HNHacker News
TopNewBestAskShowJobs

edent

34,429 karma · joined January 9, 2012

Blog: https://shkspr.mobi/blog/

Contact: https://edent.tel/

[ my public key: https://keybase.io/edent; my proof: https://keybase.io/edent/sigs/gWx_g-HE6u-K6A1QGY0BdJSENZCMPSoaLNyqy_W83c0 ]

meet.hn/city/51.4893335,-0.14405508452768728/London

Socials: - bsky.app/profile/edent.tel - github.com/edent - gitlab.com/edent - linkedin.com/in/TerenceEden - mastodon:Mastodon.social/@edent - t.me/edent - https://shkspr.mobi/blog - youtube.com/edent

Interests: Cybersecurity, Digital Nomad, Hacking, Mentorship, Open Source, Privacy, Social Impact, Travel

---

submissionscomments
edent··on CSS-Tricks in Limbo
No one is being "replaced" - that's just a racist talking point. You can look at the ethnicity statistics at https://www.ethnicity-facts-figures.service.gov.uk/uk-popula...

But, of course, ethnicity doesn't really matter in this context. There have been black people in the UK since at least Tudor times. Read Miranda Kaufmann's excellent book on the subject.

How long does someone have to live here to count, in your expert opinion? The UK invited thousands of people from all over the Empire to fight for us during WW2. They and their descendants are now as British as anyone else here.

What about the descendants of the Huguenots? Do they count as "replacing" or do you think it's OK because of their skin colour?

edent··on Android 17 is the first since 3.x to add new APIs without releasing to the AOSP
Symbian and LiMo were both available at the time. It is hard to say they were good alternatives though. Windows 7 - even with the weight of Microsoft behind it - wasn't able to attract enough hardware manufacturers.
edent··on Android 17 is the first since 3.x to add new APIs without releasing to the AOSP
Contactless payments do work on Graphene - but only with the Curve app. It also requires the card-holder to be from the UK or EU.
edent··on CSS-Tricks in Limbo
I'm in London right now.

May I politely invite you to fuck off with your racism.

Indigenous? What the fuck are you talking about? Seriously? Why are you so happy to be racist in public?

Stop getting your news from social media. Come over to London, have a pint in a Desi pub and try telling us that we're living in hell. See how that works out for you.

edent··on GrapheneOS' rewritten Messages app is released
I am one of the dozens of people who don't live in the USA.
edent··on Eating Fruit Skins
Here's my blog post about how I cooked them. https://shkspr.mobi/blog/2021/05/lets-eat-banana-peel/
edent··on Eating Fruit Skins
Banana peels are delicious if cooked correctly. You can make a surprisingly tasty "facon" with them.
edent··on GrapheneOS' rewritten Messages app is released
Go down to literally any 2nd hand phone store and buy a refurb. None of your money will go to Google and you'll have your phone at a fraction of the new price.
edent··on Omarchy Is a Power Grab
He's literally calling for ethnic cleansing. What word would you use to describe him?
edent··on The purpose of DNS is to spread scams
I agree in those specific cases (and I've spent a long time inside Government trying to encourage more adoption of .gov.uk and .NHS.uk).

But when you get a text with "your Amazon parcel is delayed plz visit amazaoncom.parcel-delay.info", that looks pretty official to most people.

edent··on The purpose of DNS is to spread scams
I dont see how org.ukpaynatwest-online is any easier to spot as a scam.

Take a look at many of the domains you see in phishing emails / texts. They're all pretty obvious if you spend all day looking at domains and considering their provenance. Most people don't.

I like the idea of highlighting the TLD - but I do wonder if it would just become an expensive boondoggle like EV Certificates.

edent··on The purpose of DNS is to spread scams
There are some gTLDs like .bank which require a high level of verification. The applicant has to be a financial institution etc.

The problem is twofold. I've never seen a .bank domain in the wild and users generally don't looks at the TLD.

Would people be fooled by "bank.uk-natwset.com"? Probably.

I agree with you that this is definitely in be careful what you wish for territory.

edent··on The purpose of DNS is to spread scams
The author (who is handsome and talented) is based in the UK - so tries hard not to be US centric. Hence the use of €.

As for the contradictions - yes. There's a famous aphorism "It is the mark of an educated mind to be able to entertain a thought without accepting it."

I think it is important to explore a problem and its possible solutions. It allows you to work where the issues are and prevents people saying "why didn't you consider…?".

edent··on GrapheneOS says Pixel 11 has MTE support after all
Perhaps they complain because that's literally the only way to get Google to take notice?

Let's be real, AOSP doesn't exist any more. Google have closed down nearly everything. All the development happens in private, you've stopped addressing bugs raised by the public, the source of patches are only infrequently released, device trees are gone.

Wouldn't you complain?

edent··on DNS abuse and criminal infrastructure
OK, so I have a legitimate domain. I can add any subdomain I want without recourse.

projects.example.com or new.cool.thing.example.com

So nothing stops me from registering a legitimate domain, using it for a bit, then launching the subdomain `pay-your-tax.gov.uk.official.example.com`

It must be legit - it has the .gov.uk in it!

edent··on DNS abuse and criminal infrastructure
I think the "actual objection" is the hardest part.

The UK Government might legitimately object to the registration of `dwpgov-uk-payments.pizza` but should they be allowed to object to `dwp-gov-uk-stole-my-payments.fart`?

One might be obviously dodgy, the other is someone ranting about their experience. Do you think Governments should be able to object to domains complaining about them?

edent··on DNS abuse and criminal infrastructure
England have just scored the winning goal in the world cup and I want to celebrate by launching my personal tribute on Lionesses.rock

Why shouldn't that go live instantly?

A disgraced pop star has just been found guilty. I couldn't register Bob-The-Builders-Crimes.uk before the verdict and I want to get my story out now.

I've had a brilliant idea for an eCommerce website but it is 1705 on a Friday night and, because no one works weekends, I have to wait until next week before the domain is agreed.

I agree that there's no great harm in having to wait a day, or a week, for registration to complete. But in a world of instant gratification, it feels old fashioned.

edent··on DNS abuse and criminal infrastructure
I have some experience of dealing with this when working for .gov.uk

A registrar can accept an anonymous payment for taxgovuk.gtld and have it live within seconds. The spam messages go out instantly to the victims.

By the time the certificate is seen on the transparency logs and the takedown request sent, it's too late. The criminals have taken what they need and they don't care that the domain is now blocked or on warning lists.

At the risk of sounding too libertarian - do we want domain registrations to be subject to a 24 hour mandatory wait period to see if there are legitimate objections? Should registrars do strong KYC checks on people? Should certain substrings be banned?

I struggle to think of a reasonable way to prevent this which doesn't also harm legitimate users. I don't know what the calculus is between annoying the lawful and frustrating the lawless.

edent··on Creepy Crawlies
WordPress powered a huge number of websites. Yet the crawlers all go straight for the HTML of those sites rather than the more efficient and structured JSON API which all WordPress sites have.

If these crawlers are so smart, why aren't they following the rel="alternate" which is provided explicitly for them?

edent··on “It works better in the app”
The silver bullet is caring.

There must be someone working on that app who notices those pain points.

"The turtoise lays on its back, its belly baking in the hot sun, beating its legs, trying to turn itself over but it can't, not without your help. But you're not helping."

Why is that?

Perhaps they're incentivised not to care. Perhaps the job is just a paycheque. Perhaps they mirror those around them.

Either way, the end result is the same. They don't care and their users suffer.

edent··on “It works better in the app”
Yes. It offers cryptographic proof that you physically have the passport with you. It also gets a digital copy of the photo and other biometrics held on the NFC chip. From a user point of view it reduces the number of typos entered.
edent··on “It works better in the app”
They even called it "Physical Web". It was a lovely concept - even if it did abuse Bluetooth beacons somewhat.
edent··on “It works better in the app”
NFC reading is one. That's why lots of Governments publish apps - it's a reliable way to check your passport if you need a visa etc.

It might be coming to the web - https://developer.mozilla.org/en-US/docs/Web/API/Web_NFC_API

edent··on Get your Windows license refund
It literally says:

> Want to buy a licence-free PC directly? Search for your nearest Linux-friendly shop on LinuxSi! (Italian-only).

edent··on Select * from Internet.blogposts
> This is generally understood and appreciated

I don't think that's true. For example, nowhere on the blocking interface does it tell users that their blocks are public.

https://bsky.app/profile/edent.tel/post/3l4rjxx32br2j

edent··on How credit card rewards became a $9.2B wealth transfer
Looking at my spending in the UK, about 90% goes through Amex. Even the small corner shop takes it.
edent··on How credit card rewards became a $9.2B wealth transfer
In the UK (which broadly follows the same rules), I get 0.25% with a Visa and 1.25% with Amex. Sometimes there are introductory offers for a few months.
edent··on Death to px, long live ch
> Right, but there's still an addressable set of display units that convert an RGB signal to actual glowing lights, right?

Yes. But those glowing lights aren't little squares in a neat horizontal and vertical rows.

The square pixel is useful in logical contexts - like an SVG or bitmap graphic. But when it is turned into a physical display, those pixels aren't displayed as little squares. The RGB elements are arranged in dozens of different formations depending on the display technology.

edent··on And then the men with guns tell you to do it anyway
The author (hello) doesn't really have an opinion about Egypt and the situation in 2011.

Regarding attribution. As you can see from the linked images, the messages all have the sender "Vodafone". While they may genuinely be from the armed forces, the reader has no way to verify that. If you received a message saying "The armed forces requires you to pet a cat today" would you immediately believe it was from the army?

Regarding the government's unpopularity. I think you might be inferring something I didn't imply. All I've done is link to contemporary news stories and quote from press releases. I haven't expressed any thoughts on the situation at the time, because I wasn't there and am not a scholar of modern Egypt.

The point isn't about the Arab Spring per se - it is used as an example of when a network was forced to send messages to their subscribers. Regardless of whether the Government was right to do so, I think we can both agree that compelling speech through violence is not an ideal scenario.

edent··on Count Binface receives over a quarter of votes in Clacton by-election
But that doesn't bring down the PM personally.

The last VONC to pass was in 1979, and Callaghan continued to lead Labour (albeit to defeat) in the General Election.

← PreviousPage 2 of 34Next →