HNHacker News
TopNewBestAskShowJobs

umurkontaci

311 karma · joined March 25, 2014

submissionscomments
umurkontaci··on AWS Service Availability Updates
Amazon following the lead of Google Cloud of shutting down AWS services is not a good sign.
umurkontaci··on I faked tons of Covid passes – “Weak Key Cryptography in real world”
> The reason for representing Health Cards using Numeric Mode QRs instead of Binary Mode (Latin-1) QRs is information density: with Numeric Mode, 20% more data can fit in a given QR, vs Binary Mode. This is because the JWS character set conveys only log_2(65) bits per character (~6 bits); binary encoding requires log_2(256) bits per character (8 bits), which means ~2 wasted bits per character

https://spec.smarthealth.cards/#encoding-chunks-as-qr-codes

umurkontaci··on Building the Brex API
Bearer tokens precede JWT and it's part of the Authorization header.

For authentication & authorization, the caller sends a bearer token. The format of the token is known to both parties and the server knows how to validate it.

It's better than username password combos because (1) not every "account" has a password, (2) tokens can and generally do expire, (3) it's not tied to the password if the password changes the tokens continue to be valid, (4) the user can invalidate the tokens of their choice, (5) you can grant restricted permissions to a token. You can do more or less things with tokens based on the needs of the application but it decoupling it from password gives you additional security and flexibility.

umurkontaci··on Emirates’ Tim Clark says Boeing ‘not getting it’ on 737 Max, 787
Ohhh they have additional cabin pressure? I could swear the air quality was MUCH better after spending about 10 hours in the plane and not feeling any fatigue.

I thought the air was less dry too, but didn't really have means to measure that.

umurkontaci··on CNN reporter arrested live on air while covering Minneapolis protests [video]
Burden of proof is different for detaining, arrest and when in court if one is charged.

They have to have PC to arrest someone. Even if you're not charged, PC has to be there for an arrest to be justified.

umurkontaci··on Google App Engine (GAE) will no longer have a standard free tier
It sucks that a free option is gone, but companies are not in an obligation to provide free stuff for developers forever.

They never claimed that they are doing a public service. The only reason it's free is they hope you'll get used to it and pay for bigger stuff later on.

It's OK to be sad, but it's not OK to be morally outrageous.

No ethical dilemma or "ever hungry crony capitalism machine" here.

umurkontaci··on Sam Altman on Twitter: It's gross seeing so many root against Tesla
That's not the right conclusion I don't think. That published statistic is referring aggregates and averages.

As we know there are safer and riskier drivers on the roads.

If everybody was driving with AP the total number of accidents would drop.

However if you are already a safe driver, there's a chance that AP is riskier.

I don't want to bash AP to the ground, I think the tech is still phenomenal, and forced the car industry to catch up. However Tesla has the attitude of the classic move fast and break things mentality and not willing to take responsibility for it. When lives are at stake, you gotta do better than that.

You don't get to blame the customers for getting distracted for using a system that's literally called and marketed as Autopilot.

There's a reason similarly capable other cars in the market their systems as driver assistance and will force you to give input on tighter intervals.

umurkontaci··on Sam Altman on Twitter: It's gross seeing so many root against Tesla
From the same article:

Uber's system killed a person. They received a huge backlash and their permission to test self-driving cars have been revoked in the state of Arizona. They also pulled out from testing California as well.

Waymo had 13 non fatal crashes, of which, 12 of them were other drivers' fault. One was caused by the software where the car wanted to maneuver around some sand bags on the road and side swiped a bus. No injuries. Google took the blame and said it's a learning experience. AFAIK, Waymo cars are not available to public by default.

Tesla had multiple fatal accidents as a result of "Auto Pilot" which is just a bunch of driver assistance systems taped together and marketed as a complete self-driving system. At every single accident, Tesla never admitted the blame, and just reiterated it's statistically safer to drive with AutoPilot than without.

Obviously, this pisses people off. The never-take-the-blame attitude gets old and annoying. It's like a colleague who would throw everyone under the bus to avoid taking the blame.

Secondly, I've seen the video of the accident with the Apple employee. It's clearly AP error and I don't care if it's statistically safer to drive with AP, if a system causes and accident that I could have avoided easily, I don't trust that system.

umurkontaci··on 2FA on the command line
This is less secure than not having 2fa at all.

2FA means two factor authentication. It's a guarantee that even if someone hacks your password or steals your computer, if they don't also have physical access to the secondary device (phone, yubikey etc), they won't be able to gain access to your account.

If you put the secrets of 2FA into the same computer, you are back to 1FA.

However, you end up being less secure than not enabling 2FA in the first place. This is because when you enable 2FA, they can disable the regular checks that they have for 1FA accounts. It will also be incredibly difficult to regain access to the account if you don't have access to 2FA devices.

umurkontaci··on Distributed teams are rewriting the rules of office politics
Some companies compensate you for colocated offices.

In certain areas you can deduct your expenses from your taxes.

But yeah, you should certainly take this into account when you are discussing your salary.

umurkontaci··on Stripe Issuing – An API for creating physical and virtual cards
There's actually an implementation of this for online sales in Europe (and probably other places in the world), it's called 3D Secure: https://www.visa.ca/en_CA/visa-everywhere/security/future-of...

It adds a step during checkout where you are redirected to your bank/card issuers page to answer some security questions.

umurkontaci··on Stripe Issuing – An API for creating physical and virtual cards
From docs: "Learn how to create cardholders and issue credit cards to them."

Landing page have multiple cards of different types, including debit and credit.

umurkontaci··on NPM proxy users receiving ERR 418 I'm a teapot
> I'm gonna lock this for now, because I'm sure it's gonna get plenty of traffic. You really don't need to respond to repeat what every other poster is saying. The registry team has been informed.

It's alright if they want to lock the thread to prevent a massive +1 spam, but at the very least they should have given a link to track the status of this.

When your production systems are down, "thanks for the report" is not a good enough response.

umurkontaci··on The Battle for Best Semi-Autonomous System: Tesla Autopilot vs. GM SuperCruise
It's already commercially available on Cadillac CT6.

http://www.cadillac.com/sedans/ct6-sedan

umurkontaci··on Ending Bitcoin Support
Store value / Investment.

You can buy gold, stocks, foreign currencies as means of investment.

You can't pay your restaurant bill with them but that doesn't mean they don't have a future.

umurkontaci··on Let’s kill no-reply
I think that's the point of the article too. If you are not prepared to handle 1% auto-responder rate which you can weed out which some code; you are sending too many emails.
umurkontaci··on Ask HN: For those programming 10+ years, what do you wish you knew 4 years in?
> If you're self taught, get a degree as soon as you can, even if you take night classes over an extended period. No matter how good you are, a large portion of companies and recruiters will autotrash your resume without an education section.

Not true. I'm self taught and I had very generous offers from the two of the three big names.

Screw spending a time to getting a degree just for the sake of it and build stuff.

I know it wasn't like that before, but times have changed and so have recruiters.

umurkontaci··on Smartphones can be fooled by fake, digitally composed fingerprints
I have the feeling that the researched tried to unlock real phones and failed.

It sounds weird when you say you have made a research about security of fingerprint scanners on phones without actually trying the attacks on those phones.

umurkontaci··on Root – Programmable bank account for software developers
Maybe don't use this for paying mortgage or anything high risk?
umurkontaci··on A self-driving Uber ran a red light last December, contrary to company claims
No. It's just the shits Uber have done are surfacing.
umurkontaci··on Why You Shouldn’t Use ReactJS for Complex Projects
Well,

https://github.com/facebook/react/wiki/sites-using-react

umurkontaci··on Integrating GTA V into Universe
The director in L4D was had a very simple logic with inputs like number of alive special infecteds and number of zombies to control spawns. It's like seeing a health kit when your health is low.
umurkontaci··on Uber ordered to stop self-driving vehicle service in San Francisco
In some places Uber cars have stickers on their windshield
umurkontaci··on Ask HN: Why are SIM cards still a thing?
It's no different than having no SIM, if your phone wants to spy on you, it doesn't need a SIM card. It's the phone that transceives the signals, and it can do so without a SIM card. SIM card authenticates you to the network, but you control the device and the network around the device, there's no need for a SIM card.
umurkontaci··on Ask HN: What good open source projects written in React that I can learn from?
WordPress.com front end is written with React. It's one of the biggest React projects, and it is used in production. We are actively developing on GitHub and trying develop out in the open.

https://github.com/Automattic/wp-calypso

umurkontaci··on How I make $400 a month in Passive Income by Self-Publishing
Sure, it's about supply and demand, but the cost of distributing and ebook compared to a hard copy is close to zero. Plenty of products are artificially priced, but when this is very obvious, it feels like a rip-off.
umurkontaci··on Ask HN: Why do companies buy ads when they are the top result in search?
Just to add what's said above, it will also help prevent a competitor using your brand as a keyword.
umurkontaci··on Reasons not to use Firebase
It seems none of the problems raised are actually caused by Firebase, but the design decisions they've made.
umurkontaci··on Passport Index 2016
IANAL, but the bill sounds like it doesn't ban Europeans to enter the country, but waives the right to travel without a visa. It might be possible to enter U.S. by acquiring a visa.
umurkontaci··on Comodo has filed for express abandonment of LetsEncrypt trademark applications
Oh the irony
Page 1 of 3Next →