HNHacker News
TopNewBestAskShowJobs

uriah

76 karma · joined August 30, 2011

submissionscomments
uriah··on Breaking into apartment buildings in five minutes on my phone
I've had a knee-jerk reaction to that job too. But realistically optimizing spark plug changes isn't really important like the old days where you needed to change them every 10k miles or less. It's maybe 2-3 times in the entire life of the car.

Removing the wipers and windshield cowl is generally easy, just takes some extra time. Dealers/mechanics charge for time, not difficulty. So that simple 2hr job can easily be 500-600+. Still something that could be a rewarding Saturday morning project for someone who likes doing DIY type stuff.

uriah··on Caddy – The Ultimate Server with Automatic HTTPS
With nginx I'm assuming you would use something like Vouch or oauth2-proxy? Something like the architecture described here:

https://github.com/vouch/vouch-proxy?tab=readme-ov-file#what...

Can't speak for caddy-security, but the forward_auth feature is the caddy equivalent to nginx's auth_request

uriah··on ML in Go with a Python Sidecar
These frameworks are C++ under the hood. A far as I know (not too experienced with go) you can use cgo to call any C++ code. So you should be able to serialize the model (torchscript) then run it with libtorch. Tensorflow also similarly has a C++ api
uriah··on M4 MacBook Pro
The M3 Air does support 2 but only with the lid closed
uriah··on Fuckthis.app – Software products for exasperated people
It would be one thing if they were paying for the transactions directly. Companies with this arrangement make you get a "corporate card" under your own name which shows up on your personal credit report. I've had to pay off the card myself (and get reimbursed later) because the company was nearing 30 days late processing expense reports due to turnover/incompetence.
uriah··on Ask HN: Why is Pave legal?
That's normally how it goes. At least, I've always had the background check happen after an offer is signed. It's usually a separate company and they just report back whether your job titles/employment dates match your resume
uriah··on Ask HN: Why is Pave legal?
Many if not most companies outsource employment verification to The Work Number. When you get a new job, a frozen report will complicate your background check.

They don't give out salary info in employment checks though. AFAIK they require your explicit permission except for government agencies who use it to verify your eligibility for benefits. I would be surprised if they are not selling aggregate salary data though

uriah··on KeePassXC Debian maintainer has removed all network features
Compile-time flags are by definition not plugins. All optional features were removed indiscriminately.
uriah··on California could ban Clear, which lets travelers skip TSA lines
Clear doesn't let you skip TSA screening, it let's you skip the ID check before the screening. Clear verifies your identity instead.

You're probably thinking of TSA precheck which is a more streamlined screening you pay extra for.

uriah··on Ask HN: Those who have recently undertaken a job hunt, what was your experience?
Yeah, you can’t really filter based on resume without risking legal liability. There are plenty of people who look like they would need a visa sponsorship but don’t necessarily (e.g. spouses of H1B or green card holders)
uriah··on Build your own private WireGuard VPN with PiVPN
There's complicating the protocol and complicating the client. It would definitely be nice if they would add a solution to this to the official clients, particularly mobile ones. VPN over UDP is quite a bit slower than over TCP when the ISP blocks/throttles the UDP traffic...
uriah··on Why is OAuth still hard in 2023?
Login state for the identity provider and for the client application are different. Cookies are a reasonable way to implement it. Cookies + session storage backend will allow you delete sessions on the server side if you are worried about users keeping themselves logged in (?).

Your app is also responsible for deciding who has access. The identity provider is just handling the “is this person who they say they are” part.

Checking for revocation is checking whether the IdP still thinks that token identifies the user correctly. I don’t think it’s universally true or desirable that refresh tokens get revoked on logout. I don’t necessarily want logging out of Gmail to log out of Spotify just because I used Google auth for both.

uriah··on Career advice no one gave me: Give a lot of notice when you quit
It’s a pretty common practice to walk people out the door immediately if they are known to be going to a competitor. They would still be paid for the 2 weeks though
uriah··on We achieved a 6-fold increase in Podman startup speed
Unless I’m missing something, it seems that this information largely invalidates the thesis of your previous post. A critical component (fuel injector) failed, the software in the car prevented it from running and causing catastrophic damage. Roadside assistance came, immediately determined it can’t be fixed on the side of the road and towed the car. Seems like a best-case scenario given the circumstances other than possibly the red herring related to the stability control.
uriah··on American drivers have a blinding headlight problem
Yes, the size of those vehicles is definitely a factor. No alignment is going to account for the truck headlights being the same level as your eyes. Misalignment is definitely a thing though. Particularly with lifted trucks and the lack of auto-leveling when carrying a load. This affects halogens as well

But I think a lot of the blinding you see day to day is actually illegal HID/LED retrofits in reflector housings. Factory LEDs are not nearly as bad as those Amazon LEDs in reflectors.

uriah··on American drivers have a blinding headlight problem
I have a car with a similar feature. It can be erratic (on/off a lot) in certain situations where there is a lot of lights/signs around. But typically I don't have brights on there. Haven't noticed any degradation with age, but certainly possible.

For context, this is demonstrating a more advanced "automatic brights" system albeit somewhat rudimentary compared to some of the newer LED projectors (e.g. Audi, Mercedes). Turning on your brights is still opt-in. Normal brights don't turn off automatically for pedestrians

uriah··on Apple announces iOS 10
My main use of 3d touch is switching apps. That combined with swiping from left eliminates having to reach down to the home button or up to the back button when using the phone one handed.
uriah··on Building 'From Holden', an apparel manufacturer, from the ground up
Everlane has been around for a couple years now.
uriah··on No, I still don't want to work for Google
The US actually lags behind most of western Europe and Canada in social mobility. Especially among the poorest.

"European Socialism" is not that different from the US. In Europe you may get free child care, health care, etc. and industries that the government likes get subsidies. In the US, this assistance comes in the form of tax cuts. Tax exemptions for employers who pay for health care, the child tax credit, tax deductions for favored industries, etc. Including tax expenditures, the US spends more on social welfare than most of western Europe while doing a poorer job of ensuring it reaches the right people.

uriah··on [dead]
I believe the money in question comes from the organizations' employees, owners, and PACs not from the organizations directly.
uriah··on How did we come to believe saturated fat and cholesterol are bad for us?
Moderation is often a side effect of paleo diets, isn't it? Traditionally structured diets with high carbs, moderate protein, and low fat, similar to "Case B" can work well too (see: Japan). However, it's easy to overeat on such a diet compared to paleo.
uriah··on How did we come to believe saturated fat and cholesterol are bad for us?
I hadn't heard of the brain damage link. When searching for information on it, however, I mainly came across references to a study last year that said it is does not, in fact, cause brain damage. Additional mystery ingredients might be another story.

http://www.guardian.co.uk/society/2011/feb/19/ecstasy-harm-b...

http://www.addictionjournal.org/viewpressrelease.asp?pr=147

uriah··on Headphones for Hackers
You're probably thinking of the V600 which has heavier bass and swiveling earcups for DJing.
uriah··on Matt Cutts Responds on Google's Paid Link Campaign
Isn't the relevant "market" searches for whatever keyword group you are considering?

The marketshare of clicks is mainly divided among the 10 sites on the front page. I imagine the benefit, when shared among only 1-9 sites, could be significant. Also consider the benefit of moving from ranking 11 to 10 or from 2 to 1, for example.

Though I can't speak for the efficacy of this technique, this fairly old article suggests submitting competitors articles to directories to reduce their perceived (by search engines) quality: http://www.bluehatseo.com/open-questions-when-to-never-do-ar...