HNHacker News
TopNewBestAskShowJobs

sam1714

190 karma · joined June 29, 2021

submissionscomments
sam1714··on DiscImageStudio: burn visible artwork onto CDs, DVDs and Blu-ray discs
You didn't miss much. It took 20-30 minutes each pass, plus the extra cost for the discs.

But even if you were fine with that, it came out too light under actual lighting conditions, even after you burned it twice, which defeats the use case of making it look professionally labeled. For home use, a Sharpie beat it in every way.

sam1714··on Lenovo's 'encrypted' fingerprint USB is just an unencrypted SD card in a case
A good reason you have to use these sticks is stand-alone devices.

For example, you need to print something; take some data from an oscilloscope or other instrument.

Your alternatives are to connect those devices to your network or some devices run Windows you can alt-tab out of and install your own software. Given risks and complexity of those, a hardware encrypted USB stick is the least bad.

sam1714··on Show HN: Auto Dismiss Mac OS "Allow <app> to find devices on local networks?"
The first scenario is due to anti-trust complaints forcing Apple to treat their pre-installed apps identically to third-party ones. (Also why you can "delete" system apps.)
sam1714··on A Printer Printing onto Paper
The printer is subsidized by the price of the cartridge. If you want to pay the hardware subsidy without getting any hardware, they're fine with that.
sam1714··on US Wages Share of GDI at 75 Year Low
Any LLCs and PLLCs (physicians, attorneys, lawyers, accountants, architects, etc.). An owner of a LLC cannot be an employee of it and therefore is pass-through.
sam1714··on AI use leads UC Berkeley math professor to see 'no point' in grading homework
>faculty research overhead pays for department TAs

The majority comes from tuition budgets, which are assigned per credit-unit. This also pays for faculty salaries. Math is heavily dependent on tuition because they get little overhead. Life sciences is buying millions of dollars of equipment, chemicals, animals, lab staff that incur overhead, none in math.

>departments with rich professors maintain their TAs even through budget cuts

In fact the University of California does not get to keep any overhead. It goes right back into the State of California General Fund and the CA Legislature, as part of the budgeting process, decides where it goes (obviously considering where it came from). During a budget squeeze, overhead can be diverted elsewhere.

Because of this, for a number of years, it was unknown whether the research enterprise at the University of California was actually covering its overhead costs or operating at a loss.

sam1714··on AI use leads UC Berkeley math professor to see 'no point' in grading homework
>This is common practice among tenured professors with grant money to spend and graduate students beholden to them (I’m not making a moral statement, just noting this is common practice).

No, that's not common at all, nor how the system works. Use of graders/TAs are on an institution basis.

"Grant money" has absolutely nothing to do with it. Grant money is earmarked for specific research and cannot be spent for teaching purposes. When grant money is used to hire graduate students, they are research assistants and must work on the research project which the grant money was given for.

TAs/graders come from separate tuition budgets. Tuition dollars are much more preferred anyway because they're stable and faculty do not have to work for them, they show up based on enrollment.

The fact you have TAs/graders at all is by institution. Large R1 institutions have grad students and undergraduate population to fill these roles. In these institutions, 1 minimally sized undergrad class = at least 1 TA, with additional TAs and graders after some enrollment threshold.

Tenure has absolutely nothing to do with it. Adjunct faculty get TAs/graders all the same.

sam1714··on Sony Retires Its Last 4K Blu-ray Player in Japan, PS5 Is All That's Left
Like all analog formats, vinyl has a non-linear response. Things like total amplitude and frequency content affect noise and distortion when reproduced. Another factor is that it's a constant angular velocity medium, so the response is different at the beginning than the end. These are factors that a good mastering engineer takes into account.

This occurs in the digital world as well. When we went to DVDs, the studios had encoders/authoring engineers, who tweaked compression parameters per scene, as compression is another non-linear process. For example, they might apply a small amount of blur on a dark scene where film grain trips up the compression.

Eta: Apple provides the exact pipeline [1] they use for their services so the sound engineer can listen to the output and adjust.

[1] https://www.apple.com/apple-music/apple-digital-masters/

sam1714··on eMudhra to exit global SSL/TLS certificate business
You can do that, and I'm sure people already do. But you can't truly test things at scale. Are OCSP servers going to get overloaded? What about IoT devices and things out of support? You have deployments which configure their systems in non-standard ways, maybe some corporate manager decided to mandate cert pinning.

The original comment was to do a fire drill and revoke live certificates to force everybody to participate in the test.

You can have a fire drill and evacuate an office building, but you can't hold a full-scale forest fire/volcano/hurricane drill and evacuate 3.5 million people to test mass evacuation routes, and also you got the edge cases that don't participate in drills, like homebound seniors or hospitals, where disaster strikes.

sam1714··on eMudhra to exit global SSL/TLS certificate business
The problem isn't revocation of end-user identity certificates. There's hundreds of millions of those floating around at any given point, so revocation happens very regularly. The issue is revocation of intermediates and roots, which involves invalidating tens of millions of certificates and often find themselves in embedded/non-web applications (financial, legal signatures, medical data exchange).

An analogy would be shutting down neighborhood streets versus shutting down major highways in a state for a hurricane evacuation. You can't test the latter at scale.

sam1714··on Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
Giving them way too much credit... it's probably for a bug discovered in 2024.
sam1714··on Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
My impression is "why" is political, with regulations like EU's eIDAS and other national digital sovereignty efforts setting the rules. It's not even WebTrust that's the target in most cases, it's the ETSI EN 319 series and ISO 21188.

Is it possible to convince the EU to say that, no, each one of your 27 member states isn't allowed to have a PKI? I don't think so.

sam1714··on PHP 8.2.35
That does happen with downversion software. Red Hat may distribute a backported patch to some component which isn't the same as Canonical or Debian's.

Most users, who don't know the answer to your questions, rely on the distro to figure this out (and often pay good money for it).

sam1714··on macOS 15.8.2 Breaks OpenGL
Because you're testing pre-release software on a dedicated machine... right?
sam1714··on Florida's HOAs and condo associations are making the housing crisis worse
My city sales tax dollars should not be used to fund the maintenance of a fancy median in some neighborhood on the other side of town.

You can put in a special district, that's an HOA under a different name, with even more government powers and bureaucracy costs. For example, you vote on stuff via the general election, they can seize your home for unpaid property taxes, they can impose zoning laws, and in some places they can impose criminal ordinances (dog pooping in the park).

sam1714··on Source code of the Estonian online voting system
The US. Primary, general, and in a number of states, you have to have a special election to replace the senator/representative that joined the new administration or quit or whatever. Actually, that causes 4 elections because you have a primary for that. [1]

>You probably shouldn’t be voting in state elections either because you’re not a resident.

That's a matter for the state, and many say if you still have a house, or intend to return, then you vote there.

> If you’re living abroad, you shouldn’t be voting in local elections because you’re not a resident.

And no, a number of states allow voting in that case even if you're not a resident [2]. For instance, you own a vacation home, you get to vote on property tax related matters concerning that house.

[1] https://ballotpedia.org/Special_elections_to_the_119th_Unite...

[2] https://www.ncsl.org/elections-and-campaigns/voting-by-nonre...

sam1714··on Source code of the Estonian online voting system
>Vote... where? In what state, in what county, in what precinct?

No, you misunderstood the comment. It has nothing to do with residency, that's solved.

During a normal election year in the US, you have two elections: a primary and a general. The primary is not solely for political party nominations either, often other state and municipal questions get put on it.

Some places commonly end up getting a 3rd because, e.g. a senate seat becomes vacant and the state has a requirement to hold a vote on the replacement. Sometimes the seat becomes vacant as a result of taking a position in the new administration, so you end up having 3 elections a couple of months apart.

sam1714··on Source code of the Estonian online voting system
Intentionally limiting access to accessible voting is problematic.

You also have issues of deanonymization if you only get a couple of ballots in via one method. In Maryland, for example, they're supposed to encourage at least 100 random people to use the accessible ballot marker per precinct for this reason.

It's not reasonable to tell people "too bad," fly back to the US as much as 3 times per year. They pay taxes and are subject to US law even though they're overseas, so they get to vote.

Ballot management becomes error prone. My county alone has 25 ballots due to the different combinations of state house, senate, Federal house, municipalities, and _all_ the special districts. (4 members to the board of directors of the Anytown West Memorial District, a.k.a. cemetery, because they had a property tax assessment when they built the thing in 1950)

sam1714··on Source code of the Estonian online voting system
I'm confused. Can you explain the exact issues created by this repudiation system practiced by US states? Maybe there's a real issue that hasn't been addressed that I am unaware of.

Or is this a knee-jerk America Bad?

sam1714··on Source code of the Estonian online voting system
There are problems that electronic voting does solve: in some countries, moving paper ballots are problematic and subject to tampering. This shows up in mail-in voting, where there's always a risk of loss and delay. Overseas voters are an issue, e.g. deployed military.

There is a specific problem with mail-in voting and disabled voters, for example elderly people who can't go to the polls and can't get an electronic ballot marker. 25 US states deliver ballots electronically and 15 allow electronic voting for this specific case [1].

[1] https://www.ncsl.org/elections-and-campaigns/electronic-ball...

sam1714··on Source code of the Estonian online voting system
You can do A' in some US states... you can vote by mail/early vote, and then later request they spoil that ballot and do it again, or by voting on election day the mail-in is invalidated.
sam1714··on Making chicken transparent using Dorito dust
There's tens of thousands of different "chemicals" in the chicken breasts that we have no idea how it works. Not only that, they're living things, cells, that replicate, can become cancerous, and are known to contain human pathogens (Salmonella, bird flu).

In fact, Salmonella kills 420 people per year in the US alone and infects 1.35 million people [1]. That is a whole lot scarier than tartrazine. Of course, it's 100% natural and organic!

[1] https://www.fsis.usda.gov/inspection/inspection-programs/ins...

sam1714··on Delta’s Biscoff cookies were supposed to be temporary
During the heights of COVID, the bargain store by me had boxes of trays of American Airlines' Biscoff. They were clearly optimized for weight: packaged in a super lightweight plastic tray with shrink wrap so thin it already had holes in it.

They apparently had enough getting stale to offload them to a liquidator.

sam1714··on Feds got warrants to use fake cell towers to hunt down Don Lemon's producer
Current Starlink direct-to-mobile is proprietary. It's kind of the opposite: 5G NR NTN so far has required new chipsets which haven't found their way into phones yet, whereas Starlink's LTE has been deployed with firmware changes to existing phones.
sam1714··on Hackers activate automatic defrosting in supermarket fridges across Europe
> something the store managers can figure out

That's like saying the store manager should manage the store website and networks instead of the chain's IT department.

No grocery store manager is going to be a licensed refrigeration technician. Ask them if they know about basic refrigeration concepts like superheat and subcooling, high side and low side pressures, compressor oils...

Further, a grocery store wants to optimize efficiency down to the percent, because that will save tens of millions of dollars over the fleet, and CO2 emissions. A store manager hardly has the capability.

sam1714··on Hackers activate automatic defrosting in supermarket fridges across Europe
>Ignore may be a tad strong. I am merely asking for hardware that is subject to my control to be within my control.

Which is how they got into this situation. These are industrial refrigeration systems subject to a huge list of variables (how many units, their sizes, and doors hooked up to a refrigeration circuit, open vs closed cases, ambient conditions, hours of store operation, what type of refrigerant, whether heat is going to a cooling tower or air heat exchanger). They use a ton of energy, and percent optimization leads to millions of dollars over a fleet. They are designed to let the user dial in every operating parameter, like defrost.

Compare this to my home fridge where all these parameters are fixed in the firmware because the hardware is 100% identical.

Industrial systems are necessarily different from mass-produced home appliances.

sam1714··on Hackers activate automatic defrosting in supermarket fridges across Europe
>Where people work, who have to empty a fridge before it can be remotely defrosted.

You don't empty a fridge with built-in defrost. Your home fridge defrosts itself every 12-24 hours and you don't have to do anything.

Normally, the temperature recovers in ~1 hour after a defrost. The attack is apparently chaining manual defrost commands one after another so that the interior gets way too hot.

sam1714··on Apple/macOS removed from official Unix registry
If you want to start a new trend, you should do this with FIPS 140, which has to be recertified every year. "Apple crypto is no longer FIPS certified"

Even better, last year's 26 releases are still undergoing the process.

sam1714··on Beauty in DVD Menus
So the best solution would be Video CD. The original VCD worked like an audio CD: random access, time search, chapters, trick play (in forward).

Later on, they added menus, called Playback Control, but many players let you turn that off.

sam1714··on Shipping JPEG XL in Chrome
E-commerce is the important use case, particularly in goods where people care about appearance: clothing, cosmetics, food.

Things in these categories have colorful packaging with spot colors, metallic inks, coatings, as well as store displays with carefully designed lighting. The added cost is justified because it increases sales. It makes sense to carry that over online.

Page 1 of 3Next →