HNHacker News
TopNewBestAskShowJobs

lovelettr

53 karma · joined July 21, 2014

https://github.com/RLovelett
submissionscomments
lovelettr··on If You Knew God Exists, Wouldn't You Become a Priest?
Exactly. There’s a distinction between knowing what will happen and having the power to make it happen. Omniscience is not omnipotence.

Even granting an LLM reasoning abilities far beyond our own, I don’t see how that gets us any closer to either. Calling such a system godlike seems less a statement about the capabilities of the system than about how little we’re demanding of the word “God.”

lovelettr··on Podman v6.0.0
I switched a few years back and use Quadlets instead of compose now. Converting compose files to Quadlets is pretty mechanical once you get the hang of it.

Highly recommend Podman overall; there are some quirky edge cases, but for the most part it’s a smooth replacement for Docker.

If you don’t want to give up compose entirely, podman-compose exists. I just prefer Quadlets so I haven’t used it much myself.

lovelettr··on These Stupid Trucks are Literally Killing Us
Anecdotally we started exceeding the towing capacity of our Tacoma. As a result, in 2022 we purchased an F-150. In other words we bought the top selling vehicle because our hauling needs changed.
lovelettr··on NSA Mobile Device Best Practices
You must work at my company’s cyber security team. They’re convinced that the safest stuff is when that stuff is never allowed to exist in the first place. Which is probably true but in my opinion misses the point.
lovelettr··on Beyond Meat’s Beyond Burger life cycle assessment (2018)
So for awhile I liked it and ate it. Then out of nowhere it turned into a thing that when I eat it I, without getting graphic, let’s just call it extreme digestive issues.

I wonder how frequently that occurs. Or am I just odd?

lovelettr··on Starting a TypeScript Project in 2021
> but there was no way to bundle them together into one JS file you could include in your HTML and webpack takes a bit to setup

Maybe I am misunderstanding but this feels like it is provided via the `--bundle` flag in esbuild [1].

> It looks like esbuild doesn’t have websocket auto-reload magic so will need to refresh the web browser to see the recompiled changes.

I have also noticed that it does not seem to have the auto-reload part [2]. It does however have a server so that is at least something (e.g., `--servedir=dist`). Though that seems like a very new development.

[1] https://esbuild.github.io/getting-started/#your-first-bundle [2] https://github.com/evanw/esbuild/issues/802

lovelettr··on Big Sur on Unsupported Macs
Would you be willing to share what that WiFi card is and where you got it from? (I have same device and I’m interested in getting another year from it)
lovelettr··on SpaceX NASA returning human spaceflight to United States today (canceled)
I live on Merritt Island. Our power has been out since 6:30 this morning due to intense storms in the area. That having been said, it is currently sunny and calm.

Given what the weather has been like since Sunday I could see it being postponed. I hope the weather holds and gives a window.

lovelettr··on Mastering systemd: Securing and sandboxing applications and services
Was that the freedesktop.org wiki?
lovelettr··on Solo – Open-source FIDO2 security key
I use mine everyday for signing Git commits and tags. Also as my SSH keys.

If it did that then it would potentially replace my YubiKey(s).

lovelettr··on Yubico and Microsoft Introduce Passwordless Login
I personally have the nano version.

> but I assume it lacks the "touch" protection against remote attacks

It has the touch protection. There is a small strip of metal that protrudes beyond the USB port that you touch.

> what its durability

I've used it daily for about a year. Granted this is not "years" but so far it still feels very solid.

lovelettr··on Algorithm generates practical paper-folding patterns to produce any 3D structure
There was a really great NOVA episode, "The Origami Revolution" [1][2], that I believe covered this exact same algorithm. As I recall at the time of the recording for the NOVA episode it was still under development.

[1] http://www.pbs.org/wgbh/nova/physics/origami-revolution.html

[2] http://www.pbs.org/video/2365955827/

lovelettr··on Tesla unveils its new ‘sleek and low-profile’ solar panel made by Panasonic
> Electricity isn't tangible.

Quibble. Electricity is tangible. Use your finger to complete a circuit. My bet you will perceive it by touch.

lovelettr··on Shipping Rust code in Firefox
Where is the feature in GitHub that would show the languages used in a repository? That would be useful here regarding this comment.

(Note I have no doubt you are right. It would just be a useful metric.)

lovelettr··on Swift vs. Go
I think that is a valid concern. It is something that is being worked on [1] by the community. When those things get reasonably stable I think then it will be time to get those packages accepted by their respective distros.

Though as pointed out in SR-116 without ABI stability (which will not appear until Swift 3) packages do not necessarily provide a silver bullet of portability.

I for one have been maintaining a PKGBUILD script for Arch Linux that allows for a native package to be created. It's currently not working due to some issues with binutils [2].

[1] https://bugs.swift.org/browse/SR-116 [2] https://bugs.swift.org/browse/SR-1023

lovelettr··on Children Are Abandoning Baseball
Pay walled
lovelettr··on SpaceX launch webcast: Orbcomm-2 Mission [video]
I live on the south end of Merritt Island, FL (~25 miles from the launch complex) and the sudden noise reminded me I wanted to watch this! For a second, based on the sound, I thought it may have catastrophically failed until I caught the live stream and people cheering.

Are there any replay videos?

lovelettr··on New York Prosecutor Calls for Law to Fight Apple Data Encryption
Frontline has a great 2-part documentary on the NSA mass-surveillance program called "United States of Secrets" [1]. (It is available on Netflix)

One of the striking things I took away from that documentary was the rhetoric used to disuade would-be leakers, whistle-blowers, and media outlets that had learned about "the program". In almost every case they would be brought into the White House and briefed in an effort to convince them to keep their silence. The common refrain that was related by all the different parties was the White House (both administrations) would consistently tell the leakers: If you do this the blood will be on your hands for the next terrorist attack.

Sadly this sort of rhetoric really work(ed/s) on people.

[1] http://www.pbs.org/wgbh/pages/frontline/united-states-of-sec...

lovelettr··on The Perilous World of Machine Learning for Fun and Profit
My attempt at abridgment.

Do not use more data sources than necessary. You can incur technical debt. [1]

Metaphor about dead bodies at the top of hill.

Be cognizant of the fact that in some use cases by making use of the information output by the predictive model you can reduce the effectiveness of the original data model. This is called a feedback loop.

The goal of ML is business. Not some new ML algorithm/technique or programming language paradigm.

[1] http://research.google.com/pubs/pub43146.html

lovelettr··on iCloud Apple ID Brute Forcer
That is a valid point that I didn't think about.

I forget that not everyone uses something like 1password generate random passwords for all sites. Therefore, compromising one doesn't compromise them all. I recognize that is not common behavior.

lovelettr··on iCloud Apple ID Brute Forcer
I have tried this script on my own account to see what it looks like when it succeeds and all of that. While it does appear to succeed and not be rate limited. The outcome is that the account will have been disabled as a result running the script. Even if it succeeded and found the password it would be no good to the attacker anymore.

> This Apple ID has been locked for security reasons. Visit iForgot to reset your account (https://iforgot.apple.com).

I'm no security expert but that must reduce at least some of the vulnerability.

Though it seems like this could be weaponized to be a hassle. I only point this out because I have 2-factor auth and have locked my account and cannot seem to find my recovery key. /facepalm

lovelettr··on Alamofire: HTTP networking library written in Swift
I would love to see RestKit get re-imagined this same way. If for nothing else than to see more examples of large/complex projects written in Swift. Give other in-depth examples of the language.

GitHub repository: https://github.com/Alamofire/Alamofire

lovelettr··on Show HN: Track changes in product price, get notifications by email
Tried it on a product on Amazon I like to watch prices on [1] and got the following error:

> Shoo! My super powers tell me this link doesn't belong to sellers we support.

I thought Amazon was a supported retailer?

[1] http://amzn.com/B00FJRS5BA

lovelettr··on Level 3’s Selective Amnesia on Peering
When you start looking into the relationship between Cogent and Level 3. One starts to wonder if all this is not a straw-man argument anyways. It seems to me that both Cogent and Level 3 are both united in their stance against Verizon regarding these sorts of tactics [1].

There are some interesting points in that Ars article that I think are worth noting. For one, what is being discussed in that article is case in point what Verizon is admitting they are doing. They have the head-room to handle the bandwidth that Cogent and Level 3 could send in their direction [2]. However are specifically not adding any more interconnections and asking for someone to pay for more interconnections. Sounds like a "toll" to me.

The other point that is interesting to me is in some of the debate about net neutrality people specifically state that what they what is for ISPs to not purposely throttle traffic on their network. However, this tactic seems to be the loop-hole in that request. Meaning if Verizon never properly peers with Level 3 then they have no reason to throttle the Level 3 traffic. It is already made scarce, and throttled, by the arbitrary scarcity of the limited traffic that is allowed through the peers. Thus Verizon and all ISPs can adhere to the letter of the law. While probably ignoring the spirit of it.

[1] http://arstechnica.com/business/2014/03/level-3-and-cogent-a...

[2] http://publicpolicy.verizon.com/blog/entry/why-is-netflix-bu...

lovelettr··on Level 3’s Selective Amnesia on Peering
This is a rebuttal by David Young, Vice President, Verizon Regulatory Affairs to Level 3's blog regarding peering and bottlenecks [1].

[1] https://news.ycombinator.com/item?id=8048997