HNHacker News
TopNewBestAskShowJobs

tomschlick

4,148 karma · joined March 5, 2012

Creator of ZoneWatcher - https://zonewatcher.com - Monitor your DNS zones and be alerted of any changes

https://x.com/tomschlick

[ my public key: https://keybase.io/tomschlick; my proof: https://keybase.io/tomschlick/sigs/BJQciOSaY9cHad1DIpF7XadlOvS9ra4Ak0HnNJm6XF8 ]

submissionscomments
tomschlick··on Thanksgiving 2023 security incident
Switching an entire orgs authentication to a new provider (or something built in house) isn't something you can (or should) do quickly.
tomschlick··on Thanksgiving 2023 security incident
They are, but they don't have management for user accounts, 2fa, etc. You setup a connection to something like Okta, Google Apps, O365, SAML, etc to be your persistent user db and cloudflare just enforces it.

I wouldn't be surprised if they are working on first party IAM user support though.

tomschlick··on Cloudflare employee posts layoff call with HR and goes viral [video]
That entirely depends on the state. Most are 1 party consent states where as long as 1 person on the call knows its being recorded its legal: https://www.justia.com/50-state-surveys/recording-phone-call...
tomschlick··on GitHub Actions as a time-sharing supercomputer
They also price gouge by charging each job you run as per minute rounded up.

So if you have 5 10 second actions that run when a PR is created, that 50 seconds of compute is charged as 5 minutes.

tomschlick··on Why do people feel the need to litter?
I wonder what the correlation between people who intentionally litter and people who don't return their shopping cart to the corral in parking lots is. I would imagine they overlap a lot.
tomschlick··on Starship will attempt a launch this Friday
Elon mentioned on the JRE podcast the other day that the clearance for FAA, F&W, Coast Guard, etc is so extensive that they even had to try and calculate the likelihood of hitting a shark with debris which is so astronomically small of a chance that its pointless and ridiculous.

So yeah, I think they have the human factor of the safety planning covered.

tomschlick··on Ask HN: Cloudflare Workers are down?
Back up for me as of 16:20 ET
tomschlick··on Tell HN: Automatic fraud detection is making my life hell
If it's openvpn you can just port forward from your router to the RaspberryPi's internal ip address.

If it's a webserver you can do the same, or use something like Cloudflare tunnels to expose the service.

tomschlick··on Fed to Propose Lowering Debit-Card Swipe Fees
In this case, Congress did define multiple times these terms explicitly in the 1934 National Firearms Act, the 1969 Gun Control act, the 1986 Hughes amendment, etc.

ATF's job in this case should be enforcing the existing law, not writing new law with no congressional approval and then enforcing it themselves.

I agree that congress did give them some limited power to adjust to changing times, however I believe that has been abused in recent years to enact backdoor legislation via Presidential order without going through the expected legislative channels. That power should be revoked.

tomschlick··on Fed to Propose Lowering Debit-Card Swipe Fees
Government agencies should only be able to do what congress defines in law.

A great example is ATF abusing the power to redefine what a pistol/rifle/machine gun are multiple times in the past decade. This leads to people who were previously compliant with the law, with prior written approval from the ATF, now are not compliant with their new definition and could face prosecution. All without any new law being passed, all being done by political appointees and bureaucrats.

tomschlick··on Small business owners say they're pressured to hire off-duty cops for security
There is another way to look at it...

It's advantageous for police to be present at large gatherings, from a traffic control point of view it prevents accidents with other members of the public that would cost the municipality even more money to respond to.

Also from a security standpoint as people physically fighting or potentially someone looking to do harm with a weapon would both reflect badly on the community and their events, and also require even more of a response.

So if the event organizer is paying for that security from off duty / reserve officers, the community is getting that extra protection essentially for free, whereas they would have had to pay other officers likely for overtime if it wasn't paid for by the event.

tomschlick··on Small business owners say they're pressured to hire off-duty cops for security
That may be the law, but prosecutors aren't prosecuting them as evidenced by the people clearing out CVS with garbage bags daily.
tomschlick··on Small business owners say they're pressured to hire off-duty cops for security
It's still a class A misdemeanor though and they will arrest you for it.

Also it becomes a felony if any theft has been committed more than 3 times: `(D) the value of the property stolen is less than $2,500 and the defendant has been previously convicted two or more times of any grade of theft;`

In those other states its hard to get the police to even respond to shoplifting calls let alone make an arrest. And even if they did, the prosecutors will dismiss the charges or give them a slap on the wrist (which is why the cops don't bother anymore).

tomschlick··on Small business owners say they're pressured to hire off-duty cops for security
Those are likely reserve officers. Reserve officers are generally part time and are used for additional manpower for events or recurring security so that normal patrol officers aren't short staffed.

Generally the private entity pays the city, which then pays the cop. In many states private entities can't stop/redirect the flow of traffic legally so they hire off duty cops to do so.

tomschlick··on Tesla is launching their developer APIs
Given that this is named "Fleet API", I'd wager that its pointed at corporations that own a bunch of Teslas for employee use, or for companies looking to start a Tesla based rental car company more than anything.
tomschlick··on Chicago’s parking meter disaster
> But the city also has to guarantee the company lost revenue if the city removes meters

This makes complete sense though. The company and the city signed a deal for X amount of meters for Y amount of years. That no doubt went into the financial planning for Profit/Loss. If the city were to remove meters they would be breaking the contract as there are no longer X meters and that much less revenue that the company paid upfront for.

tomschlick··on NixOS just dropped Anduril as a NixCon sponsor
> Imo large parts of the southwest and CA benefit immensely from immigrant labor.

I don't see anyone arguing against immigration here. We are arguing against illegal immigration / obvious abuse of the asylum system.

If we can close the obvious holes in our border that are letting 200k people through a month, I'm very much in favor of granting more work visas to immigrants and starting the naturalization process.

tomschlick··on NixOS just dropped Anduril as a NixCon sponsor
It won't be politically possible to change much of anything about the legal immigration system until we stop the ~200K[1] of people illegally coming across the border every month.

The minute you announce some kind of concession for people already here (which would most definitely be part of a broader immigration reform bill) then the floodgates will open with people trying to make it in before the effective date.

[1] https://www.cbp.gov/newsroom/stats/southwest-land-border-enc...

tomschlick··on NixOS just dropped Anduril as a NixCon sponsor
I can see how people empathize with that but on the flip side I've known plenty of immigrants who went through the process the right way, waited months or years, gone through naturalization process and did the same to get get their families here.

They, along with others still in line feel cheated by the people entering illegally / abusing the asylum claim systems. If you're escaping a bad situation in a central or southern American country, and then pass through 4-5 countries to get here, you're not seeking asylum, you're an economic migrant no different from immigrants from India, China, etc all seeking a better life.

No other developed country would or should allow people to illegally enter and skip the legal process.

tomschlick··on NixOS just dropped Anduril as a NixCon sponsor
People who push back on technology used at the border make little sense to me. Using technology frees up other resources to process migrants more quickly through the abused asylum process. That means they are in detention for less time, they get court cases quicker, and get asylum or removal quicker.
tomschlick··on Weight-based motor vehicle tax
At that point you might as well have the car just tally how many miles it drove in each state and submit it every year with your registration renewal.
tomschlick··on Weight-based motor vehicle tax
The problem with just odometer readings is that places where lots of cars pass through used to gain tax revenue via the gas to maintain the roads.

If those people are from out of state, the tax revenue would go to their home state instead of the state they created the road wear and tear on.

tomschlick··on Upcoming .com and .xyz domain price increase
CloudFlare is only increasing from $9.15 to $9.77
tomschlick··on Blocked by Cloudflare
I would imagine they have a list of the default / max DHCPv6 blocks that ISPs hand out. They are generally public knowledge so it would be easy for them to say Comcast hands out /56 so when blocking they block at that level for the ASN.
tomschlick··on Is Laravel the happiest developer community on the planet?
Laravel is the most productive framework I have ever used. Been using it for 11 years now and it still continues to improve itself year after year.
tomschlick··on FCC allows blocking traffic from robocall-friendly provider One Owl
To be fair, Trump's FCC was pushing STIR/SHAKEN hard but it takes years for the major telcos to implement and push it downstream to all of the various SIP providers that buy numbers from them.

https://en.wikipedia.org/wiki/STIR/SHAKEN#Implementation

Biden's FCC is able to take action because those were finally finished and now can enforce with the call source traceability they didn't have a few years ago.

tomschlick··on Google is already pushing WEI into Chromium
The FTC isn't going to do anything as Google/Alphabet is a big donor to the Democrats.

https://www.opensecrets.org/orgs/alphabet-inc/recipients?id=...

Here is them lobbying specifically around antitrust reform legislation: https://www.opensecrets.org/federal-lobbying/bills/specific_...

tomschlick··on US Congress doubles down on claims of illegal UFO retrieval programs
The president would have the clearance, but the issue is knowing who to even ask who would have knowledge. Top Secret SCI is compartmentalized, so only the people who need to know get read in.

One great example of this is during the Bin Laden raid planning, after all plans were exhausted on how they could put boots on the ground, only then did a high ranking officer let the president and the rest of the team in the room know about the stealth helicopters that even the SEALs had never seen before.

tomschlick··on FAA Requires Secondary Flight Deck Barrier
Passengers already know to not comply with hijackers. Since 9/11 everyone who has attempted something has gotten a beating and then restrained by passengers until an emergency landing could occur. I can't see an extra door helping much knowing that.
tomschlick··on Passage by 1Password: Add passkey support to your app or website
In this case, 1P would be the password manager for your passkeys as well which means even if Google blocks you, you would still have your passkeys to log into your bank, facebook, etc.
← PreviousPage 2 of 31Next →