HNHacker News
TopNewBestAskShowJobs

odensc

484 karma · joined September 28, 2017

Contact: hello [at] odensc.com
submissionscomments
odensc··on Gitlab.com Is Moving to 13.0
I see that site is maintained by SourceHut though - are the test run from within their own DC? That could contribute to the performance score.
odensc··on What would you do if you lost your Google account?
How do you remember where you put the paper?
odensc··on Show HN: Ameelio.org – Free Prison Communication Platform
That's good to hear. I think if you made it clear that the level of service you can provide is proportional to the funding you receive, it would both fix this misunderstanding and serve as an incentive for people to donate.
odensc··on Show HN: Ameelio.org – Free Prison Communication Platform
> We are 100% committed to keeping our tools free for users

> Website: "All our users can send unlimited free letters"

But then in your landing page screenshot:

> To celebrate Ameelio's launch, you have unlimited letters! As our community grows, you'll have access to 4 free letters a month.

So which one is it? To say it's a "free communication platform" with "unlimited free letters" but then to limit it to 4 letters/mo as your "community grows" is disingenuous.

odensc··on A one-line package broke `npm create-react-app`
As a fellow commenter said, you would ideally use something like dependabot or greenkeeper/snyk.
odensc··on A one-line package broke `npm create-react-app`
For security reasons - you can modify the prototypes and you wouldn't want iframes to inherit that.
odensc··on A one-line package broke `npm create-react-app`
That applies for browsers, yes (though I'd argue is a rare edge-case), but create-react-app is a Node.js application.
odensc··on A one-line package broke `npm create-react-app`
I feel the real issue here is downstream package consumers not practicing proper dependency pinning. You can blame the Node ecosystem, the maintainer of the package, etc. but there are well-known solutions to prevent this kind of situation.
odensc··on A one-line package broke `npm create-react-app`
In theory `x instanceof Promise` would work, but the reason for this package is that there are many non-standard Promise implementations in the JS world.
odensc··on Anthos support for multi-cloud is generally available
Thanks... It was near impossible to find a summary like this even on their product page.
odensc··on Anthos support for multi-cloud is generally available
So what does "Google Cloud's fully managed Anthos" do in non-marketing speak? I'm not exactly sure what a "multi-cloud and hybrid application platform" providing "agility and flexibility" is supposed to do for me as a "born-in-the-cloud digital native or a traditional enterprise."
odensc··on Vercel, formerly Zeit, raises $21M Series A
Wait, they don't support Go? It advertises that on their pricing page... https://vercel.com/pricing

And it's listed in their support docs here... https://vercel.com/docs/runtimes#official-runtimes

odensc··on TracePrivately – open-source sample app using Apple's contact tracing framework
> A quick scan of the linked project suggests no such healthcare provider code is required.

That's why this is a sample app and not the actual application that public health authorities will be using.

See below:

"A representative from Apple and Google's joint contact-tracing project said that their system similarly envisions that patients can't declare themselves infected without the help of a health care professional, who would likely confirm with a QR code." [1]

[1]: https://www.wired.com/story/apple-google-contact-tracing-str...

odensc··on Bouncing DVD Logo
I have a 60fps + 144fps monitor setup and when I move it to my high refresh rate one, it goes hyperspeed :) You should calculate delta time with performance.now() and change position based off of that.
odensc··on Valve and HackerOne: how not to handle vulnerability reports
Steam is not using self-signed certs. store.steampowered.com is their main user-facing storefont.

Why would they "most likely" be using a self-signed cert? That would be an extreme edge-case in my mind, not the standard.

odensc··on Converting an old MacBook into an always-on personal Kubernetes cluster
Interesting, I'll have to look more into that and the differences to k3s. But k3s does support clustering BTW.
odensc··on Converting an old MacBook into an always-on personal Kubernetes cluster
FYI, if you're looking to deploy a hobbyist/side-project Kubernetes cluster I'd highly recommend k3s [1] - it's a lightweight certified distribution, and is ridiculously easy to set up. I haven't needed to do any maintenance besides the periodic update.

It also works fine for production in my experience, I have a mildly popular website running on a 4GB VPS with it and haven't had any issues related to k3s itself.

[1]: https://k3s.io/

odensc··on “Just walk out” technology by Amazon
Source? Literally everything I've returned on Amazon over the last couple years has had at least one free return option (usually via UPS / Amazon Hub dropoff).
odensc··on Tesla X parts that had to be replaced after 400k miles
That's for two cards as well, so only ~$12/ea. Pretty reasonable.
odensc··on Wacom tablets track every app you open
Can't think of any specific sites, but it's happened to me a few times. It's usually because there's bad code that's waiting on the GA init function before doing anything else.

This is why some blockers like uBlock Origin stub out the Google Analytics interface.

odensc··on Detroit's salt mine: City beneath the city
Do you happen to use CloudFlare's DNS (1.1.1.1)? They have quite a long-standing [1] issue with archive.is. (or the other way around depending on your opinion)

[1]: https://webapps.stackexchange.com/questions/135222/why-does-...

odensc··on Please make your products work with URLs
You can do this natively with Chrome. Just go to the overflow menu in the top right > Cast... > Sources > Cast file.
odensc··on Facebook crawls links in PDFs you send in Messenger
That doesn't mean they're crawling the URLs, just that they're indexing the content of PDFs/images for your search. Which is, honestly, a pretty useful feature. Whereas Facebook is doing this without providing any value to the user.
odensc··on Bitwarden: Free, open-source password manager
It's listed here: https://github.com/dani-garcia/bitwarden_rs/wiki/Which-conta...

Says it works on Raspberry Pi 2 or newer. Do you have a 1?

odensc··on Bitwarden: Free, open-source password manager
Is there a reason you couldn't use the official `raspberry` Docker tag?
odensc··on How I Could Have Hacked Any Instagram Account
I've always wondered - is there some kind of software that can match font glyphs from a partial image?
odensc··on Amazon Accidentally Sold $13k Camera Gear for $100 on Prime Day
They'll almost certainly cancel it. Pricing errors like this happen all the time on Amazon, there are whole websites/subreddits dedicated to finding them. Usually they just cancel it the next day and maybe give you a $10 gift card.

Sometimes you get lucky and get the item, but the media's advertisement of this will probably exponentially increase the chance of getting your order canceled, unless Amazon has some crazy PR strategy.

odensc··on Google PDF Search: “not for public release”
I'd assume public VNC Java applets, therefore being able to access random people's machines.
odensc··on 1Password: Standalone / Local Vault Option Gone?
The ultimate password management solution: Self-host Bitwarden on some cheap VPS, backup to B2/S3/GCS for $0.01/free.
odensc··on More information about our processes to safeguard speech data
> This is a bold claim. The VRT journalist were able to re-identify few data subjects and confirmed with them that their data was being listened by Google contractors.

Well, both claims could be true. Even if the snippets are not directly associated to users, there could still be identifying information in the recording that could be used to identify the person speaking.

← PreviousPage 3 of 5Next →