HNHacker News
TopNewBestAskShowJobs

jb0x168

1 karma · joined April 21, 2018

submissionscomments
jb0x168··on Ask HN: Is anyone monitoring popular apps to check if they're listening?
Or, y'know, the NSO group exploit.

I think the difference here is that apps getting uploaded to the app store have static analysis run on them looking for unauthorized calls. Still doesn't rule it out, but adds an extra check to the process.

jb0x168··on “Worst cloud vulnerability you can imagine” discovered in Microsoft Azure
Further amended: nothing connected to the internet can reasonably be expected to remain private.

Unless you have some secret kung-fu that makes your on-prem infrastructure hack-proof.

The issue with the cloud is scale.

jb0x168··on Microsoft pauses free Windows 365 cloud PC trials after ‘significant demand’
Is there an extension needed or is this a recent addition?

I've spent way too long reconfiguring yubikeys to act as an OTP device so that they work over RDP.

(edit: reconfiguration is needed to capture the device ID/secret and get them registered to our MFA provider as an OTP token, I realize they do OTP OOB :) )

jb0x168··on Florida state of emergency with millions of gallons of “radioactive wastewater”
Probably not what they were referencing, but it made me think of "The Expert" - https://www.youtube.com/watch?v=BKorP55Aqvg
jb0x168··on HomePod has been jailbroken with checkra1n
Yes. If you use an app like AirParrot, you can do it from windows as well. Can't speak to android specifically but I believe there's an App For That as well.
jb0x168··on Koyeb Serverless Engine: Docker Containers, Continuous Deployment of Functions
Cache your images longer at cloudflare's edge:

  New Page Rule -> your.site/*.png (or jpg, gif, etc)
  Cache Level: Everything
  Edge Cache TTL: (some large value, an hour maybe)
This will make sure you don't serve any given image more than once per hour, and the rest of the requests will get served CF's edge cache.
jb0x168··on FreeBSD Renames “Master Boot Record” to “Main Boot Record”
I don't think it's exactly racism in many of these cases, so much as a lack of empathy. If you're not personally affected by these terms, and you're not able to empathize with those that are, I can see why, without being overtly racist against any particular group of people, you could be against these changes.

Our inability to empathize, or "put ourselves in someone else's shoes" is at the root of so many of our problems...

jb0x168··on FreeBSD Renames “Master Boot Record” to “Main Boot Record”
Ask that same question again after we have self-aware machines/software.

Inherent in the negative concept of slavery is the removal or limitation of self-determination. If the components don't have free will, this isn't an imposition.

However, in the larger context, there are very much thinking, feeling entities that are negatively impacted by the use of this terminology.

In contrast, it costs next to nothing to update the terminology to use similar terms that don't cause psychological harm to a significant portion of the populace.

jb0x168··on GitHub to replace “master” with alternative term to avoid slavery references
Primary? Initial? Root? (ok maybe not the last one, though the internal rhyme is nice).
jb0x168··on GitHub to replace “master” with alternative term to avoid slavery references
Maybe direct that question to someone who's dealt with the effects of systemic racism their whole life, you might find the answer enlightening.
jb0x168··on GitHub to replace “master” with alternative term to avoid slavery references
"Trunk" fits the branching metaphor better, but I think "main" will be easier to uptake (autocomplete, muscle memory, etc).

I feel the same way about "denylist" versus "blocklist". "Denylist" is more precise, but I think "blocklist" would make for an easier transition.

jb0x168··on I’m a Developer. I Won’t Teach My Kids to Code, and Neither Should You (2018)
You can bridge scripting from any programming language into minecraft through the use of plugins.

The educational versions of minecraft (e.g. the raspi version) integrate python scripting directly.

Microsoft forked a "bedrock" version of minecraft that I'm not as familiar with and that has a different plugin ecosystem. The Java-based version still has all the same plugin capabilities it always has.

jb0x168··on Show HN: TheKnob – sound volume control knob made of concrete and RGB lights
I've been using an ElGato StreamDeck repurposed as a global mute button (among other things) for Zoom, Webex, etc. The Powermate could be pretty nifty for this as well, using the radial menus to quickly get at globals like mute/unmute, start/stop video, etc
jb0x168··on Ask HN: Should I fight back management enforcing Jira?
My advice after working with Jira for the last several years: keep it light. Process heavy Jira is/can be a nightmare. Jira as "digital stickies" works well, and still provides plenty of metrics for outside stakeholders.

Based on my experience:

- Use the "Jira Agile" (formerly greenhopper) add-on so that you have sprint/kanban boards and reports to visualize planned and in-flight work. Enable the "Backlog View" for your boards to separate planned from in-progress work.

- Keep required fields to an absolute minimum (we only require Summary) so that you can quickly capture cards and flesh them out later.

- Avoid complex workflows - use the Software Simplified workflow if possible. Don't complicate it further without a really strong business case.

- Learn the keyboard shortcuts. C (create), E (edit), I (assign to self) "[" (hide sidebar) and "." (command palette) are your friends

- Confluence and Slack both have great integrations to let you publish and interact with your Jira issues

Those are just a few random thoughts on how we've kept Jira working for us and not against us.