HNHacker News
TopNewBestAskShowJobs

jsmthrowaway

4,278 karma · joined November 17, 2013

submissionscomments
jsmthrowaway··on Telegram removed from the App Store for 'inappropriate content'
Apple was not sued, and that case is irrelevant to your point.
jsmthrowaway··on Telegram removed from the App Store for 'inappropriate content'
Are you sure? ISIS has been coordinating operations and attacks via Telegram for its entire existence, and I don't see a lot of Apple backlash in either of your courts. (Rightly, I believe. Would you go after HTC or Sprint for a phone being used as a detonator?)
jsmthrowaway··on Telegram removed from the App Store for 'inappropriate content'
You realize you're alleging that Apple is moderating its App Store based on conversations people are having within an app? Given the gravity of your claim, and the fact that there are cryptocurrency-related applications all over the App Store, you really need to think about whether your possibility is more likely. (It isn't.)

Facebook taking down cryptocurrency gambling ads is much different than Apple removing a general purpose instant messenger. You're finding a connection you want to find, I'm guessing based on your knowledge of PnD groups being on Telegram, that being your sole exposure to Telegram, and your opinion on cryptocurrency.

Apple is very conservative with adult content which I consider the far more likely reason, be that buggy image search, some kind of trending view that porn snuck into, that kind of thing.

jsmthrowaway··on Why Create a New Unix Shell?
While I appreciate your perspective, I think it’s more from the “occasional SSH to a foreign server” mindset. Scaling “the way I work in a shell” to huge fleets is a nonstarter, and as a working SRE, has been the biggest thing holding me back from zsh, fish, and other alternatives.

OTOH, I’m also against, for example, installing zsh fleetwide in production fleets to accommodate choosy folks. So I’m on both ends of the problem, and know it.

jsmthrowaway··on Free Software Foundation Receives $1M Donation from Pineapple Fund
https://www.gnu.org/proprietary/malware-google.en.html comes to mind.
jsmthrowaway··on Former employees say Lyft staffers spied on passengers
Whereas folks I worked with at a support vendor for AT&T HomeZone, when that was a thing, regularly looked up celebrities’ private phone numbers in the unified customer systems with no repercussion, despite the same onboarding spiel. HomeZone was unique in that support reps by necessity had access to AT&T, Dish, and Yahoo! (email) CRM, which covers a very broad range of people and activities; I didn’t do the looking, but I overheard a sampling of notables and legislators who subscribed to the “500s” (Dish lingo for porn at the time, don’t know if they’ve moved the channels since).

Yahoo! was the only one that limited access reasonably. It always struck me as odd that auditing didn’t pick up that query behavior. For your main job, PeopleSoft would take care of everything and limit you to who you needed to see, but there were a plethora of other systems and places to look.

This type of thing certainly isn’t limited to Lyft.

jsmthrowaway··on An old theory of quantized gravity is gaining new life
The weird thing about IPA is that the non-IPA pronunciation you’re replying to seems easier to understand.
jsmthrowaway··on [dead]
I know. I've been asked to write press release translations when I wrote for television news, and I've had those write-ups pushed back when I introduced a critical angle (:40 for a VO is not a lot of time to work with). Journalism does not "exploit" anyone, individual publications do, and this article is harmless in the grand scheme of things. Inventing sources, willful misquoting, those sorts of things are journalistic problems. Pushing out an article like this is a willful trade, in that TechCrunch is knowingly blending marketing and blogging at the expense of its integrity and brand, but that does not mean anything about the work that other journalists are doing.

My point is that a single publication does not an indictment of an entire field make. You can criticize TechCrunch all you want, and I'd probably agree with you; the quality has decreased significantly, and yellow presser write-thrus are very common now, and it's not even a publication I read. That's the key: it's not a publication that I read, nor that you need to read. They exist independently of the journalism profession as a whole, don't reflect on it, and can disappear without impacting the rest of the landscape. They have a very specific audience. You are not in it. Part of that audience is startup PR, who they actively court because they need the material.

With "fake news" and all that, journalism as a profession is under fire. I absolutely hate to see discussions like this that personify journalism as a boogeyman, out to exploit and "get you," based on one yellow presser that is suddenly "the problem with journalism."

Stop broadening to attack an entire field of mostly good people based on one publication and/or article you don't like. Imagine if that was tried with literally anything else: imagine if we indicted biosciences based on Theranos ("the problem with genetic testing today") or hedge funds based on Martin Shkreli ("the problem with finance today") or engineering based on Peter Madsen ("the problem with rocketry today") or computer science research based on Uber ("the problem with self-driving today"). There are bad actors in the world, but journalism seems to attract commentary like this, where a bad actor suddenly means the whole field is indictable. That makes absolutely zero sense, and the more I argue against it, the more I'm convinced it's a willful siege by people who know what they're doing.

jsmthrowaway··on [dead]
Don't broaden and insult journalism by comparing TechCrunch to it. TechCrunch is now a quite obvious press release translation factory, and has been ever since Michael left. This is their bread and butter, and there's nothing wrong with that: PR needs an easy mouthpiece.

That doesn't mean this is a journalism-wide problem, or even a problem, if you consume TechCrunch knowing that. Nothing about this article is a broader indictment of your scare quoted "journalism," otherwise you're essentially saying TechCrunch put out PR fluff, boy, the field that includes NYT and The Guardian and ProPublica is just problematic, isn't it?

jsmthrowaway··on Vitalik Buterin Has Left VC Firm Fenbushi Capital
...so, we're back to trusting a set of centralized parties, then? What if those get wiped? Altered (though that seems less likely)? Is such an archive a fork vector?

I wrote a blockchain explorer on Bitcoin as a technical exercise, and the intermediate state thing caught my attention, too. If all copies of a block disappear and all you're left with is a hash, what do you have? A complete blockchain?

jsmthrowaway··on Filecoin 2017 Q4 Update
You are still the operator, subject to the laws of your jurisdiction.
jsmthrowaway··on Stellar Protocol: A Federated Model for Internet-Level Consensus (2016) [pdf]
I hope not. Stellar's appeal is its simplicity, and shipping a full programming environment with all the baggage of maintenance over time seems overly complex, and prone to causing issues down the line. There's very likely a way to achieve similar smart contracts, albeit without network consensus à la Ethereum, in the current Stellar world.
jsmthrowaway··on Bitcoin Can Drop 50% and China Miners Will Still Make Money
Westerners who travel abroad on behalf of corporations are trained on this religiously. It’s considered corruption on home turf, and entertaining it can come back on a company quite hard both domestically and internationally, particularly when a government official is involved.

“But $trainer, you mean I really have to report the $80 dinner I was treated to in Shanghai?” You bet. If you operate a startup that does deals internationally and aren’t training your team from a risk management standpoint, the legal downside is huge if a government decides to look at you. Start with the Bribery Act of 2010, the FCPA, and so on.

jsmthrowaway··on SureFly – a personal helicopter designed for safe and easy flight
You should look at the usable payload of a Cessna 150 or Piper Cub, and keep in mind that figure includes fuel, if you think that's low. Weight and balance is something you have to pay close attention to in aviation in general, and what your passengers are carrying does matter.
jsmthrowaway··on How the Scripto App Became a Fixture of Late-Night Comedy News
When I was in news television in ~2005, we dabbled with replacing iNEWS with something Web-friendly and nice, but the Web landscape just wasn't there. It seems like a million years ago, in terms of the Web. Our frustrations were the same, since iNEWS and ENPS are just slightly different flavors of shit sandwich, and while a typical ENG rundown can plod along with one-active-writer-per-slug the editing locks were starting to really get in the way of some other things we wanted to do. Reading this was just like being back in those meetings.

Nice to see someone have the exact same idea and execute well. If you wanted to take on Avid, I bet you could firm up some ENG-type integrations (wire integration would be a showstopper) and get some traction in newsrooms, all of whom are having their thin budgets bled by AP and Avid. MediaCentral is a hot pile of garbage, I hear, so Avid might be handing you the opportunity as we speak.

Showrunner has a big challenge in front of it taking on the Final Draft religion, but man, if you guys crack that nut...

jsmthrowaway··on GoPro quits the drone business
DJI has miles and miles to go on the support, quality, and remediation side, though. I've owned three DJI drones, starting with a Vision 2 Plus, and I've never once had a positive support or defect experience. Not one. The software is clunky, but getting better, and they badly want to lock you into their ecosystem -- as in, you must sign in to their cloud system now to use their controllers, and it tracks all your flights.

The ability to say "yes, I know, DJI, the tiny grass strip 1km from my house is an airport, but I'm fully FAA compliant with this flight" requires a multitude of steps, involving both their app and a Web browser and copying and pasting serial numbers from fields that do not permit copying, then the authorization you get only lasts for 72 hours, so you have to do it again. Otherwise you have to pay to be a "big pants" customer, but even then the experience is less-than-ideal, with a lot of pros turning to Russian software that doesn't perform the legal validation checks, etc. You literally cannot obtain this authorization without an Internet connection, because they store your attestations for liability insulation. So if you're in the field, and you forgot to convince DJI that you're legal before you went out, you're driving back to cellular range.

DJI's interaction with regulation, in particular, is a very broad example of protecting themselves from liability by shunting a lot of work to users of the equipment.

They also assume you have an Internet connection by deferring to Google Maps, with no offline ability that I can find. Google Maps does support offline now, but the way they embed it in the controller software, if I'm out of cellular range (which is a lot), my map box is a giant grid that moves around with the drone and nothing else.

I wouldn't remotely consider them for professional work, the way they're going, and I say that having dabbled in cartography, farming applications, and aerial photography. Sure, they can get gear out, which is where you're coming from, but there's a lifecycle of gear ownership that they pretty much entirely ignore.

jsmthrowaway··on Regarding the Em Dash
Hyphen is also a Western name separator, as in Jean-Luc Picard. Using a hyphen where a dash belongs, because of its ease of use on a typical U.S. layout keyboard, is a common mistake. A lot of people type two hyphens to make a dash, as well, partially because of ASCII, and it was nice to update my phone and Mac recently and see that Apple is now automatically fixing that by default without making me hold down the hyphen—disrupting my typing flow.

You could add the translation before, but it’s cool to introduce a lot of folks who don’t know that to a proper dash.

jsmthrowaway··on “My ten hour white noise video now has five copyright claims”
Video service is special because it is expensive on account of video files being large. You’re pulling a lot of bandwidth off Archive when you embed HTML5 onto your site. On its face, that’s a pretty shitty thing to leech from a charitable organization; YouTube pays for that with advertising. Archive takes donations. Are you donating?

I’m confused that you think this isn’t relevant. You’re directly advocating hotlinking against Archive and you don’t even mention supporting their operation in the slightest. I have no idea what you think I said, because your reply makes little sense.

jsmthrowaway··on Christopher Nolan: The power of people and why 2001 should be preschool viewing
> Williams was great in just about anything he was ever in, I wouldn't attribute that to Nolan.

I don't know, I might. You don't even see Finch for half the film, only hear him, and the villain left an impression on me not unlike Kiefer Sutherland's villain in Phone Booth (an otherwise unremarkable film). I can't think of another villain role that Robin Williams performed, probably because nobody was brave enough to take that kind of risk with a heavyweight positive actor -- Insomnia came out a few years after Good Will Hunting and Dead Poets Society, which helped establish his mastery of drama, but nobody wanted to make him the bad guy. Nolan did, and it was very satisfying to watch.

(I take that back, One Hour Photo was great, too. I knew I was forgetting one.)

jsmthrowaway··on Christopher Nolan: The power of people and why 2001 should be preschool viewing
I suppose I'm in the cult. About the only complaint I can lodge against Nolan is that the exposition is heavy handed in a few of his films, which he spoke to in the article, and I agree he was forced into that position with the intense story he's often trying to communicate in a film's runtime. He's also not a cinematographer, and has generally worked with Wally Pfister or Hoyte van Hoytema.

I would disagree if you're saying the cinematography won't be remembered; van Hoytema's work on Interstellar and Dunkirk is something I remember quite positively even while typing this comment. I would also disagree on character development, as Nolan directed Robin Williams into one hell of an antagonist in Insomnia, a spectacularly underrated film.

jsmthrowaway··on Christopher Nolan: The power of people and why 2001 should be preschool viewing
Doubly interesting given that Nolan is one of the premier auteurs of our time. I wouldn't have expected him to say that.
jsmthrowaway··on “My ten hour white noise video now has five copyright claims”
No, OP meant embedding Archive hosted assets onto your site, or any site.

> You can use [the Internet Archive URL] in an HTML5 video or audio element to embed the data in a webpage

jsmthrowaway··on “My ten hour white noise video now has five copyright claims”
Do you contribute to the Internet Archive? Video service is ridiculously expensive, and using them to hotlink HTML5 video onto your Web site seems...kinda antithetical to the spirit of what you're saying.
jsmthrowaway··on Introducing Preemptible GPUs
Non-preemptible GCE K80s already were profitable for Ethereum and a number of other currencies. Note that Google forbids cryptocurrency mining specifically during the $300 free trial, and a billing history is required to get a GPU quota raise; you start with zero.
jsmthrowaway··on Introducing Preemptible GPUs
> That GPU currently retails for $550.

If you can find one.

jsmthrowaway··on iMac Pro's T2 chip
As time goes on, that argument is becoming increasingly debunked. Heartbleed, already mentioned in this thread, is a good example. OpenSSL is one of the most visible pieces of open source software, with millions of actual (not potential) eyeballs on it, and a complete security defeat sat in the code for years. I suspect that having "all bugs are shallow" programmed into our brains means that we don't take the time to review code that we use, because we assume that other people did. Group psychology, just like at accident scenes: nobody's going to help, because they're waiting to see what everybody else does. OpenSSL is popular and open source, so surely people would have found all the issues. Same thought.

OpenSSL is also extremely arcane. I tried to work on it once, and spent days simply understanding the data structures. It was, when I was working with it, entirely undocumented. Out of those millions of eyeballs, say a few dozen completely understand the library, and a percentage of them have the capability to review the exact algorithms being implemented. Simply publishing source code is not a silver bullet to gain competent reviewers and contributors, otherwise Linux would be bug-free and have bug-free drivers for every device in existence.

Linus's Law has compelling arguments against it. esr may have been wrong about the bazaar.

jsmthrowaway··on Reading privileged memory with a side-channel
Then front-runs the negotiated timeline anyway, catching projects like Xen off guard (it seems like)[0]. Will be interested to read the postmortem of the entire process from start to finish, and Xen is promising one from their perspective. I'd be especially interested to understand whether public intel was concrete enough to rush this out the door, because it didn't seem like it was, but I probably missed something.

[0]: https://xenbits.xen.org/xsa/advisory-254.html

jsmthrowaway··on XSA-254: Information leak via side effects of speculative execution
Nut quote: "Systems running all versions of Xen are affected," which should be fairly clear based on reading Meltdown/Spectre. This is uniquely bad for hosting providers, and the accelerated disclosure timeline does not help at all. Expect drastic response from unprepared cloud providers in the next 48 hours.
jsmthrowaway··on Why are bones not made of steel? (2010)
Is that better? Imagine a bent leg. It seems like one would want it to break and heal, no?
jsmthrowaway··on IOHIDeous OS X Local Kernel Vulnerability
They still do, it just also does Touch ID now. Source: Have one.
← PreviousPage 4 of 34Next →