HNHacker News
TopNewBestAskShowJobs

srwx

32 karma · joined April 26, 2015

submissionscomments
srwx··on IPv6 just turned 30 and still hasn't taken over the world
I run an IPv6 only VPS as a side project to keep an eye on what doesn't work. My most recent discovery: I tried moving from `lego` to the new native ACME `nginx` support. `nginx` refuses to talk to letsencrypt on IPv6; it's not a letsencrypt flaw because it works perfectly on the same server with `lego`.
srwx··on Google removed my Yubikeys from a Google account 'just to be safe'
Great so when something like the recent LastPass leak happens and I go in and cycle my password, 2fa and backup codes out of simple precaution Google is going to perhaps mark that all as suspicious and undo it for anyone who might come along and pretend to have lost access to my account?
srwx··on SnappyMail – Modern, lightweight and fast web-based email client
it took all of 30s to write a bash script to delete them
srwx··on AWS launches ARM-powered Lambdas
Drats, not available on edge lambdas yet.
srwx··on Parler Databases Disclosed
Prior to Okta and Twilio revoking their accounts you needed to provide SMS authorization to create an account (you give them a number, they send you a code, etc.). It seems likely after their API access to Okta/Twilio was revoked their services weren't written to catch and handle the new exception these API calls were probably raising...

Based on this twitter thread from Nov 2020 they may not have been hiring the best developers: https://twitter.com/davetroy/status/1327253991936454663

srwx··on Tesla: Soaring share price creates army of 'Teslanaires'
Maybe he is like me, I put money into TSLA that I was happy to lose simply because I want to invest in things that make the world better. That hasn't changed just because on paper I'm rich. The mission isn't over.
srwx··on Australia uses new technology to catch drivers on phones
If the motive was to actually stop the behaviour then you'd be correct, however if the motive is simply to collect as many fines as possible then what they're implementing is the best solution.
srwx··on We’re asking Apple to change the advertising ID for each iPhone every month
Maybe you're ok with apple's limitations, I'm not. That's ok because I'm not you and I'm not asking/forcing you to change anything. So what exactly is your point? Choice is a wonderful thing.
srwx··on We’re asking Apple to change the advertising ID for each iPhone every month
Money doesn't matter, you don't get it. When only 1 in 5 phones is an iphone then keeping imessage.. you know what, I'm not wasting the effort.
srwx··on We’re asking Apple to change the advertising ID for each iPhone every month
http://gs.statcounter.com/os-market-share/mobile/worldwide
srwx··on We’re asking Apple to change the advertising ID for each iPhone every month
That's fine with me, I'm not suggesting privacy should be free but they can't pay me enough to use their OS or hardware. I would however entertain the idea of using their services if they are available on my hardware choice.
srwx··on We’re asking Apple to change the advertising ID for each iPhone every month
But they don't because when their own customers communicate with others customers the conversation is no longer private and if they aren't sufficiently technically knowledgeable then their own customers might not even know it's not secure.
srwx··on We’re asking Apple to change the advertising ID for each iPhone every month
If you think buying an iphone saves you then you've already lost.
srwx··on We’re asking Apple to change the advertising ID for each iPhone every month
Because it highlights their real motives. Why not give everyone the ability to securely communicate? profits > privacy.
srwx··on We’re asking Apple to change the advertising ID for each iPhone every month
I'll believe they are honest about caring about users privacy when they release imessage for other platforms.
srwx··on Google .dev domain early access
5 minutes once forever is even less of a big deal.
srwx··on NTSB: Autopilot steered Tesla car toward traffic barrier before deadly crash
It will if it can't get a lock on the lane markers. For example mine does this when navigating through large unmarked intersections which in my home town has many where the far side lanes don't align with the lanes before entering the intersection (due to added left and right turn lanes). My Tesla will follow a car in front as they slightly adjust position to the offset lanes on the far side (which is very cool) but if there is no car to follow I just take over knowing it'll not handle it well.
srwx··on Bitcoin Blows Past $9,000
I guess it depends on if you see cryptocurrencies as a way to make money in the short term or if you see cryptocurrencies as the future of money. I'm firmly in the latter camp and am not looking to ever "cash out".
srwx··on Segwit2x Bitcoin Fork Suspended
It's graphed in real time: https://fork.lol/
srwx··on Tesla recalls 53,000 cars over brake issue
Yup, and specifically the _parking_ brake not the normal brakes used when driving.
srwx··on Upgrading Autopilot: Seeing the World in Radar
As a Tesla owner I always keep a hand loosely on the wheel and I never get a warning. In fact the only time I've seen the warning was when I deliberately kept my hands off to get a feel for when the warning occurs and what it looks and sounds like. I still haven't been brave enough to let the car trigger the fail safe "come to a stop" scenario when ignoring multiple warnings, I also wonder if doing so might cause a black mark against my Tesla account ;)
srwx··on ​Attack on Australian Census site didn’t register on global DDoS sensors
Shared houses are an edge case, yes if you don't want to share your private data (income, health, etc.) with other members of the share you can do your own census form but for the vast majority of Australia all members of a household go onto a single census entry. In your example you'd only be putting in an entry for the share house you were staying in on the night of the 9th, it doesn't matter one bit that you live in two share houses - the census is just a snapshot of August the 9th.
srwx··on ​Attack on Australian Census site didn’t register on global DDoS sensors
Yeah I think since the fiasco they've suddenly been bandying about "Oh you have until August 23rd, there's no rush guy just chill okay" but that was after months of "If you don't fill it in on August 9th we'll fine you $180/day" to try and shut down people calling for boycotts after the changes they shoved through the week before Christmas that allows them to keep the data linked to everyone's name for 4 years.
srwx··on ​Attack on Australian Census site didn’t register on global DDoS sensors
It's not every citizen (~23M) but rather per household (~10M) that would use the system. Not everyone is online or choose the online option so it'd be less than 10M users total but even a conservative back of a napkin estimate would show that in the after dinner hours on census night they'd have to be dealing with closer to 3M to 4M users per hour peaks.

Very badly planned. They even gloated that the 1M/hour peak the system was designed to deal with was twice what they needed and it'd all be fine even when lots of experts were pointing out that that wasn't going to cope.

srwx··on People with names that break computers
A large global company I worked at hired someone who chose the username 'lib' and this user was based in a remote location (China as I recall), I don't remember exactly but I think it was their first name. Some of the developer tools recursively searched parent directories for a 'lib' when running builds, this in turn caused a massive mysterious increase in build times when users in the USA were suddenly sending NFS requests to China looking in /home/lib for libraries.
srwx··on Hugo – Golang static site editor
Likewise but I use gulp and the awspublish plugin to get things to S3. This way I can easily push a non-minified non-ulgified version to a staging s3 bucket to test/debug and then a minified, uglified, gzipped, long cacheTime version to my 'production' bucket when I'm happy (which also uses Cloudfront mostly just for the SSL).
srwx··on Apple tells U.S. judge 'impossible' to unlock new iPhones
That's a shame :( It'll be interesting to see if Marshmallow with its official fingerprint API changes the behaviour as handset manufacturers are implementing fingerprint support themselves in Lollipop (and so its going to be a bit all over the place).
srwx··on Apple tells U.S. judge 'impossible' to unlock new iPhones
The on screen slide to unlock button. Works perfectly on my Z3c and I'm hoping to not lose such a nice feature if I upgrade to a Z5c but it sounds like I might :(

https://vid.me/Ns12

srwx··on Apple tells U.S. judge 'impossible' to unlock new iPhones
Android dumps all "smart unlock" options when you press and hold (1 second) on the 'slide to unlock' on screen button and forces passcode/password/pin from that point on. I practice doing this so it's not foreign to me if I ever find myself in a dodgy scenario.
srwx··on Pebble Time review: an underdog among smartwatches
As it happens I don't track my exercising either, I go to gym and do exercises simply because I know it's good for me and that as an IT worker my job is too sedentary. Maybe if I was working towards a competitive goal (run a marathon or do a triathlon) I would track as iterative improvement would be necessary but I'm not so I don't. Equally I don't have competitive goals for my sleep cycles.
Page 1 of 2Next →