HNHacker News
TopNewBestAskShowJobs

buzer

1,367 karma · joined October 8, 2016

Staff Software Engineer at 8x8

Especially interested in systems scaling & IAM and also general interest in most of thing on backend side.

You can reach me via <username>@<username>.net

submissionscomments
buzer··on ‘Angry Birds’ company is about to be sold for $1B to Sega
It's likely that parent company (Sega Sammy Holdings) is the one who is buying/financing it. Sega accounts for less than 10% of their revenue.
buzer··on YouTube suspends a YouTuber's Patreon-exclusive account for self-impersonation
There kind of is this with many companies these days. It's called arbitration. Someone did it with PayPal a while ago for example (ref: https://news.ycombinator.com/item?id=33462658). In many cases it's free, but in some (especially b2b) there might be terms that say each needs to pay their own fees or that winner needs to pay loser's fees.
buzer··on How to change the region on an HP OfficeJet printer in 57 easy steps
Google certainly moves accounts between countries automatically: https://news.ycombinator.com/item?id=27560705

At least according to that they won't ask you to accept new ToS, probably due to the fact ToS allows them to change ToS at will.

buzer··on Epic Games to pay $245M for tricking users into making unwanted charges
I'm glad I got used to wearing a literal poo poo hat (https://99porings.com/revo-classic/guides/firstjob/acolyte/b...). Default glamor/skin is never ugly enough.
buzer··on I spent a week without IPv4 to understand IPv6 transition mechanisms
One could argue that if e.g. FTP is not working behind the NAT then the NAT is misconfigured. NAT needs to aware of certain protocols so that it can modify the application layer data.

Of course, if the protocol added workaround for NAT and NAT is modifying that application layer data then it can cause another set of issues.

buzer··on Show HN: Gargantuan Takeout Rocket – Google Takeout Transloader to Azure
I assume it's talking about https://learn.microsoft.com/en-us/rest/api/storageservices/o...
buzer··on What Are 'Dark Factories,' and Do They Exist?
Careful with what all things will be hooked up into that. https://www.youtube.com/watch?v=y729vwvauWE
buzer··on A fake job offer gone wrong
I received my first pay in the US via actual paycheck since I wasn't able to open US bank account in time.
buzer··on Premium .dev domain with Google costs $850
That's what I assumed simfree was talking about.
buzer··on Premium .dev domain with Google costs $850
At least in the past there were cases where some registrars automatically registered the domain if someone searched for it, it may have been in cases where their algorithm deemed the name somewhat premium. They would then essentially hold it hostage for some time, but would then cancel it during the refund period. AGP Limits policy (https://icannwiki.org/Add_Grace_Period) was created to combat that (and some other issues with refunds).
buzer··on Activision’s faulty anti-cheat software
Surprisingly, there is actually some official guidelines about anti-cheat and bans:

https://edpb.europa.eu/system/files/2022-01/edpb_guidelines_...

> Example 3: GAMER X is registered as a user on the gaming platform of PLATFORM Y. One day, GAMER X is notified that his online account has been restricted. As he is unable to log in anymore, GAMER X asks the controller for access to all personal data relating to him. In addition, GAMER X requires access to the reasons for the account restriction. PLATFORM Y, the controller of the online gaming platform with which the request has been lodged, informs the users in its general terms and conditions available on its website, that any kind of cheating (mainly by the use of third party software) will entail a periodical or permanent ban from its platform. PLATFORM Y also informs the users in its privacy policy about the processing of personal data for the purpose of detecting gaming cheats, in accordance with the requirements set out in Art. 13 GDPR.

> Upon receipt of GAMER X’s request for access, PLATFORM Y should provide GAMER X with a copy of the personal data processed about GAMER X. Regarding the reason for the account restriction, PLATFORM Y should confirm GAMER X that it decided to restrict GAMER X’s access to online games due to the use of one or repeated gaming cheats which are in violation with the general terms of use. In addition to the information provided about the processing for the purpose of gaming cheat detection, PLATFORM Y should grant GAMER X access to the information it has stored about GAMER X’s gaming cheats which led to the restriction. In particular, PLATFORM Y should provide GAMER X with the information that led to the restriction of the account (e.g. log overview, date and time of cheating, detection of third party software,...) in order for the data subject to verify that the data processing has been accurate.

> However, according to Art. 15(4) and Recital 63 GDPR, PLATFORM Y is not bound to reveal any part of the technical operating of the anti-cheat software even if this information is relating to GAMER X as long as this is can be regarded as trade secrets. The necessary balancing of interests under Art. 15(4) will have the result that the trade secrets of PLATFORM Y preclude the disclosure of this personal data because knowledge of the technical operating of the anti-cheat software could also allow the user to circumvent future cheat or fraud detection

> The extent of the information provided to individuals will be heavily context dependent, taking into account the nature of the data controller and the nature of the breach of the terms of service. In some cases, it may only be possible for the data controller to provide basic information in response to an access request to which Art. 15(4) applies

So at least some information should be provided while some things could fall under the trade secret exception. I would imagine at least some cases need to go to DPA in order to get some clarification on what information must be provided and which things they could avoid disclosing, but that is going to take quite a while to get any resolution on.

buzer··on Activision’s faulty anti-cheat software
One thing that I have been wondering about about anti cheat systems is that wouldn't people be able to do GDPR data request on their account? I would imagine that a lot the data they use for the ban decision would count as personal data and thus they would need to include it as part of the response. And if there are mistakes they would have option to rectify it.
buzer··on Building a Virtual Machine Inside ChatGPT
It seems to work relatively well for non-English langauge prompts as well. It can also translate things.

I tried it by putting Finnish prompt and I got answer in Finnish (e.g. "Miten paistan pihvin?"). Translations were also quite good on some samples that I tried (Finnish-English, English-Finnish, Japanese-Finnish, Japanese-English).

buzer··on Show HN: This Hacker News Does Not Exist
> New Vulnerability Discovered in Opera (neocities.org)

(2002)

buzer··on Poll: Have You Caught Covid?
Back in mid March 2020 I flew back from USA to Finland and had symptoms starting next day, but the official policy was only to test those with severe symptoms so I never got confirmation.
buzer··on Discord fined €800k for failing to comply with several obligations of the GDPR
No. GDPR isn't tied to citizenship. EU citizens & residents are not covered by GDPR when they are outside of EU unless member state's law applies by virtue of public international law (https://gdpr-info.eu/art-3-gdpr/).

A bit more unclear situation is if non-resident is visiting EU and uses services from their home country.

buzer··on Shopify Is Illegal in Germany
> As far as I know, it’s only one German court which once considered that an IP address was PII in a specific case. There is nothing in the law that explicitly says that IP addresses are PII.

CJEU ruled back in 2016 that IP address is personal data if provider has legal means to identify the person. This includes, as example that was given in the case, laws that give means for service provider to identify the users in the case of cyber attack by requesting help from other authorities.

This ruling is from before GDPR and relates to the older Data Protection Directive, but the relevant chapters are largely same (GDPR mostly increased the explicit scope).

Ruling: https://curia.europa.eu/juris/document/document.jsf?docid=18...

The "tl;dr" parts are 30 (the question) & 47-49.

The old directive: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...

buzer··on Ex-Reddit CEO on Twitter moderation
> In theory a spammer could make non-commercial, non-misleading, non-fraudulent speech, and a site like twitter would then actually have to think about questions like first-amendment. I can't say I have ever received or seen spam like that.

While I don't think I have seen it on Twitter (then again I only read it when it's linked) I have seen plenty of it in some older forums & IRC. Generally it's just nonsense like "jqrfefafasok" or ":DDDDDD" being posted lots of times in quick succession, often to either flood out other things, to draw attention to poster or to show annoyance about something (like being banned previously).

buzer··on Everyone going to World Cup must have this app, experts are sounding the alarm
Depends what you mean by requirement. Visiting/moving to USA is not a requirement. Not perjuring yourself is not a requirement if you don't mind staying in prison and/or paying fines. If, however, you do want to travel to USA and want do it without worrying about spending extended "vacation" you do need to fill the form truthfully. That includes giving a list of handles you have used on those listed social media sites (at least on DS-160).
buzer··on Paypal.com is using revoked certificate
PayPal appears to be serving revoked certificate. https://crt.sh/?q=+46702bcc869d216e7225cee5ac729ea769a3cf032...

Firefox blocks the access to site, I think most of other browsers do not.

buzer··on Node_modules: One character saved 50 GB of disk space
Hard links are not too bad of idea as long as they are done on files though they do have some downsides. There are some very good reasons why hardlinks on directories are not easy to enable. If something is scanning things recursively, they would end up in infinite loop if they are not keeping track of (disk,inode) tuples for parent directories, especially if they follow symlinks. IIRC they are explicitly disallowed in Linux, you would need to modify kernel source to allow them.

I have no clue why they are saying that they are hard linking directories, I sure hope they are only doing it on file level.

buzer··on Ask HN: Just received spam to an address only used at Amazon?
If they actually cared I'm sure there would be a way to report these kind of issues. I got physical mail about submitting review for a product that I bought from Amazon (sold by company X, shipped by Amazon) in exchange for Amazon Gift card. The mail did contain name of the product. I tried to report it and

* there was no obvious way to do it. Closest thing was by reporting issue on product.

* there was no way to show the customer service agent a picture of the mail. Chat did not support sending pictures & they were unable to open imgur link.

* agent recommended me to leave a report it by leaving review to the seller page. I did that and next day review was deleted.

buzer··on IR35 reform to be repealed; workers will determine employment status
That sounds surprising as someone from Finland. https://knowledge.leglobal.org/eic/country/sweden/legal-fram... & https://www.remotepass.com/blog/all-you-need-to-know-about-w... are these incorrect?
buzer··on EVGA terminates Nvidia partnership [video]
I don't know what the rules are in UK these days, but in EU you can always deal with the seller (assuming they still exist). That would be guaranteed to be free for you. If they want to import replacement they can do that & deal with the customs.

https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL... & https://europa.eu/youreurope/business/dealing-with-customers...

buzer··on Framework Ethernet Expansion Card is now available
EPB offers it https://epb.com/campaigns/25-gig/ though it's a lot more expensive ($1500/month for residential).
buzer··on The many problems with implementing Single Sign-On
Out of curiosity, which SSO service providers allow end-customer to self-configure the SAML integration? Essentially every service that I have seen the SAML integration is only configurable by the service provider and often there isn't even API that could be used to let SP expose the functionality.
buzer··on Falsehoods programmers believe about email
Are decimal & hexadecimal addresses accepted as email domains? e.g. root@2130706433 & root@0x7f000001
buzer··on Finnish as a world language?
Let's just switch to ralli englanti
buzer··on Largest Japanese Anime Database “Anime Taizen” Opens to the Public Today
Likely. Do you have "hide synonyms" on or off? With it on I saw 2301 pages of results (last item being #69055), with it off the number I found 12479 entries. Not sure what that ~1400 difference compared to stats is though.
buzer··on Largest Japanese Anime Database “Anime Taizen” Opens to the Public Today
From main page under "AniDB Statistics":

> 13898 Anime

The new site does seem to have more entries, but I haven't checked what the differences are exactly (e.g. are some things counted in one but not in other). For example the table shows 36 movies from 1910s, in AniDB there is only 26 (search with start time between 1.1.1910 and 1.1.1920, the only entries are movies).

← PreviousPage 12 of 17Next →