HNHacker News
TopNewBestAskShowJobs

oridecon

844 karma · joined January 3, 2013

submissionscomments
oridecon··on Don’t Mess with The Google
And it's pretty easy. I have a few accounts on Thunderbird and I can drag and drop e-mail directly from one account to another, I think they are .eml files. You can also have local accounts just for storage.
oridecon··on Fix Windows 10 Privacy
It's not "off". My workstation running Windows 10 Enterprise still makes a lot of network calls (even explorer.exe) not related to Windows update. I never came across an in-depth analysis of what exactly is being sent, please share if you know of one.

---

https://technet.microsoft.com/en-us/itpro/windows/manage/con...

The lowest telemetry setting level supported through management policies is Security.

[Security Security data only. 0]

Information that’s required to help keep Windows, Windows Server, and System Center secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender.

The Security level gathers only the telemetry info that is required to keep Windows devices, Windows Server, and guests protected with the latest security updates. This level is only available on Windows Server 2016, Windows 10 Enterprise, Windows 10 Education, Windows 10 Mobile Enterprise, and Windos IoT Core editions.

oridecon··on YouTube has apparently reinstated RSS feeds
Another option is using only the browser with a RSS extension, livestreamer.io (tons of options like player-passthrough=hls, player-continuous-http) and https://addons.mozilla.org/firefox/addon/open-with/

It works great for me.

oridecon··on Fix Windows 10 Privacy
It's been like this for ages, it's like that stain in the ceiling you never noticed before.

Oh, and if you start digging you'll get even more angry. Things you trust without thinking twice (not really but you get the idea) is also compromised or doesn't have a practical alternative: hardware, TPM, certificates, your smartphone hardware and software, ∞

(I'm no expert, I just like to complain about it)

oridecon··on Blueprint – A React UI toolkit for the web
Just having the page open kicks my CPU to 4.6 GHz and I can hear my fan going crazy, Chromium 56. Doesn't happen in the documentation or checking the examples.
oridecon··on Office UI Fabric by Microsoft
I would drop the fade effects if I were MS. I can't be the only one who notices how bad most "effects" look in the browser. It reminds me even more that I'm not in a native platform.
oridecon··on Google Arc++ – Rendering, Compositing and Window Management [pdf]
https://lwn.net/Articles/701964/

https://www.youtube.com/watch?v=4PflCyiULO4&t=2h10m22s

oridecon··on Nvidia adds telemetry to latest drivers
Razer (http://arstechnica.com/gadgets/2012/11/why-the-hell-does-thi...)

I know Logitech's software also makes network calls but I never bothered looking what it is, I just block everything. At least it doesn't ask for a login, it can save locally or in the on-board memory.

oridecon··on Switching from macOS: Developer Environment
for screenshots (of any DE) there's also /r/unixporn

(https://www.reddit.com/r/unixporn/search?q=xfce&restrict_sr=...)

oridecon··on One week with the Google Pixel
I'm in a similar position, I considered changing to an iPhone but in the end it's just half-measure.

There's Ubuntu Phone, KDE Plasma, Copperhead and others but they don't feel like a good solution. The problem is always the same: no apps. It doesn't matter if I can install 99/100 apps I need but the one I can't is a messenger one of my clients requires me to use. Or if I can't really rely on a compatibility layer like MicroG, since Android is not that open anymore.

oridecon··on New sandbox features in systemd
https://lists.freedesktop.org/archives/systemd-devel/2016-No...
oridecon··on MicroG Project: A re-implementation of Google's Android apps and libraries
I've heard people recommend Raccoon in the past but my phone is something so vital that makes me worried about stuff breaking (the combination of using a lot of 3rd party parts like MicroG, Racoon, apkmirror, ...).

I wonder if it's possible to dual boot without root and also keeping encryption on, that way I can have a safe option if anything breaks.

Damn, why is it so hard to have control over your things these days. It wears me down.

oridecon··on Introducing Unified Update Platform
You're assuming he's using Windows, and that he doesn't know about "crap" that has been in the news for months.
oridecon··on MicroG Project: A re-implementation of Google's Android apps and libraries
about DroidGuard: https://github.com/microg/android_packages_apps_GmsCore/issu...
oridecon··on MicroG Project: A re-implementation of Google's Android apps and libraries
I don't know much about Android, is this FUD and/or not really relevant?

https://twitter.com/CopperheadOS/status/772592323112869888

https://www.reddit.com/r/Android/comments/516z23/according_t...

oridecon··on Visual Studio Code 1.7 overloaded npmjs.org, release reverted
Approximately 3 new JS frameworks per hour.
oridecon··on Darling – MacOS translation layer for Linux
Shotcut, Kdenlive, Blender (overdrop)
oridecon··on VirtualBox 5.1.8
Is there a good article that explains why is so hard to properly do 3D acceleration in a VM? And why is it so hard to do GPU passthrough? And if there's any hope this might improve significantly, let's say 70~90% of native GPU performance. I understand you need compatible hardware and NVIDIA makes it harder just to sell cards that are more expensive. Maybe you have some insight.

Off-topic: You go in one of those Linux boards and they all say it's so easy to do it. I mean, yes, I can follow instructions and make it work but it's so cumbersome for every day usage if you want to use a Windows guest. Death by a thousand paper cuts. I don't have the time or patience to use weird setups in my work desktop anymore. To think about it, I did some pretty crazy stuff a few years ago, I'm surprised I wasn't even fired back then. The Linux equivalent of betting your income on a Hackintosh.

Kinda like anything Linux related. Don't get me wrong, all my servers are using some variation of it, but when it comes to UX (I'm not talking about GUI) and desktop stuff (not only games but anything GPU related) I wish some things were more mature.

oridecon··on Microsoft offers Apple users $650 off to trade a MacBook for a Surface
> Upgrading to Windows 10 enterprise/Pro allows turning off of such creepy telemetry.

Isn't this option enterprise only? And it doesn't disable everything

I don't know what's the situation now but when I checked what a W10 enterprise installation leaked in a VM I was really shocked. Even after using a few tools, and the policy editor, I remember that even explorer.exe (the file manager I mean) was making network calls.

Not trying to spread FUD about MS, I'm tired of ALL telemetry, from apps to Apples. I would love to see some privacy advocating foundation or public service that released constant unbiased reports about what each OS version is collecting from you.

And, like I said before, if MS wants me to consider using Windows (outside of my daily job, that I have no other option), they should offer a PAID option with ZERO data collection. I don't care if you offer Windows for free in exchange for the user data, but I don't want any of it. And you can have my money for that.

oridecon··on Freeablo – An open-source Diablo engine
Is there controller support? I know the UI is not made for that but I always wanted to try it.
oridecon··on Google Has Dropped Ban on Personally Identifiable Web Tracking
If you're being targeted, can you really protect your domain/DNS from all points of attack? And does domain privacy protection really covers all of your personal data, forever?

The more I learn the worse I feel about my digital privacy and security. The one thing I do right now is to compartmentalize my accounts and services, but I can't help to think it's only stopping smaller fish from getting/triangulating my data.

Tin foil hat apart, I also don't like to give away my data for free.

oridecon··on Google Has Dropped Ban on Personally Identifiable Web Tracking
I wish I could pay Mozilla to host my custom domain e-mail, encrypted files and any other services they could offer
oridecon··on Google Has Dropped Ban on Personally Identifiable Web Tracking
My Google account only runs in a separate browser. But I still do the things you mentioned (privacytools.io). For YouTube I'm using a RSS reader (no account) through a 3rd-party but I think they can still easily identify me.

I hope I can fully remove Google from my life in a few years.

oridecon··on Kill “Microservices” Before Its Too Late by Chad Fowler
Sometimes I like to consume content like it's not fast-food.
oridecon··on Introducing GitHub Community Guidelines
That makes me VERY uncomfortable. To the point I don't even want to talk about it anymore, I'm just going to move away from GitHub.

Someone might link to one of my tweets from 2010 where "I want cloning to be legalized" (that's not me, just same username).

oridecon··on Introducing GitHub Community Guidelines
I wouldn't want to be the person deciding where issues like this fits: https://github.com/opal/opal/issues/941
oridecon··on Ask HN: I want a Google Pixel. I want to keep iMessage. Any solutions?
WhatsApp is locked to a single device and phone number. And the browser integration requires your phone to be connected to the internet. At least you can export the messages. I understand this is not "lock-in" but it isn't the best solution either.
oridecon··on Microsoft LightSwitch being discontinued
That comment section is quite depressing.

To be honest I enjoy when customers/developers are kicked in the face like this, by big companies. It's a good lesson to learn and might even push people towards open solutions and formats.

oridecon··on Taking PHP Seriously
I'm no expert but since he didn't reply:

- Use of mysql_ functions (This extension was deprecated in PHP 5.5.0, and it was removed in PHP 7.0.0. Instead, the MySQLi or PDO_MySQL extension should be used)

- Using the user input directly in the query instead of binding, using prepared statements, or at the very least casting to an integer (don't do this)

- (besides mixing multiple layers) Possible whitespace problems in the output validation (if you're using JSON), you want most php code to be "validated" (like using json functions), to have proper headers, to output types correctly (like booleans). This is also why you should never use PHP's closing tag, except for things like pure PHP templating, it's even in the PSR-2:

> The closing ?> tag MUST be omitted from files containing only PHP.

Not really the case here but you get the idea. It's like you're using a "html view" to output JSON API stuff.

- Possible "Undefined index", or worse, at $ar["name"], $ar["location"]

- Having to write some ugly conditionals if you have more than a single result and need to end the sequence without a comma or do any kind of transformation

- Trying to save vertical space by using expressions in the same line, sacrificing readability

- No error handling. What if the DB connection fails?

- Output is not valid JSON

http://www.php-fig.org/psr/psr-2/

http://phptherightway.com/

http://jsonlint.com/

oridecon··on Taking PHP Seriously
You mentioned Laravel 20 times. You might want to slow down on that kool-aid. And I know you're not affiliated with them because I see this behavior all around the place, especially with unseasoned developers.

> What I think most people are missing about PHP is the incredible ecosystem that emerged in the recent years (especially with Laravel)

I would replace that last bit with: "especially with Symfony and Laravel". And composer, and all the changes made in 7.x, and lots of libraries that people build on top of it and made all of this it possible.

This is a good talk (Symfony's "creator") about the PHP ecosystem:

dotScale 2014 - Fabien Potencier - My Take on PHP https://www.youtube.com/watch?v=gpNbmEnRLBU

← PreviousPage 3 of 5Next →