HNHacker News
TopNewBestAskShowJobs

ev1

2,564 karma · joined March 12, 2020

submissionscomments
ev1··on Ask HN: PayPal dismissed my claim, saying I didn't provide evidence (yet I did)
Does the invoice say 1 month? The last time I used the public cloud GPU instance there was a very explicit setting to bill hourly or to get a discount by getting a month in advance.
ev1··on Ask HN: PayPal dismissed my claim, saying I didn't provide evidence (yet I did)
I have never once gotten a random invalid charge from OVH and it's been years. Do you actually have a 1200EUR VAT invoice with line items from them or was it just a charge out of nowhere?
ev1··on Ask HN: Remote work credit? I built an app that the company thinks my boss built
this was real weird behaviour to encounter as an IC. pre pandemic I ran into a director from another org that I knew from playing MMOs with, had a half hour chat during lunch with some picking of brains for a weird endgame raid strategy and afterward my manager pulled me aside and was like "whats happening is everything ok?? i saw you having a long meeting with a director in another org??"
ev1··on Two senators propose ban on data caps, blasting ISPs for “predatory” limits
its a typo, $10 is 50GB up to a cap of $200/m on non-FTTH, and if i recall correctly i was offered unmetered data if i purchased a full (non-basic) directv or att tv plan (which should be illegal, tbh)
ev1··on Two senators propose ban on data caps, blasting ISPs for “predatory” limits
Well from a consumer POV, Comcast forcing you to lease their hardware that phones home to the cloud at all times, remotely set wifi password and all on the xfi gateway for a discount on rent seeking behaviour is incredibly bullshit.

That being said AT&T fiber at least doesn't allow you to use your own modem. You are required to use their equipment because they intentionally force no hardware to be "compatible" with their handoff. Last time I was using them you had to do some convoluted bullshit to even try (see https://github.com/MonkWho/pfatt)

ev1··on Ask HN: Why is the support website traditionally hosted on a subdomain?
SEO doesn't matter for a ticket system.
ev1··on Ask HN: What GO web framework do you use?
engineering design, not design design
ev1··on The true costs of inflation in small-town Texas
Old coworkers used to call the growth mushroom as slang for some reason, at least that was the first thing that came to mind.

The other one is a ludicrously overpriced relatively recent beverage called mud water (caffeinated mushroom water?)

ev1··on The true costs of inflation in small-town Texas
kombucha and it is very much an acquired taste IMO
ev1··on Uber pays millions resolving DOJ lawsuit for overcharging disabled people
Sorry, I meant pizza hut there. I think dominos is still mostly inhouse (though the $5-10 delivery fee sucks and "is not a tip")
ev1··on Tell HN: You can't hire because you don't post salary ranges
Every time I have a recruiter explicitly tell me that they are "top of market value comp" and keep reiterating it, I already know there's going to be no stock or bonus and the total comp is probably 1/5 of what I get now and "can't" do a signing bonus. I have not had one that doesn't meet this benchmark yet.

The ones that actually pay top of market rate I reach out to, not the other way around.

ev1··on Hertz paid Accenture $32M for a website that never went live (2019)
Can't you use similar logic to tell your boss that nasa, energy.gov, the beatles, weather.com, tbs and all those other older-people-know-about-this sites all use drupal?

At least it's tolerable at all compared to the shitshow that is AEM.

ev1··on Analyzing iOS 16 Lockdown Mode: Browser Features and Performance
"enable it only on a per subdomain basis" works when the tracking runs off a separate subdomain. Walmart, for example, intentionally proxies the files through their primary domain, the one that you are visiting, to try and bypass this.

--

Other sites and services will also use blocking them as a fingerprinting point. For example, it loads native first-party JS to try and bootstrap the rest of it.

A really simplified example:

Stage 1: on-page script tag, not a separate file, sets up a variable - let's call it "counter"

Stage 2: Load cross-site-tracker.js from obvious-analytics.example.com.

If it fails:

Stage 3: Load QyojK8oIwLjske2JkW9mdJY0Np.js from hqMOBRLccCmEnG9.cloudfront.net; increment a "shady user is trying to hide from us" counter

If it fails:

Stage 4: Load RandomWordsRainbowButterfly.js from N4NqCUJAT9UUXFcwnn.cloudfront.net; increment a "shady user is trying to hide from us" counter

Keep trying this through 3-4 domains, use random s3 buckets, cloudfront hostnames, akamaized.net hostnames. Upload all tracking data as soon as one of them succeeds.

ev1··on Tell HN: Discord is permanently locking out users with multiple accounts
They are for one time verification for spam accounts, not legitimate or long term use.

If you are Western based I would really not send money to them at risk of your payment accounts getting hit with "sanctioned" problems.

ev1··on Tell HN: Discord is permanently locking out users with multiple accounts
All of Twilio is banned. Mint blocks some shortcode SMS.
ev1··on Tell HN: Discord is permanently locking out users with multiple accounts
There are plenty that provide non-voip numbers, but Discord will randomly challenge you later on if you do things like VPN heavily or block fingerprinting and if you can't access the number your account is toast.
ev1··on Analyzing iOS 16 Lockdown Mode: Browser Features and Performance
Can't edit anymore, but I want to point out that one particularly gross thing I've seen is code that checks how well your device characteristics line up with expectations for CPU and RAM.

The numbers are intentionally imprecise for anti-fingerprinting, but I've seen JS code that treats users as suspicious or bad when your logical core count reports 1-2 but memory is 8+, or a lot of cores and very little memory, or if your device is non-mobile but reporting less than 4 or 8 GB of memory. The assumption is that you are a virtual machine if you're a "desktop or laptop" and have a single or dual core in 2022, for example.

ev1··on Uber pays millions resolving DOJ lawsuit for overcharging disabled people
Both PJ and Dominos now outsource deliveries to whitelabel "doordash enterprise" :(

I have not gotten a direct store driver in over 2 years.

ev1··on Analyzing iOS 16 Lockdown Mode: Browser Features and Performance
Well, good thing they reverse-proxy the javascript code first party directly on the domain (www.*), and attempt to load multiple subdomains on the primary domain one after another (including randomised CDN paths)
ev1··on Analyzing iOS 16 Lockdown Mode: Browser Features and Performance
Incredibly, extremely common on tons of sites.

Normal web pages that load ads will attempt to detect "fraud" by connecting back over WebRTC, running benchmarks to see how "valuable" of a user you are (how shit or expensive your hardware is), and running benchmarks to see whether you might be a fake browser/"ad fraud" user running large amounts of sessions at the same time and therefore have slower performance. It's bullshit and should be illegal.

I already dislike webgl leaking the model of my gpu, concurrency leaking memory and cores available, and disk space.

Go visit walmart or really any major site - almost more likely than not it will do this - and watch it attempt to enumerate all of your plugins, connect over webrtc, enumerate performance.* msPerformance, mozPerformance, make a webgl video and ask for unmasked renderer, enumerate thousands of fonts, attempt and fail to spawn piles of ActiveXObject, use "window.msDoNotTrack" as a fingerprinting feature point, enumerate hundreds of browser functions and getters (maxTouchPoints, doNotTrack, hardwareConcurrency, ...) and calling toString() on dozens of specific things like window.RTCDataChannel.toString() and seeing whether it fails in a try/catch, if it returns a function, or if it returns "function RTCDataChannel() { [native code] }" as a string, etc.

ev1··on Dell’s XPS 13 Plus is the first laptop certified for Ubuntu 22.04 LTS
When your work only has a few approved vendors but doesn't care what the cost is even if a M2 would be cheaper :(
ev1··on Ask HN: Do you guys hate medium.com?
Plain? It sends analytics requests with practically every pixel scrolled. The performance is worse than rubbish and leaves a gigabyte of analytics data in your localstorage.
ev1··on The FBI Forced a Suspect to Unlock Amazon’s Encrypted App Wickr with Their Face
Wasn't this the entire point of wickr in the first place?
ev1··on Clear or mesh backpacks required for Dallas middle and high school students
from what i remember the uvalde incident wasn't even a student, wasn't hidden in a backpack, and was just openly brought in with no attempt to hide it?

wtf on earth does this even accomplish?

ev1··on Ask HN: My website just disappeared from DNS. What can I do?
have you gotten an email about icann verification at some point?
ev1··on Ask HN: How do you localize your prices?
The solution for this is to match the billing method.

For example, I don't care if they use a VPN - if they want to pay Indian rates, they have to do so from a INR-denominated account with an Indian billing address and have to do so using Razorpay/UPI/Indian Netbanking transfer/AirtelMoney/.... Everyone there has it - not having it is not an excuse, "I want to pay with a US Mastercard" is not an excuse. This solves it for the 99.99%+ use case. The "majority" here is so strong that if someone in India cannot pay with at least one of these payment methods and asks to use a US billing address credit card, it's either stolen or for all practical purposes I would be wondering how they survive day to day or buy groceries (or they are probably not old enough to enter into a contract to purchase or licence content from you). (It's probably stolen)

If you want to pay RUB rates, you have to pay via WMZ or YandexCash, Qiwi, Sberpay, Yoomoney.

THB discount? BigC, Tesco, PromptPay, etc.

BRL? Boleto. Even a 12 year old with no bank account can successfully pay with boleto.

Nearly every single country (I have not found one otherwise yet) that would be lower CoL and require a significant pricing adjustment has multiple unique payment methods that the hypermajority are signed up for (or required to use in the first place so everyone has an account) or is paid physically and accessible by anyone present to pay cash, that is inaccessible from US/EU/AU/etc.

These will even significantly lower your transaction fees due to foreign exchange, and lower your chargeback rates because many are effectively fraudproof due to requiring multiple factor mandatory confirmation, not allowing disputes, or being "pay in cash in person at a physical location within the country".

If you want to pay the standard USD or EUR rates, whatever normal card network is accepted no matter where you are from.

ev1··on Netflix Tests Another Way to Charge for Password Sharing
> Customers can manage their homes, adding or deleting them as they choose. Adding households doesn’t increase the number of people who can watch Netflix at the same time.

People will happily pay $2 to add another sub-account user but if you still can't stream at the same time they will just cancel lol.

ev1··on The speedy downfall of rapid delivery startups
Took a while to figure out, I kept getting "millenials ruined by avocado toast" articles while searching.

https://web.archive.org/web/20160814085512/http://www.goavoc...

ev1··on The speedy downfall of rapid delivery startups
You are reminding me about the startup that did on demand single avocado deliveries for 700% markup with only SF/Oakland as a delivery area.
ev1··on The speedy downfall of rapid delivery startups
No, that was what PrimeNow was. PrimeNow is discontinued last year.

Amazon Fresh is scheduled fairly large delivery windows, usually at least a day out. If you get super lucky there might be an available slot later the same day but not often if city.

← PreviousPage 5 of 31Next →