HNHacker News
TopNewBestAskShowJobs

hoophoop

94 karma · joined June 21, 2017

submissionscomments
hoophoop··on Internet-monitoring – A Docker stack that monitors your home network
Don't be fooled by the rain of downvotes that some comments are getting: the HN crowd is incredibly biased towards hyped stuff and CV-driven development.

I worked in FAANGS where simplicity really mattered over hype.

hoophoop··on Brave disables Chromium FLoC features
> there is nothing wrong with advertising per se, it's a natural part of a free market economy.

There is plenty wrong. Even Adam Smith's purely theoretical concept of "free market" requires buyers and sellers to be purely rational actors and be fully and correctly informed.

Advertising has one goal: making customers less rational and more biased towards a given product.

hoophoop··on I made a mobile app for my significant other and she won't use it
> getting your app into repository isn't really easier than getting it into app store ... and good luck if you're trying to make money from the app.

Good. That's why the quality is so high.

hoophoop··on [dead]
> when does it make sense to track anything against trader bonuses

It's another a measure of the ever increasing inequality in some countries.

Such topic that certainly impacts the life of people commenting on HN.

hoophoop··on The Buddhist history of moveable type before Gutenberg (2016)
> Let's say people thought Bozo the Clown invented the printing press

People write articles to provide information. Reader read the article and learn.

hoophoop··on Amazon workers vote against unionizing in Alabama
> When did tombert assume that poor = "crazy" = criminal?

It's implied here:

"I think being really broke greatly hinders your ability to think rationally."

...by putting that sentence out alone without clarifying the context.

> psychological pathways

> unfairly reify

Are you feeling ok?

hoophoop··on The Buddhist history of moveable type before Gutenberg (2016)
> that's not why we remember him

99% of people believe that he single-handedly invented the press with movable type. Ask around.

hoophoop··on Screw it, I’ll host it myself
No, there are no backports of security fixes for the applications.
hoophoop··on Tell HN: Today I learned Epub is just HTML/CSS
Browsers don't block any homecalling either.
hoophoop··on Amazon workers vote against unionizing in Alabama
> I think being really broke greatly hinders your ability to think rationally.

No: being really broke can cause a lot of anxiety that can lead to irrational behavior.

But often a person has to choose between homelessness and crime and picks the latter as a rational choice, given the alternative.

So please don't assume poor = "crazy" = criminal, it's a bit unkind.

hoophoop··on Hacking a $200 Under Desk Exercise Bike
As a non-native speaker I might make other grammatical errors but not the ones related to phonetics.

Often I found more difficult to understand English written by native speakers than by others because of that.

hoophoop··on Why keyboard shortcuts don't work on non-US layouts and how devs could fix it
> Is it even possible to do anything else? I can’t imagine keyboards report their physical layout..

You can easily ask the OS what layout is being used or even ask the user.

hoophoop··on Docker without Docker
What do you need exactly? OS packages or tarballs are more than enough most of the time.
hoophoop··on Perfect Motherfucking Website
> #ffffff is the color of looking directly into the sun and absolutely painful bright, #000000 is the color of the deepest, starless night

No. There's no definition of what they map to.

That's why we need USERS to be able to scale the ranges of brightness and contrast.

My environment changes during the day. I want to be the one in control of my screen, not some random website.

hoophoop··on Tell HN: Today I learned Epub is just HTML/CSS
Epub can do all sort of homecalling / user tracking using HTML or CSS or javascript.

What's even worse - almost all Epub readers don't do proper sandboxing.

hoophoop··on Cryptographically verifiable code review system for cargo Rust package manager
This is what [big] Linux distributions are for: vetting packages and vetting the vetters.
hoophoop··on I refused to become an FBI informant, the government put me on the no fly list
> I understand that as a US citizen I have more freedoms than most people throughout history

Maybe on paper or as long as you are lucky.

In most EU countries such stories of police abuse are way, way less common.

Including things like unwarranted searches, seizing money with no good reason, swatting, aggressive questioning.

hoophoop··on I refused to become an FBI informant, the government put me on the no fly list
> If it's "we the people", it's totally fair and indicative of a very progressive and tolerant society. Or something.

This is a very dishonest framing.

hoophoop··on Screw it, I’ll host it myself
FreedomBox is the only one that security updates from Debian. And for more than five years. Without breaking changes.
hoophoop··on Signal Server code on GitHub is up to date again
No.

If Signal /was/ federated it would be a strong hint that the server code stays the same.

And even if it's not the same, people would be able to run their own trusted servers.

hoophoop··on Streaming subtitled box sets is the new Eurovision
There's nothing morally neutral in exploitation.
hoophoop··on It looks like Signal isn't as open source as you thought it was anymore
...the simple fact that there's no guarantee that either the server or the client would receive updates.

That means hard-forking the old server and client and maintain them as an independent project forever.

That's what's stopping me and many other people from creating a community and federated version.

hoophoop··on It looks like Signal isn't as open source as you thought it was anymore
> It's a purity test and nothing more.

Wrong. Publishing the server sources allow people to create a parallel and independent service.

hoophoop··on It looks like Signal isn't as open source as you thought it was anymore
> So the client is open source and guarantees end-to-end encryption regardless of what the server does. Ok, then I honestly don't care. Why should I?

You should because any successful centralized messenger is one update away from becoming entirely closed source.

If Signal will reach say a billion users it will be able to do that without significant userbase loss, due to network effect.

> safety characteristics, which as stated are apparently ensured by the client regardless of what the server does

In reality, the contact social graph and the frequency and pattern of messages between users is leaked.

Any global observer can do a correlation attack thanks to the centralized servers (and absence of onion routing).

hoophoop··on Streaming subtitled box sets is the new Eurovision
> Hollywood is based on their ability to create films that cut across all the cultures

Hollywood is widely caricatured outside of the US for its disconnect from reality. Flat characters, childish good VS baddies dichotomies, bombastic action movies...

hoophoop··on Hong Kong: books by pro-democracy activists disappear from library shelves
Let's stop with the performative cynicism on HN.

There is overwhelming scientific evidence that (mentally healthy) humans are pretty capable of empathy https://en.wikipedia.org/wiki/Empathy

> They motivate their selfish actions, to others but also to themselves (Motivated Reasoning) with noble sounding arguments

You are claiming that selfishness is the only driver but https://en.wikipedia.org/wiki/Motivated_reasoning goes both ways.

Besides, why do you refer to people as "they"? Are you a bot?

hoophoop··on Ask HN: Why did you leave the tech industry?
I fully agree - but the problem is not just in the tech industry.

Everything you describe is about capitalism: putting profit before any other priority.

hoophoop··on Curl to shell isn’t so bad (2019)
But you can trust the large userbase of a popular Linux distribuiton, especially when big companies use it.
hoophoop··on Curl to shell isn’t so bad (2019)
That major point is plain wrong.

https://sysdig.com/blog/friends-dont-let-friends-curl-bash/

https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-b...

These attacks can be mounted on the network side.

Also you can inadvertently execute data from a benign captive portal or a server error page and so on.

hoophoop··on Ask HN: What Have You Learned at Google as a Software Engineer?
Not at all. Monorepo is merely a detail around VCS and it does not remove complexity and the need for versioning.
Page 1 of 2Next →