HNHacker News
TopNewBestAskShowJobs

ldjb

1,217 karma · joined February 28, 2015

hnmail@ldjb.uk

[ my public key: https://keybase.io/ldjb; my proof: https://keybase.io/ldjb/sigs/IdV4kghNxp10ZxK0JyT3M8TxnBE7EdFuqFdohnJK_iQ ]

submissionscomments
ldjb··on Firefox 87 trims HTTP Referrers by default to protect user privacy
Firefox still sends the origin (the domain name and subdomain) of the referring page, so you can still see the website the user is coming from.

Google has had a dereferral process in place for many years anyway, which prevents you from seeing the specific search engine results page the user is coming from. So this really doesn't change anything for those websites such as Google that already had these security features in place.

ldjb··on Reverse-Engineering NES Tetris to Add Hard Drop
The animations use the WebP image format. They work for me in Google Chrome on Android, but some browsers may struggle to display them.
ldjb··on Ask HN: Advice for finding an entry-level remote job?
I think that's a perfectly reasonable reason for you to have a gap in your career, and prospective employers should be understanding of that.

It is something you should be prepared to explain at an interview, but I don't think it would cause any problem.

You're right that it doesn't really count as experience. Employers won't necessarily mind a one year gap on your CV, but if you do find it difficult to get to the interview stage, it could help to add a short note to your CV explaining the gap. But I'd hope that wouldn't be necessary.

ldjb··on Ask HN: Advice for finding an entry-level remote job?
That's an interesting question and something that hadn't really occurred to me.

Personally, over the past few years I've been a developer, a product owner and now a product manager.

But if I were to apply for a new developer role, would I leave out my current product manager role from my CV? Absolutely not!

It's generally considered a bad idea to have gaps in your CV. And actually having worked various roles can actually be to your advantage. There are transferable skills you would have gained as a product owner that you can apply to a developer role. In fact, very few developers will have the skills required to be a product owner, so employers should look favourably upon your skillset.

Case in point: my experience as a developer has put me at quite an advantage in the product management field. Due to my technical knowledge/experience, I can understand how systems work better than most other product managers, and I'm better placed to know what the development team needs of me.

So I would say, don't leave gaps in your CV, include all the really good experience you have, even if it is varied, and use that to your advantage to show how these experiences will help you in the role you're applying for.

ldjb··on Show HN: Unclack – a macOS app that mutes your microphone while you type
Presumably this doesn't affect muting on Teams, Zoom or whatever videoconferencing software you're using, so it couldn't unmute you.
ldjb··on Computer Science textbooks that are freely available online
Nothing worse than courses that require a textbook written by the lecturer decades ago and is now out-of-print, with only one copy in the library that all the students have to fight over.
ldjb··on Give your Mac imaginary unlimited storage thanks to Disk Utility’s bug
Google Web Accelerator [0] did this. Requests were pricked via Google. A side effect of this was that you could access internal Google tools that had been restricted to Google's IP address range – oops!

[0] https://en.wikipedia.org/wiki/Google_Web_Accelerator

ldjb··on Manga Guide to Lisp
I'll definitely have to check this out – thanks.

Interesting to hear a Lisp interpreter was implemented in NScripter. As anyone who has programmed in NScripter will attest – it's not the easiest language to work with. Although it has a lot of useful built-in commands for creating visual novels, it's essentially a low-level language (especially inspired by assembly language). You have to handle program flow manually – no for loops, while loops, and no proper if statements. There are very primitive forms of variables, but no complex data structures. You can extend functionality using Lua, however.

I'm always amazed by what people have managed to do with NScripter, given its limitations and relative obscurity.

ldjb··on Ignore AMP
“When an AMP page is available, it can be featured on mobile search as part of rich results and carousels. While AMP itself isn't a ranking factor, speed is a ranking factor for Google Search.”

https://developers.google.com/search/docs/guides/about-amp

ldjb··on South Africa's lottery probed as 5, 6, 7, 8, 9 and 10 drawn
The drawing of these numbers is under question, but you would expect a significant proportion of players to select sequences such as this, even if it's not in their best interests to do so.
ldjb··on hCaptcha now runs on fifteen percent of the internet
That's annoying. Have you tried using their accessibility feature?

https://www.hcaptcha.com/accessibility

ldjb··on Dev Fonts
I suppose some might say the code looks cleaner with ligatures and they better convey the meaning of the code (e.g. ≠ is easier to understand than !=).

Personally, however, I like to see exactly what it is I am typing, exactly which symbols are being used. Ligatures distort that.

Ligatures are fine when reading prose, but I find them too confusing when coding. That's a personal preference, though. I'm sure some people have no problem with them.

I expect a significant proportion of programmers do not like coding using fonts with ligatures, so it's interesting that this website only provides the ability to filter fonts to display only those with ligatures. I would have liked the option to only display fonts WITHOUT ligatures.

ldjb··on Dev Fonts
It changes the syntax highlighting rules to reflect the specified language.

Like you, I would have expected it to also update the example code to show the actual language.

ldjb··on Killing time with Agatha Christie
Interestingly, in the case of And Then There Were None, the novel was originally published without its solution.

Christine's intention was that the reader would use the clues scattered throughout the book to work out who the culprit was. Indeed, like many other works from the Golden Age of Detective Fiction, the mystery is entirely solvable from those clues.

Christie ultimately added an epilogue to subsequent editions, which explains the mystery. In a sense, it's nice to have confirmation of what the solution is, but at the same time I like the idea that a mystery story doesn't necessarily need to include a solution.

ldjb··on Update to Git changes the default of init.defaultBranch to main
Similarly, I have worked in places where the word "brainstorming" (as in, "a brainstorming session") was banned because of its apparent offensiveness towards those with epilepsy. The funny thing is, 93% of people with epilepsy do not find the term offensive.

https://www.epilepsy.org.uk/press/facts/brainstorming-offens...

ldjb··on Firefox 83 introduces HTTPS-Only Mode
I can understand your use case, but I know a lot of people (often those who use computers infrequently) type out the full URL all the time. They don't know what HTTP or HTTPS is, they don't realise you can omit that part. They just want to access the website.

For those people, it makes sense that typing "http://" would take them to the "https://" site if available. Although they did specify HTTP, it isn't necessarily what they actually wanted.

I think the use case you describe (whilst valid) only applies to a relatively small pool of people. Most people don't really understand HTTP or HTTPS very well. They know it's part of the web address, and some know that "https://" is "secure", but that's about it.

I think it makes sense to direct people to the secure version of the site as much as possible, whilst of course providing a mechanism to switch to the HTTP version if necessary.

ldjb··on YouTube-dl's repository has been restored
Sure, it would be "effectively a web browser". But it would also require a secret key. If the program is not licensed to hold the key, that could be considered circumvention.
ldjb··on The sad state of PDF-Accessibility of LaTex Documents (2016)
It doesn't have to. But ideally you only want to have to produce and distribute a single file.

Also, a lot of people don't consider accessibility when generating PDFs. If LaTeX produced accessible PDFs, the PDFs would be tagged automatically without the author even thinking about it. Of course, it might still not be perfect, but it would be a lot better than the status quo.

ldjb··on Reviewing the worst piece of code ever
Monzo Bank here in the UK does that. Your account doesn't have a password. Instead, when you want to log in, it sends you an email with a link that expires after a certain amount of time.
ldjb··on WhatsApp Phone Numbers Pop Up in Google Search Results
In fact, Click to Chat links are not QR codes but URLs that are manually constructed from a phone number.

https://faq.whatsapp.com/general/chats/how-to-use-click-to-c...

Of course, you can generate a QR code from this URL using third-party tools, which I think is what's happening here.

Click to Chat's stated purpose is to allow you to chat to someone whose phone number you know, but you don't want to add them to your address book.

Clearly, some people are using it for a different purpose – to make it easier for other people to send them WhatsApp message.

Maybe WhatsApp should be clearer about the dangers of sharing a URL containing your phone number, but it seems like a useful feature when used for their intended purpose.

ldjb··on Mastodon: Add end-to-end encryption API
So long as instances are serving content from other instances (pretty much required for a social network), there will be demand to be able to block other instances. Of course, people could just host their own instance, which is possible with Mastodon, and is indeed what a lot of people already do.

Mastodon uses the ActivityPub protocol, and there are other implementations that use this protocol (Pleroma, for example).

ldjb··on Ask HN: Is UK government insane or genius?
I don't think there is any evidence of reinfection. What seems to have happened in some cases is that a person's symptoms have dissipated but resurfaced a bit later. In other words, the patient thought they had recovered when they hadn't.

That said, the chief scientific officer has stated that this is likely to be an annual virus: https://www.telegraph.co.uk/news/2020/03/13/coronavirus-outb...

ldjb··on United Kingdom to introduce security labelling on connected devices
I think what is being discussed here in liability for companies purchasing insecure devices, rather than the manufacturers of those devices.

It is reasonable to say that, even if companies are discouraged from purchasing insecure devices, that won't necessarily deter consumers purchasing insecure devices for their households. The threat from devices in households is perhaps even greater than in businesses, if the number of households in question is great enough.

ldjb··on Privacy analysis of Tiktok’s app and website
I'm guessing they're using the Web Audio API which allows you to generate audio samples:

https://developer.mozilla.org/en-US/docs/Web/API/Web_Audio_A...

ldjb··on I just lost my wallet on the way home from work
It's certainly not illegal to inspect unattended items in the UK. An assessment is typically made of whether or not it should be deemed a threat.

If the item is not hidden, not obviously suspicious, and is typical of the environment in which it was found, then it's unlikely to be a threat and can be inspected further.

Unattended bags are found all the time. There's no need for the military to be called in for all (or even most) of them. And even then, that's mostly the responsibility of the police than the armed forces.

ldjb··on In Defense of Richard Stallman
Having a view that the law is wrong is not a crime, and nor should it be.

If it were, who needs legislature?

ldjb··on In Defense of Richard Stallman
What _about_ BSD?

If my understanding is correct, BSD only started becoming free software in 1989 with the release of Net/1, and even then large chunks of the codebase were not free software.

GNU, on the other hand, kicked off some years before, in 1983.

ldjb··on Self-serve first: an overlooked paradigm underlying great software companies
Bespoke software; software tailor-made for a particular client/customer, according to their specifications.

As opposed to off-the-shelf / generic software that is put out to market and is then purchased by whomever thinks it would meet their needs.

ldjb··on TV detector van
Yes, it still exists. A TV Licence is required to watch any television programme live as it is broadcast. This applies to online live streams of TV channels, even if viewed on a PC or mobile phone.

It is legal to use a TV set without a licence, so long as you do not watch any TV programmes live. So it's fine to connect it to a laptop and use it as a monitor, or listen to radio programmes through it, for example.

ldjb··on YouTube should give users a way of knowing if a video has been altered
Firstly, YouTube don't tend to support downloading videos as raw video files. So it wouldn't really make sense for YouTube to provide a signature when you're not really supposed to be able to access a video file in the first place.

This also wouldn't really work because a YouTube video isn't a single file. Videos are available in different qualities and formats. The video component tends to be separated from the audio component. If you want to combine them into a single file, you have to mux them. However, this process is not deterministic, so the resulting hash would differ depending on a multitude of factors.

← PreviousPage 5 of 12Next →