HNHacker News
TopNewBestAskShowJobs

jffry

3,559 karma · joined June 26, 2013

Are you a bot scraping this profile hoping for an email address? Please direct your spam to abuse@ic3.gov

If you are a human and you wish to contact me, the sha1 hash of my email address is 9aae0f6d01421dde3d5085fa1a24adff6c9e344f. I look forward to hearing from you soon.

Hi'); DROP TABLE emails;--

<script>alert('Hi!')</script>

submissionscomments
jffry··on Too big to live, too loved to die: Big Tech's billion dollar curse of the free
Yes but presumably there are storage replicas for each version of the video.

The suggested idea, which Google might already do, is to keep the low quality videos in less redundant storage on the theory that they can be re-encoded from the more durably stored original video if the underlying storage fails.

jffry··on Too big to live, too loved to die: Big Tech's billion dollar curse of the free
Can you please provide a source for those numbers? Because at first glance they seem pretty fantastical.
jffry··on Save web pages as PDF in Firefox for Android
It's also grayed out when looking at a PDF on 12.6.2 Monterey but maybe it was how you remember it earlier on?
jffry··on I almost failed to search a 37 GB text file in under 1 millisecond
Indeed that's discussed in the article, under "Position heuristic" - https://death.andgravity.com/pwned#position-heuristic
jffry··on The Gates of Argonath in VR at 50 FPS on Unreal Engine
There is such a way to cheat, and it's pretty clever. Store a depth map and just approximate parallax while you're waiting for a real new frame. https://en.wikipedia.org/wiki/Asynchronous_reprojection
jffry··on Mozilla, Microsoft yank TrustCor's root certificate authority
I think root certs are long-lifespan, kept in hardware security modules / other cold offline storage, and only used to periodically sign shorter lived intermediates that are the main thing signing leaf certs for sites.

For example, the DigiCert Global Root CA in HN's cert chain is valid from 2006 to 2031.

jffry··on How I hang Christmas lights without a ladder
The two conductors in the wire are insulated separately and sort of lightly attached so it's probably OK if done carefully.

If this was me, I would've threaded the lights through the big triangle piece directly and attached with zip ties, instead of modifying the cord.

> Also, the comment at the end to use "hooks" beats the whole point of using magnets.

Installing a nondescript hook up there would be a one-time use of a ladder which could just be borrowed or rented from somewhere. Future decorations can be done with just the extending pole and magnetic attachment.

jffry··on Show HN: I finished my site for daily dogbunny puzzles, as I promised on HN
Those animations look great. Congrats on the launch - I'll try it out later when you're not getting hugged to death quite so hard :)
jffry··on A secret Apple Silicon extension to accommodate an Intel 8080 artifact
That sounds like a nightmare of complexity to get right, and I don't see why Apple would want to Frankenstein together cores when they could build something like Rosetta2 instead.
jffry··on Apple Rankings
Scroll down, it's hidden below the fullpage background image for a single search box
jffry··on U.S. fines airlines more than $7M for not providing refunds
Seems like that would have no impact since they've already vowed to never fly with that airline again anyways
jffry··on $118 16TB SSD on Amazon, 4 star reviews mention cuff links and coffee cups
If you attempt to write a review now, it warns:

> Amazon has noticed unusual reviewing activity on this product. Due to this activity, we have limited this product to verified purchase reviews.

jffry··on What is an eigenvalue?
I think you may have gotten whooshed by the joke - both "eigenvector" and "gedankenexperiment" are mashups of a German word and an English word
jffry··on Nobody wants touch-screen glove box latches
> Is a robolatch cheaper

Doubtful, but as an extra "feature" they can probably use it to justify increasing the price of the car by more than it cost to add it.

Granted, to me, this would REDUCE the value of the car, but car makers are operating in fantasyland

jffry··on Disk Prices
I see pricing columns for Amazon, Best Buy, B&H, ebay, and newegg, but yes it does seem limited to WD branded drives.
jffry··on Pokemon Card Animation
Best I could find: https://www.nisshametallizing.com/en/how-holographic-paper-m...

I imagine in the case of mixed printed/foil cards that they've printed ink on top of whatever clear layer protects the diffraction grating, leaving a gap anywhere they want the card to be shiny.

jffry··on macOS 13 Ventura review
> Sidenote: I wonder if we'll one day see government enforcement of software akin to the physical spaces governed by the ADA.

I should think large tech companies would be happy to advocate for such regulation, because it creates another (small) barrier to entry for competitors

jffry··on Bumble releases open-source A.I. feature to help combat unsolicited nudes
If it thinks an image is lewd, it blurs it, and you have the choice to view it, report it, or view it and then report it: https://bumble.com/en-us/help/why-am-i-seeing-a-blurred-imag...
jffry··on Bumble releases open-source A.I. feature to help combat unsolicited nudes
This isn't some huge revelation. E2E encryption isn't something that Bumble advertises, and their privacy policy [1] plainly states:

> We review the content of messages sent in the App to identify topics, sentiments, and trends across our Users. We will take steps to remove personally identifying information from such messages, prior to reviewing them. We will not share the content of User messages or information we derive from them with any third party.

[1] https://bumble.com/en-us/privacy

jffry··on Vertical Flutes
Violas are larger than violins, which means they're also longer and heavier. Violins/violas are held up entirely by wedging them between your jaw and shoulder, so a short fat viola moves the weight closer and I imagine reduces the torque needed to hold it up.

The shorter neck on the instrument also means you don't have to hold your tuning hand out so far (a similar torque issue) and it also means moving your hand out of first position to play higher notes is a shorter motion.

edit: The viola is of course also thicker, which means maneuvering your tuning hand around it involves twisting your shoulder more. I imagine the unusual shape also improves that situation.

jffry··on An account was suspended
Basically a "feature" of Reddit which can be used to anonymously harass somebody on Reddit by having it send them a DM about suicide prevention.

https://www.theverge.com/2020/3/4/21164687/reddit-new-suicid...

jffry··on Ask HN: Are Whois Abuse Reports Useful?
I run a publicly accessible web service, and get this stuff all the time.

My service happens to be fronted by nginx, so over time I accumulate config to match these and drop connections and drop from the logs entirely:

  location /wp-admin {
    access_log off;
    log_not_found off;
    return 444;
  }
(444 is a nonstandard error code that tells nginx to just close the connection, don't respond at all; if you want to be more mischievous you could return 301 "https://nsa.gov")
jffry··on Unlaunching the 12GB 4080
In the past, NVIDIA launched the "3080" and the "3080 (12GB)" where the memory capacity and bus width was the major differentiator. (it also had like 3% more cores or something).

The RTX "4080 12GB" and "4080 16GB" were much further apart in cores (IIRC a 30% difference) and so naming them in the same category in a way that suggests the RAM is the primary difference, was widely seen as disingenuous.

Yes technically any consumer could lookup the specs, but that doesn't still make it a dirty and dishonest move.

jffry··on JEP 431: Sequenced Collections
Yes, Java has java.util.Deque [1]. The purpose of this JEP is to add a more generic interface over the ordered collection types, which all have slightly different names for these operations.

[1] https://docs.oracle.com/en/java/javase/17/docs/api/java.base...

jffry··on The State of AWS Security
Maybe that's because AWS' own aws-cli setup encourages you to store these credentials on disk in plaintext in a standard-named file in your home directory, and their best story for temporary roles is to invoke `aws sts get-session-token` and copy paste values from the JSON output to env vars.

It's really disappointed that aws-cli doesn't easily support this type of workflow, when using MFA and setting up multiple AWS accounts with cross-account roles are two things recommended as security best practices by AWS themselves.

Don't get me started on how you can only have a single U2F key attached to your root user.

jffry··on The State of AWS Security
The root user is not an IAM user and probably is not counted among those statistics. Enumerating IAM users won't include the root user, so it depends on how exactly they got that 40% metric

(Root user ARN is arn:aws:iam::555555555555:root versus IAM users which have ARNs like arn:aws:iam::555555555555:user/USERNAME)

jffry··on The State of AWS Security
Do you get such pushback over the need for MFA, or more generally for the use of roles, or something else?

MFA seems like an essential defense-in-depth measure to ensure that a compromise of the locally held IAM key is not enough on its own to compromise your AWS account.

jffry··on DART mission successfully altered asteroid's orbit
NASA's press conference said the result was in the upper end of the predicted range, which was between "a few minutes and several tens of minutes" depending on the (unknown) physical makeup of Dimorphos.

Studying the impact and debris plumes is expected to help scientists learn more about Dimorphos.

I linked the press conference as primary source in my sibling comment if you're curious, although it didn't go into much more detail: https://news.ycombinator.com/item?id=33169879

jffry··on DART mission successfully altered asteroid's orbit
During the press conference [1], they stated that there was a variety of models that depended on the physical properties of Dimorphos, which were not well known.

The estimated range by which the orbital period would be shortened was between "a few minutes and several tens of minutes" and that 32 minutes is "consistent with the estimates but at the upper end of that range".

They also showed a pretty fresh Hubble image of debris plumes from this past Saturday and mentioned that teams are working to use the data and imagery to better understand the composition of Dimorphos.

[1] Discussion starts around 11:25 in this video: https://www.youtube.com/watch?v=Zhzn0U2m5wQ&t=685s

jffry··on Lufthansa has not banned AirTags
> If English actually had language police, I'd press charges against everyone who enters a conversation with "I mean, ..." or "So, ..."

What about starting a conversation with "Meh" ?

← PreviousPage 5 of 31Next →