HNHacker News
TopNewBestAskShowJobs

throwaway294566

218 karma · joined July 4, 2022

submissionscomments
throwaway294566··on Open-source software vs. the proposed Cyber Resilience Act
That law would override any such disclaimer by the seller (or other kind of "commercial producer") of OSS software. What is "critical" is determined by the catalogue of critical software categories.
throwaway294566··on Open-source software vs. the proposed Cyber Resilience Act
That isn't an audit. Audits are not about actually doing anything about security. Audits are about having documented procedure and properties and reviewing documentation.

The typical software you need to google in the context of an audit is "Excel" for the endless fill-me-in lists of compliance b.s. your auditor will make you fill in...

throwaway294566··on Open-source software vs. the proposed Cyber Resilience Act
Usually only the original producer of each component has to do the certification and apply the CE stamp. Any conglomerate doesn't need to reevaluate all the components themselves, only their interactions in the conglomerate.

So for your Python software you are fine either just providing the software alone, without an interpreter, having the customer get a Python-standard-compliant (if there were such a thing...) interpreter for themselves. Or you could provide a CE-certified Python interpreter that you got somewhere else along with your software, provided you do not change the interpreter you got and the interaction between your software and the interpreter is standard, run-of-the-mill, unsurprising normal use as intended and certified.

throwaway294566··on Open-source software vs. the proposed Cyber Resilience Act
Any kind of commercial gain can be considered "profit". 10ct/month from an ad banner is considered a commercial activity in Germany and courts treat it as such, with consequences like Impressumspflicht (need to publish personal data, tax number, phone and fax number of the person responsible for a website) and DSGVO applicability. Same for indirect "profit": there have been judgements that considered blogging a commercial activity if the topic of the blog is similar to the dayjob of the blogger because the blog is considered an advertisement to a future employer or customer.

Therefore I would consider any kind of open source contribution by an IT professional a commercial activity. Only if the open source contribution is strictly a hobby and your normal job involves nothing IT-like at all you'd maybe be safe.

throwaway294566··on How to use your DSLR from 2008 as a webcam in 2022 (NixOS)
You are definitely expecting something that the camera makers' market segmentation does not provide. If you need clean HDMI, you can buy a camera that has it, but I estimate only a quarter of currently available DSLRs do.
throwaway294566··on How to use your DSLR from 2008 as a webcam in 2022 (NixOS)
Unfortunately most cameras do not provide "clean" HDMI output. That is, the HDMI output contains camera UI symbols like focus points, battery state, lighting, etc. Configuration options to disable those UI symbols are generally not available, at best one can disable some of them. A model with "clean" HDMI is usually more expensive and you have to explicitly look for it as a feature.

Live view readout via USB is something that works far more often than HDMI.

throwaway294566··on The German School of Lisp (2011)
"Ur" is a German prefix meaning "old", "original", "predecessor".

So Ur-Lisp would be the old original Lisp that is predecessor to all other Lisps.

Other examples include Urrind (Rind == Bovine) which would be the predecessor of all species of bovine. Urzeit (Zeit == time), which is a generic very ancient time period before all humans (where the Urrind or even the dinosaurs might have lived). Ur-Computer might be one of the first computers, like the original Zuse or ENIAC.

throwaway294566··on Tether's USDT Stablecoin Slips from $1 Peg
Shorting tether can simply be a hedge against falling tether if you are holding large amounts. Doing that with stocks is completely normal and nothing to raise an eyebrow about.
throwaway294566··on Substitute Web Fonts with StopTheMadness
As I'm forced to use an Apple computer for work from time to time (fortunately rarely), I do not understand how anyone can claim for Apple to have any standards. Especially when it comes to "design". Fonts look blurry and washed out everywhere. I don't care about the usual excuses, it is ugly ugly ugly...
throwaway294566··on Substitute Web Fonts with StopTheMadness
One part of "not boring" is picking one that fits your taste and the style of the site you are using it on. So there cannot be one canonical recommendation.

Google fonts is full of usable stuff. Just have the courage to pick something that isn't mainstream yawn-inducing boredom. The other points are almost automatically satisified. For GDPR reasons, copy the font file to your webserver (caching won't work anyways in modern browsers).

But if you really really want something safe, easy, no-thinking-required that works for almost everything, on most devices, is readable on screens, looks modern but sufficiently boring and inoffensive, has big unicode coverage: use Roboto.

throwaway294566··on Substitute Web Fonts with StopTheMadness
Substituting Arial by Helvetica is the ultimate expression of pointless counterproductive font snobbery.

If you really want to do the world some good, substitute by something that

a) isn't boring and overused

b) isn't almost indistinguishable from what you're substituting

c) isn't non-free with onerous licensing terms especially when used in the web

d) isn't worse and unoptimized for screen, non-print purposes

Now queue the font snobs' complaints ;)

throwaway294566··on Power plug and socket (outlet) types
Right, exactly. And non-grounded Schuko Sockets are forbidden, at least in Germany (Europlug sockets are allowed if they only accept Europlugs, see the ones on the left side here: https://de.wikipedia.org/wiki/Datei:Euro-socket.jpg . No idea what the standard might be for those.)
throwaway294566··on Power plug and socket (outlet) types
Yes.
throwaway294566··on Power plug and socket (outlet) types
The socket in your example is Type F, Schuko. Those are only available in recessed form, any flat variants are strictly verboten, nonconforming, etc.

It is actually another problem of the original article: It doesn't show and distinguish between recessed sockets and sockets that are available/allowed to be used in a flat form.

The recess also makes the mechanical mating far more robust and takes away mechanical wear from the prongs. So in contrast to flat designs like the British, where all the force rests on the (admittedly thicker) prongs, Type F avoids that problem by distributing most of the forces into the socket housing. Of course you need to replace that if cracked, but you avoid the danger of cracks in the prongs. Cracked or bent prongs are really a fire danger because if they don't immediately fall of (which is the good case), they might continue to be used, albeit with increased electrical resistance due to the crack. Resistance leads to overheating, overheating leads to fires. And no RCCB/SRCD or OCB will help you there. An AFDD might (if there is an arc, which might be 50% of cases), but nobody has those because they are fairly new, very expensive and only code-required in some special types of buildings (care facilities, hospitals and such).

throwaway294566··on Power plug and socket (outlet) types
I think this is just a simple ad-/clickfarming page without any actually useful content.

The content that is there is also wrong and misleading.

throwaway294566··on Power plug and socket (outlet) types
The original article is somewhat wrong or at least misleading regarding the compatibility of Type F (Schuko, German) plugs with Type E (French) sockets: "Type [...] F plugs will also fit in type E sockets". Actually, they won't. Type E has a protruding earth prong that sticks out from the socket. To fit, the plug needs a corresponding Opening. Type F has no such opening, so you cannot physically connect.

Also, French Type E has a round outline which won't fit into Type F sockets because of the non-round outline of Type F: There is a notch on the left and right side of the circle, making them incompatible, but the original article doesn't show that, the drawing of type F is simply wrong.

The plug that actually fits (and is common with most new appliances) is CEE 7/7, a hybrid of types E and F: https://en.wikipedia.org/wiki/CEE_7_standard_AC_plugs_and_so...

All in all, the original article is a bad overview and you shouldn't rely on it, because it will be trouble at least in Type-E/F-land. If this is an indication of the overall data quality, avoid using this page for anything.

throwaway294566··on Identity management for WireGuard
The problem with the building block approach is that it usually compromises any supposed security advantages Wireguard may have. You get a supersecure bank safe where the key is handed to you in the baker's shop opposite if you ask nicely.
throwaway294566··on Identity management for WireGuard
While not totally awesome, OpenVPN is miles beyond Wireguard when it comes to credential management. There are several auth plugins, you can use "the usual stuff" like PAM, and through that LDAP/Kerberos, ActiveDirectory, RADIUS, etc.. For higher security demands, client certificates are also possible and standardized X.509, PKCS#11/15 like CaC, Yubikeys and usual employee ID cards work. Also, OpenVPN supports at least some form of IP assignment and DNS/Route management.

Wireguard has none of that, not even the notion of a user. There are just keys in a special (unsupported by anything else) format that are assigned an IP address statically in a file. Oh, and the frigging software writes into that config file if you change anything.

Wireguard is a nightmare for any attempt at sane system administration.

throwaway294566··on Ask HN: Why don't I see gold at the end of the remote working rainbow?
I've worked for a government entity in Germany where this was regulated as follows. I think most of the private companies do it similarly as a baseline and are more generous as an optional perk:

When you are doing "real" work from home (in bureaucrat-German: "Telearbeit"), your regular workplace is at your home. You need a separate, lockable room, the room needs to be inspected by the employer's safety advisor and data protection officer, equipment such as chair and desk as well the room and electricity are paid by the employer. Safety and health regulations apply in your home same as for the company office, e.g. lighting has to have appropriate brightness, no storing dangerous chemicals like toilet cleaner in the bathroom, etc. Since your office is at home, public holidays (which are location-dependent in Germany), taxes and regulations of your home apply to you. If you travel to the office, it is reimbursed as regular business travel ("Dienstgang"). Any other business travel is reimbursed as having started from your actual starting location (e.g. your girlfriend's) or your home, whichever is cheaper for the employer. But since all this is incredibly onerous and expensive, nobody does "Telearbeit".

The alternative, which everyone uses, is "mobile work" (bureaucrat-German: "mobiles Arbeiten"). That was actually intended as a regulation for e.g. salesmen traveling from customer to customer, only sometimes working from the office. Here, your regular workplace is in the office, meaning that traveling between your home and the office is never reimbursed. Rules, holidays, etc. apply as if you were in the office, even if you are working from somewhere else, e.g. a customer's or your home. Since things are thought to be "mobile" and "random", workplace safety regulations do apply but do not need to be inspected. The employee is responsible for observing them at their current work location (i.e. usually not at all caring about all that crap). If you do "mobile work" from your home, you pay for your own chair, desk and power.

When HR writes emails about WFH and you do pay attention, you will notice that they are carefully avoiding the term "Telearbeit" and maybe even "home office" and phrase everything in terms of "mobile work" (which is optionally 100% from your home) ;)

throwaway294566··on Ask HN: Why don't I see gold at the end of the remote working rainbow?
Depends on where on the covid-panic-scale your local government is. In Germany there is still talk about waves, mask mandates and possible restrictions.
throwaway294566··on Ask HN: Why don't I see gold at the end of the remote working rainbow?
Yes, I am sure that extroverts are to blame. But not only extroverted techies. Management is almost 100% extroverts. Extroverted techies went along, repeating the party line of "watercooler talk makes us cooperate more", "I like the new open floorplan, so social" and "interruptions aren't that bad, learn to multitask and get some headphones". For examples, just read some HN about open floorplans. The introverted techs, being introverts, were less heard and mostly had no say anyways. Extroverted management and techs lacked any interest and necessary empathy to understand them. Whats more, snark and derision for the introverts, not only behind closed doors. HR and management slides praised the new culture of constant social interaction and suggested the rest should just socialize more and learn to multitask and be outgoing. Be more extroverted like us, less like you. Same from the extroverted techies, e.g. here on HN. Introverts just weren't accepted and were not heard.

So yes, I think snark is warranted and the last sentence is fair play. Now that the shoe is on the other foot, where extroverts don't like WFH, I do only treat extroverts with the same contempt I was treated with.

throwaway294566··on Ask HN: Why don't I see gold at the end of the remote working rainbow?
> I always saw tech as the field where a disproportionally large amount of people truly love what they do.

You do confuse "loving what they do" with "being at the office" and "socializing during slack time". I do love my job but I do hate socializing with people, which is definitely not my job. That is why I'm working in IT, I don't have to socialize beyond the bare minimum to be successful. I think IT attracts introverts like me, and I do suspect we are the majority (but I have only anecdata for that).

> I know that "the office" is a bad place for a lot of people. [...] But shouldn't we rather work on fixing those things instead of making them bearable by just turning off a camera in a Zoom meeting?

Things have gotten worse and worse around the office. Small one- or few-person offices gave way to cubicles, which gave way to open-plan offices, which gave way to open-plan seat-lottery not-even-your-own-desk offices. No amount of pushback changed this direction in the slightest. Meanwhile noise and interruptions got worse and worse, where in my private office people knocked politely before entering or were kept out by the DND sign, nowadays the seat lottery puts me next to a loudmouthed marketing phone-drone, who when not screaming into the mic drones on about his awesome sales statistics and his new yacht. At least the boss can't easily walk over anymore and breathe down my neck because the seat lottery put him somewhere else usually. Any and all things that have been tried to fix this are band-aids and lip-service. It only got worse and worse.

WFH is great, finally a step in the right direction. I do have no sympathy for the extroverts, because they got us into the aforementioned mess.

throwaway294566··on To download from Google Drive, you must enable third party cookies?
Firefox with uMatrix can do that.
throwaway294566··on Why rails buckle in Britain
In Britain, reliably, once per day it'll rain. Only the rest of the weather is unpredictable.
throwaway294566··on ISO name change for Türkiye
You can. The leap second is always 23:59:60
throwaway294566··on ISO name change for Türkiye
Thats why the day doesn't end at the instant of 23:59:59, nor does it end at 23:59:60 (if there is a leap second). It actually ends at 24:00:00. Which is the same instant in time as 00:00:00 of the following day. Every conforming implementation of ISO 8601 should know about that. And all software should conform to ISO 8601.
throwaway294566··on Europeans will be able to unsubscribe from Prime with two clicks
Now unbundle delivery from movies/series/stuff and I'll be a member again.
← PreviousPage 2 of 2