HNHacker News
TopNewBestAskShowJobs

fer

3,381 karma · joined September 2, 2013

Beware: these are just my Internet opinions

fer at fer dot ex why zee

https://www.fer.xyz

meet.hn/city/53.3493795,-6.2605593/Dublin

Socials: - github.com/fejiso

---

submissionscomments
fer··on Nobody ever gets credit for fixing problems that never happened (2001) [pdf]
Actually any organisation worthy of the label "engineer" should do a thorough, no-blame, and collaborative post-mortem of such events so they don't happen again, and that would include warnings given.

Feature on time + risk, feature late + no risk (and anything in between), it's in the end an engineering and business decision and either choice might be the right one depending on the circumstances.

fer··on It's embarrassingly hard to get Gemini to acknowledge that white people exist
Not disregarding and condescendingly educating your interlocutor is a good hint.
fer··on Google apologizes after new Gemini AI refuses to show pictures of White people
Yeah, in hopes not to give white replacement conspiracy theorists some AI-fueled tool to feed their racism, they gave them instead actual ammo to bring in a debate.
fer··on Twitch to Cut 500 Employees, About 35% of Staff
> I think Amazon was betting that AWS efficiencies could push Twitch into profitability, guess not.

I don't think any significant chunk of the Twitch infra runs on AWS.

fer··on Python 3.13 Gets a JIT
Easy and the number-crunching libs are optimized away in (generally) C.
fer··on Python 3.13 Gets a JIT
The bit everyone wants:

> The initial benchmarks show something of a 2-9% performance improvement.

Which is underwhelming (as mentioned in the article), especially if we look at PyPy[0]. But it's a step forward nonetheless.

[0] https://speed.pypy.org/

fer··on The optimal amount of fraud is non-zero (2022)
Spanish ID card has multiple layered security in them. The obvious and difficult to commit fraud with is the chip which is just a cryptographic one, but you also have RFID in them (with I assume appropriate FNMT signatures), but also physically the patterns in the print, the different textures in different areas of it, holograms, transparencies and the like.

For most ID-requiring processes people undergo training to identify these security features, to the level of fraud that it's worth detecting for said process.

When the post office asks for your ID to retrieve a package, they won't check much, but I don't think it's unusual for banks to pass your card through the RFID reader and have a high res picture of your face on screen even if only to recognize you properly (btw you have apps to read such data).

fer··on The optimal amount of fraud is non-zero (2022)
Corollary: it's easier to fraud if you can fake high integrity.
fer··on The funny rules of SpamAssassin in 2023
Fastmail user here, so SpamAssassin I assume: virtually no false positives. My GMail spam folder is generally 50/50 false and true positives. I really can't use that email for anything as having to go to the spam folder every day defeats the purpose of an anti-spam filter.
fer··on The funny rules of SpamAssassin in 2023
Strange, while I keep my GMail address I don't use it for anything new anymore since roughly 50% of the positives are false (no false negatives, though).
fer··on CUDA vs. ROCm: A case study
I had a look 3 years ago and the compatibility matrix was an absolute shitshow: older cards not supported at all, newer cards not supported at all, and support for those in the middle was full of holes depending on extension, version, etc.

I couldn't even figure out what I needed to buy, so I didn't.

fer··on Google Groups ending support for Usenet
"You're not leaving me, I'm leaving you!"

https://jfloren.net/b/2023/10/12/0

fer··on National Crime Agency response to Meta's rollout of end-to-end-encryption
It's a hot topic and I rarely want the Internet drama associated, but the UK LE already failed numerous times at keeping children safe, and they're probably trying to pick up the slack[0]. Searching "uk grooming gang scandal" will add some context. Hell, even "Prince Andrew scandal" would add a lot of context.

[0]https://www.statista.com/statistics/303514/child-cruelty-abu... (can't find a graph like that on sexual abuse cases but there's been constant growth too)

fer··on Nanoparticle-remodeled gut microbiota slows neurodegeneration via gut–brain axis
Medicine isn't my field, but I wonder why the chirality, why gold, why microbiota as target, why those particular diseases?

As in, I might be searching wrong, but I can't find previous research that would hint in this particular direction, and I think it's reasonable to be skeptical about any "random button pushing"-looking research showing positive results.

fer··on Omegle 2009-2023
No grooming happened on Omegle, she just shared her personal info there and kept in touch off the platform.
fer··on Firefox Development Is Moving from Mercurial to Git
I haven't touched it in a while, but AFAIK multiple heads in a branch only happens when you commit twice against the same changeset in the branch. I don't see how this can happen accidentally. Either way you want to merge them back under a single head (a normal 'hg merge') or remove the spurious head ('hg strip'). Maybe it was more complicated at the beginning?
fer··on Firefox Development Is Moving from Mercurial to Git
Disclaimer: I haven't touched hg in nearly a decade.

hg has (had?) a sane CLI that blows (blew?) git out of the water.

I like the power of git, but it either needs external tooling to prevent people from shooting the team in the foot, or relatively thorough study by everyone using it.

In practice, for git, most of the time you need some software to protect people from messing up repositories and history (gitlab, github, etc, which honestly you're gonna use anyway), while hg on its own protects you out of the box from most mistakes.

All FAANGs I'm familiar with use git, but there are some serious handrails and straps on what you can do. On smaller companies I had so many arguments about rebasing public branches that it's not even funny.

For a while I had in the back of my head to create a hg clone that was a wrapper around git, in a way that it'd allow hg-style workflows and protections, while having a faster and more well-known "backend".

fer··on EU member states still cannot agree about end-to-end encryption
Spain has been traditionally and particularly idiotic about tech legislation. Some examples:

- There was (and is) a fee on every CD-R, DVD-R, BR-R, hard drive, SSD, printer... as a "just in case it happens to store/copy copyright-protected material at some point ever" fee [0].

- They forced link aggregators to pay newspapers/sites for linking to their content, even just using their <og> tags. [1].

So such insane statement comes as an absolute non-surprise to anyone who's followed Spanish tech legislation for a while.

[0] https://en.wikipedia.org/wiki/Sociedad_General_de_Autores_y_...

[1] https://pressgazette.co.uk/platforms/google-news-spain-faceb...

fer··on Severity HIGH security problem to be announced with curl 8.4.0 on Oct 11
Sure. Or you can get an RCE on a car[0] after some bitsquatting[1].

[0] https://daniel.haxx.se/blog/2018/02/16/why-is-your-email-in-...

[1] https://en.wikipedia.org/wiki/Bitsquatting

fer··on Severity HIGH security problem to be announced with curl 8.4.0 on Oct 11
I have the feeling that this is gonna be way bigger than the log4j mess.
fer··on WiFi without internet on a Southwest flight
Potentially, but altitude and speed data on ADS-B are constrained to just 11 bits (+ 1 bit dedicated to the resolution: 25 vs 100-feet increments).

So while I believe the data source is the same, one can see quantization artifacts when comparing both signals.

fer··on WiFi without internet on a Southwest flight
I belive this is OPs flight if anyone wants to compare plane data with ADS-B one.

https://www.flightaware.com/live/flight/SWA2340/history/2023...

fer··on Prophetic Perfect Tense
A tense+mood I love is in Spanish, and it's the opposite of prophetic perfect: the future perfect (of subjunctive mood).

It's meant for hypothetical situations finished at some point in the past from the time referenced (but in the future from now). It's normally relegated to legal texts nowadays, but can be seen in contemporary literature every now and then.

"that who will have committed... will be punished..." would be an equivalent-ish construction in English.

http://verbflex.com/articles/spanish/spanish-future-perfect-...

fer··on The casino in your pocket
I know for a fact that there's at least one company (that I can't name) that offers what I would call "Addiction as a Service".

Their system allows to create n-dimensional currency systems (coins, diamonds, etc), currency conversion rules, collectible management, in-game stores with their schedules, crafting/merging logic, probability distributions (including "dark distributions" like OP's link) and even prices (for profitability hints/warnings). Basically everything a fleecing game needs. They even offer templates inspired in famous games to get you started and tune as you go.

They charge quite a bit, but the "foundational app" upfront cost is much lower: it's limited to UI and a relatively thin business logic that targets their API endpoint (mostly mapping API ids to in-game assets and use or server-side logic).

fer··on Amazon PillPack – Your medication, sorted and delivered
Mind sharing the countries? Because it's only now after moving to certain 1 country that I see the "pill counting" and "translating scripts into layman terms" as parts of a pharmacist's job.

To me it was an absolutely American thing from the movies: I've always had the posology written by doctors already in layman terms, and nobody counts pills, you just get the number of boxes needed for the period of treatment (e.g. now for a treatment for which I need 38.5 pills I got exactly 38.5, in all other EU countries I've lived in I'd get 1x40/2x20/4x10 boxes).

fer··on MDMA and the Quest for Connection in a Fractured World
Having done both MDMA and 2C-E (mid 00s were pretty good in that sense), in various amounts, I'm not sure I'd agree (or disagree, really).

Threshold dosages had noticeable impacts in vision or mindset, but I didn't feel anything particularly introspective/exploratory. That wasn't until higher dosages, and only then I felt like it was a rollercoaster, in the sense of intense but very well psychologically attached to the rails. But then again, in those dosages I could hear the echo of my own voice with 15s delay, and just going to the toilet was an adventure full of unexpected events, so I'm not sure how a therapist can guide that either.

MDMA on the other hand softens everything from the smaller doses to the heavy ones, at least until the amphetamine edge starts to take hold.

fer··on OpenBSD/ARM64 on Hetzner Cloud
It was like this for me for years until a month I got double invoice and now it's seemingly paid in advance. It might depend on the pricing bracket (I jumped from a 40EUR dedicated to 180EUR with extra hardware around that time, too).
fer··on How many medical studies are faked or flawed?
You on the other hand believe that, somehow, absolutely independent (and often confronted) authorities, both governmental and private, would magically agree on something false instead of calling each other out.

That's the-moon-landing-was-fake tier denial-ism.

fer··on How many medical studies are faked or flawed?
> Whether the original study said so or not, that is absolutely how it was universally sold to the public.

Trust the politics, blame the science?

fer··on How many medical studies are faked or flawed?
Yeah, because hundreds of health authorities simultaneously collecting their own data (often with larger groups of each cohort) wouldn't be able to replicate or disprove the outcome of the original research.
← PreviousPage 9 of 17Next →