HNHacker News
TopNewBestAskShowJobs

StudentStuff

2,765 karma · joined May 19, 2017

submissionscomments
StudentStuff··on A NY School District Defies State, Plans To Proceed With Facial Recognition Test
Sounds like an extreme outlier, areas with such concentrated wealth which has crowded out the working class and lower-middle class are rare, most students will never attend a school like that.
StudentStuff··on A NY School District Defies State, Plans To Proceed With Facial Recognition Test
Public Schools force you to deal with a wide cross-section of society, especially compared to private schools (mainly mid to upper crust society) and colleges (people are there by choice, often after being part of the workforce and deciding to further themselves).

In many ways K-12 schools are run like prisons, with administrators playing god and throwing fits when challenged about their petty actions, students trapped in an environment not of their choosing, and society enforcing this structure.

I wish there were more diverse options for schooling, as I would've been much more interested in K-12 school had I been encouraged to dive into a subject, then asked to prove my knowledge, without the distraction of other subjects splitting my focus. College definitely offers much more flexibility in this regard, which has made for a much better experience.

StudentStuff··on "DigitalOcean Killed Our Company"
For the customer, there is a big difference. Hitting an API to send an email and a text 48hrs before shutting down services is a common courtesy and easily automatable.

The host should throttle resources in the interim if its at risk of running up massive bills or adversely impacting other clients. None of this is breaking new ground, there isn't a good reason for large hosts to act like shit.

StudentStuff··on "DigitalOcean Killed Our Company"
This doesn't seem unreasonable, OVH is not advertising DDOS protection (nor do they seem to be structured to offer it). Some hosts will can your VM and throw out its data, which is a much worse outcome.

Edit: I stand corrected ¯\_(ツ)_/¯

StudentStuff··on "DigitalOcean Killed Our Company"
Hmm, I've done lots of stuff on OVH that other hosts consider abusive, with nary a word of complaint from OVH. OVH seems to have this whole automation thing down cold, monitoring boxes for dying components and letting me run hog wild on their VMs without limit...

The one time I used their phone support, the guy I got was fairly helpful. They seem like a hands off company overall.

StudentStuff··on "DigitalOcean Killed Our Company"
Plenty of one man companies have Fortune 500 customers. Most are ran like the startup in question, as basic disaster mitigation is overhead. Don't expect the world from one guy keeping a company afloat, unless you enjoy disappointment.
StudentStuff··on "DigitalOcean Killed Our Company"
DigitalOcean is operating worse than a fly by night host (like AlphaRacks, GreenValueHost, etc). The reasonable course of action would've been to email the customer and throttle their API access to prevent load spikes, but DO instead locked their entire account (not just the service that DO felt was being abused).

A fly by night will often only suspend the VM or database that is in question, not other services on the account (having been in that position before).

StudentStuff··on Scientific Linux Is Dying
What benefits did Scientific Linux offer over other distros?
StudentStuff··on Scientific Linux Is Dying
Be less vague?
StudentStuff··on Mark Cuban says AI will reduce the demand for computer science degrees
Mark Cuban has repeatedly been on the wrong side of history, he is a grade A shitposter:

http://www.dslreports.com/shownews/76275

http://www.dslreports.com/shownews/Mark-Cuban-Urges-ISPs-to-...

https://reason.com/2015/02/26/3-charts-that-show-the-fcc-is-...

StudentStuff··on Google to restrict modern ad blocking Chrome extensions to enterprise users
I wonder if Chrome is using Sqlite under the hood, I know Electron apps will lose their data entirely if any bit of the database is corrupt (Sqlite doesn't handle inconsistent states well :c).

On a slightly different tangent, you likely have a failing disk or RAM.

StudentStuff··on Chinese developers fear the tech war will cost them access to GitHub
Why is Huawei dragging their feet on doing basic library updates on their LTE basestation firmware?

HCSEC asked your company to update to modern OpenSSL a year ago and implement reproducible builds. Neither issue has been handled, and these LTE basestations are extremely vulnerable due to the inaction of your employer.

Source: https://www.theregister.co.uk/2019/03/28/hcsec_huawei_oversi...

Combined with the poor engineering of your employer's Windows drivers, it is reasonable to cease use of Huawei developed software. Security is obviously not a priority, leaving users of Huawei software vulnerable to any person who can be bothered to look up a few CVEs and run Metasploit against your companies products.

Poorly written Windows Driver (priv escalation): https://www.tomshardware.com/news/microsoft-backdoor-huawei-...

StudentStuff··on AMD Ryzen 3000 announced
AMD's PSP is ARM TrustZone, there is no way AMD could open it in their current chips, they don't own the IP and ARM is vehemently opposed. Due to the outcry, they are more likely to build their own secure enclave/supervisor processor in the next major rework of Zen, which they would own the IP of.
StudentStuff··on Huawei in contact with European technology providers of privacy
Huawei can't patch basic security holes (namely ancient OpenSSL versions sprinkled through their LTE Basestation codebase): https://www.theregister.co.uk/2019/03/28/hcsec_huawei_oversi...

HCSEC asked Huawei to update these vulnerable libraries last year when Huawei promised a $2 billion investment in security, yet this really basic firmware maintenance task has yet to be performed.

Huawei also did the same thing with a Windows driver: https://arstechnica.com/gadgets/2019/03/how-microsoft-found-...

This company does not give a fuck about security, even when they are under scrutiny. It isn't the "Chinese hackers" I'm afraid of, but rather normal blackhats and greyhats exploiting this cornucopia of vulnerable software to our detriment.

StudentStuff··on Washington state lawmakers approve human corpse composting
Great jab to derail from how KOMO is literally a talking piece of Sinclair!

I live in Seattle and have watched that hackjob of a video, they've fenced the underside of many bridges that homeless used to camp under, most recently the West Seattle and Ballard bridges have been fenced.

Your obviously disgruntled, move somewhere else!

StudentStuff··on Washington state lawmakers approve human corpse composting
Sinclair has hijacked KOMO repeatedly to spread corporate lines: https://money.cnn.com/2018/03/07/media/sinclair-broadcasting...

Frankly, Sinclair owned stations should be required to have common branding if they are going to share the exact same website design, news content and management, anything less is deceiving the public.

StudentStuff··on Facebook and PGP (2015)
I'm slightly surprised Facebook is still so into PGP, for users on Messenger & WhatsApp you'd think they'd start pushing notifications over those channels as they are e2e encrypted and will likely be read more often than PGPed email.
StudentStuff··on Google pulls Huawei’s Android license, forcing it to use open source version
Huawei is on the entities list, if Google didn't stop providing Play Services to new devices shipped by Huawei then the Feds would be apt to get involved.
StudentStuff··on Billionaire Robert F. Smith pledges to pay Morehouse 2019 grads’ student loans
Citation?

The one person I know who is getting full state funding for community college in Oregon is waiting to see if the program they're in will be renewed next year. If not, they won't be continuing on to a bachelors degree. Note that this program is only for those that are essentially financially destitute.

Edit: All I can find is the Oregon Promise covering only up to 18k highschool students with a GPA over 2.5. This program does not cover anything beyond Community College. Seems much more limited/shitty than the Seattle Promise (free Community College for all highschoolers)

https://www.oregonstudentaid.gov/oregon-promise.aspx

StudentStuff··on Google suspends some business with Huawei
Look at the PocketCHIP and OrangePi boards. Allwinner's chips can run Xorg, Wayland, do gigabit ethernet, handle eMMC using mainline Linux all without any proprietary firmware or closed source software.
StudentStuff··on Google suspends some business with Huawei
I'd hardly presume Huawei is a front for a foreign intelligence service, but their software for cellular basestations is extremely vulnerable (hundreds of different vulnerable versions of OpenSSL sprinkled through) and they still can't be bothered to use version control, despite committing to address both issues back in 2012: https://www.latimes.com/business/technology/la-fi-huawei-bri...

Huawei's products are vulnerable by default, anyone can look up the applicable CVEs and run the proof of concept code for said CVE to pop a shell. China doesn't have exclusive access :)

StudentStuff··on Google suspends some business with Huawei
SCMP is owned by Alibaba, they're far from impartial: https://en.wikipedia.org/wiki/South_China_Morning_Post
StudentStuff··on Google suspends some business with Huawei
Huawei still uses outdated, insecure versions of OpenSSL through their basestation code, and has successfully avoided using version control despite promising to address both issues back in 2012. This seems like an optimal environment to engineer an optimized version of Linux!

https://www.fiercewireless.com/wireless/uk-says-huawei-equip...

StudentStuff··on How the Travis Central Appraisal District Purchased Home Sales Information
Privatization of land records and public data is a shitty thing, if a potential buyer is scared away by a public record of their transaction being published, they shouldn't be buying the property in question.

I'm proud that my state mandates free, open access to property ownership records and county/city maps & GIS data. Property appraisal in Washington State sounds much easier to do than in Texas where this data is locked away from the general public, as another thing counties and cities do here is rate structural build quality, integrity, and also have a bank of photos of the property over the years (generally whenever a permit is pulled or the age of the last photo set is over a few years old) as part of the public record.

StudentStuff··on Cisco's Robbins juggles tariffs, 'lumpy' service providers and 5G
Ubiquiti's Unifi Cloud Controller depends on MongoDB, which they won't help you with (having had MongoDB eat it multiple times on my Cloud Controller in the last year). The Intrusion Detection System/Deep Packet Inspection wrecks performance & throughput (and is pretty basic compared to eg: Watchguard), IPv6 is disabled by default, and no VLAN tagging on the WAN port means providers like Centurylink Fiber can't be used without an intermediate device between your Unifi Security Gateway and the Optical Network Terminal.

The Unifi suite is great for a small to medium business that is game to splash out $600 to $1500 (having the Unifi switch is critical to seamless VLAN tagging internally), but for homes and larger businesses or those with fast connections that want more than a basic router, the Unifi lineup doesn't have the grunt.

StudentStuff··on AT&T promised 7k new jobs to get tax break, cut 23k jobs instead
Plate recognition has a fallthrough rate, and mailing out toll bills followed by processing incoming checks is a costly PITA that a transponder enabled vehicle mostly eliminates.
StudentStuff··on Over 25k Linksys routers vulnerable to sensitive information disclosure flaw
The state of salaries in hardware/embedded roles is quite poor, along with the decision making process of most companies that create embedded hardware.

Only TI ever really went all in with a fully open stack that had support mainlined, problem being by the time their chips had full support upstream they'd be lagging 1 to 2 years behind Qualcomm, Nvidia, Mediatek, Allwinner, Spreadtrum, etc while having a much higher cost per chip, most of said cost being the decently written and upstreamed drivers.

For longer lived architectures (eg: AMD/Intel CPUs) totally new device drivers aren't needed on launch day, in part due to older upstreamed drivers still mostly working with newer hardware.

None of the aforementioned vendors besides TI ever got into this virtuous cycle of having upstreamed drivers, thus they've trapped their devices on sketchy, unstable & insecure BSPs that hurt the reliability, performance and sometimes the market image of the final product (eg: when the device randomly crashes or gets exploited due to latent bugs).

StudentStuff··on Walmart announces next-day delivery, firing back at Amazon
Amazon Fresh had its own (timely and reliable) delivery network and reusable plastic storage crates (often insulated). It seemed like a more eco-friendly & premium service compared to Amazon Prime.
StudentStuff··on Walmart announces next-day delivery, firing back at Amazon
Amazon Fresh is not full vertical integration, merely seems like Costco's ordering program or similar.

Amazon Fresh used to be quite popular in Seattle a half decade ago, but I barely see their empty containers anymore. I think Amazon saw their volume falling with Amazon Fresh and was threatened by their vendors and wholesalers with higher prices, thus purchasing Whole Foods to attempt to stabilize their cost on goods.

StudentStuff··on MDS: Microarchitectural Data Sampling side-channel vulnerabilities in Intel CPUs
Hyper-Threading has been a source of security concerns for a decade now, and vulnerabilities in existing HT implementations have been trickling out over the last few years. Unlike Management Engine or TrustZone, at least we can disable Hyper-Threading (for a 30% performance hit).
← PreviousPage 6 of 34Next →