HNHacker News
TopNewBestAskShowJobs

ev1

2,564 karma · joined March 12, 2020

submissionscomments
ev1··on Tell HN: Microsoft locks migrated Minecraft accounts, requires phone to unlock
I can confirm this is a bad idea. Many many services permanently use it as some kind of fall back recovery, even after the phone number is removed and recycled and no other one is added.
ev1··on Windows Subsystem for Linux Virus Steals Browser Auth Cookies
This is a spam site.

Actual link: https://blog.lumen.com/windows-subsystem-for-linux-wsl-threa...

ev1··on Linux distro downloads MySQL database password with curl to “fix” security bug
This is one of the funniest things I've ever read.

> Linuxfx brings all the main tools of Microsoft Windows 11, this includes control panel, configuration screens, login, logout

ev1··on Ask HN: Why does Twitter need my location for me to tag a location on a post?
Twitter definitely used to allow you to enter a city, for example. I believe they pulled it after 99% of its type-in use case was for "near you" spammers.
ev1··on Bolt announces layoffs
Anecdotally, I keep a very tight list of domains that run with default third party blocked JS, and am very picky on uBlock. I have never seen a single site using Fast or Bolt.
ev1··on Ask HN: Is any company still hiring entry level engineers?
when I interview people I frequently get people with a "packed" github that's obvious they used one of those tools to make their entire GH heatmap green, dozens of forks of all the largest projects with no changes, just to "look" impressive
ev1··on Bing contract prohibits DuckDuckGo from completely blocking Microsoft tracking
Because I can no longer just right click copy or hold/tap to link it to a friend
ev1··on Bing contract prohibits DuckDuckGo from completely blocking Microsoft tracking
I think the term you want is open redirect
ev1··on Ask HN: Why does Twitter need my location for me to tag a location on a post?
Why pass up a good chance to collect data to sell?
ev1··on Ask HN: Why doesn't apple.com have a GDPR-esque “cookie banner”?
Visiting the front page I don't see any ad services being loaded. There is Omniture analytics, first party, on the apple domain, but that's it
ev1··on German beer producers running out of bottles
[22.07.2018], didn't notice that until near the end and was confused by date references.
ev1··on Tell HN: Discord Ignores Right to Erasure
This is probably not LGBTQ related. If you join virtually any game groups like Roblox or similar (less "adult" games like Elden Ring for example) you will have people trying to do this, more so if your account appears young.
ev1··on Heroku: We’ve Heard Your Feedback
re: 2

interestingly, when i log in or reauthenticate, or log in through the heroku cli, I get sent to https://verify.salesforce.com/v1/verify/

ev1··on Android 13’s new sideloading restriction of Accessibility APIs
"Coupon fraud"
ev1··on Android 13’s new sideloading restriction of Accessibility APIs
You retain whatever functionality you want when you unlock the bootloader, or relock it after flashing.

Apps can choose to not service you if they detect modifications though.

ev1··on Android 13’s new sideloading restriction of Accessibility APIs
This exists, just use Pixel?
ev1··on The strange business of hole-in-one insurance
I've been told by an agent before that a "web developer" at a contractor/wordpress body shop-type will be less likely to take risks, while a "web developer" at FB or G would be more likely to do things like rock climb, drive into the middle of nowhere, drive faster.
ev1··on Ask HN: How do I handle Unicode passwords?
DOS/resource exhaustion. It doesn't need to be something dumb like 24 characters.
ev1··on Ask HN: How do I handle Unicode passwords?
Just hash raw bytes. Treat it as data and set a maximum byte limit.
ev1··on Ask HN: Where do you store important information for your next of kin?
This is certainly an interesting one.

"Two-factor authentication" .. SMS and secret question

"End to end encryption" .. "The encryption keys that unscramble your data are generated, stored, and protected by FidSafe" "employees cannot see or access what you upload, except when legally obligated"

ev1··on RaidForums gets raided, alleged admin arrested
e: yeah, that makes sense I guess
ev1··on SMTP protocol basics from scratch in Go: receiving email from Gmail
As a note, this can also be a URL, and can also be used to verify humanness in actual spam and not actually unsubscribe, so in practice pretty much only "good known senders with partnerships" get it to appear.
ev1··on NPM package event-source-polyfill compromised by political activists
On the emoji side: JS devs are frequently fullstack/designers sometimes/on Macs, which make emoji very easy to use.

So they end up using it.

You rarely/ever see things like emoji commit messages in the other worlds (ex C#, Java, etc)

ev1··on Firefox DNS-over-HTTPS
I know that both T-Mobile and Comcast have both ignored user selected non-DoH DNS settings by force in the past, either by DPIing port 53 traffic or static routing major public DNS servers toward their own resolvers.
ev1··on Firefox DNS-over-HTTPS
You don't get this choice in most of the US.
ev1··on Firefox DNS-over-HTTPS
Sonic is a decent provider. This is rare. Most ISPs in the US will sell your queries, use it for marketing, inject fake NXDOMAIN ads, etc.
ev1··on Tell HN: My kid's school installed spyware and I can't remove it
This is similar to MDM. Sign in to a school .edu Google account that force auto provisions the device.
ev1··on The Ivermectin Guys’ Whole Thing Has Fallen Apart
The government guidelines in the US were ... severely lacking, to be overly nice.

You can take off your mask to eat, you can take off your mask to drink, cotton masks are sufficient (I will give them this one, especially during the extreme supply shortage at the start), kids don't have to wear masks because kids can't get sick (they can, and they spread it), you can wear any kind of face covering including ones completely open at the bottom like a triangular bandana or overly breathable and doesn't block much like a gaiter, you don't have to isolate and also no sick pay, thus incentivising actively sick and spreading people back to work, etc.

ev1··on The Ivermectin Guys’ Whole Thing Has Fallen Apart
I went through SARS (v1, high mortality rate) and previously lived in a country where the default is to wear a surgical mask any time you are sick, and it's been utterly strange seeing the US response and severe misunderstanding of how things change.

The vaccine prevented spread amazingly well, assuming the mRNA one and original strain. This changed several strains later. Even when the vaccine actually did an excellent job of preventing spread entirely the US still did not get anywhere near enough vaccination, or even halfway. Most vaccines need something like 90%+ uptake for actual herd immunity, including refreshing when they wear off to maintain it - across the entire population, not just 90%+ of adults. IIRC, measles starts community spreading again when it dips below the mid to high 90s - none of this is new, but the US/CDC somehow treated it like "wow we have reached almost halfway (if you ignore more than half the population that isn't eligible but can still spread it!), what a success".

Masks work excellently when worn by everyone properly (or N95-equivalent+ when worn by one side). Masks do not work when people take them off all the time and pretend to have a water bottle. Bandanas do not work well. Gaiters do not work well.

I also frequently saw some really ridiculous "outdoor dining" where it was tents or bubbles sealed on all ends, with circulated air/heating. That is not outdoor dining, and is pointless if you are trying to reduce spread.

Pretty much all my (APAC-team, most also been through SARS) coworkers were incredibly confused as to why the US/CDC thought the virus was not permitted to infect you if you were actively eating or drinking. Indoor dining and chatter permitted during peak spread while you only had to put on a mask when you got up? What is the point?

Almost every time I see someone wearing even a surgical mask in US imagery, the nosepiece was not pushed down to form a better seal, it's below their nose, or some other form of inanity while complaining how they don't work. One of the worst things is when someone is in an enclosed area and keeps their mask off while exhaling continuously, only putting it on when someone comes in. At that point you already have a full room of aerosol. When everyone does something horrifically wrong, ignoring all guidelines and instructions, then says x doesn't work and is pointless, that is not x's fault.

There is also the whole "you should stay at home and not go to large social events BUT you can go to work that usually has more people than a friend's place, also no sick pay, also no time off" that is another can of worms.

ev1··on Vanced was Malware all along
I get vanced-manager(com) and apkpure in the top 3 along with the official site.

There is no download link on the official site, and the type of end user that would usually use this does not know what a hash or signature is.

← PreviousPage 10 of 31Next →