed cert so it’s https://localhost and the browser is flagging the cert rather than localhost itself.
scrose··on 3M to end 'forever chemicals' output
Sorry for going off-topic, but would you mind sharing a bit more about this business? The domain sounds really interesting to me. My e-mail is also in my profile if that's better.
scrose··on Bike Frame Stiffness
Justification is easy in the USA

This is a short list of a few common get out of jail free cards for traffic violence:

1. I couldn't see them

2. The sun was in my eyes

3. I had a medical emergency

4. The car was in my blind spot

5. They came out of nowhere

6. My car lost control

7. My brakes didn't work

scrose··on RadTrike Electric Tricycle
Have you seen 3-wheelers like the Piaggio mp3? I think those are street legal with just a drivers license. The main downside being it’s not electric.

I’ve looked at Arcimoto too, but being in NYC with something like that just seems like asking for a bad time

scrose··on CVS sued over ‘fraudulent’ donations to American Diabetes Association
> I didn't even consider that the store could be corrupt, reimbursing themselves for their own donation.

I would very much like to be wrong, but I’m pretty sure that’s what they’re all doing in some way. — Although, I really hope someone will prove me wrong in the comments.

AFAIK if you donate to a non-profit through the pos terminals, it counts as a tax deductible donation that the organization with the terminal can claim, not you. For example if you donate $10 to the ASPCA through a Petsmart terminal, thats a tax deductible contribution for Petsmart from money out of your pocket.

scrose··on ‘I want to protect my family’: Polish civilians flock to army training
I can’t tell if you’re being sarcastic at this point, but yes, you can in fact see Russian news in the USA. There are plenty of places(ie. Reddit) where people also add English subtitles for non-Russian speakers.
scrose··on ‘I want to protect my family’: Polish civilians flock to army training
Russian news has been talking about nuking ‘the West’s decision-making centers’ for the last 2 months and publicizing different ‘attack plans’ to take over the Baltic states and move west. While it’s likely just posturing, to say it’s western news making stuff up is just silly.
scrose··on Apple gets $19M fine in Brazil for not selling iPhones with charger
It’s not just tech, that’s just the most obvious to us here. Anything that’s good quality that needs to be imported is usually almost twice the price there. I saw this especially with climbing equipment
scrose··on Should you delete your Patreon account after they laid off their security team?
The point I’m making is that the statement made is vague enough that you don’t know whether or not that is the case.
scrose··on Should you delete your Patreon account after they laid off their security team?
Saying everything is ok because there are third-parties handling security is a major red flag.

Technically a tool like Snyk or Dependabot is a third-party security vendor, but would you trust your financial & personal information with a company that says their security posture relies solely on those tools?

← PreviousPage 2 of 9Next →