HNHacker News
TopNewBestAskShowJobs

thenewnewguy

811 karma · joined July 29, 2019

submissionscomments
thenewnewguy··on Starting emails with "BEGIN PGP MESSAGE" will fool the filter
Even if they did, you could just sign the message for real.
thenewnewguy··on Apple’s “Let Loose” iPad event was shot on iPhone with Panavision lenses
The difference is expectations - people buying professional cameras expect and are used to needing to buy additional gear. In this case, "shot on iPhone" is obviously intended to deceive consumers into believing something that isn't true.
thenewnewguy··on The Internet Archive's last-ditch effort to save itself
My understanding is that the original Internet Archive library worked under the 1:1 lending theory. Then, during COVID, they decided to open up what they called the "National Emergency Library", offering unlimited copies of the books, which is why the lawsuit happened.
thenewnewguy··on Tesla's 2M car Autopilot recall is now under federal scrutiny
Agreed, but I am not the original commenter, I am making my own point separately from them. I agree with you that Tesla isn't gaming anything by having a good airbag.
thenewnewguy··on Tesla's 2M car Autopilot recall is now under federal scrutiny
Tesla is not gaming the system by having a good airbag system that only deploys when necessary (that's actually really good!).

Tesla is gaming the system by excluding accidents where the airbags don't deploy from the "Autopilot/FSD accidents" dataset, thus artificially deflating the number of accidents.

thenewnewguy··on Randar: A Minecraft exploit that uses LLL lattice reduction to crack server RNG
Wouldn't the most obvious method of cheating be the site owner peeking at other player's hands and/or the deck? Which this doesn't (and cannot) prevent?

I guess I'm not sure what publicizing their PRNG is meant to prove. It shows they didn't cheat via a very specific type of cheating but there are several other potential cheating vectors.

thenewnewguy··on Show HN: Detecting adblock, without JavaScript, by abusing HTTP 103 responses
Probably too unreliable to use in real life - for example, I suspect many crappy corporate proxies will block HTTP 103 responses as some unknown danger.
thenewnewguy··on Ask HN: AWS Down?
Seeing similar issues here with GCP and Comcast, seems to be the common link and not AWS.
thenewnewguy··on WHO warns United States could become coronavirus epicenter
> normal people do not need masks

Normal (i.e. non-sick) people don't need masks, this is good advice. As a matter of fact buying masks is actively harmful, because you are depriving people who do need them (the sick and their caregivers).

Source: https://www.cdc.gov/coronavirus/2019-ncov/prepare/prevention...

(No comment on the rest of the tweets though)

thenewnewguy··on Launch HN: Riot (YC W20) – Phishing training for your team
Disagree, I have serious doubts you could confuse the two. I can see almost no context where 'Riot (Games)' and 'Riot (Anti-Phish Company)' could be meaningfully confused.
thenewnewguy··on Amazon Prime delivery delays are now as long as a month
Aren't you equally at risk buying from Amazon themselves due to inventory commingling?
thenewnewguy··on Decrypting Blind's Encrypted API
In theory: no, because anyone able to break the TLS could just slip in some JS to capture your comments.

In practice: possibly, because many companies use TLS proxies that probably aren't doing that?

thenewnewguy··on Tesla Model 3 Vulnerability – Disable Autopilot Notifications, Speedometer, etc.
I was referring to this video where the car is driving 60mph down the highway, and the MCU stays crashed for over a minute: https://www.youtube.com/embed/UkhwRUaSCA4

> Well, it was probably a hard reboot. Which can only be done while stopped and with foot holding the brake down.

If this is true, then it seems like it is impossible to (hard) reboot the MCU while driving? So they definitely should pull over.

> This is how people form mistaken opinions about Teslas. Lack of personal experience, ignorance, presupposition of facts that do not exist, gullible acceptance of anything you read or hear, and exaggeration of perceived problems to a bizarre level.

You seem to be letting your Tesla fanboy/girlism blind you. I'm not "forming an opinion" about Tesla over this event, simply arguing that should this happen to you the safest and best thing to do is pull over. I would do the same thing in a normal (non-Tesla) car should the speedometer or other important part of the dash fail in those.

thenewnewguy··on If the heart is a muscle, why doesn't it ever get tired?
For a vast amount of human history food has been much harder to obtain and less calorie-dense than it is today, so evolution has optimized for energy efficiency rather than raw power.
thenewnewguy··on Tesla Model 3 Vulnerability – Disable Autopilot Notifications, Speedometer, etc.
Where are people getting a few seconds from? The video seems to display the crashed MCU for well over a minute. 30 minutes is unreasonable, but it does seem like the safest thing to do is pull over.
thenewnewguy··on It never makes sense to use foldl on lists in Haskell (2019)
This seems like a weird complaint - basically everywhere in programming two variables/functions/classes/etc with different names are different things. I'd be much more surprised if appending a ' to a function name did nothing in haskell.

> When you could have just called it foldl and moved the old one to the deprecated module.

1. Most people aren't a fan of randomly changing existing library functions

2. The lazy (non-prime) version of foldl isn't useless! There's even a section at the end of the post explaining how this post _only applies to lists_ and that with other data structures foldl and foldr' are actually useful.

thenewnewguy··on AvastSvc.exe contains a full, unsandboxed JavaScript/DOM implementation
There's Windows 10 "in S mode" which does this, but it's not a version of Windows sold at a discount, just a "mode" you can run Windows in. It's possible to (irrevocably) change from S mode to normal Win10.
thenewnewguy··on The History of the URL
> and so do SPA devs

??? - those usually use the URL bar in my experience.

thenewnewguy··on Highest French court reclassifies Uber drivers as employees
Yes, but this is due to the fact that most jobs require your physical presence, Uber does not.
thenewnewguy··on Get Real: no drug or vaccine will avoid a very big coronavirus epidemic
You are downvoted for passing off your uneducated (in the field of health) opinion that her illness was coronavirus as fact, and for implying that antibiotics somehow could help with the coronavirus directly (i.e. in fighting the virus not preventing secondary infections) in any way (they can't).
thenewnewguy··on Get Real: no drug or vaccine will avoid a very big coronavirus epidemic
I have a hard time believing that both a doctor would administer antibiotics for coronaVIRUS and that antibiotics would be of any use there.

Edit: Children comments are pointing out the antibiotics could be for secondary infections. Fair enough, but the parent comment's implication that the antibiotics helped with coronavirus recovery is what's problematic.

thenewnewguy··on Revoking certain certificates on March 4
https://community.letsencrypt.org/c/incidents.rss perhaps?

(Pro tip: you can append .rss to many pages on discourse to get an RSS feed)

thenewnewguy··on Revoking certain certificates on March 4
The misissuences have happened over the last several months (since at least December 2019), but it does seem that it was _discovered_ on Friday.
thenewnewguy··on Revoking certain certificates on March 4
> The real question is why there's so much pass-by-reference in the first place. K looks to be a domain name string -- it's almost certainly faster to copy it than to dereference it everywhere.

I don't program in rust, so my knowledge here is limited to what these words mean in C/C++ - however shouldn't making a copy still require dereferencing the copy?

thenewnewguy··on Revoking certain certificates on March 4
Well, from my understanding, they have no idea of whether or not a given certificate was misissued as long as it meets the baseline criteria for triggering the bug (which seems to be just "issued after X date with more than 1 domain").

So while the number of certificates that should not have been issued due to a blocking CAA record is likely small (or possibly even 0), they have to revoke every cert that could have triggered the bug, as they have no way to travel back in time and find out what the CAA records they didn't check would have been.

thenewnewguy··on WireGuard Gives Linux a Faster, More Secure VPN
> k8s already uses Wireguard for the service mesh internally.

Kubernetes does not use anything for the service mesh internally - as it does not provide a service mesh.

By this I can only assume you mean some popular CNI provider uses wireguard, but out of the ones I know of (flannel, weave, calico, canal, romana) I don't believe any use wireguard.

thenewnewguy··on Let's Encrypt Has Issued a Billion Certificates
It's relevant because Google isn't likely to remove _themselves_ from their browser, which is currently the most popular web browser on the planet.

For this reason alone, having a major browser dev as a CA is not a good idea, regardless of how much or little you trust google.

thenewnewguy··on Defeating a Laptop's BIOS Password
Thieves are probably more likely to know how to bypass a BIO password than the legit owner.
thenewnewguy··on Cloudflare silently deleted my DNS records
1. Cloudflare has only banned large websites, not any "no-name sites".

2. Admittedly anecdotal, but while bans like these do increase _knowledge of_ said websites, I see no evidence they significantly increase their popularity or userbase.

thenewnewguy··on Pwn.college
Cannot connect to https://pwn.college/ (only works on HTTPS with www subdomain) - somewhat of a problem for sharing this website.
← PreviousPage 3 of 10Next →