HNHacker News
TopNewBestAskShowJobs

statquontrarian

473 karma · joined March 12, 2020

submissionscomments
statquontrarian··on Tell HN: Cloudflare verification is breaking the internet
Personally, I have no problem with CloudFlare or their verification and protection products. But something's broken if it works in Chrome but not in Firefox (and I'm not doing anything special in Firefox).
statquontrarian··on Tell HN: Cloudflare verification is breaking the internet
The breadth of sites that have this is increasing. I've had problems from everything to a website that sells eggs to science journals to ChatGPT.
statquontrarian··on Tell HN: Cloudflare verification is breaking the internet
I'm not actively trying to avoid detection (e.g. VPN, Tor, etc.). Another user mentioned Firefox's privacy.resistFingerprinting might be the issue, but I don't have that enabled. Maybe there's something else in Firefox that is avoiding (A), and I'm willing to open a Firefox bug report to investigate that, but the core issue here is CloudFlare blocks without any diagnostic information and its community support forum didn't engage. This HN post has caused some amount of engagement from CloudFlare and hopefully it'll be fixed.
statquontrarian··on Tell HN: Cloudflare verification is breaking the internet
The analogy doesn't apply because a hotel has an override using a master key. In this case, the website, hopefully, would just open a support ticket with CloudFlare, and add a level of indirection that likely means my HAR file wouldn't even make it to CloudFlare. However, I think you make a good point that reporting to the website will put more pressure on CloudFlare or the website owner may choose a different vendor that has fewer problems. I think it's worth reporting to both in this case.

Now that CloudFlare has engaged with this problem, I'll give them some time to try to fix it, and if they don't, I'll start complaining to every website that uses this CloudFlare feature.

statquontrarian··on Tell HN: Cloudflare verification is breaking the internet
Interesting find but that's not the issue for me. about:config shows privacy.resistFingerprinting=false by default (maybe Fedora sets that default?). There were various sub-settings (privacy.resistFingerprinting.*), some of which default to true, so I explicitly set them to false, and refreshed, but that didn't help. I also changed layout.css.font-visibility.resistFingerprinting from 1 to 0. I also tried adding the domain I'm testing to privacy.resistFingerprinting.exemptedDomains and that didn't help.
statquontrarian··on Tell HN: Cloudflare verification is breaking the internet
I very much appreciate your help and I'm glad to do any other diagnostics. However, respectfully, I think the deeper issue is the lack of community support. On the verification page, there is no "help" button. Even with my motivation to find the community support page (which is also non-trivial), there was no response on my original community post and it was auto-closed which was particularly offensive to me (at least just keep it open). In my opinion, something of the magnitude of "we're possibly going to lock people out of large parts of the internet" deserves more careful engagement with the public.

I also understand Linux is an obscure use case but I do wonder how many other "normal" use cases out there have been ensnared. Given the lack of a "help" link on the verification page, an average user is powerless.

statquontrarian··on Tell HN: Cloudflare verification is breaking the internet
> until you have an algo that can mind read, "I'm not a spammer guys, gosh!" isn't good enough, I'm afraid.

As mentioned, it works fine in Chrome on the same computer. CloudFlare has engaged and is investigating, thanks to this HN post.

statquontrarian··on Tell HN: Cloudflare verification is breaking the internet
Thank you very much! Email sent at 11:38 CT although it's 1.5MB so check your spam.
statquontrarian··on Tell HN: Cloudflare verification is breaking the internet
The breadth of this impact has surprised me and it's clearly growing. Whether CloudFlare or other services perform this verification, I think it's important to highlight the lack of community support which is what really bothers me. It's fine for them to add reasonable protections for their customers, but they are not working with the community to reduce false positives.
statquontrarian··on Tell HN: Cloudflare verification is breaking the internet
I'm fine with CloudFlare doing DDoS or spam protection. I'm not doing a DDoS nor spam. I'm happy to help them fix their algorithm. Not only did they not respond to the community post, but they auto-closed it to add insult to injury.
statquontrarian··on The Evolution of Motorola Phones
The BlackBerry KEY2 was great. I was hoping a KEY3 would come out but haven't heard any updates. I recently tried Unihertz and F(x)tec phones but they were both terrible quality (WiFi dropping out and callers intermittently couldn't hear me on a phone call, respectively). For now, I've given up on keyboard phones. Coincidentally, I just bought a Motorola Edge 5G. There wasn't much logic to it: I wanted to be different/hipster, so I didn't just want a Samsung or Pixel. It has been good. The price was good for the quality.
statquontrarian··on Oracle per-employee Java pricing causes concern
OpenJ9 has pre-built binaries through IBM Semeru Runtimes at https://developer.ibm.com/languages/java/semeru-runtimes/dow...

Also available on DockerHub at docker.io/ibm-semeru-runtimes: https://hub.docker.com/_/ibm-semeru-runtimes

statquontrarian··on The Quest for a Dumber Phone
I just got the Unihertz Titan Pocket and I'm having periodic WiFi disconnection issues. Do you see those? I gathered MTKLOG traces for them reproducing the issue but haven't heard back for days. I posted on the Facebook group, nicely, and my post was deleted. I just escalated and forwarded my email with the diagnostics to any unihertz email I could find on the web and we'll see what happens tomorrow, but I'm likely to just return my phone and conclude that Unihertz is not good.

This is a well known issue that has been posted on the Facebook groups and various reddit pages and from what I can tell, it has been around for at least a few years. It looks like it affects the Pocket and the Slim, although unclear if the original Titan is affected. I tried the various workarounds noted by Unihertz on the Facebook forum posts:

1. Moved next to router. The WiFi screen shows excellent -33 RSSI signal value

2. Settings } Apps & Notifications } Advanced } Special app access } Battery optimization } All apps

        2a. System Wi-Fi Resources: Not optimized

        2b. Tethering: Not optimized

        2c. com.android.wifi.resources.overlay: Not optimized

        2d. The app I was streaming video from
3. Settings } Intelligent assistance } App blocker } Off

4. Ensured my router has different SSID for 2.4GHz and SSID for 5GHz networks

5. Connected phone to 2.4GHz network

6. Not running mesh mode

7. Disabled IPv6

8. WiFi authentication set to WPA2

statquontrarian··on Should this paper in psychological science be retracted? (2016)
I heard about the concerns about the Stanford Prison Experiment, but what are the concerns about the Milgram experiments?
statquontrarian··on Ask HN: How do I find my “purpose”?
Some research and expert guidance you might find useful:

1. Frank Martela and Michael F Steger. The three meanings of meaning in life: Distinguishing coherence, purpose, and significance. The Journal of Positive Psychology, 11(5):531–545, 2016. doi:10.1080/17439760.2015.1137623.

2. Roy F Baumeister. Meanings of life. Guilford Press, 1991.

3. Viktor E Frankl. Man’s search for meaning. Simon and Schuster, 1985.

4. Roy F Baumeister, Kathleen D Vohs, Jennifer L Aaker, and Emily N Garbinsky. Some key differences between a happy life and a meaningful life. The journal of positive psychology, 8(6): 505–516, 2013. doi:10.1080/17439760.2013.830764.

5. Crystal L Park and Login S George. Assessing meaning and meaning making in the context of stressful life events: Measurement tools and approaches. The Journal of Positive Psychology, 8 (6):483–504, 2013.

6. Blake A Allan, Ryan D Duffy, and Richard Douglass. Meaning in life and work: A developmental perspective. The Journal of Positive Psychology, 10(4):323–331, 2015. doi:10.1080/17439760.2014.950180.

7. Samantha J Heintzelman and Laura A King. On knowing more than we can tell: Intuitive processes and the experience of meaning. The Journal of Positive Psychology, 8(6):471–482, 2013. doi:10.1080/17439760.2013.830758.

8. Michael F Steger. Experiencing meaning in life: Optimal functioning at the nexus of well-being, psychopathology, and spirituality. In The human quest for meaning, pages 211–230. Routledge, 2013.

9. Bryan J Dik, Ryan D Duffy, and Brandy M Eldridge. Calling and vocation in career counseling: Recommendations for promoting meaningful work. Professional Psychology: Research and Practice, 40 (6):625, 2009. doi:10.1037/a0015547.

10. Lindsay G Oades, Michael Steger, Antonelle Delle Fave, and Jonathan Passmore. The Wiley Blackwell handbook of the psychology of positivity and strengths-based approaches at work. John Wiley & Sons, 2017.

11. Michael F Steger and Bryan J Dik. If one is looking for meaning in life, does it help to find meaning in work? Applied Psychology: Health and Well-Being, 1(3):303–320, 2009. doi:10.1111/j.1758-0854.2009.01018.x.

12. Bryan J Dik and Ryan D Duffy. Make your job a calling: How the psychology of vocation can change your life at work. Templeton Foundation Press, 2012.

13. Login S George and Crystal L Park. Are meaning and purpose distinct? An examination of correlates and predictors. The Journal of Positive Psychology, 8(5):365–375, 2013. doi:10.1080/17439760.2013.805801.

statquontrarian··on Ask HN: Advice that changed your life?
Try harder with everything
statquontrarian··on What does $0=$2 in awk do?
Unfortunately, the universal POSIX standard of awk only supports single-character, non-regular expression field separators (https://pubs.opengroup.org/onlinepubs/9699919799/utilities/a...). It's arguable whether one should write POSIX-compliant awk or not (similar arguments apply for shell scripting).

When feasible, I try to write POSIX-compliant awk, so the script could have been written as:

    awk '/\/\/d / {gsub(/.*\/\/d /, ""); print FILENAME ":" FNR " " $0; }' source/*.c
statquontrarian··on What's new in Red Hat Enterprise Linux 9
> now supports kernel live patching

Never heard of this before. Looks like it's called kpatch: https://github.com/dynup/kpatch

statquontrarian··on Why do you waste so much time on the internet?
I'm still experimenting; so far, it includes:

1. Turning off my phone at night. This removes the risk of looking at my phone in the middle of the night after going to the bathroom.

2. Consciously waiting to turn on my phone until I'm ready, which usually means after breakfast. I want to lead my phone, not the other way around.

3. Intermittent fasts of addictive computer behavior; in particular, I found I was checking news sites and HN addictively throughout the day, so I take some days off from that, completely.

statquontrarian··on Why do you waste so much time on the internet?
I'm taking intermittent internet & phone fasts.
statquontrarian··on Ask HN: What's your learning strategy?
If you want to meta-learn, there are theories about how to learn out there; for example, https://doi.org/10.1038/nrn.2015.18
statquontrarian··on Ask HN: How to be my own genetic disease researcher for my partner?
> My lab recently published a paper refuting the association of some genes with a disease

Link?

statquontrarian··on Bumble claims IP rights on employee's open-source libs
https://leginfo.legislature.ca.gov/faces/codes_displaySectio...
statquontrarian··on How Doctors Die (2013)
Quick Google Scholar search shows the following study with the conclusion, "U.S. physicians were more likely to use hospice and ICU‐ or CCU‐level care. Hospitalization rates were similar."

How U.S. Doctors Die: A Cohort Study of Healthcare Use at the End of Life, https://doi.org/10.1111/jgs.14112

statquontrarian··on Data Science for Psychologists
First time I'm seeing the Bookdown R package which is used to create books: https://bookdown.org/yihui/bookdown/
statquontrarian··on BTC Endgame
Is it fair to say this is a subset of the general problem of majoritary-consensus networks (which includes PoW, PoS, PoA, PoR, PoET, and PoTS cryptocurrencies)? https://doi.org/10.1109/COMST.2020.2969706
statquontrarian··on AstraZeneca/EU contract
Linux has a pdfgrep command which works pretty well (unless the PDF has images of text).
statquontrarian··on Heap-based buffer overflow in Sudo
The actual commit: https://github.com/sudo-project/sudo/commit/8255ed69
statquontrarian··on Heap-based buffer overflow in Sudo
How does this story not have a billion upvotes? HN should introduce sticky posts just for this bug and keep it at the top of the homepage for weeks.

> exploitable by any local user [...] without authentication

> introduced in July 2011 [...] in their default configuration

> full root privileges

statquontrarian··on The Cruise Ship Suicides
Rare in the sense that death is rare, but it's in the top 10 causes of death; about 50K per year: https://www.cdc.gov/nchs/fastats/leading-causes-of-death.htm
← PreviousPage 2 of 4Next →