HNHacker News
TopNewBestAskShowJobs

ev1

2,564 karma · joined March 12, 2020

submissionscomments
ev1··on The speedy downfall of rapid delivery startups
While the same startup refers to their employees as "headcount" and "resources"...
ev1··on 'I want your Instagram account': a deadly campaign over coveted handles
I had discriminator #9999 of a common last name and received death threats (for over a year) and support ticket impersonation "hey I lost access to my account", random friend adds and DMs trying to phish, constantly being sent tokenstealer malware.

This ended in the funniest way possible: being banned for using third party client Ripcord (presumably, no other offenses, happened shortly after trying it out).

My prediction for a system similar to the one parent suggests is that people will continually keep creating accounts until they get something like "Max a0a0a0a" or "Max 000000e" or something by chance, and then that becomes """valuable""" and the same thing happens.

ev1··on FreyaTreasures Are Scammers
Why would you buy something from DM spammers? If they contact you you probably don't want them.
ev1··on Facebook has started to encrypt links to counter privacy-improving URL Stripping
This is opt in, not enabled by default, and requires you to intentionally pick 'Strict' which has a warning as its first line of text that says some sites may break.
ev1··on GrapheneOS: The private and secure mobile OS
I picked it as a random example but yes, it does do safetynet/aggressive device fingerprinting/bans root (magiskhide used to work for a bit afaik)/collecting as many identifiers as possible based on version of android.
ev1··on Ask HN: What is with the new URLs on facebook.com?
You have to visit it yourself to resolve it to a long link, then you'll get a long URL that has /@username-of-uploader/videos/[video id]?[huge amount of tracking variables]. For now, you're ok with dropping everything after the ? after you resolve out the vm.tiktok.com link shortener.
ev1··on GrapheneOS: The private and secure mobile OS
If you have to compromise your values to allow such things, an example might be TikTok with Play Services on Graphene is possible, but you will be permanently banned shortly for not being spyable enough and failing modified ROM detection, would you want to compromise by re-adding what's basically a vulnerability if it increases userbase?
ev1··on GrapheneOS: The private and secure mobile OS
At the same time, doesn't a "typical person" wanting Facebook, Uber, etc apps running kind of counter to the type of people that would want or need something like Graphene?
ev1··on Ask HN: Anyone run their family like an Agile team?
One of my past PMs has two primary school kids that they do an extremely less structured version of this for, including some equivalent of story points and a kanban board that they keep up to date with larger tasks (so "eat lunch" is not a WIP ticket).

She says it's been helpful with teaching them how to get better at correctly estimating progress on stuff like summer break homework, studying for upcoming exams and also remembering what day the exam is on, reducing procrastination - at first the "story points" equivalent was wildly variable ranges, but started to get more accurate over time, being able to gauge what was a harder task than an easier task, for example if weaker on maths they aren't embarassed to outright say that and allocate more points/time toward their maths exam revision and dedicate less time to an essay due on the same week.

When writing an essay or studying for a concept they use the ticket/issue comment section to toss in their drafts, links to stuff they find that might be useful later, links to helpful YT/khanacademy videos, and it seems like an organiser of sorts, and the next day can just pick it up from there.

I was really weirded out at first but it didn't seem too absurd after knowing more about it and that it isn't just dinner standup - this is really clearly not making your kids send you an Outlook meeting request to speak to you, but more akin to keeping a journal or todo list, though I think it's going to be moved off Jira soon given the "everything cloud" push and that the $10 10-user licences no longer exist.

ev1··on USB-C Port on iPhone
When I'm really mobile on some days I'm genuinely terrified of breaking off the USB-C tab inside the port at times. It feels a lot.. safer? to be inserting the middle portion like lightning, I am rather unsure how to describe it.
ev1··on Tell HN: Dis the Sopranos? Machine Learning Put Me on Facebook Suicide Watch
A real death notice removed as targeted harassment would also probably result in some form of public relations nightmare. It's not like the ML model will know about the severe and difficult to reverse reputational damage of a fake harassment death notice.
ev1··on Tell HN: Dis the Sopranos? Machine Learning Put Me on Facebook Suicide Watch
Does Facebook really consider this a failure if it increased clicks and engagement? Something to think about.
ev1··on Tell HN: Brave Browser is still messing with affiliate links
Tinyurl and several others do this
ev1··on Comcast: Simulating shitty network connections so you can build better systems
one could argue that users of google maps don't have to send 'write' operations at all to save favourites locally, but if you don't allow location history and GPS you barely get autocomplete and can't even keep a local list :)
ev1··on Anonymous Sign-In
1) What happens when you get breached? Is there some kind of e2ee-guarantee where the user holds a specific encryption key that they can reveal once, so that you can never reveal any data to any site or person without the user consenting at that exact moment in time once?

2) This means that the underlying app can pressure you to reveal the person, removing "guaranteed anonymity" (ex: crime tip, revealing equals death)

3) How absurdly does this affect any kind of conversion rate?

ev1··on Ask HN: Why doesn't Android have standard apps? USB Webcam? Settings? Calc?
Samsung and Xiaomi and whatever else that invents their own UI bullshit really really like to NIH syndrome the crap out of everything, and half of it is just AOSP with ads and telemetry added to it.

There are official stock apps, like Google Calculator, Gboard, Tasks, Gallery, Photos, if you actually want them. There are also the AOSP versions.

They frequently come on phones that aren't as full of bloatware.

ev1··on Ask HN: What do your non-tech friends don‘t understand about technology?
I'm at the older point of gen z and I can explain a few of the things:

- Your first computer given to you was probably a Chromebook at school. It is your browser. Every app is a web page. Docs, Sheets are all web pages. If you were rich or privileged you might have gotten a Macbook at school instead. But nearly everything is a web page. You use Google Docs with your friends and for group projects. I can count the people that had desktop versions of Word or Excel on one hand. You upload your videos to YouTube, presentations to Canvas or Google Drive, you don't bring in a flash drive. If you plug in a flash drive it might just show up as "External Storage (128 GB)" and not /sdcard or /media/USB0 or whatever. Even then, you don't really folder it up. You might use it to copy one file or a ton of images from one thing to another, then you format it when you're done. You don't just keep one around to build stuff up on, why bother, it's on The Cloud.

- You grow up with no hierarchical file organization. Imagine mobile. You have a "Pictures" tab I guess, and a "Downloads" tab? What else is there? You don't have album folders with FLAC files or anything; all your music streams, all your content streams, none of the apps that serve that content allow you to download them into the filesystem, if anything they do their best to prevent that. You don't have a filesystem path on iPhone. You have maybe tags and categories on Google Drive and you don't keep anything on it other than Sheets and Docs stuff that is listed by name, sorted by recent usage, and do not physically exist as files on the filesystem. Tap to select by thumbnail and Most Recent do an insane amount of work to hide what a folder is, nearly nothing but F/OSS f-droid apps on Android will expose things like /sdcard/Something or /sdcard0/emulated/Downloads. You get a selector of thumbnails.

- Cheap tablets and phones try exceedingly fucking hard to confuse you intentionally for this bullshit to sell you "32GB MEMORY" (shit storage, 1GB ram), etc. Every non-flagship will lie to your face about this in all advertising you ever see, at least in the US.

- Cloud storage is the same. See first point about Chromebooks, for all practical purposes you save nothing locally. iPhones save your local storage by auto-migrating items to iCloud if not used.

ev1··on Being declared dead is automated, so why is resurrection such a nightmare?
> > his uncle had bribed a government official with ₹300 to have his nephew declared deceased, in order to inherit Lal Bihari's ancestral land holdings of about 1 acre (0.4 ha). Subsequently, Lal Bihari lost his home. ..... In 1994, the Azamargh district magistrate, Hausla Prasad Verma, declared him to be once again alive. Bihari did, however, allow his uncle to continue farming the land he had stolen

Wow, I would not have been nearly as kind there at the end.

ev1··on FCC proposes to increase minimum broadband speeds to 100 Mbps
lmao one of my mates has a starlink terminal in the outskirts of los angeles just to get work done because spectrum's gigabit plan is like 1.2MB/s upstream most of the time and in the subkilobytes during peak times

it's comical how bad this is

edit: how we found out about this was also amusing: he sent a group snapchat of the arrival and setup in backyard and we were all "did you move or go traveling?" "no, spectrum is godawful"

ev1··on Ask HN: How to make money as a CS student?
Interesting. I almost never find any (for actual software roles), just checked Indeed again and still don't see any for here (SF). If I remove the word software they start appearing and are typically for nonprofits, arts, advocacy groups, etc and the maximum extent of tech is writing a blog article or sending emails.
ev1··on Ask HN: How to make money as a CS student?
How did you end up in an unpaid internship? I don't know a single person that didn't have a near 15k-20k/m-equivalent stipend tier internship for SWE/SDE. I'm genuinely concerned because I don't think I have ever heard of unpaid software internships outside of f.e., office wordpress-type labour scams or similar.
ev1··on In esports media, layoff season is in full swing
It really isn't that expensive.

Gaming chairs are usually cheap chinese vinyl, <$90 even if they look fancy. It's not remotely close to a typical mesh aeron, for example. A TKL mech kb is $20-30 on amazon.

A 3060 is $400, a 1TB SSD is $50-80.

ev1··on Ask HN: Recommend a tokenization solution for AWS RDS to protect sensitive data?
replace DB values with opaque, random string that can be exchanged as a token for the underlying sensitive PII value, such as name

often you would restrict and rate limit the tokenization service, so if your daily traffic was x token exchange requests and someone sql-injects your db and tries to exchange every token, it would get rate limited immediately (because you still have normal traffic volume consuming that quota) and they might get a few rows before alerts go off.

when i did a short stint in finance, we would kind of "add quota" to the rate limit bucket when a user performed an action that required it - if you had direct SQL access and access to the tokenization service, you wouldn't have enough quota to exchange a token unless you also had access to separate application code that would add quota as needed (user logs in, need to retrieve name and phone number and city to show on web page, application requests to add exactly 3x "allow an exchange" to the quota, then consumes that quota)

ev1··on Tell HN: Brave Browser is still messing with affiliate links
Do you have any adblocking? /aff_c are almost universally blocked because they're 99% spam, on any domain
ev1··on FCC chair proposes new US broadband standard of 100Mbps down, 20Mbps up
"discourage" more like "termination for ToS violation or forced upgrade to a $400/m plan", it's straight forbidding, not discouraging in every major ISP I've seen.

when I was in europe I had ISP give static IP even on home ADSL, encourage running home servers, reverse DNS, IPv6 allocated subnets larger than /64..

ev1··on FCC chair proposes new US broadband standard of 100Mbps down, 20Mbps up
Up really needs to be the same as down, otherwise you're relegating everyone to being content consumers, especially disadvantaged people that might not be in a FTTH area. It's 2022, why is 2MB/s acceptable?
ev1··on AWS Customers Can Now Order a Free MFA Security Key
AWS Multi-factor Authentication available at no cost | on 25 AUG 2021
ev1··on A truly massive interest rate hike is now on the table
The word 'massive' was removed (automatically?) from the title on HN
ev1··on We must protect our ability to transact privately online (2019)
> Paying in cash, in addition to being a minor inconvenience that non-the-less outweighs most people's desire for privacy, does not work in online payments

In some countries it's fairly popular and super common with kids to check out, get a barcode/receipt and pay at, for example, a 7-11 with cash for in game purchase top ups.

ev1··on Supply chain issues are killing synth companies
SF. It depends on the item, some things still arrive within 2, but a lot more are wildly variable now.

- I have a Baseus USB power bank that was ordered yesterday, arriving next Friday.

- I have some ESP32 kits that has gotten this multiple days in a row: Your package is on the way but running late. We’re sorry for the delay. Now arriving tomorrow by 10 PM.

- USB cable from prime day, amazon basics brand, no shipping ETA, no prediction, and "not yet shipped"

- Random assortments of things like a gigabit switch, common equipment, cat6 cables, screwdriver: https://i.ibb.co/dtMRDVy/image.png

I don't envy the Amazon people though. Already seeing pileups in the mailroom, floor to ceiling boxes dumped on the floor, every delivery locker filled.

← PreviousPage 6 of 31Next →