HNHacker News
TopNewBestAskShowJobs

spartas

157 karma · joined April 14, 2011

my public key: https://keybase.io/spartas; my proof: https://keybase.io/spartas/sigs/bQ-VN0tMSmo_Zt_vyUktjK2OjrmgXHXzZCEsTaOUPjI
submissionscomments
spartas··on New hard drive rituals (2018)
https://unix.stackexchange.com/questions/202541/how-can-i-ch...
spartas··on Firefox 74
In protonmail, Settings → Daily email notifications → Disabled. No, I don't understand why that isn't the default setting either.
spartas··on I have the coronavirus. So far, it isn't that bad
SARS-CoV-2 is that "more specific name". I agree that it didn't help that it went without a specific name for a long period of time.

https://en.wikipedia.org/wiki/Severe_acute_respiratory_syndr...

spartas··on What happens to a mail-order mattress after you return it
Abuse of these mattress return policies is also incentivized when new online mattress companies are popping up every month.

https://www.wsj.com/articles/unintended-perk-of-the-online-m...

spartas··on Samsung TVs May Upload Screenshots for Automatic Content Recognition
I run pi-hole and have a Samsung smart TV. How do I know that the Samsung DNS servers are being blocked? What prevents Samsung from registering new meaningless-sounding DNS names and continually pushing out TV software updates peddling “Security and bugfix” release notes?
spartas··on Her Amazon Purchases Are Real, the Reviews Are Fake
F Keurig Dr Pepper
spartas··on Americans Are Moving at the Lowest Rate on Record
Jump. That $7k won't make a difference in SF and you're never going to get back the time.

You're already getting (and doing well with) interviews. Negotiate yourself an offer (maybe even with relocation expenses) with one of these companies and then move.

Understand that time is a much more scarce resource than money.

spartas··on Jimmy Wales has quietly launched a Facebook rival
Looks like Credit card and PayPal only.

Definitely not Bitcoin. I've given Bitcoin to Wikipedia in the past (using the same email address). When I try to pay for a WT Social subscription with a credit card, I get a bit scary error message:

Card Input Error(s):

You cannot combine currencies on a single customer. This customer has had a subscription, coupon, or invoice item with a different currency.

spartas··on Meetup.com alternatives
I may be biased (I backed that Kickstarter), but this makes me sad :(
spartas··on Getting started with regular expressions: An example
https://regexcrossword.com
spartas··on Meetup.com alternatives
https://upcoming.org
spartas··on I was just subjected to the most credible phishing attempt I’ve experienced
I was just thinking about how the agent could generate ephemeral PBX extensions. OTP-like would definitely be the way to go.

Edit: perhaps the extension would be per transaction, not per-agent, and when the customer calls the extension, the agents system can automatically pull up the customer’s account. These extensions should expire, but given the length of some customer calls, and how often I’ve been disconnected from customer service lately, perhaps it should be on the order of hours, not minutes or seconds

spartas··on D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
> This is one of the reasons my internal network is not 192.168.1.1/24 and the router is not 192.168.1.1.

Do you also disable WebRTC on all clients on your network? An attacker (or script) may be foiled by your non-standard gateway network, but your work in obfuscating the router is wasted if they can get at your client IP address.

spartas··on D-Link Home Routers Open to Remote Takeover Will Remain Unpatched
>Of course, in reality, this CVE seems almost un-exploitable in the wild, anyway. How will an exploiter get to the login page in the first place? They'd have to know your network password and be in your physical vicinity, or your ISP would have to send traffic to your router's login page from the Internet.

Nope. Not at all. Most router attacks these days are malicious JavaScript (like in ads and trackers) that send HTTP requests to the router from the user's own web browser (already inside the network). No proximity access is needed

https://arstechnica.com/information-technology/2019/07/websi...

spartas··on Ask HN: How do you manage your private keys?
The most common weak security point in any system is people. If you are sharing keys and you ever need to revoke a shared key, you're in for a bad time
spartas··on Ask HN: How do you manage your private keys?
Sorry.

Generate new keys for each service, device, client, and server. Don't share them. Don't copy them.

spartas··on Ask HN: How do you manage your private keys?
Don't copy your keys. Don't manage or "organize" your keys. Don't share your keys.

The leaky abstractions around what you're doing with keys is a security illusion, and you need to stop.

spartas··on Best Smartphones That Still Have a Headphone Jack
>Every smartphone on that list was overpriced and runs some horrid vendor customized version of Android

Pray tell, what Android version is the iPhone SE running?

As for the rest of your comment, you can constructively recommend other devices, like the Nokia 2.2 that you're using, without the negative tone. Your first sentence is unnecessarily obtuse.

spartas··on Florida DMV sells personal info to private companies, marketing firms
You do pay a fee for mail service. While USPS is not directly funded by taxes, it is funded by the Federal Government. Our taxes are responsible for financing the government's initiatives.

The problem is that the cost to bulk mail (at least 200 pieces) is merely $0.19 per piece. If you want to DOS an entire zip code regardless, EDDM is actually cheaper (per piece) at $0.187. USPS is getting that money. You would need to pay a fee higher than $0.19 per piece of junk mail that you receive for USPS to just break even.

spartas··on Database IDs Have No Place in URIs (2008)
It's a good thing™ Stack Overflow doesn't have those IDs in the URI anymore.
spartas··on Network Solutions’ scammy bullshit signup funnel
The prices aren't listed in the dropdowns, but if you choose an option, then the price should be displayed on the right: < https://imgur.com/a/1hSJOUq >
spartas··on TurboTax Uses Dark Patterns to Trick You into Paying to File Your Taxes
Most of what you’re paying for as a TurboTax customer is not the benefit of the software. You’re paying for the company to lobby the government to make filing your taxes more expensive.

Intuit has the perfect scam.

spartas··on AMP pages displaying your own domain
Are you blocking GoogleBot by IP range or User-Agent match? Why aren't you using your robots.txt file to block GoogleBot instead or in addition to your server-side logic?
spartas··on EFF’s Tweet About a DMCA Takedown Is Now Subject to an Overzealous Takedown
Perhaps you should engage a lawyer yourself and send your own "cease and desist" letter in response to their actions. Let them know that their continued harassment will result in a lawsuit.

It's amazing how quickly some companies will respond to a succinct letter from a reputable law firm.

spartas··on 2.7M Americans Still Get Netflix DVDs in the Mail
That depends on who the "they" is. Movie distribution companies want to maximize the value of their product, and that means marketing and advertising, exclusivity periods, product tie-ins and collaborations with different streaming providers. They know that they can get the audience numbers from anywhere, but the question is how much a particular streaming provider will pay over a competitor.

So movie distribution companies are certainly engaging in rent-seeking behavior–only you're not the customer. The streaming providers are.

(Reasonably good pun though)

spartas··on Social media password, search history could be required to buy firearm in NY
It would be a horrible idea because it would be handled by laws and the government. I take issue with your example of not paying the people that failed to pass a budget. Government budgets are huge complicated enigmas full of waste and overspending, and if you punish individuals personally for failing to agree to pass a budget bill, then those individuals are no longer incentivized to dissent on unnecessary spending provisions of the bill.

Understand that if a bill passes then all provisions and portions of the bill are approved, including any riders attached to the bill (and there are often many). For many people in Congress, the reason to vote NO on a bill is not because the bill is an awful or terrible idea (many times the bill makes sense and would be beneficial), but because the author of the bill added in unnecessary restrictions or budget kickbacks to the bill or in riders to unfairly benefit a group that is sponsoring the bill.

If you think our government's problems are bad, you should see their solutions.

spartas··on Hayabusa2 Now
There are literally dozens of us!
spartas··on Ask HN: How do you reduce unsolicited phone calls?
I have varying degrees of success with it. I do have a few recordings of calls (JR will email you an audio recording of the call after you hang up) that are quite hilarious.
spartas··on Ask HN: How do you reduce unsolicited phone calls?
Answer the phone when they call and conference in the Jolly Roger telephone bot http://www.jollyrogertelco.com

The bot will waste the telemarketers time, which is the most expensive thing that these companies are paying for. Do this enough times and the calls drop off rapidly.

spartas··on YouTube demonetized my tuba videos
*demonetized
← PreviousPage 2 of 3Next →