HNHacker News
TopNewBestAskShowJobs

elahd

380 karma · joined December 19, 2014

https://elahd.com

[ my public key: https://keybase.io/elahd; my proof: https://keybase.io/elahd/sigs/bl8yEk4w-1Hd05wx2ZYqt8cGRuIhTvNdGThdom8p0_4 ]

submissionscomments
elahd··on It’s time to ditch SMS-based 2 Factor Auth
Bitwarden (password manager) automatically copies the one time pin into the clipboard when you use the password autofill function. It's great for keeping context. Use autofill, then tap/click the OTP text box and paste in the code.

With that said, I'm not sure it's the best idea to store 2FA and passwords in the same system, but it is pretty convenient.

elahd··on The MacBook Air: A Decade’s Worth of Legacy
The SSDs in the Air are replaceable, but new units are insanely expensive. I've been looking to swap out my 128GB SSD with a 256GB unit (Mid-2013 MBA). An OEM 256GB SSD is around $450, the OWC Aura (seemingly the only compatible third party unit) is $250 -- better, but still hard to justify. There are used units on eBay, but I don't like using second hand hard drives.

Are there any other options out there?

elahd··on Convenient End-To-End Encryption for E-Mail
I'd say that it's only quasi centralized. At its core, keybase is a directory of signed statements posted on social media. Where space permits, these statements include the person's public key. Verifications can be checked directly on Facebook, Twitter, etc. without using keybase, somewhat decentralizing the service. As you mentioned, writing to blockchain pulls keybase further out of the equation.

They're more of a facilitator for other applications -- Signal is a packaged application itself.

elahd··on Convenient End-To-End Encryption for E-Mail
This seems like a good use case for keybase.io. They've implemented their own proof of concept messaging system, but I have yet to see any third party integrate with the service.
elahd··on Keybase launches encrypted Git
This is excellent. I've been looking for practical uses for my Keybase account -- it's been sitting around, verified but idle for years. The chat app is nice, but none of my friends or co-workers use the service (or understand crypto, for that matter).
elahd··on On Password Managers
LastPass Premium is $1/mo and your password vault is exportable. It's a pretty cheap service to be locked into.
elahd··on Why the Post Office Gives Amazon Special Delivery
I don't have a WSJ subscription, so I didn't RTFA, but IMO Amazon's biggest "special" service is Sunday delivery. This is not available to anyone else.
elahd··on Ebay will match Amazon’s, Walmart’s and others’ prices on over 50K items
Correct. By "Amazon," I meant "Shipped and Sold by Amazon." Their Marketplace ecosystem is almost as bad as eBay.
elahd··on Ebay will match Amazon’s, Walmart’s and others’ prices on over 50K items
Agreed. Prices being equal, why would I go with eBay? Their customer service and return policies are awful. It's 10x worse if you pay through PayPal. Amazon is basically no questions asked.
elahd··on iOS 11 Location Privacy: "Only While Using" is now always an option for users
iOS currently has both "Aways" and "Only While Using" options, but the developer specifies which are available to the user. iOS 11 now forces the "Only While Using" option to be available for all location using apps.
elahd··on Google Contributor: Buy an ad removal pass for the web
The advantage is that you financially support the creation of content you value enough to read.
elahd··on Show HN: Kryptonite – a new home for your SSH private key
GitHub's user agreement allows for the free use of any code posted in a public repo.
elahd··on Show HN: Kryptonite – a new home for your SSH private key
Assuming Kryptonite does back up data to iCloud, there are two things to note:

1. iCloud backups are encrypted.

2. If you're not comfortable with #1, you can manually exclude an individual app from iCloud backups through Settings > Storace & iCloud Usage > Manage Storage (in the iCloud section). Click on your device in the Backups section. Turn off Kryptonite in the "Choose Data to Back Up" section.

elahd··on Show HN: Kryptonite – a new home for your SSH private key
Sounds like you ultimately need a backup method for logging into your server -- probably a second, non-Kryptonite key (or another admin user). Is that correct?
elahd··on We Can Do Better
Yeah, it cuts off new email, but my Gmail account has over 13 years of data -- I'm sure a lot of other people have had Gmail for as long. It's the initial load of data to Unroll.me that hits hardest.
elahd··on We Can Do Better
With regards to unroll.me, does it really matter? Once you grant access to your mail, they archive your entire inbox. The damage is already done.
elahd··on We Can Do Better
I prodded unroll.me a couple of years ago about their data retention policy. Their answer was sketchy so I ended up not using the service. I'm surprised it took this long for someone with reach to look into them.

Original thread: https://twitter.com/elahd/status/575692415132135425

DMs: http://imgur.com/H0UABYa

elahd··on Unroll.me
...and they still have all of your emails! You can't take back the emails they've already archived, which (presumably) is everything that was in your inbox before you disconnected your Gmail account.
elahd··on Unroll.me
I prodded unroll.me a couple of years ago about their data retention policy. Their answer was sketchy so I ended up not using the service. I'm surprised it took this long for someone with reach to look into them.

Original thread: https://twitter.com/elahd/status/575692415132135425

DMs: http://imgur.com/H0UABYa

elahd··on Uber is charging passengers a $10 cancellation fee even when the driver cancels
It's pervasive. I can go on about fraud and sketchy drivers with all of the ride sharing services.

My fiance requested a Gett ride to JFK from midtown Manhattan for the two of us. The driver checked us into the cab while he was still en route to pick us up -- a very circuitous route -- accumulating ~$20 in travel fees. He kept calling to make excuses about why he was delayed. When the driver finally picked us up, he assured us that he'd reach out to Gett to have the additional charges removed.

Two weeks later, no update. We reported the issue to Gett. They not only refused to issue a refund, but they banned my fiance from the service!

She ended up requesting a chargeback for the full fare -- not just the additional charges -- which Visa granted. We don't want to bother with the T&LC again -- neither of us have the time.

elahd··on Uber is charging passengers a $10 cancellation fee even when the driver cancels
Their leverage is that you can't request another ride until either the rider or driver cancels the current request.

I was late to work and wanted to request another Lyft driver -- Uber was surging. After I canceled the hail, Lyft starting surging, as well. I ended up taking the subway to work.

elahd··on Uber is charging passengers a $10 cancellation fee even when the driver cancels
Yes, but... they were fined for failure to appear, not for any wrongdoing, so no precedent is set (if that's even a concept in T&LC court).
elahd··on Uber is charging passengers a $10 cancellation fee even when the driver cancels
> Any explanation for the "lack of evidence" piece?

https://www.dropbox.com/s/pasguqsrziz4uul/TLC%20Decision.pdf...

The hearing officer seemed totally unfamiliar with the mechanics of both of ride sharing and texting. He fundamentally misunderstood the nature of my complaint and the origin/context of the text message.

elahd··on Uber is charging passengers a $10 cancellation fee even when the driver cancels
To be fair the T&LC, the investigators assigned to my case were very easy to work with and eager to help. Ultimately, the decision was up to a T&LC judge.

The process was pretty opaque. From what I gathered, every complainant is assigned an internal investigator/advocate. If the department determines that the complaint has merit, the complaint goes before a regulatory judge who has limited authority to issue fines, revoke licenses, etc.

The system almost worked.

elahd··on Uber is charging passengers a $10 cancellation fee even when the driver cancels
I do, up to a point.

My experience with "sharing economy" taxi companies is that they really, truly, do not care about their drivers or their customers. It's a free for all where customers and drivers are basically left to sort things out themselves. IMO, this is where regulation comes in. In a city like New York, taxis are a part of our public infrastructure -- like buses, subways, etc. There should be baseline service guarantees set by transit regulators and adequate funding set aside for enforcement.

elahd··on Uber is charging passengers a $10 cancellation fee even when the driver cancels
I've been in standoffs with Uber/Lyft drivers where the driver calls or texts me saying they don't want to pick me up for whatever reason and demand that I cancel the hail. Drivers don't want to be the ones who cancel because canceling reduces their rating. I don't want to cancel because I both don't want the hit to my rating and I don't want to have to follow up with Uber/Lyft to request a cancellation fee refund.

Last year, I filed a complaint with the NYC Taxi & Limousine Commission against both Lyft and an individual driver after the driver refused to pick me up in the middle of Manhattan but refused to actually cancel the ride. I eventually gave in and canceled the request. Lyft refused to refund the cancellation fee. I ended up getting a chargeback from my credit card company.

I submitted the driver's text messages to the T&LC as evidence and eventually got a phone hearing -- Lyft and the driver were required to appear in person. Lyft failed to appear and got a $1,000 fine. The driver showed up but was found not responsible for lack of evidence. It was a complete waste of time.

We'll be stuck with this until regulators realize that there's a pattern of abuse and start cracking down.

elahd··on pfSense: Open source network firewall distribution
Take a look at http://www.smoothwall.org/.
elahd··on How Australia is stubbing out smoking
Honestly, you should feel guilty. Recycling is easy; so is looking for a garbage can.

Our resources are limited. No use squandering them because "yolo".

elahd··on Senior manager at Kaspersky arrested in Moscow
Windows Defender misses a lot of malware and drive by toolbar installs. I bought licenses of ESET Smart Security for everyone in my immediate family about 3 years ago. They were on Windows Defender before. The number of calls about "my internet isn't working" has dropped to 0 since I rolled out ESET.
elahd··on Rsync.net – Cloud Storage for Offsite Backups
Google Photos is great. 100GB of uncompressed data will cost you $2/mo. Supports RAW files and has some nice search features.

Killer feature: the ability to search images by face, metadata, and KEYWORDS. I can search for "dog" or "server rack" and Photos will return pictures that contain those things. It's pretty accurate.

← PreviousPage 2 of 3Next →