HNHacker News
TopNewBestAskShowJobs

havnagiggle

328 karma · joined January 15, 2019

submissionscomments
havnagiggle··on Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
Literally "Made by <verified domain name>" would go a long way. Cursor is just making poor technical decisions. But then I'm sure we'd have a news story about homoglyph attacks on Cursor.
havnagiggle··on Understanding Email Encryption
I just had my first foray into S/MIME. Tons of mail providers and software hide it behind enterprise licensing and I didn't want to do that for ~2 emails a year. I'm extremely thankful to the Thunderbird team and the OpenSC projects.
havnagiggle··on Leak Exposes 41,000 Homeland Security Workers–Including Undercover ICE Agents
The Senate can hold people in contempt with a 50% vote. So they could do something to reign in the fascists starting January, but I'm not holding my breath. And that's still a long road.
havnagiggle··on The engineering that allows articulated buses to bend
Ah you're right. I was taking it very late from Munich to Garhing and it felt that long!
havnagiggle··on The engineering that allows articulated buses to bend
The trains around Munich, Germany were fantastic for that effect. 15+ cars long with wide, open pivots.
havnagiggle··on Two Git ignore files nobody told me about
Mostly the spooky action at a distance. Gitignore expressions and inheritance of the ignore expressions can exclude files you actually need to include, and you basically lose sight of those -- admittedly those are probably safer bugs than including things that shouldn't be included. But if a file (or even specific lines) shouldn't be included, I would prefer the file/lines have a marker that says it shouldn't be included.

I run the same presubmits on pre-receive and merge requests, so you wouldn't get too far shooting your own foot. But yeah, if you're not using the feature then it wouldn't save you so it's not foolproof. I also run tools for scanning for credentials, etc.

havnagiggle··on Two Git ignore files nobody told me about
I prefer a presubmit check for DO NOT SUBMIT and also disable Git smart commits. And then I have those floating around as needed. Seems to avoid all the foot guns I'm reading about, and makes it obvious and easy for other people to use as well. I guess it still shows in my diff tree, but /shrug I still prefer seeing them.
havnagiggle··on AI Has No Wisdom and Neither Will You
That's like asking why senior/staff engineers tend to review more code than write themselves. In certain environments there's a scaling constraint, and you can generally have wider impact through oversite than typing at a keyboard yourself. That's not to say one is more worthy of your time or not, just that it's not unique to AI.

Generally though, you are also investing your time into leveling up junior engineers to take over responsibilities from you. I just never really see that happening with AI. Even as it gets "better" technically, there's no real growth pattern to its work and it doesn't understand ownership or responsibility.

But if scaling isn't a problem, then sure just write it yourself.

havnagiggle··on Cloudflare Quick Tunnels
Reverse proxy to additional endpoints.
havnagiggle··on The worst job interview I ever had
I was being interviewed by two owners of a small engineer firm. They asked, "tell us where you see yourself in 5 years". I rambled for ~30 seconds about marrying my girlfriend and other personal details. I still remember their faces; super awkward, and then they slowly clarified: "we meant professionally" hahaha. It ended up fine in the end, but I feel like there's probably some missing education on social culture of interviewing somewhere and you just have to have those experiences at some point to understand.
havnagiggle··on Nobody Got Fired for Uber's $8M Ledger Mistake?
I went to school with a guy that dropped a $100k-200k VNA at Apple during an internship. He didn't get a full-time offer despite their investment :P
havnagiggle··on MinIO repository is no longer maintained
I was looking at running [versitygw](https://github.com/versity/versitygw) but filestash looks pretty sweet! Any chance you're familiar with Versity and how the S3 proxy may differ?
havnagiggle··on Ask HN: What are the best programmable holiday lights?
Is Govee the down-cone style? Or are there also others doing that? There's been a couple of houses that have this and I wasn't sure what they are using, but it's the only one that I would consider doing whole house exterior. Many others look too sharp.
havnagiggle··on How do I pay the publisher of a web page?
Seems fairly simple to have a smart contract do a DNS validation to unlock funds. For example, someone sends to a contract "$1 to example.com". Then the URL owner publishes either a TXT file or DNS record that has a list of crypto wallet addresses. Contract then forwards the payments. You could even make the keys just the ISO codes for each currency.

It's as good of a proof for TLS certs, but it's susceptible to DNS hijacking, etc. Make the contract immutable to meet tornado.cash standard. There are already oracles for DNS lookups so this contract might already exist somewhere.

Add in a couple of features:

1. Allow tracking per domain so publishers can know that there is a demand to set it up on their end.

2. Allow refunds in case the publisher never opens it up.

havnagiggle··on How do I pay the publisher of a web page?
There are options, however just saying anything is going to get you labeled as a shill heh. You're right that any new crypto is indistinguishable, but that is part of the risk in trying to outlast the rest. Some crypto that have survived should be worth more for hitting some of these milestones, but unfortunately that still isn't reflected in the top 10/20/100 because people are so desperate they throw cash at anything that moves.

The convenience of the scamming is partly why it _is_ a solution to this problem: people can transfer value as fast as they desire, and it works. There is also just a problem off on and off-boarding where you get hit by Visa/Mastercard level of fees. So is it really solving the problem at that point?

One area I would like to see is some kind of governed/regulated profit sharing. Basically giving your votes to content/production and this puts it on the books for some fraction of payment. You get X shares to distribute to content regularly. It would also be helpful if our government would provide support for independent producers where there's a clear trackable benefit (e.g. open source libraries that a ton of people rely on and a business can say "yes I need this, help them keep doing it").

havnagiggle··on Cosmopolitan Third Edition
Would you consider this a competitive replacement of Busybox? Curious if you've compared, since they also take liberty in cutting out uncommon functionality.
havnagiggle··on Real-Estate Commissions Could Be the Next Fee on the Chopping Block
I've never paid a real estate lawyer anywhere near what an agent demands for a fee.
havnagiggle··on Google blocked Pixel 8 reviewers and owners from benchmarking the Tensor G3 chip
IMO that's not evidence of anything other than a bug with package manifests and the current Playstore version. I have to side load apps all the time on my kids tablets because of API incompatibilities that don't ultimately matter, and it isn't Google out to get my kids.

According to the 3DMark playstore page, the last update was Sept 21, 2023. Version 2.3.4869. Android 14 came out October 4th, making any incompatibility likely a temporary problem.

Unless there's a quote from 3DMark explaining how everything is dandy in their end, I'm not buying what you are selling.

havnagiggle··on Google blocked Pixel 8 reviewers and owners from benchmarking the Tensor G3 chip
What exactly did they do here? X linked video is broken for me, and the article just says the performance is bad. My pixel 6 just got Android 14. Possibly just OS/new hardware related?
havnagiggle··on Ask HN: Conflicted about my FAANG work place
A lot of my team switched product areas when they needed to spice things up. They had a wide range of years on my team, from 2 to 10 years, and AFAIK there was no stigma attached to it. Have you considered that? If you are an IC, they might have some small project in mind for you to test the waters that it's a good fit. Maybe your manager is giving you the run around because there is just not much growth available in your area. Generally managers _want_ to promote because it makes them more important.

Do you have meetings with your skip manager? It sounds like your manager is not going to bat for you. I have had to drive my own promotions at various times in my career. I am not interested in leadership though, and that's a pretty different skill set. If that's of interest, you may need to actually cut things that don't better demonstrate that skill as best you can.

Do you have a FIRE number? I won't be leaving this cushy gig until I hit my number, but I do have a number. It has helped me time box my working career. I don't really need to be above-and-beyond satisfied with my job because that's not why I am working. I do get that being interested in the work helps the time pass, but IMO that's a double edged sword. People that care too much tend to get sucked into more responsibilities, which in turn can cause a brittle team dynamic with too much landing on one person. Of course experience and personalities vary.

For me, I would easily get obsessive if I were to start my own company and it would not be in a healthy way. I have also had too many friends try the startup route and really paid the price in a stagnated career. With a clear path to FIRE it's just not worth the risk IMO. I have family and plenty of hobbies to enjoy my time until then.

Good luck!

havnagiggle··on Ask HN: Is it a bad time to take a sabbatical?
A resume is for kicking off talking points with the potential employer. Employment gaps can be misconstrued and not easily explainable on a resume. LLC adds some plausible deniability in any way you want it to, protecting your work history, similar to it protecting your liability.

Maybe you just did self study, but you did it as RealWork™ that your future employer will understand because they want SeriousPeople. It just allows you to drive the conversation the way you want to in a more controlled way. You could say Sole Proprietorship or Self Study, but I've found having an LLC is more receptive.

havnagiggle··on Passkeys are now enabled by default for Google users
Just happened to my in-law. She dropped her phone on the stairs, screen cracked, and became unresponsive. I gave her an older phone I had and swapped the sim fine. But she couldn't figure out how to log in to Google account because it was so adamant telling her to use her phone. Her laptop was logged out of her email, etc. Fortunately I have backup tokens for her from a previous incident heh. I have no idea what other folks will do.
havnagiggle··on Engineered material can reconnect severed nerves
Some things turn out to be hard to do.
havnagiggle··on Google wins reprieve from $32M verdict in Sonos patent fight
It also materially changed the experience of Google's products for the worse. I am curious how that might have impacted their bottom line (as small as home devices are to their business).
havnagiggle··on Fair coins tend to land on the same side they started
There is skill to coin flipping. You'd need to blind the flipper, either physically blindfold or make it so they don't know which result is the positive outcome ahead of time.
havnagiggle··on Fair coins tend to land on the same side they started
I've always caught the coin and flipped it onto the back of my hand to display the result. So I guess I have an opposite-side bias.
havnagiggle··on Ask HN: Is it a bad time to take a sabbatical?
File for an LLC (or whatever legal entity is available to you locally), take your break, and when you're ready to come back put whatever you want under it for what you are interested in doing after the sabbatical.
havnagiggle··on Google agrees to reform its data terms after German antitrust intervention
Seems like DMA is going to be doing good things for persons in the EU Maybe others that are better informed are more pessimistic? What are the penalties for non-compliance?
havnagiggle··on How police use location/search data to find suspects - not always the right ones
I believe there were 2 settled lawsuits with Google that they have multiple locations tracking settings for different products, and turning one off did not turn the others off. So I think you can turn all tracking off, but it was not clear to consumers that you've actually done the thing you wanted. There was a CA lawsuit and an everyone-else lawsuit [2]. I don't know if Google's settings have changed since these lawsuits, but I think as part of the settlement they would have to do something about it.

[1] https://oag.ca.gov/news/press-releases/attorney-general-bont.... [2] https://www.usnews.com/news/business/articles/2022-11-14/40-...

havnagiggle··on Lumber prices down 11% YoY
I'm sure home insurance prices are going to follow shortly after. You know, because that's why they needed to raise prices. Yep, any day now.
Page 1 of 5Next →