tombrossman

> In the end I went with Runbox, will see how they perform but I’m happy so far.

I tried Runbox back in 2013 after a fair amount of research and they looked great. After signing up, they sent a confirmation email with all my account info with user-name and password in clear text. I cancelled immediately after seeing this, but I wonder if they are still doing it?

I ended up switching to Fastmail, which I still use and highly recommend.

> Is it an `apt-get install cockpit`?

Yes. Assuming a debian-based distro, try "apt-cache search cockpit" and it comes right up. To see the available version try "apt-cache madison cockpit" which returns (on my Ubuntu 16.04 desktop) "cockpit | 161-1~ubuntu16.04.1 | ..."

> But your search terms are right there naked in the URL even though it is https secured

You are correct that the terms are in the URL, however only the browser and endpoint can see them. All your ISP sees is that you accessed example.com, and not example.com/search-terms-here. The TLS handshake is for the domain only, then encryption kicks in, then everything after is encrypted.

Your ISP cannot see what you are searching for, they can only see which sites you use for search.

Sounds great. Do you know of any clear, easy to follow guides to make this happen? Something like the DigitalOcean reference tutorials would be optimal.

The credit bureaus were unwilling to validate requests from non-US address when I tried, just after news broke of the Equifax breach. The online forms literally had no provision for changing the country, with US State and ZIP code (of my current address) being mandatory fields.

I asked about it in the expats Stack Exchange site and others had the same problem: https://expatriates.stackexchange.com/questions/12104/how-ca...

Same goes for Social Security accounts, they require a US address before they permit you to log in online and monitor your account for fraud.

A related recent post: "Bomb Sight – Mapping the World War 2 London Blitz Bomb Census"

https://news.ycombinator.com/item?id=16141839

I'd love to freeze my credit but as one of the millions of Americans living overseas I have learned that this is flat out impossible for us. I've even written to my Senators and they can't get it done either (One positive note, it was surprisingly easy to reach them and they seemed genuinely eager to help).

Fortunately 'identity theft' is an imaginary concept, you cannot have your identity stolen - you are still you and no one can ever change that. It's the financial institutions' problem to fix at the end of the day, but there is this expectation that you are obliged to help them understand how they fell for a scam, and you are expected to do this for free or they make your life more difficult.

We do need a better system for expats.

Scott Helme has a self-hosted contact form which uses his PGP key to encrypt messages from website visitors, with a link to his 'how to' blog post just below the form: https://scotthelme.co.uk/contact/

Pi-hole is absolutely the way to go. Not only for the ad-blocking, but for checking to see where your devices 'phone home' to (and optionally blocking that, too).

I've got it running in a Linux container on a Turris Omnia and it blocks over 90% of requests, with nothing to install on the devices.

Thanks from me too, this looks great. I also knew immediately why the SVG looks wrong on Firefox because I had the same problem before - The text is 'live' text and not stroked to paths. It's a pain to do if you have a lot of text content, but if you can click on text in an SVG and discover it is still editable, it won't render correctly for many viewers. Once you are sure there are no typos, stroke all text to paths and it will look perfect on any browser.

The "right" way is to accept that privacy-conscious visitors reject your use of third-party tracking, and if you really need to track their visits you must use a first-party tool (Piwik, GoAccess, plain old logfile parsing...). It may not seem fair and it may be frustrating, but blocking third-party tracking is just so easy and anyone who cares about privacy can do it with minimal effort.

As a side benefit, when you start doing your own tracking from server logs, you gain valuable insight into where the gaps in data are from the third-party trackers, and precisely how many visitors are under counted.

Atom cores and IIRC all network disks, with some peculiarities. For example, reboot means waiting while your instance's 'local' drive is copied to some other type of storage, then your instance reboots, then all the data is copied back, THEN you can access your instance again. When I tested them last year reboots meant 30+ minutes of down time.

Their setup is interesting and I really wanted to like it (I did like the pricing), but it was a dreadfully slow experience. And those Atoms really suffered when benchmarking HTTPS connections compared to almost any other provider. Not even close.

I also live on an island, and have the same problem getting random items shipped. My workaround is to order from a Marketplace seller listed in the sidebar instead. Normally I avoid them and buy direct from Amazon, but this works surprisingly well.

I've purchased all kinds of 'restricted' things this way, high-power magnets, chemicals, flammable aerosols, commercial-grade fire extinguishers, etc. I think Amazon's rule is mostly based on what can't go by air, since they want all options (ground/sea/air) available. I have no idea what method the third-party sellers actually use but everything shows up in plain brown boxes no problem. Try it some time, and just pay a couple bucks extra for shipping and avoid the hassle.

This is purely an advertisement promoting the sale of a new book, correct? It looks like an interesting and useful book written by someone well-known to HN readers, but it is just a web page announcing a book for sale. Serious question - Is this OK for story submissions now?

I nearly flagged it but I think I'll hold off and see if linking to ads is the new norm here, because I haven't noticed that before.

Edit: whoops, should have read this before posting "Please don't complain that a submission is inappropriate. If a story is spam or off-topic, flag it. Don't feed egregious comments by replying; flag them instead. If you flag something, please don't also comment that you did." Apologies, I'll leave my original comment for the curious but won't ask this question again.

Firefox has a couple options which may help you get by. I can't guarantee these will fix everything but they are worth experimenting with.

about:memory has various options, including a 'minimize memory usage' button and profiling tools.

about:preferences has Privacy & Security > Cached Web Content > Override automatic cache management (select and set at 500MB, 1GB, or whatever works best).

Driver training should teach you to 'lean and look', to move your head more than just rotating it left and right. This eliminates blind spots and once you pick up the habit you do catch the occasional cyclist or motorcyclist in a blind spot. They will often be stopped (or at least maintaining their position relative to yours) and looking at you, not expecting you to see them, and it's a nice shared moment when you make eye contact and they realise you actually checked.

When I was about seven I remember a boy named Simon who I used to play with, who told me how he liked to hide in the bushes beside the road near our houses and jump out in front of cars as they approached. I was too young to comprehend how messed up he was (he was one of those 'bad' kids who kept getting in trouble in school) and I went along with him to watch. He urged me to try it first but I knew better, and hid in the bushes while he did it.

I didn't yet understand how completely insane the situation was. The first couple cars just swerved or honked and went past without stopping, but a lady driving a VW Beetle was slower to react and slammed on her brakes, skidding and swerving and barely missing him. I can remember seeing him run out in the road, facing her with his arms out and an excited look on his face.

The lady driving was completely beside herself, screaming and crying as she ran over to him, demanding to know what was going on. Simon confessed and also told her about me hiding nearby, and I remember being terrified as she grabbed his arm and ran over to me, still shouting and sobbing all at once. She was (understandably) just completely out of control and she marched us up the road to our houses to tell our parents.

I wasn't allowed to play with Simon again and I think that was the day I realized that cars and driving were deadly serious, and nothing to joke around with. For me it was mostly seeing the reaction of the lady driver and trying to comprehend why she was so upset. Looking back on it, I feel sorry for her and for Simon's parents, because they must have had a hell of a time raising him. Strange the things you remember from childhood, but fortunately most people turn out OK.

I agree that fatalities can be expected to rise as miles driven rise, however these two data points are not so closely linked. For example, driving ten miles in western Kansas on I-70 at midday is not the same as driving ten miles in a metropolitan area filled with shopping centers, with the sun low on the horizon ahead of you and a dirty windshield.

There are many, many variables which complicate the study of traffic safety and my hat is off to any traffic engineers able to deliver meaningful results. It does happen, but it's far more complicated than tracking per capita miles driven (not that you were making this specific argument, just pointing out the obvious).

> The downside of hosting things all in the same domain is that cookies are shared between them, so a vulnerability in one site (e.g. XSS) leads to compromise of all sites. Choosing different domains means they are sandboxed and safe from each other.

I believe this is incorrect. Cookies should only be shared (by default) if the domain matches exactly, which is why it's best practice to use a www subdomain instead of the domain alone. For example, www.example.com cookies will not be shared with test.example.com by default, though this can be enabled. See here for a fuller explanation: https://stackoverflow.com/a/23086139

It's legal but I believe it requires collecting payment upfront to make enforcement practical. The bus company example is pretty good - you get on the bus and pay how they prefer or you don't ride.

If you ate at a restaurant which had a 'no cash' policy, I'm not sure how you would resolve a situation with a client who was willing to pay in cash only. Would the restaurant be able to refuse your cash and say you ate without paying?

> Question: why bother organizing papers?

Because being organised makes you more effective. With your 'throw it all in a box' system, you have a high barrier to finding documents in the future and this discourages you from doing so. However, with a more organised approach you are more likely to retrieve specific documents.

One example: Some mid-priced electronic device breaks a few months after you buy it. You might weigh digging through all the paperwork versus shrugging your shoulders and throwing it away. I would go straight to the warranty document and also look at my credit card issuer's warranty/returns policies(if any), and I would return the item for a replacement or refund. No biggie, only a few minutes work and I as a consumer prevail in exercising my rights.

Sounds boring but I believe it is definitely worth making the effort.

I find recent emails with Thunderbird's search pretty reliably, but for indexing a large archive of emails I can definitely recommend Recoll. I have it run a scan daily as a cronjob and it finds absolutely everything.

http://www.lesbonscomptes.com/recoll/

Running your own blog is super easy, and choosing where to post does not have to be an either/or proposition. Post to your own site, then cross-post to popular platforms if you need their network effect. See here for a fuller explanation: https://indieweb.org/POSSE

> That said, Texas law requires very, very specific signage.

Exactly right. The amateur signs you see are almost a running joke, to intimidate new CCW permit holders. Here's the full description of what standards a sign must meet to be enforceable: https://en.wikipedia.org/wiki/Gun_laws_in_Texas#30.06_signag...

Bonus, you can carry without a permit, as long as you claim you were 'travelling', and the burden of proof is on the cops to dispute it: http://www.dallasobserver.com/news/texas-concealed-gun-laws-... (this law may have changed by now, but it was widely known when I lived there).

Tangential but here's another one: Why don't websites show the requirements at the _signup_ screen?

I've lost count of all the sites where I sign up and paste a long, secure password generated by my password manager. One of three things happens then.

1) The site admins are competent and my strong password is accepted.

2) The site admins are incompetent, and limit password length to a short string, possibly with certain special characters required.

3) The site admins are incompetent and should immediately be fired, because the form accepts my long, strong password, silently truncates it to a shorter length and saves that, and my correctly typed password no longer works. I've discovered this pattern repeatedly after comparing the 'forgot password' email then send with the truncated password in clear text (which is another reason they should be fired immediately) and noticing it is much shorter.

First-world problems, I know, but this annoys me and I would like to see it fixed.

> As long as you're willing to risk arrest and expensive lawyers, don't say anything.

Lawyers are not automatically expensive. In fact, a decent lawyer can often save you money. It does require that you have the resources to pay for the lawyer in advance, and if you cannot then you have my sympathy, but my default position is yes. I get a lawyer for everything, even simple driving violations.

In the kidnapping scenario described above, I would definitely have tried to help the responding officer by describing what I saw and where the person fled, but anything beyond a very cursory exchange and it's 'I would like to help you but I have no further comment without speaking to a lawyer first'.

This is probably what you refer to, right? https://news.ycombinator.com/item?id=7135833

(or if not, it's very helpful and worth a read)

The 2.2GB download is a 1280x720 50FPS MP4, definitely a long way from 4K HDR.

Testing with the --list formats option does not identify any higher resolution. Here is an example for the most recent episode:

  tom@desktop:~$ youtube-dl --list-formats https://www.bbc.co.uk/iplayer/episode/b09hs07h/blue-planet-ii-series-1-6-coasts
    [bbc.co.uk] b09hs07h: Downloading video page
    [bbc.co.uk] b09hs07h: Downloading playlist JSON
    [bbc.co.uk] b09hs074: Downloading media selection XML
    [bbc.co.uk] b09hs074: Downloading m3u8 information
    [info] Available formats for b09hs074:
    format code                                                                                extension  resolution note
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_dash-audio_eng=128000           m4a        audio only [en] DASH audio  128k , mp4a.40.2 (48000Hz)
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_dash_https-audio_eng=128000     m4a        audio only [en] DASH audio  128k , mp4a.40.2 (48000Hz)
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_dash-audio_eng=128000        m4a        audio only [en] DASH audio  128k , mp4a.40.2 (48000Hz)
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_dash_https-audio_eng=128000  m4a        audio only [en] DASH audio  128k , mp4a.40.2 (48000Hz)
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_dash-video=827000               mp4        704x396    DASH video  827k , avc3.4D401E, 25fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_dash_https-video=827000         mp4        704x396    DASH video  827k , avc3.4D401E, 25fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_dash-video=827000            mp4        704x396    DASH video  827k , avc3.4D401E, 25fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_dash_https-video=827000      mp4        704x396    DASH video  827k , avc3.4D401E, 25fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_dash-video=1570000              mp4        704x396    DASH video 1570k , avc3.64001F, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_dash_https-video=1570000        mp4        704x396    DASH video 1570k , avc3.64001F, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_dash-video=1570000           mp4        704x396    DASH video 1570k , avc3.64001F, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_dash_https-video=1570000     mp4        704x396    DASH video 1570k , avc3.64001F, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_dash-video=2812000              mp4        960x540    DASH video 2812k , avc3.64001F, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_dash_https-video=2812000        mp4        960x540    DASH video 2812k , avc3.64001F, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_dash-video=2812000           mp4        960x540    DASH video 2812k , avc3.64001F, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_dash_https-video=2812000     mp4        960x540    DASH video 2812k , avc3.64001F, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_dash-video=5070000              mp4        1280x720   DASH video 5070k , avc3.640020, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_dash_https-video=5070000        mp4        1280x720   DASH video 5070k , avc3.640020, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_dash-video=5070000           mp4        1280x720   DASH video 5070k , avc3.640020, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_dash_https-video=5070000     mp4        1280x720   DASH video 5070k , avc3.640020, 50fps, video only
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_hls-1013                        mp4        704x396    1013k , avc1.4D401E@ 827k, 25.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_hls_https-1013                  mp4        704x396    1013k , avc1.4D401E@ 827k, 25.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_bidi_uk_hls-1013                          mp4        704x396    1013k , avc1.4D401E@ 827k, 25.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_bidi_uk_hls_https-1013                    mp4        704x396    1013k , avc1.4D401E@ 827k, 25.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_hls-1013                     mp4        704x396    1013k , avc1.4D401E@ 827k, 25.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_hls_https-1013               mp4        704x396    1013k , avc1.4D401E@ 827k, 25.0fps, mp4a.40.2@128k
    iptv_streaming_1500_akamai_hls_open-1496                                                   mp4        832x468    1496k , avc1.77.30, mp4a.40.2
    iptv_streaming_1500_akamai_hls_open_https-1496                                             mp4        832x468    1496k , avc1.77.30, mp4a.40.2
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_hls-1800                        mp4        704x396    1800k , avc1.64001F@1570k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_hls_https-1800                  mp4        704x396    1800k , avc1.64001F@1570k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_bidi_uk_hls-1800                          mp4        704x396    1800k , avc1.64001F@1570k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_bidi_uk_hls_https-1800                    mp4        704x396    1800k , avc1.64001F@1570k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_hls-1800                     mp4        704x396    1800k , avc1.64001F@1570k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_hls_https-1800               mp4        704x396    1800k , avc1.64001F@1570k, 50.0fps, mp4a.40.2@128k
    iptv_streaming_1500_akamai_hls_open-2413                                                   mp4        1280x720   2413k , avc1.640029, mp4a.40.2
    iptv_streaming_1500_akamai_hls_open_https-2413                                             mp4        1280x720   2413k , avc1.640029, mp4a.40.2
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_hls-3117                        mp4        960x540    3117k , avc1.64001F@2812k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_hls_https-3117                  mp4        960x540    3117k , avc1.64001F@2812k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_bidi_uk_hls-3117                          mp4        960x540    3117k , avc1.64001F@2812k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_bidi_uk_hls_https-3117                    mp4        960x540    3117k , avc1.64001F@2812k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_hls-3117                     mp4        960x540    3117k , avc1.64001F@2812k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_hls_https-3117               mp4        960x540    3117k , avc1.64001F@2812k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_hls-5510                        mp4        1280x720   5510k , avc1.640020@5070k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_akamai_uk_hls_https-5510                  mp4        1280x720   5510k , avc1.640020@5070k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_bidi_uk_hls-5510                          mp4        1280x720   5510k , avc1.640020@5070k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_bidi_uk_hls_https-5510                    mp4        1280x720   5510k , avc1.640020@5070k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_hls-5510                     mp4        1280x720   5510k , avc1.640020@5070k, 50.0fps, mp4a.40.2@128k
    stream-uk-iptv_streaming_concrete_combined_hd_mf_limelight_uk_hls_https-5510               mp4        1280x720   5510k , avc1.640020@5070k, 50.0fps, mp4a.40.2@128k (best)

Anyone know how the 4K feature detection works? For example, can a certain user agent be spoofed to enable the higher-res version?

I ask because I use youtube-dl to watch iPlayer shows and it only grabs standard HD versions. If anyone else UK based has figured this out I'd love to learn how.

Yes, tested and working for 10+ years now. Also works well if usage is capped/throttled after a certain amount and you wish to 'reset' the connection. Try not to abuse this on a shared network obviously, but if you have a legitimate need it's very simple.