HNHacker News
TopNewBestAskShowJobs

rjmunro

2,776 karma · joined June 19, 2013

Senior Full-Stack Developer | Broadcast Automation & A/V Integration | TypeScript & Node.js
submissionscomments
rjmunro··on A Roblox cheat and one AI tool brought down Vercel's platform
It might be the opposite - they logged into their work gmail account on their home machine to check their email.
rjmunro··on Edit store price tags using Flipper Zero
In which country?
rjmunro··on FSF trying to contact Google about spammer sending 10k+ mails from Gmail account
I think thats a really wrong definition of spam. Spam is untargeted junk from people you don't know, who are probably hiding there real identity using fake email headers etc. If it's a legit company with legit unsubscribe options, it's not spam.

It worries me a lot that people clicking "mark as spam" on messages from legit companies because they subscribed to the newsletter will mean that my messages with important information (order confirmations, e-tickets etc.) will get blocked.

rjmunro··on FSF trying to contact Google about spammer sending 10k+ mails from Gmail account
I don't think your definition of spam matches the one that I understand it to mean. Spam is random email from someone you have not had contact with before firing messages to every address they can find anywhere on the web, the dark web, etc. Or if you ask not to be added to a mailing list and are added anyway. They often use fraudulent tricks to try to get the email through filters, such as fake from addresses.

Spam is not email from legitimate companies with valid contact details that have an opt out that you forgot to click when you signed up with them. That's legitimate marketing emails. You might argue they also shouldn't exist, but they are a different category.

I get plenty of the second from mailchimp (it's what they do), almost none of the first. Marking the second kind as spam, rather than clicking the unsubscribe link is dangerous because it teaches your anti-spam filter to reject messages from legitimate companies. You might find that if they need to contact you for a genuine reason e.g. a reciept for a future transaction, the message is blocked.

rjmunro··on Darkbloom – Private inference on idle Macs
Can you rephrase that? I don't think I've read it correctly. It sounds like you are saying it would normally cost $50k on a 5090 and they can do equivalent work paying $1k. That's sounds like a $49k profit margin, but you say they will go broke.
rjmunro··on I wrote to Flock's privacy contact to opt out of their domestic spying program
Legally how does it work if I upload a file to Google Docs and then share it with my contacts? Is Google then a data brokerage for my files?
rjmunro··on I wrote to Flock's privacy contact to opt out of their domestic spying program
The problem with this is where do you draw the line? If I film you with my iPhone (e.g. you walk past in the background of my video), Apple should delete my video from my phone and iCloud account based only on your instructions?

Apple hold the data in iCloud, Apple (or a phone network) may be leasing me the phone. That sounds pretty similar to the Flock situation.

I guess the difference is that flock might be sharing the data from a customers camera with other customers. Then they are definitely controlling it.

I think the bigger problem with Flock is the fact that their cyber security is so laughably bad that non-customers can easily access the data.

rjmunro··on Show HN: Git bayesect – Bayesian Git bisection for non-deterministic bugs
I think if you make your test script compile and then run the tests up to N times, failing on first fail, then when you run bayesect, it just "sees" a test that is "N times more" deterministic, so will behave appropriately.

I'm not sure how to choose an optimal value of N. My first hunch is make it so that it takes at least as long to run all the tests as it takes to setup (checkout, compile link etc.), but it may make sense to go a lot more than that. I'd have to do some thinking about the maths.

rjmunro··on Artemis II is not safe to fly
I read something about the Challenger disaster being predicted by an engineer and they wrote a memo about the risk because they were worried about it, but it didn't get through. I wondered if this was the only memo ever about risks to the space shuttle, or if it was one of hundreds and it just got the actual cause by luck.

Does anyone know any more about this?

rjmunro··on Artemis II is not safe to fly
I thought I'd look this up. If you've had 9 successful attempts, assuming nothing has changed between them and no other prior knowledge about success probability, then Laplace’s Rule of Succession says the probability of the next mission being a success is about 83.3%, i.e. there is a 1 in 6 chance of failing next time.
rjmunro··on Axios compromised on NPM – Malicious versions drop remote access trojan
Most of axios' functionality has effectively been promoted to a language feature as `fetch`, but the problem is people don't bother to migrate. I've migrated our direct usage of it but it's still pulled in transitively in several parts of our codebase.

Even left-pad is still getting 1.6 million weekly downloads.

rjmunro··on Axios compromised on NPM – Malicious versions drop remote access trojan
> Likewise, every response I get is JSON.

fetch responses have a .json() method. It's literally the first example in MDN: https://developer.mozilla.org/en-US/docs/Web/API/Fetch_API/U...

It's literally easier than not using JSON because I have to think about if I want `repsponse.text()` or `response.body()`.

rjmunro··on My MacBook keyboard is broken and it's insanely expensive to fix
> If I buy a can of soup and find glass in it, I have a valid claim against the manufacturer.

What does that mean?

rjmunro··on The Engineer Who Tried to Put Age Verification into Linux
I'm probably missing something, but I don't think this is as bad or as useless as the article implies. E.g. as a parent I can set up my kids PCs with their age so stuff like app stores know to only serve them age appropriate things to download. It's the minimum to comply with the laws. It doesn't stop anyone owns a machine, but it does provide a useful option to set if you want it.
rjmunro··on MoD sources warn Palantir role at heart of government is threat to UK security
What does that mean?

What are they actually doing for the MoD? Are they reading MoD data out and processing it elsewhere?

rjmunro··on Intel Demos Chip to Compute with Encrypted Data
There is no hardware encryption or decryption.

I encrypt some data and keep the key. I send the encrypted data to you (probably some cloud provider). I tell you to do some operations on the data. I don't tell you the key or what the data is or what the operations mean. You send the results back to me. I use the key to decrypt them.

You have helped me with my compute task, but the data you have is totally meaningless without the key, and only I have the key.

It's hard to believe that it's possible to make encryption where this can do useful work, but it is.

rjmunro··on RFC 454545 – Human Em Dash Standard
I was also thinking this about 3 weeks early for April 1st.

If it's serious, I don't know why humans have to change to add hidden bytes, and we assume AI won't naturally learn them, or if it does the AI companies will be expected to filter them out. Why only on dashes? If the plan requires AI companies to make changes to their output, why not just say only AI should add extra invisible characters, and why not before or after any punctuation?

rjmunro··on The Age Verification Trap: Verifying age undermines everyone's data protection
I know Gadgetbridge as it's the official way to use my open-source BangleJS smartwatch. I would have got the rest of the family BangleJS watches too, but they don't like the style of them.
rjmunro··on Bus stop balancing is fast, cheap, and effective
I agree and disagree with this. Sometimes older people using the busses are what keeps the routes busy and makes it worth running a good service for everyone else. But on the other hand, I have seen abuses. Years ago I somehow got chatting to a fellow bus passenger who liked to ride the busses all day as a hobby. I think rather than charging I'd limit it to 10 free rides a week or something, where a ride is equivalent to a hopper fair - as many connections as you need within an hour of the first touch-in. After that it should use pre-pay credit at a normal rate.
rjmunro··on The Age Verification Trap: Verifying age undermines everyone's data protection
> I don't want some blanket ban on content unless it's "age appropriate"

I'm currently struggling with FitBit. Since about the start of the year, my kids can no longer sync their watches to their phones. The "solution" is to completely disable all parental controls on their Google accounts.

rjmunro··on “Car Wash” test with 53 models
My interpretation is that Pat is a rooster and he has laid an egg. That's in the question. A normal rooster can't normally lay an egg, but so what, that's completely irrelevant. Maybe Pat is not a normal rooster. Maybe by "lay" an egg, the question meant "put it down carefully". Maybe it's just that the questioner's English is poor and when they said rooster they meant hen.
rjmunro··on PayPal discloses data breach that exposed user info for 6 months
People in most countries can use Visa and Mastercard to pay across borders, and have been able to do so long before PayPal existed (at least back as far as the 1980s).

But PayPal probably existed and was easier for merchants in more countries than other payment services at certain points.

rjmunro··on I found a useful Git one liner buried in leaked CIA developer docs
I don't think that search is very valid - the TUI group travel companies are likely much more mentioned than Terminal User Interface. They are pretty big around the world and have an airline, cruises, hotels etc.
rjmunro··on Ministry of Justice orders deletion of the UK's largest court reporting database
Are there actual numbers for this anywhere?
rjmunro··on Show HN: A free online British accent generator for instant voice conversion
What do you mean "Everything runs entirely within your browser."? The audio comes from https://se-data-us-oss.oss-us-west-1.aliyuncs.com/audioconve......

I have seen speech synthesis entirely in the browser, e.g. https://github.com/diffusionstudio/vits-web

It works quite well but is a bit slow to start because you have to download the models each time.

rjmunro··on xAI joins SpaceX
The UX is a mess. Why does the car always label the trunk as open rather than have a button that I press to open it?

Why does cruise control sometimes change to the speed limit and sometimes not?

Why does auto lane change sometimes need me to start the manoeuvre and sometimes not? If I guess wrong and start the lane change myself, all autopilot just disengages suddenly.

I have to proove that I'm holding the wheel by wiggling it from time to time, but if I accidentally wiggle too hard it disengages. Why not have a sensor or use the cameras to detect if I'm holding the wheel?

My son didn't shut the back door properly. I started driving and the car started binging. It didn't tell me why it was binging until I put it in park and looked at the pretty 3d representation of the car, then noticed that the door was open.

Maybe if I drove more regularly I would get used to all this stuff. The car was borrowed and I gave it back.

rjmunro··on 4x faster network file sync with rclone (vs rsync) (2025)
zsync is better for that. zsync precalculates all the hashes and puts them in a file alongside the main one. The client downloads the hashes, compares them to what it has then downloads the parts it is missing.

With rsync, you upload hashes of what you have, then the source has to do all the hashing work to figure out what to send you. It's slightly more efficient, but If you are supporting even 10s of downloads it's a lot of work for the source.

The other option is to send just a diff, which I believe e.g. Google Chrome does. Google invented Courgette and Zucchini which partially decompile binaries then recompile them on the other end to reduce the size of diffs. These only work for exact known previous versions, though.

I wonder if the ideas of Courgette and Zucchini can be incorporated into zsync's hashes so that you get the minimal diff, but the flexibility of not having a perfect previous version to work from.

rjmunro··on Why some clothes shrink in the wash and how to unshrink them
It doesn't need extra mass, it needs to stretch out a bit.
rjmunro··on Why some clothes shrink in the wash and how to unshrink them
I want someone to engineer a fabric / fibre that grows with each wash rather than shrinks. I feel like with modern materials science it must be possible.

I'd use it for children's clothes. After you wash the clothes, you wait for the kid to grow a bit before they wear it again. No more growing out of your favourite things.

rjmunro··on Anyone have experiences with Audio Induction Loops?
> ... those that have hearing aids often complain ...

When I do sound at church, I always wish they would complain more. I assumed it was working, but one day found that the power cable for the loop system was not connected. I plugged it back in, and spoke to a hearing aid user about it and they said it hadn't been working for weeks. Why they (or all the other hearing aid users) hadn't mentioned it before I don't know...

← PreviousPage 2 of 30Next →