HNHacker News
TopNewBestAskShowJobs

jiveturkey

2,466 karma · joined February 16, 2018

submissionscomments
jiveturkey··on macOS 27 does not support CoreStorage volumes
sorry for the non-substantive nit. because we all know what you meant.

YAGNI is about not doing work in advance. it's very confusing to say YAGNI and pruning in the same breath. it's also confusing to call this aggressive since it's been 10 years.

i wouldn't call it dead code pruning either, since the code in question here was actually reachable and used. maybe, unmaintained code pruning?

jiveturkey··on Do the math: How we took over ChatGPT accounts
Hex aka Parameter is an irresponsible company, on my blacklist. after they did an unsolicited pentest on us, we scheduled a call. joke of a team.

hilarious that their headline message, on every web page, is `Backed by YC`.

also, the product is way behind their competitors anyway.

really cool exploit they found here, but that doesn't make them a company worth doing business with.

jiveturkey··on The $6.3B Binance hack was pulled off in just 20 minutes
Absolutely. It would be insane for the US to offer my specific example. I'm just making the point that China (and Russia, but I didn't give an example) can do something. Their hands aren't tied.
jiveturkey··on The $6.3B Binance hack was pulled off in just 20 minutes
https://en.wikipedia.org/wiki/Detention_of_Michael_Spavor_an...

China absolutely could do something if they wanted to. No treaty just means they aren't obligated to "do something", not that they can't. For example, if the US wanted to reinstate the $800 no tariff policy in exchange for Vernon, I guarantee you they'd arrest him and turn him over.

I can't find any reference to Vernon's citizenship, ie if he is a Chinese citizen or not. Which would change the math.

jiveturkey··on Quad9 (DNS Resolver) to Exit France
how do they not see the self-inconsistency?

they "cannot" blacklist the domains on geoIP basis, yet the "can" withdraw from France? via what method? Removing the French servers is clearly insufficient, so why can they deny France entirely via geoIP, but not block the domains just via geoIP?

they do claim a value-based reason (good on them for it), but they are very very insistent about the "impossibility" anyway. can't have it both ways.

jiveturkey··on The DNS Museum
the site has an example of this. https://dns.museum/exhibits/blogging-via-dns
jiveturkey··on Wanted to download an ISO, ended up writing a kernel exploit
Cursing at it and telling it how stupid it is, are treating it like a human being ...
jiveturkey··on Passkeys are not a trap
I personally find it to be a disgusting way to get customers. The company pays for the service, yet they also get to be the product.
jiveturkey··on Character.ai has initiated voluntary Chapter 11 bankruptcy
commonly called HALO - Hire And License Out
jiveturkey··on Firefox Enterprise
if you are air-gapped, any browser should be fine?
jiveturkey··on GLM-Legal
the lawyer has to use a ZDR tier of LLM, not just any llm. the lawyer using the same LLM as the client would, destroys the attorney-client privilege.

note that the client using an enterprise tier does not grant the same privilege.

jiveturkey··on The Lightbulb Computer
> The light bulb form factor is cute but probably not that useful. Most of the light will be aimed in non-useful directions. Look into ultra short throw projectors.

gonna hard disagree! you aren't going to have 360° projector in there with wasted light going nowhere. you're going to have 1-4 steerable projectors. the "facade" as a globe bulb means you can place it at any direction you like depending on where the cord needs to go. for ceiling as well you don't want it to have a fixed throw direction. bulb makes perfect sense.

jiveturkey··on California closed the Montana license plate loophole
the summary presented by the drive feels like an overreach. but we live in the world of can't have nice things so there you go i guess.

i doubt there's all that many beneficial owners of montana businesses that live in california, but surely there are many nevadans and oregonians that straddle the border and will get unfairly caught up in this.

jiveturkey··on California closed the Montana license plate loophole
you don't even have to be rich. it's not much more onerous than a generic small business. i know more than one 2-car-inventory dealerships.

but it's only worth the effort if you are rich enough to buy cars that incur substantial tax and reg fees. you still need to have insurance and the dealership kind of insurance costs a lot. you probably aren't going to get umbrella coverage to include it either, so you'll have more limited liability.

jiveturkey··on Several vulnerabilities have been discovered in the Linux kernel
it's tongue in cheek
jiveturkey··on PS5 Relapse Exploit
they aren't in the business of selling consoles (duh). they are in the business of selling games. jailbroken consoles can run pirated games ...

consoles are sold at a loss, best information i can dig up is that this is still true today, even after all the volume.

jiveturkey··on Three Days in August: What a DDoS Attack Exposed in Our Network
> services that can be used for amplification attacks, are they constantly getting patched to prevent the latest iteration of attack type?

unfortunately, no.

jiveturkey··on Three Days in August: What a DDoS Attack Exposed in Our Network
is it? i would write a sentence like this on my own. i guess informed by the thousands (or hundreds, at least) of PMs I have read or contributed to. the same material LLMs would have trained on.
jiveturkey··on Three Days in August: What a DDoS Attack Exposed in Our Network
indeed, this (A vs CNAME) is nonsense. I applaud this provider's transparency but they missed a 4th gap: inadequate network security expertise. Two of the 3 gaps identified are perhaps not baseline but they are well understood hygiene. They shouldn't have had to learn these things as a result of an incident. (the 1st gap, not monitoring customer network blocks, is very understandable and i find no fault there.)

and then up the stack a bit, they are confused about DNS' role in attack mitigation, at least generally speaking. perhaps there is something specific to their own DNS setup where this made a difference. they should just strike that part of the PM entirely.

that said, their reaction time is amazing. this would have included live troubleshooting during an ongoing incident! criticism aside, i wouldn't hesitate to use them if I wanted EU service.

jiveturkey··on Real-time feedback: My closing move in every interview
seems quite stilted.

instead of "i'd like to give some feedback, may I?" at the end, the interviewer should just ask the damn question in real time. "that description is very high level. that is great for an external summary, when the decision is already made and you want to communicate, not discuss. so i appreciate that. can you go into more detail and justify your choices, as if for an audience of peers and for discussion?"

a good interview should be an interactive exercise, not a one way explanation from the candidate. even LC/DSA type rounds should always find the candidate asking for clarifications, asking if they are on the right track is this what you are looking for, should i be attacking this a different way, etc.

and i would never give unsolicited positive feedback. even when you are the final decision maker, other rounds may uncover weak spots and there may not be a consensus to hire. by giving the positive feedback you confuse the candidate and make a no-hire result even worse. leave it to the recuiter/HR to do that.

as an interviewer i always mention whether i will recommend them for hire (if it's a yes) and that's it. iff asked i provide critical feedback. as a candidate i always ask for critical feedback, which gives me the chance to sharpen any answer when the interviewer doesn't do a good job on asking for what they really wanted.

jiveturkey··on Obscura: VPN that can't log your activity
vp.net is far from first, and is hot garbage.
jiveturkey··on Samsung accidentally freezes its smart fridges with a software update
inkjet printers to not print the tracking dots. it's laser printers that do it.
jiveturkey··on Shutting down our public encrypted DNS
Even ECH isn't that helpful. ISP still sees the IP addresses you connect to. Even when non-dedicated IPs are used, I'd be surprised if a quite basic traffic analysis (say, bytes transferred on first visit) wouldn't identify the domain.

VPN providers at the tier of Mullvad should be precise about this stuff -- I think it's more than just a nitpick, considering the audience. oh god did I just use an emdash.

Note that you need some flavor of secure DNS to enforce ECH. The protocol is designed to be downgradable.

jiveturkey··on Apple caught off guard by AI demand for Mac Mini and Mac Studio
and there's a goddam ad at the start of every apple TV show, and macOS forces ads on you via the SETTINGS app! (both such ads are for other apple products ... still, it's an ad)
jiveturkey··on California lawmakers unanimously pass Linux exemption from age-verification law
What's to prevent Apple from making iOS and macOS free to "copy, redistribute, and modify"? The OS is free already, and the platform does cryptographic signature verification before allowing its installation. macOS already automatically finds local caching servers, which amounts to redistribution capability baked in.

They can just claim that the user is free to turn off SIP and "modify" the binary bits, or that kernel extensions amount to modification.

jiveturkey··on California lawmakers unanimously pass Linux exemption from age-verification law
I think you're misreading it. It doesn't ban Linux from providing age collection and verification. It makes it a choice, rather than mandatory.

I would expect that Linux users want access to age-verified apps just as much as other users, so such a signal will be available.

Also, you're being overly pedantic on the language used. It transfers liability away from the service, more easily allowing operation in about half of the states. "age verification" is a fine lay description.

jiveturkey··on New Mac Studio with M5 Max and M5 Ultra
https://www.youtube.com/watch?v=8okiCCZk7U8
jiveturkey··on iCloud+ Hide My Email addresses will remain on icloud.com
But all 3 of those use cases, plus privacy, can be addressed with word.salad@bigdomain.com. So you may as well get the privacy bit in there.
jiveturkey··on Wi-Fi 8 is the first wireless upgrade in years that isn't chasing speed
> all APs identify as the same BSSID, and decide between them who answers a client

That is decidedly not a solution. Neighboring APs necessarily need to be on different channels, to avoid Co-Channel Interference (CCI). An AP doesn't answer just on BSSID but also on a specific channel.

jiveturkey··on Georgia police officers fired after Flock camera misuse
> weren’t authorized

this is easily solved with current technology, if they had an incentive to do so.

besides firing folks that get caught, flock themselves should be brought to court.

Page 1 of 34Next →