HNHacker News
TopNewBestAskShowJobs

StudentStuff

2,765 karma · joined May 19, 2017

submissionscomments
StudentStuff··on Open Source Could Be a Casualty of the Trade War
No, I'm not saying that at all. What I am saying is those managing Huawei do not care about updating OpenSSL or other dependencies. Its a corporate culture problem at Huawei IMO
StudentStuff··on Open Source Could Be a Casualty of the Trade War
Bunnie seems to fear this type of IP restriction but with regard to closed source chipset designs and proprietary hardware, which he views as key to continued innovation in China.

I have met Bunnie, and he has a bit of a warped view of the world. I think it caused him to gloss over things like https://www.theregister.co.uk/2019/03/28/hcsec_huawei_oversi... where Huawei did not give a single shit about security in their cellular basestation codebase.

Sure, Huawei will read CVEs and sometimes deal with them, but really basic things like updating OpenSSL libraries seem near impossible for Huawei. Their hardware is thus vulnerable to exploitation by any ill intentioned person wandering by :c

Part of this is the whole stolen codebase problem, where Huawei (as Nortel's Chinese manufacturing partner) took their designs and code, without fully understanding them. They've been able to tack on a lot of neat stuff, but the underlying architecture is still not understood by their engineers.

StudentStuff··on Google’s painful Gmail OAuth verification process
Things like gsyn.ch will just not be written. Google already throws scary warnings about unverified apps using OAuth tokens when you use this service, but Google's use of non-standard CSV entries rather than vCards for sharing contacts has made for a terrible user experience if you want to use your phonebook outside an Android phone/Gmail.
StudentStuff··on Google Maps is filled with false business addresses pretending to be nearby
Seems like a crummy way to reach potential students, wouldn't you want to tap the local church's congregations? That is how the Catholic schools run in Seattle, though they don't have the same 20% non-Catholic full ride scholarship that they do in Portland (which made for a much better educational experience IMO).

The Summer Lunch Program (which has a much broader target audience/geographic area) in Seattle has experimented with online advertising, but had poor results. The keys to the kingdom really are reaching kids (and their parents) where they are, in schools, after school programs, and perhaps some online platforms (though the targeting is generally ineffective on Facebook/Google for this type of advertising).

StudentStuff··on Google Maps is filled with false business addresses pretending to be nearby
Why should a Catholic School be advertising on Google?
StudentStuff··on New report shows Seattle tech salaries average $138K, trailing only Bay Area
On a sidenote, there seems to be a dearth of positions for junior devs in Seattle as of late, though lots of roles available for those with 2 to 10 years of experience.
StudentStuff··on For Clarity's Sake, Please Don't Say “Licensed under GNU GPL 2” (2017)
I would be annoyed at the lack of uptake if I were RMS, the GPLv3 is designed to make sure the user has the four essential freedoms, while Apple and Android OEMs (except those permitting bootloader unlocking) are all too happy to trample freedom zero: https://www.gnu.org/philosophy/free-sw.html

Without the ability to run software as we see fit, we are constrained to what these vendors permit us to do on our own devices.

If you like this constraint, GPLv2 and lesser licenses are for you, otherwise a license like GPLv3 is advisable to ensure your users aren't trapped with an outdated, vulnerable version of your software that their OEM refuses to update.

StudentStuff··on Best choice for web bill pay?
First Tech is fine, they have branches all up and down the west coast, and offer free access to the Coop ATM Network (every 7-Eleven ATM, any other Credit Union ATM), ATM fee reimbursement, Online Bill Pay, a working Zelle integration (which doesn't support recurring payments yet unlike BECU :c) and other fringe features.

They're working on a new mobile app, but they really need to add Zelle support on their website IMO. Bill Pay and transaction history are available via the website.

StudentStuff··on Reconsidering whether Prohibition was a failure
A lack of healthy drinking culture and social norms leads to extreme, dangerous behavior. The same can be said for other ills of our society.
StudentStuff··on Best choice for web bill pay?
Nearly any credit union offers bill pay for free. BECU (if your in the Seattle area) has a nice mobile app and website that are at feature parity, with a great Zelle integration. Otherwise, First Tech FCU is the largest US Credit Union, and tends to be a fairly decent credit union.
StudentStuff··on The Touchscreen Infotainment Systems in New Cars Are a Distracting Mess
Slapping a tablet in place of the infotainment system is possible, but you make serious compromises on reliability. A tablet was never designed to sit in a 120 degree Fahrenheit car for days on end, Tesla has felt this issue acutely.
StudentStuff··on The New Dropbox Sucks
iMessage will likely never be cross-platform. Apple sees the writing on the wall, only ~10% of their userbase gets the fully integrated iOS/Mac experience, and they know they can't leave the remainder out in the cold wrt accessing their own files (hence iCloud being web accesible).

Yet you won't see Airdrop, proper Time Capsule support or other core features that don't make Apple recurring revenue add support for Windows, Android or Linux. Apple has been selective about what they're willing to do on other platforms, and its whatever they think they need to do to ensure their 1 billion iOS users are somewhat happy, while not letting their Mac sales lag (by letting the moat disappear).

StudentStuff··on Seattle has stopped charging people for personal drug possession
If anything, Seattle cleans up during the night. Its safer to walk and wander around at night as compared to the daytime.
StudentStuff··on Seattle has stopped charging people for personal drug possession
Oh hey, your data is from back when I was going through 3rd & Pike/Pine daily. I never felt threatened or particularly in danger in that area, nor did my teachers (who also transited those blocks for their bus/rail connections) or classmates feel unsafe in those two blocks during that period.

FYI there is a live crime map, along with an interface to search older reports if you wander around seattle.gov

StudentStuff··on Google Photos will stop syncing to Drive
Why not use Nextcloud's auto-upload feature and get a copy of the image without any intermediary mangling the file? Seems best if your looking to have a backup of your data...
StudentStuff··on Seattle has stopped charging people for personal drug possession
HN is not evenly supportive of the trans community (if you look at many of the comments on here). There are a number of quasi-libertarian religious people that are transphobes, but they persist as they often mesh well with the general libertarian bent of this site when commenting on articles.
StudentStuff··on Seattle has stopped charging people for personal drug possession
Ditto, there is a certain subset that feels unsafe in the city (like the cop that did an AMA on Reddit about how he doesn't feel safe on 3rd avenue without his gun) despite its relative safety. Some of these people, like the aformentioned cop, are a danger to those around them due to this mindset.

As a kid I caught busses every day on 3rd Ave without a problem, and yes, the same open drug dealing still happens at 3rd & Pine (by the crackDonalds), but that has been going on since before I moved here in 2003. When I transfer there now, not much has changed in terms of the people you'll see.

The level of danger hasn't changed, but the homelessness crisis has worsened and become much more visible as we fenced off the underside of bridges, replaced parking in the inner suburbs with bike lanes (in large part to push the van dwellers out) and rent has increased. We have an opioid crisis that is going untreated, high rents and few middle income jobs.

Our society is stratifying badly between the 90% that is getting poorer every year (and feels no hope) and the 10% that are able to afford rent in prime cities.

StudentStuff··on Twitter is rejecting posts containing JSFiddle URLs
The person your replying to explicitly states that you should follow random people off main (the federated timeline) and have a sense of wanderlust rather than following a handful of #thoughtfluencers.
StudentStuff··on Twitter is rejecting posts containing JSFiddle URLs
I don't want the fediverse to "succeed", frankly its the only space for us LGBTQ+ to not be harassed, reply guyed, and screen-capped online that isn't a corporate hellhole.

Edit: "Success" in our current world seems to be defined as the transition Reddit has gone through, where the userbase has exploded, its eaten Facebook's lunch to a fair degree, but the quality of discourse and interaction has dropped like a rock.

I've stopped using Reddit, and such a change would kill my use of the fediverse.

StudentStuff··on Twitter is rejecting posts containing JSFiddle URLs
Avoid the fediverse please, the point is to have a more humane environment, not follow #thoughtfluencers.

If you do join choose your instance wisely, beware that many instances block mastodon.social, freespeechextremist.com and similar for being hot messes that have no moderation. The latter instance in particular has a very persistent hellthread spambot problem, where bots sling nudes without content warnings at people constantly.

StudentStuff··on PSPTool Is a Swiss Army Knife for the Firmware of the AMD Secure Processor
ARM is the designer of the PSP, if its incompetence then they're the ones at fault.

AMD states that the PSP is "ARM TrustZone ... Industry standard" https://www.amd.com/en/technologies/security

StudentStuff··on PSPTool Is a Swiss Army Knife for the Firmware of the AMD Secure Processor
AMD doesn't have the code nor the documentation from ARM to release a minimal PSP, and any attempt by them to do so will end with an injunction against AMD selling processors with TrustZone embedded, meaning they will have a yearlong gap before they can retool and start shipping any PSP-less processors (lead times on silicon changes are loooong).

Had AMD not been broke prior to the launch of Zen, they would have likely built their PSP in house, but they were so desperate to stay alive that they sold the 1st gen Zen CPU designs to a Chinese joint venture for $200 million (which kept AMD from bankruptcy).

StudentStuff··on PSPTool Is a Swiss Army Knife for the Firmware of the AMD Secure Processor
AMD states that the PSP is "ARM TrustZone ... An Industry Standard Approach" right on their website: https://www.amd.com/en/technologies/security

Wrt renegotiating with ARM, there is no leverage for AMD. TrustZone is already baked into their chips for the next 2 to 3 years, and if the negotiations go badly then ARM could block AMD from selling any processors for at least a year.

AMD did hire a security consultant (due to the Change.org petition) that told them TrustZone was vulnerable, but this means they need to implement their own PSP which is something that will take 3 years or more (silicon has a very elongated development cycle).

Had AMD not been on death's doorstep for the years preceding the new Zen architecture, they likely would have built their own PSP. Being financially insolvent and desperate to meet the requirements of their OEM partners forced them to license a pre-built PSP.

StudentStuff··on PSPTool Is a Swiss Army Knife for the Firmware of the AMD Secure Processor
Wow, only the header is signed (for the Ryzenfall-1 bug)? That is a pretty big oversight, did AMD attempt to patch these bugs?
StudentStuff··on PSPTool Is a Swiss Army Knife for the Firmware of the AMD Secure Processor
The PSP is licensed from ARM, meaning AMD owns none of the IP of the PSP. If they were to cooperate in this effort, ARM would likely sue them for breaking their licensing agreement.

Same reason the recently mainlined Mali drivers (another ARM IP block) got no assistance in development from any of the chip vendors. Touching those projects would break their licensing agreements with ARM and risk having to stop producing their chips that integrate Mali (aka most ARM based chips).

StudentStuff··on Taiwan bucks world trend to be No. 1 in semiconductor equipment spending
Newer nodes are hellishly expensive to develop, ballooning in cost over previous nodes. Global Foundries and most others are not working on more advanced nodes than 14nm, leaving just TSMC & Samsung with 7nm fabs. Intel has 10nm kinda crappily working, turning out low end chips that are mostly dead silicon (due to process issues).

We're definitely hitting a silicon bottleneck, the physical barriers are very real, and exceedingly costly to attempt to work around. AMD's strategy of using 14nm chiplets for components that don't scale down well (eg: analog interfaces, DRAM, etc) is likely to become much more common.

StudentStuff··on If 'Big Tech' Is an Antitrust Problem, Why Are We Ignoring Telecom?
70% of the city proper has gigabit for $65 a month from Centurylink, OP is out in the fringes where they allowed VDSL2 deployment years ago (whereas Seattle was on ADSL), thus they missed out on upgrades in the last few years. Coverage map for the city proper: https://www.seattle.gov/tech/services/cable-service/cable-fr...

ex-Verizon areas that aren't rural generally have fiber coverage, excepting Finn Hill. They committed to a bunch of smaller suburbs to have 100% fiber coverage by 2008, which mostly got done. Sadly, they only go up to 300mbps symmetrical for $50/month iirc.

StudentStuff··on If 'Big Tech' Is an Antitrust Problem, Why Are We Ignoring Telecom?
70% chance if your in Centurylink's territory they'll offer you 1 Gig for $65 a month (no contract, free modem, price for life, no BS fees) that you can sign up for here: https://www.centurylink.com/home/

If Frontier is your RBOC, they have 300Mbps for $50 iirc in 90% of the non-rural areas they serve. Check https://frontier.com/order-online/plan/package

Comcast is hot garbage, both the offerings I mention are fiber, and the gaps seem to be caused by poor enforcement of the franchise agreements in the relevant locality, eg: Frontier was supposed to have 100% fiber coverage in Kenmore a decade ago, but the city isn't consistently assessing them fines so there is no reason to meet the contract.

Seattle has no universal coverage mandate, but a complex customer income weighting metric to prevent redlining. IMO we negotiated a worse agreement than Kenmore: https://www.seattle.gov/tech/services/cable-service/cable-fr...

StudentStuff··on A NY School District Defies State, Plans To Proceed With Facial Recognition Test
There are nearly 1000 high schools in California, few students will ever be in the gentrified schools you speak of: https://en.wikipedia.org/wiki/List_of_high_schools_in_Califo...

45% of students in California are poor or slightly above poor: https://www.ppic.org/publication/child-poverty-in-california...

StudentStuff··on "DigitalOcean Killed Our Company"
My point was focused on how shithosts handle abuse, they'd suspend your container, but any other products or services you have would remain available, your account generally wouldn't be locked (short of disputing a payment).
← PreviousPage 5 of 34Next →