HNHacker News
TopNewBestAskShowJobs

alexriddle

120 karma · joined May 29, 2020

meet.hn/city/gb-Portsmouth
submissionscomments
alexriddle··on Outsourcing plus local AI will soon become more economical vs. frontier labs
Anything over 150 seats means you need to pay at token rates plus the $20/user. My day job is operational (no coding at all) and I'm spending ~$300 a month on a few chats with Claude/Cowork a day over the course of a month.
alexriddle··on Londoners are sick of viral videos telling lies about their city
Hospital admissions are reliable indicators for violent crime and stabbings in particular - if you get injured you're going to need a doctor and they will record it - and these are going down [1]. There is little to suggest any kind of epidemic or increase in violent crime is going on and the stats on this seem to play out.

What is more of an issue is more antisocial crime such as street robbery or shoplifting. These crimes are much more likely to be snatch and grab, with no violence involved. They still have an impact on the victims but they're not making the city significantly more violent.

[1] https://www.london.gov.uk/london-records-fewest-homicides-ye...

alexriddle··on Lego's 0.002mm specification and its implications for manufacturing (2025)
Lumibricks is fantastic, built in lighting (or rather you build it in as part of the model) and as someone who has always turned their nose up at off brand Lego, the parts are definitely 99% of the way there. Instructions the same quality, if not better, than Lego as well - all for about the third of the price.

Minifigs are terrible but I have hundreds of those spare anyway!

alexriddle··on New Lego smart-play system
The gap is reducing significantly - I have collected and built Lego for a long time and had this opinion but have recently discovered Lumibricks (formerly Funwhole) - excellent designs, and around 1/2 the price of Lego (but they all include lighting elements) and having put them together I can say they feel exactly like Lego. I believe there are other brands of similar quality.
alexriddle··on What if I don't want videos of my hobby time available to the world?
Usually it would be either the full day (ceremony, meal and ‘evening party’ which we commonly call the reception) or just the reception. No one is being asked to skip the middle part of the event.

Less than 20% of weddings are religious (and a smaller subset of this will be in churches), and I don’t really hear of anyone just turning up at the ceremony of someone they don’t know.

alexriddle··on “No tax on tips” is an industry plant
Weirdly on Reddit I keep getting the doordash and ubereats communities pushed at me - there is a very strong view amongst people using these apps that anyone who says they will "give a cash tip" will not actually do it, so it's probably not as beneficial as you might think.

The tips on the apps nominally do go entirely to the driver.

alexriddle··on “No tax on tips” is an industry plant
All that this does is ensure you don't get stacked with another order ahead of you (so the delivery is direct from the restaurant to the person who ordered) in theory.

It doesn't help with situations where drivers are multi-apping (accepting orders across multiple apps and juggling them). The drivers don't even know you have priority.

edit: and in the US where you can definitely see the tip up front, you will almost always find that the order will get picked up quicker if you increase the tip by the equivalent of the priority fee. But you may well get stuck with a delivery before yours.

alexriddle··on Visa and Mastercard: The global payment duopoly (2024)
Other than Amex for airline points I don’t spend a penny on banking, all the standard services (eg transfers, bill payments, cash withdrawals, deposits) are free (in the U.K.) with no monthly fee.
alexriddle··on Insurers launch cover for losses caused by AI chatbot errors
Most of the time we knew because people are generally honest and tell the truth. A few times where we had concerns we'd apply for a police report - even if someone will lie to their insurer, they rarely lie to the police in the heat of the moment when reporting the crime.

All that said, I can't recall many instances where the theft wasn't either breaking and entering, or entry through an open access point. As easy as lock picking might be, it's not a common burglary technique.

alexriddle··on Insurers launch cover for losses caused by AI chatbot errors
In the UK where I am, most standard (not budget) property policies would cover theft from an unlocked entry point.

Two main exceptions:

1 - if you are letting the property to someone else, e.g a lodger or have paying guests staying with you then this is typically excluded.

2 - if you have had previous theft claims, live in a high crime area, or you have a particularly high risk (e.g lots of valuables), the Insurer will add an endorsement that you need a minimum standard of locks and have them engaged when the property is unoccupied.

Outside of those, if you accidentally leave a door unlocked, your claim will likely be paid. The situation obviously may be different in other countries. I worked for a property insurer and saw hundreds of these claims (entry via an unlocked entry point) paid during my time there - I also saw many declined because of the above.

I suspect that over time the number of policies in the 'budget' category will continue to increase as price continues to trump everything else for most people]

edit: it is the same for the other lines I mentioned as well -e.g a cyber policy I saw recently has no conditions relating to use of MFA. It will have been factored in when writing the risk (they will have said they use it) and if it turned out it was a lie then there would be an issue with cover but if it was just a case of an admin forgetting to include an OU in the MFA group policy the claim would almost certainly be covered. Policies aimed at the SME space are much more likely to have specific conditions though.

alexriddle··on Insurers launch cover for losses caused by AI chatbot errors
Lots of insurance covers these types of situation which are the result of careless acts...

Don't take the right safety precautions and burn down a customers house - liability insurance

Click on a link in a phishing email and open up your network to a ransomware attack - cyber insurance

Forget to lock your door and get burgled - property insurance

Write buggy software which leads to a hospital having to suspend operations - PI (or E&O) insurance

Fail to adequately adhere to regulatory obligations and get sued - D&O insurance

Obviously there will be various conditions etc which apply but I've been in Insurance a long time and cover for carelessness and stupidity is one of the things which keeps the industry going. I've dealt directly with (paid) claims for all of the above situations.

It doesn't absolve responsibility though, it just protects against the financial loss. I suspect if you leave a child alone with an AI and the house burns down that's going to be the least of your problems.

alexriddle··on Visualizing 13M Bluesky users
I don't think that's particularly true but even if it was, the site is overrun with crypto spam and porn bots that will drive people away. I know 3 people who have deactivated their account and switched to bluesky in the past week - and anecdotal evidence for many people on bluesky seems to suggest engagement levels are significantly higher. The network effects are really gaining traction as well.

I gave up on Twitter when I opened the app in public to find a porn video playing in the main feed, despite not following or interacting with any accounts of that nature previously. That was ~6 months ago and I haven't looked back.

alexriddle··on Psssst! Your date of birth can be a random number!
I may have misunderstood the parent comment - with gmail, you can add dots anywhere in the mailbox and it all goes to the same place (standard gmail, not workspace)

e.g andrew@gmail.com, a.n.d.r.e.w@gmail.com and a.....ndrew@gmail.com all are the same user and will go into their mailbox (which I have used to avoid the + stripping that some sites do)

andrew@outlook.com and a.ndrew@outlook.com are two distinct users.

Obviously if you control the domain or use a provider who supports it you can add an alias with punctuation but then you might as well just use e.g ebay@c.com to track the email source.

alexriddle··on Psssst! Your date of birth can be a random number!
This works for some providers (Google) but definitely isn't universal - MS/Outlook doesn't support it for example
alexriddle··on Show HN: Adblock for Podcasts
I'm fairly sure that most podcast platforms now include dynamic ad segments - I listen to a few and whilst some (usually where the hosts record ads themselves) seem to have static ads, others definitely have ads which are updated automatically
alexriddle··on Court upholds New York law that says ISPs must offer $15 broadband
Some operators do have their own infrastructure and most large ISPs have equipment in local exchanges and operate their own backhaul.

Lots of it is just about marketing though.

alexriddle··on Hackers Broke into Change Healthcare's Systems 9 Days Before Cyberattack
I’m fairly sure it was confirmed they don’t have any standalone cyber cover so probably no insurance will be picking up the tab.

I work for a cyber insurer (who are trying to reduce the risk of compromise, alongside transferring some of the risk via insurance) - providing they’ve not been misleading in their application, we take the risk as we find it and can’t just not pay because of poor cyber controls.

alexriddle··on British Library cyber incident review [pdf]
I work in a related field (cyber insurance response) - typically takes a few months to identify exfiltrated data and then analyse it to understand what is in it. This might seem simple but there are usually in the region of hundreds of thousands to millions of files, and that may contain spreadsheets with tens of thousands of rows. This all has to be analysed, filtered and reduced to the point you have a list of PII which has been impacted, and can decide on what to do.

Credit monitoring is usually offered as standard when a breach occurs, the UK is much less litigation friendly than the US so in the absence of any actual harm, that would discharge most of their obligations to protect you following an incident.

alexriddle··on Car insurance in America is too cheap
The UK motor insurance market is one of the most competitive in the world. Aggregators have created a situation where every insurer is looking for the slightest competitive advantage to drive themselves up the comparison table.

I don't have the most up to date figures but in 2022, combined ratio was forecast to be 115% for motor insurance - this means for every £1 in premium, £1.15 was paid out in claims and expenses. There is some income from investments but it's minimal compared to the pre 2008 situation.

Consequentially several insurers have exited the personal lines market as they cannot make money from it - RSA for example. 2022 is forecast to be the worst year for insurers since 2010.

The market does suffer from a cycle of 'hard' and 'soft' markets and there will be an overcorrection in the short term - over a few years, we'll see insurers seeing an opportunity to undercut the market and gain market share and premiums increases will ease.

TLDR - whilst it is painful to see premiums rising so quickly, it is not an industry that is awash with profits.

alexriddle··on Post Office lied and threatened BBC over Fujitsu dev whistleblower
Which isn't even legally permissible, there is no way to 'give it back' (although you could stop using the title) - it can only be taken from you, which has to be done by the king on recommendation of the prime minister.
alexriddle··on [dead]
Is this not just Bing searching the web under the built in web search integration?
alexriddle··on The thrill of the bargain hunt at unclaimed baggage
Appreciate the focus is on the US but for contrast in the UK, 'theft by finding' is a specific offence - whilst you can generally keep unclaimed lost property you should make some effort to find the owner before doing so. People have been prosecuted for keeping money they have found on the floor [1]. That said, these days the police don't have the resources to track lost property so it's unlikely most items would ever be reclaimed and after a certain period it does become yours.

[1] https://www.bbc.co.uk/news/uk-england-stoke-staffordshire-39...

alexriddle··on Sky Asked Govt. To Target Pirate IPTV Resellers via New Dedicated Police Unit
I suspect the unit would be funded directly by Sky - the advantage to doing it that way is that they have access to the CPS and police intelligence, as well as all the powers the police have which they wouldn't if it was done in house.

Insurance fraud is run along the same lines, all insurers contribute towards IFED which is a part of the City of London police tasked with tackling insurance fraud. If this relied on public funding I doubt anything but the most extreme cases of insurance fraud would be investigated.

alexriddle··on Microsoft is bringing Python to Excel
For someone working outside IT but who has coding skills, it's great. My previous work computers have been tightly controlled by IT and installing libreoffice on them wouldn't have been permitted.
alexriddle··on Go with PHP
What stack can handle 500,000 orders per minute - 22.3 billion a month - on a $6/month server?
alexriddle··on FTX Discovers $7.3B in Assets
Reading the latest update from the bankruptcy, regulation and enforcement definitely would have helped - I suspect any appropriate auditor conducting a thorough audit would have very quickly realised that the business lacked any controls at all on expenditure (amongst many other issues).

Instead, their auditors claim they stand by their work as they weren't asked to audit any internal controls. For a company with billions in customer deposits, that should never have happened.

alexriddle··on Web fingerprinting is worse than I thought
I've had to implement this - we have a web app used by engineers in the field where signal is often not great. We got lots of complaints about image uploads as for a typical job there would be potentially 100+ images that needed to be uploaded (multiple assets with 2 before and 2 after photos per asset).

iPhone defaults to uploading a large image which can take ages to upload. We implemented a canvas based solution which sends a base64 string representing a compressed image and reduced the upload file size by about 90%. We don't need high quality original images in the backend.

I may have missed a trick, this has been in place for a few years now but at the time I couldn't find a better solution.

alexriddle··on Discord, or the Death of Lore
I have joined 2 discords in the last week (as lots of 'community support' seems to be moving there these days). I set a username but I haven't had to supply any other info - I can't post anything and there's a banner saying I need to claim the account to avoid losing access but it's definitely not every discord which requires a verified account.

Doesn't help with the issues around searching for data from outside of discord.

alexriddle··on T-Mobile says investigating data breach involving 37M accounts
In the UK (arising from GDPR so I would assume EU as well), sensitive personal data is an enhanced category of PII which requires more considered handling.

This would include things like race, health conditions, disabilities, sexual orientation, political views - basically things that you wouldn't expect T-Mobile to be storing.

alexriddle··on Twitter removed their diversity page some time between November 16, 2022 and now
Not just the diversity page - it looks like they removed a bunch of pages from the careers site - e.g the "early career" page that is in the header is also removed. Only the "search jobs" button remains.

See the header at https://careers.twitter.com

Page 1 of 2Next →