HNHacker News
TopNewBestAskShowJobs

gen3

1,051 karma · joined November 13, 2017

Hello
submissionscomments
gen3··on Evolve Bank and Trust confirms LockBit stole 7.6M people's data
How did you get them to confirm for you? The best I got was

“Right now, we know it is possible some of your personal information may have been breached. We do not have further details to share, but we encourage you to stay vigilant in monitoring your financial activity.

Please be advised that Wise remains secure, as is your account. This breach did not impact our systems. However, keep an eye on any suspicious activity and make sure to report it.”

gen3··on Show HN: CommitAsync – $100K+ dev jobs 100% remote only
Thats what I did. I literally tripled my salary and landed a better work environment. Time difference is great too, now half of my schedule almost always has no meetings!
gen3··on Show HN: I made a free app to calibrate your turntable by simply playing a song
Neat POC, are you doing a song fingerprint then comparing speed/stretch?
gen3··on CADmium: A local-first CAD program built for the browser
As someone who learned CAD on autodesk (inventor) ages ago, the only free modeling software I could grasp after working for a few hours was Onshape. Usability seems to be a real problem in this space, Freecad for example seemed to have a billion ways to do the same thing, but in the end only one of them was the real way, some tutorials leaving me with a model that doesn't conform.

Awesome work! It seems like a hard problem

Repo: https://github.com/MattFerraro/CADmium

gen3··on You thought OpenStreetMap uses WGS84? No it doesn't (2019)
Good post, I assume this was in response to the "Every map of China is wrong" post a few weeks ago? https://news.ycombinator.com/item?id=40220072

Its not surprising to me that there are so many competing standards, I'm curious how that ends up being rectified in the software (is it all internally translated on ingest?)

gen3··on Johnson and Johnson to pay $6.5B to resolve talc ovarian cancer lawsuits in U.S.
If it helps, talc and asbestos deposits occur naturally in close proximity. Enough so that regular testing for asbestos is required.
gen3··on White House wants Moon to have its own time zone, Coordinated Lunar Time (CLT)
Nope, just not producing on a schedule now
gen3··on NotepadNext – a cross-platform reimplementation of Notepad++
Awesome. When I moved to linux a few years ago notepad++ was one of the harder apps to find a replacement for. I ended up sticking with Kate

Edit: Kate is great, give it a shot!

gen3··on DOJ Sues Apple for iPhone Monopoly
> iMessage, Apple Watch, and cloud gaming

I think they’ll have a pretty strong case. The Apple Watch not working with android being the one that will need the most convincing. I could see it happening, like when msft needed to put IE on macOS

gen3··on Vision Pro: What we got wrong at Oculus that Apple got right
> I wonder if this is because Apple prioritizes a farther away focal point for the inserts, so you literally can't focus on anything close up

VR is interesting all because all manufactures (that I know of) have a fixed focal distance for the screens. This is why you need inserts in the first place, even though the lenses are right in front of your eyes. For example, on the valve index this is set to ~6ft, so if you can see up to 6ft perfectly, you do not need inserts.

Moving your phone around doesn't change this number, its a relationship between the lenses and the screens

gen3··on I made a bad camera lens from some old glasses [video]
Once you keep your eyes out for the look, the usage of vintage lenses in modern movies can be pretty apparent, for example a Helios 44-2 was used in "The Batman" for the car chase scene with the penguin. There must be a few floating around the Hollywood rental shops, the Helios has a pretty distinctive bokeh pattern. You'll see it shot wide open looking directly at the subject for dramatic affect

Luckily these lenses are pretty cheap (The USSR made many of them), I purchased two in late 2022 that shipped from Ukraine

A video about it: https://www.youtube.com/watch?v=lYvWpavSXeE

gen3··on System76 Thelio Major Powered by AMD Ryzen Threadripper 7000 Series Performance
I can mirror what gpm said, I’ve never had a problem with the proprietary nvidia driver. The only annoyance is the requirement to reboot after an update, but that’s pretty standard everywhere.
gen3··on John Lasseter drew the BSD daemon logo
Slightly different but OpenBSD does a good job of finding artists, for example the artwork for 6.5 and 6.6 was drawn by Natasha Allegri of Adventure Time and Bee and PuppyCat

https://www.openbsd.org/66.html

gen3··on Aldi: Culture and Operations of a Hard Discounter (2023)
It’s not bad here. Some aldi brand items aren’t as good (such as their cheez-it), but generally everything is of good quality. I think the only thing you can complain of is that the US stores are smaller and offer less (ex no in house bakery)
gen3··on Alaska 737 cockpit voice recorder data erasure renews safety debate
It doesn't need to be a cheap aliexpress recorder. Couldn't they just drop in whichever 25hr recorder is used in Europe? Already tested and probably installed in the same type of plane
gen3··on AMD proposes an FPGA subsystem user-space interface for Linux
I think this would be a really cool feature. Imagine editing video and being able to add an updated h265 encoder
gen3··on WebP is so great except it's not (2021)
I’m not sure what you mean by formats. It should support all the old raw/jpeg formats, or at minimum it has for me
gen3··on 'Weird Al' Roasts Spotify's Artist Payout System in Year-End Wrapped Video
The difference is that your streaming actually has an impact on payouts. If you listen to 10 hours of an obscure genre with small and up and coming artists, they will currently micropennies, since your streams are dwarfed by the kid that listened to 150hrs of Taylor Swift a month.

It’s stacked against indie artists, towards large artists that get the vast majority of plays (and who probably have record deals ensuring that the labels get their blood)

gen3··on Renting <I>akiya</I>: A backdoor into Japan's abandoned homes
¥30,000 a year! What an incredible deal. From what I know about foreigners renting in Japan, I doubt someone could go directly from abroad to renting one of these. I’m glad they mentioned it was found via work connections
gen3··on Sharp Color E-Paper Display EPoster 25.3in
I am not sure, at minimum it seems to be standard practice. It stands for network information center, and there is a lot of variation when it comes to information provided and tools they offer.

For that amazon link, I think the underlying website is just flakey. I was able to get the page to load once, here is an archive link of it working https://web.archive.org/web/20230616013716/https://nic.amazo...

gen3··on Sharp Color E-Paper Display EPoster 25.3in
.sharp is a brand TLD like .apple or .ford

One cool trick is to learn about a TDL is to visit nic.TLD to get info about the domain, for example https://nic.sharp/

gen3··on HMD Global Starts Manufacturing in Europe with the ‘Made in Hungary’ Nokia XR21
Purism doesn't do anything to secure the connection between their supplier and themselves, so I don't think I would consider them the best example: https://www.reddit.com/r/Purism/comments/my8u2l/psa_librem_1...
gen3··on Shrinkflation Tracker
Ancidotal, but myself and many of my friends shop this way. I've found that sometimes the larger bottle isn't cheaper per unit
gen3··on The Bear Market Has Nearly Been Erased, Fewer Than 20 Months After It Began
GP is referring to the average worker’s retirement plan buying some form of target date fund regularly on payday. This forces the market up as a whole, since the money must go somewhere.
gen3··on Why I'm done with Mouser Electronics
I also attempted to cheap out and choose the "UPS Mail Innovations" option in the past year. I'm not sure if it is still the case, but at that time you needed to open a dropdown to select the option (feels they tried to hide it). I waited the two week delivery estimate, then called support.

After a quick talk it seems that they have a problem where things shipped via "Mail Innovations" get stuck in a bin somewhere and get lost regularly. The support agent re-ordered all my stuff and shipped it overnight (all for free), and I learned not to choose the cheapest option.

Months later the first package arrived. I've haven't spent more then $200 on Mouser over the past 6 years, so it isn't a "I'm a big account" type of deal...

OP should have just called if they didn't. I don't think the call was more then 5-10 minutes and it looks like it would have saved a ton of pain

gen3··on faulTPM: Exposing AMD fTPMs' Deepest Secrets
"security properties of the TPM - like Bitlocker's TPM- only protector - can be defeated by an attacker with 2-3 hours of physical access to the target device"

So I take this is more of a data exfiltration type of attack?

Edit: here is the POC https://github.com/PSPReverse/ftpm_attack

gen3··on Z-Library Returns on the Clearnet in Full Hydra-Mode
Generally, something like a nginx reverse proxy is pretty performant. The opsec gains come by rotating the infrastructure you run on. If you had something like a ingress -> middle -> backend, and then regularly changed hosts, by the time someone is able to get a court order to seize the ingress, you've already moved on and they need to start the process over.

In terms of system hardening, since the outer machines are almost bare, they are hard to hack. Attempting to attack the backend server isn't easy either (assuming the the webadmin knows what they are doing. Things like blocking outgoing traffic and configuring the system to not leak the backend server's IP)

gen3··on Z-Library Returns on the Clearnet in Full Hydra-Mode
You have to know where something is to seize it. Operations over international lines are hard to do. They likely have a series of bouncers/reverse proxies before the "main" back infrastructure. It is also likely that they rotate their bouncers regularly, different datacenters, countries, etc
gen3··on How we learned about coffee delivery
Alternatively I found a local roastery that would deliver by mail. It appears that they primarily sell to local coffee shops. I found it the cheapest way to get specialty coffee. It gets roasted day of, and arrives in a day or two, so I just order when we have a couple days of coffee left. https://fortunacoffee.com/collections
gen3··on Eggs are 60% more expensive than last year in the US
It isn't still being taught, it changed to the MyPlate model because the food pyramid was deemed misleading: https://www.myplate.gov/
← PreviousPage 2 of 12Next →