HNHacker News
TopNewBestAskShowJobs

buzer

1,367 karma · joined October 8, 2016

Staff Software Engineer at 8x8

Especially interested in systems scaling & IAM and also general interest in most of thing on backend side.

You can reach me via <username>@<username>.net

submissionscomments
buzer··on Japanese words and names sound African (2022)
> Finnish is a little more flexible, and syllables can end with an n, r, l or t. No consonant clusters, in any of the languages. No syllables ending with consonants outside the restricted set (if any)

What do you mean? There are words like Ahti (Ah), ankerias (as), isku (is) or lapsi (lap) which contain syllables that end in consonants other than n, r, l or t. There are also a lot of words with double consonants (like jarru, lasso, noppa, nurkka) where syllable get split at the middle.

buzer··on European content removal laws are scrubbing the internet of legal content
If the comments were removed due to being presumably being illegal (rather than due to company determining they simply don't want that kind of speech, e.g. spam) wouldn't it be prudent for the platforms to report all instances to the local police after removing the comment? If the police determines to not continue with the investigation then the speech must be legal and thus could be restored and they can adjust their moderation accordingly.
buzer··on Learn CSS Grid with a virtual garden game
You are watering everything except for top 40 pixels. You need to water everything except for top 50 pixels.
buzer··on RISC-V must get its messaging right on open standard vs. open source
Earlier discussion: https://news.ycombinator.com/item?id=40512028
buzer··on Court upholds New York law that says ISPs must offer $15 broadband
In bay area I can choose between PG&E and Silicon Valley Clean Energy for power. PG&E even handles the billing for SVCE.

In Finland there was local monopoly for delivery and power could be bought from numerous companies. I just checked offers for my old place and I could choose between 250 different products, some from same companies (e.g. fixed term/permanent, guaranteed wind power, market rate). In there you would get separate bill from your power company rather than it being handled by the local delivery company.

buzer··on Doomscroller.xyz
Honestly, I'm a bit tempted. I read quite a bit on my laptop while lying down and my arms are always in a bit of awkward position in order to scroll. I have been thinking of getting one of those presenter tools.

The only downsides are price & lack of click.

buzer··on Show HN: Using Google Sheets as the back end/APIs of your app
curl is good for isolating issues. Here's requests to https://zerosheets.com & https://www.zerosheets.com: https://gist.github.com/Buzer/67adedefe59f9efdf3b16b0b8def11...
buzer··on BlenderBIM – add-on for beautiful, detailed, and data-rich OpenBIM with Blender
> You can't trust the automatic door schedule to be correct in case somebody with ADHD (a lot of architects including me) forgot to check and edit all the semantic information after they made the visual change they wanted.

Would it be useful if elements contained some kind of "confirm date" field as well as "create date" field (create date would be the time it got pasted) and likely "last modified" on objects? Or would it be unreliable due to them e.g. not really taking surrounding changes in account?

buzer··on The Terrifying A.I. Scam That Uses Your Loved One's Voice
The original Finnish one was TUPAS, it has been available since at least 1998. It was phased out in 2019 as it was not compatible with eIDAS. For end users there isn't really any difference but the old system required separate contracts between each bank and service provider. Due to that service providers also couldn't use 3rd party (think service like Auth0) who would handle contracts with individual banks. From my understanding it was also fairly expensive (in terms of per authentication event). The new one is called Finnish Trust Network and uses OIDC and in some cases SAML, TUPAS had it's own protocol (I'm not sure if there even was a standard protocol for that kind of authentication back then, even SAML 1.0 came out only in 2002).
buzer··on Price fixing by algorithm is still price fixing
If this lawsuit is successful, would renters have standing to sue for damages? And how far would the liability go, just their landlord + RealPage (who is probably bankrupt by that point)? Or would everyone who colluded to keep prices high be liable, possibly even to renters whose landlord was not part of collusion but rents in the area increased due this?
buzer··on Docusign just admitted that they use customer data to train AI
Doesn't "contractual consent" simply mean that it was part of the contract, likely adhesion one?

In their privacy policy (https://www.docusign.com/privacy) they say their lawful basis is "Consent (where required under applicable law)" which certainly sounds like if applicable law doesn't require it they would be use it without consent.

buzer··on Go 1.22
For example when you are using partially populated record to update the database. If field is null intentionally it means it should be updated to it. If it's not set the update statement should not touch it.
buzer··on Why new hires often get paid more than existing employees
I wanted to move aboard when I lived in Finland and interviewed with that in mind. I got offer from UK company, but ended up agreeing to counter offer as then current company intended to open US office and I could move there at that point. Unfortunately that didn't quite pan out as company went bankrupt, but I did end up getting hired by the company that bought the IP and moved to the US after pandemic ended.

So at least for me it didn't pan out terribly though there was some luck involved.

buzer··on Cloudflare lays off new hires
In Finland there are fixed-term and permanent contracts. Fixed-term ones are extremely hard to terminate one sidely for both parties (excluding separate terms in the contract like probation period). Permanent contracts require certain amount of notice by default. Employees notice period is 14 days if contract has lasted less than 5 years, 1 month otherwise. Employer's notice period are: 14 days if contract has lasted less than a year, 1 month for 1-4 years, 2 months for 4-8 years, 4 months for 8-12 years and 6 months for over 12 years.

Contract and CBA can affect these. The only restrictions law has is that employee's notice period cannot be longer than employer's and that the maximum is 6 months, but CBA can set minimums. The CBAs that I have read set those law's default notice periods as the minimum. Vast majority (I believe about 80-85%) of employees in Finland are covered by some CBA.

buzer··on Suspects can refuse to provide phone passcodes to police, court rules
While I don't know how many interactions there has been, according to https://www.washingtonpost.com/investigations/interactive/20... for example New York has had over 10000 officers involved in cases where they settled ("46% by officers named in multiple payments" "more than 5,000 officers were named in two or more claims") across 10 years. They seem to currently have 36000 officers, I don't know how long they stay on the job on average or how the numbers have fluctuated over the years, but even if it's just 1 year and their size hasn't changed that would mean about 2.8% of police force in NYC was involved in misconduct that resulted in settlement.

These don't include number of cases where legal action wasn't taken or which got thrown out due to qualified immunity (these are somewhat related, if case is unlikely to get past qualified immunity it's quite unlikely legal action will be taken). And probably cases which actually went to trial as it seems to focus on settlements.

Additionally there is for example https://www.nyclu.org/en/publications/cop-out-analyzing-20-y... which covers 2000-2020 misconduct complaints. According to it disciplinary actions were taken 4283 times, meaning that even if conduct was enough to reach settlement it doesn't necessarily mean it results in any actions taken against the officer.

buzer··on Coding4Fun Hardware Boneyard – Using the CueCat with .NET (2006)
I used it for quite a while to scan physical invoices before e-invoices became more common. Finland has a standard for encoding the required fields (account number, amount, reference code & due date) as a barcode and companies almost always included it.
buzer··on Don't kill my app
> I'm not sure if it's been updated since then.

There seems to some updates, https://dontkillmyapp.com/samsung shows update from 2021

buzer··on Congress mandates new car technology to stop drunken driving (2021)
In some states merely sitting on driver's seat with no intention to drive while intoxicated can lead to DUI charges. https://www.youtube.com/watch?v=wgOekbY8Sqs
buzer··on GitHub Engineering: When mTLS Is Done Wrong
Yes, though as the "time out" endpoint does not respond, both the initial connection and the connection to "time out" endpoint are kept open.
buzer··on GitHub Engineering: When mTLS Is Done Wrong
One big issue I see is that you will need to keep the connection open. Malicious client could make the Initiator endpoint to hold the connection open (or to be more exact, they could simply drop the connection after acking the HTTP request), essentially causing 2 long-lived open connections for Issuer (for whatever the timeout is on server).
buzer··on Kagi finally let me lay Google Search to rest
They at least claim that they don't save the search history. https://help.kagi.com/kagi/settings/privacy.html
buzer··on Insomnium – Local, privacy-focused fork of Insomnia API client
Replying to myself after looking at old discussion: It looks like the git mode is only available after logging in.
buzer··on Insomnium – Local, privacy-focused fork of Insomnia API client
I saw they mentioned Git Sync as alternative. Do they do something to prevent that from working locally? Git itself does not need any remotes to be configured or you could set the remote to be another local git repository.
buzer··on SpamChannel: Spoofing emails from 2M domains and virtually becoming Satan [pdf]
It's valid, but it needs to be authorized. Back when initial specs of SMTP were it didn't matter that much as users were mainly academics and it was primarily used for discussion/passing information.

These days you don't really want your finance team getting email which say it's from CEO and is asking them to make wire transfer, email from IT asking to password reset and so on. While it probably shouldn't be, the sender address is treated as very strong signal that email is legitimate so you should be taking steps to make it so that if someone tries to spoof it without authorization, it should be treated as suspicious.

buzer··on Show HN: Paisa – Open-Source Personal Finance Manager
I don't know about open source ones, but I did find Enable Banking (https://old.reddit.com/r/eupersonalfinance/comments/k4ny3j/f...) offering free access to your own accounts. I don't know if "offer" still stands, the FAQ is not very explicit on it (it only talks about testing, https://enablebanking.com/docs/faq/#can-i-test-the-api-befor... & https://enablebanking.com/docs/api/linked-accounts/).

I tried it, but I couldn't get things working sandbox environment so I ended up giving up and just do manual exports.

buzer··on 100 Parking Tickets (2004)
Highly contagious disease with symptoms mild enough for you for it to be safe to drive. Like COVID in early 2020.

Or, for example, if kid had accident at home that's fairly serious but not serious enough that you actually need ambulance. You want to get them to hospital quickly with minimal walking required but you also likely need parent to stay with them.

buzer··on I paid for Sublime Text
> Curious, why Sublime Text in this day and age of VS Code dominance?

I don't know if it's still the case as I generally don't need to do it anymore but VS Code (and other Electron-based editors) used to struggle with large files.

I know it's not very common use case but I did need to open large log files (from 100MB to even gigabytes range) and such in the past and that's where ST really shined.

buzer··on Game Development Post-Unity
> And I know some of the early concern was download-bombing, but they have addressed that, and most of the articles I read didn't cover that explicitly

They addressed that in FAQ update. They have also previously committed to not retroactively change ToS for the version you downloaded (https://old.reddit.com/r/Unity3D/comments/16hjic6/unitys_sta...) but they changed their mind.

Given that history I would not put much trust in one vague answer in FAQ without at least consulting lawyer first (including asking how much it would cost to defend if Unity lawyers disagree with your lawyer's take).

And even in the current FAQ answer it's essentially fully up to them to determine what is fraudulent installation or if the install was part of install bombing.

buzer··on What happened with HMOs?
I guess that depends on state. https://www.coveredca.com/learning-center/tax-penalty-detail...
buzer··on Important types of pizza in America
Personally I have hated it as long as I can remember (over 20 years), especially since many Finnish microwave/oven ham "pizzas" often contained pineapple that I had to pick out manually (and still had to deal with the leftover juices).
← PreviousPage 10 of 17Next →