Hacker News Reader

ev1on Ask HN: What storage protocol for Bring-Your-Own-Storage applications

Is this strictly for techies that would possess AWS keys in the first place (see Dropbox HN launch post, just set up your own FTP server, etc) or eventually intended for normal people?

If you are implementing client side encryption, something like "log in with dropbox" oauth, GDrive, etc or similar to just serialize an encrypted snapshot into a known folder would be the most usable for non techies based on previous stuff I've worked on. Asking people to set up restricted IAM roles and keys to write to a single bucket for a todo list is honestly very high up there on the ridiculous list, as much as I would totally do that.

ev1on Ask HN: How do orgs detect conflicting hashes in sub-second timing?

what parts specifically of those sites? most are not hashes.

ev1on Tell HN: Indonesian Telekomsel provider breaks HTTPS

To be entirely fair, you are in a Muslim country with heavy internet censorship. I wouldn't really call it naive as it's the nature of TLS (1.2), you can see the hostname but can't inject a page into the middle without blatant warnings. South Korea, etc all do the same thing

ev1on Tell HN: Indonesian Telekomsel provider breaks HTTPS

presumably that is the page they are trying to redirect you to.

I find it interesting they don't try to impersonate the site or anything, but very clearly say it's a telkomsel-issued certificate (tepat/baik is something like 'good' or 'appropriate internet' iirc?)

ev1on Tell HN: Indonesian Telekomsel provider breaks HTTPS

https://internettepat.telkomsel.com/asset/Banner-Internet-Po...

This site cannot be accessed because it might contain pornography, gambling, ..etc

ev1on The case of the vanishing cafeteria tray

It's not cheap, and it's usually pretty shitty food. It's just convenient when your next class is in 10 minutes.

ev1on Over 13k Vivo phones found to be using same IMEI number (2020)

IIRC Apple stores all do permanently stored facial recognition and capture.

ev1on The case of the vanishing cafeteria tray

In the US uni system usually there are prepaid mandatory meal plans. The student can not afford food outside of their prepaid meal plan at the cafeteria.

ev1on Ask HN: Cheap VPS with 1TB HDD?

I think they ran out of 1TBs, I have 40 of these and they're all 2TB now. If your drive fails it will probably be replaced with a 2...

ev1on As professors struggle to recruit postdocs, calls for change in academia

I would always dread new teammates that were 100% academia with no industry experience or real project experience. More often than not if you leave them alone for a bit you come back to functions with several dozen one character parameters or something equally odd. Really uncertain why this is, but this has consistently happened multiple times and it's always this type of situation.

ev1on Show HN: I made a site that shows jobs where you can work pseudonymously

My assumption is that traditional finance money is often a lot more refundable.

FWIW, different industry, but I did a few months as a contractor at two AAA game devs and my god the amount of shit you have to deal with, having a staff flagged forum account with 0 posts, people would go through the member list, send hundreds of DMs begging for free shit, try to find your email to harass you for free beta keys or cash shop items, friends IRL would be like "haha does that mean you can edit my character to be max level"

ev1on Price shocks in formative years scar consumption for life

Was this formerly a good site? I remember running into cracked periodically in the last few years and it always looked like the absolute worst of clickbait spam, but these articles are rather decent

ev1on Show HN: I made a site that shows jobs where you can work pseudonymously

For crypto, this is actually somewhat reasonable. I'm sure this sounds "dumb" to traditional users, but if you are a community manager of a cryptocurrency, you will probably have near continuous 7x24 attacks on you in an attempt to take over accounts or other similar BS. They frequently try exponentially harder on the non technical members because of the assumption that the people working on the tech are more likely to have 2FA etc, while "community manager" will probably have to click any link they get.

That being said, all of the entries on this site are for cryptocurrency/NFT/whatever, so that sounds about right.

ev1on Is IPv6 faster than IPv4?

Much smaller POV, but when I was dealing with ISP things in past I've found that on many networks v4 might have a nice, redundant blend while frequently v6 is some mix of HE+something or singlehomed HE, which disappoints me. But then the fact that their ports are basically unused other than for the usual G/YT/FB traffic makes the v6 pretty uncontended.

ev1on Coinbase Announces 18% Layoffs

Out of my circle, the only people I know that actually spend BTC as BTC for transactions, usually for things like personal domains, hold their own wallet and don't touch exchanges.

The people that heavily use exchanges hold it purely for speculation and/or gambling and have never once "spent" BTC.

ev1on Survey: iPhone owners spend more, have higher incomes than Android users

This might actually be part of the reason, interesting. Is this common in the states?

The Samsung line are the only carrier (full purchased, unlocked, not leased though) provided phones I've used. Pixel and iPhone bought from source directly.

ev1on Survey: iPhone owners spend more, have higher incomes than Android users

Nice to see that they are actually trying now, looks like only the last two flagship models covered (more or less? Galaxy S22, S22+, S22 Ultra, Galaxy S21, S21+, S21 Ultra, S21 FE). My unpatched experience is around the S10 line. It appears they just skipped to 20s for model #'s right after.

ev1on Survey: iPhone owners spend more, have higher incomes than Android users

This is pretty accurately my feeling. I trust Apple honestly not much, but more than Google, and I pay Apple for iCloud and know what I'm getting. Paying Google is a huge pain in the ass while Apple just collects every month off my balance - which I can also spend for physical products, which is nice.

I don't have many apps and I tend to curate those that I do have, so in general not much of a heavy user such as full screen mobile gaming.

My most recent experience trying to use Google Play for a purchase was "INSERT US SIM CARD TO CONTINUE" after applying the code. While in US, on a US cell tower (on eSIM). This is after applying the code, so it's been consumed and is now useless and can't be used to buy anything either.

Samsung is still probably my top hated OEM. Everything from a Bixby key you can't disable and marketing you can't opt out of (mandatory push notifications from an un-uninstallable system app that deliver fullscreen image push advertising their new products) to Samsung store taking over random shortcuts and containing nothing but shitware to put it nicely, inability to unlock phones, ludicrously bad security track record, all while trying to sell you a "premium" $1.5k device

ev1on Survey: iPhone owners spend more, have higher incomes than Android users

it depends heavily, I carry both on a daily basis (the iPhone is the oncall/work-pays)

If you are not on the Pixel line, you're probably barely getting support measured in months. I absolutely despise most third party Android vendors. Samsung is one of the worst offenders for obnoxious unremovable bloatware, spam, etc. Rebadged AOSP browser vulnerable to everything. I don't think I've had LG phones supported for even one month after buying them. The Chinese phones are also wildly variable, like xiaomi not allowing bootloader unlocks without you signing up for their forum and begging them in a thread for months and it's entirely subjective.

I've had iPhone SE (1st gen) used for years, still running currently latest stable iOS and supported up to now.

ev1on Ask HN: Why is it so hard for someone in India to get a $100K Dev job?

The question kind of becomes whether you're willing and able to get authorisation to move to the US, specifically to an area where $130k is below the definition of "low income" and requires five roommates even then, because employers will CoL adjust below 100k even within the US when you move cities.

edit: SFHUD's low income definition for a 4 person family is $149,100 now

ev1on Coinbase security enhancement prevents withdrawal for 48 hours

This is a feature to require that you can do instant withdrawal to specified addresses, and adding new addresses incurs a 48h lockout for those.

I don't like Coinbase, but it's good that they are disabling SMS auth for this too.

ev1on US moves closer to recalling Tesla’s self-driving software

Don't you have to waive your right to sue in the US to purchase or boot a Tesla?

ev1on Is “acceptably non-dystopian” self-sovereign identity even possible?

The way I think of it, risk of accident of the delivery truck, the risk of the farm getting their crops ruined, risk of insolvency or net x day term payments, risk of loans taken out to cover patented seeds, risk of expired food.

If nobody wanted to take the risk to plant each time given the potential ROI, you wouldn't get grocery items?

(I'd consider this a random example https://www.callifd.com/uploads/1/3/0/7/130789654/chili_pepp...)

ev1on Ask HN: Has anyone had the deck stacked against them in arbitration?

I've been through arbitration once and won. I did not need to really provide anything remotely close to legal documentation tier stuff, I had one recording of a sales rep absolutely lying their ass off to close a sale, the next month's invoice directly contradicting their repeated and explicit promises. Arb awarded me 3x the total cost of the contract (several thousand) and considered the contract terminated (instead of 24 month + ETF being to pay out the entire cost).

It honestly felt closer to "we will pay the arbitrators their $1k fee so that we don't have to pay the lawyers $50k, and whatever prize they award you is still going to be cheaper than asking our general counsel a single question".

ev1on At Target, there’s a robot that paints your nails for $10 in under 10 minutes

The worst part about this is that children aren't allowed to use it not because their fingers are too small, but because it captures high resolution imagery that might also include biometrics/fingerprints and uploads it to the vendor to keep.

ev1on MIT researchers uncover ‘unpatchable’ flaw in Apple M1 chips

This is Techcrunch first-party native. If it can't set a third party tracking and fingerprint cookie, instead it will forcefully HTTP redirect you through that to drop a "first party" cookie.

NB: techcrunch is basically advertising.com (via aol/yahoo/oath/verizon media/whatever else)

ev1on This is a valid domain name (remove www)

'ai' is a resolvable DNS name, just like you can resolve 'localhost'

The owner of 'ai' decided to add an A record on their zone.

ev1on [dead]

common seo spam

ev1on Rate limit of external API without dropping requests? Any SaaS or OSS?

I did something free and unorthodox for a small project before, where the actual application was a black box binary that was made by a vendor: run an instance of nginx, listen locally, and proxy-pass to the actual external API.

Here, you can have nginx ignore caching and revalidate headers or strip them, cache them locally onto the filesystem with determinable times or sizes based on regex or path prefixes, and set rate limit + burst limits for each path (just put them in a different location block).

ev1on [dead]

There is at least (minimum of) 1 person in the world that is into this.