HNHacker News
TopNewBestAskShowJobs

sha666sum

309 karma · joined September 15, 2016

submissionscomments
sha666sum··on Jack Dorsey’s account was hacked
One point of 2FA is to protect from phishing.
sha666sum··on How do you describe a developer tools?
While I'm not at all familiar with the stack your tool is for and have no qualifications whatsoever to give solid advice on this:

My cynical impression is that the vague punchlines are meant to impress middle management, but if you want to win over developers, it's best to be straightforward. From my point of view (which is an amalgamation of Linux nerd, security & FOSS advocate and Windows gamer), I'm going to bounce right away from your webpage if it doesn't give me a clear description of what the product is about. The entire internet competes for my attention, so if your website contains stock photos of smiling office workers who are "working smarter", I'm going to press Ctrl + W quite fast. Having said that, I have no issue with "Leverage GraphQL + Serverless in data-driven SaaS apps". It's honest about what your product is about, and in my experience honesty correlates with other good properties of software.

I had a look at how Microsoft markets some of their developer products, and I think their messaging is on point here[1]:

- Visual Studio IDE

Rich IDE, advanced debugging

- Visual Studio Code

Editing and debugging on any OS

- Azure DevOps

Agile tools, Git, continuous integration

- Visual Studio App Center

End to end developer services for mobile and desktop apps

[1] https://visualstudio.microsoft.com/

sha666sum··on I Am the Cheapest Bastard in Indie Games
He also uses free assets, like those from OpenGameArt, which don't follow any specific palette.
sha666sum··on I Am the Cheapest Bastard in Indie Games
Those other versions don't look better, though.
sha666sum··on Ninth Circuit Goes a Step Further to Protect Privacy in Border Device Searches
Now this is a topic that might raise heated discussion so don't get baited into it, but a lot of anime and hentai content does cross the line. Drawing a 13 year old girl and saying she's 18 doesn't really change it.
sha666sum··on Introducing nushell
It is safe to say that it is unrealistic to expect that developers in the real world audit their dependencies.

I'd imagine a feasible solution being a permission-based system (which might already exist), where programs and their dependencies do not have access to certain facilities, like the filesystem, other processes or the network, without them being declared in a manifest file of sorts. Permissions should be inheritable when explicitly specified, and a sub-dependency could not gain a permission it didn't inherit from its parent. Unfortunately this does not work so well with a shell, since the shell needs the ability to spawn arbitrary processes. At least the shell itself would not have network access, forcing it to rely on tools already installed in the system

Also, if we resort to some magical wishful thinking, then all the tools in the system follow this permission model and the package manager is aware of the permissions. You could then query the package manager for all installed software with a certain capability, like network access, disabling tools like curl and netcat.

sha666sum··on Introducing nushell
ls is a shell builtin. When he types ^ls he uses the one from coreutils.
sha666sum··on A Telegram bug that disclose phone numbers of any users in public groups
I live in $civilized_country and have gotten one unsolicited phone call ever. It was from an Indian, so either it was a scam or someone who doesn't adhere to telemarketing blocklists.

Do not blame USA's inadequacies on human nature.

sha666sum··on Why All of Our Games Look Like Crap
> You would think after 25 years of making games he'd have enough sense to direct art himself in some way.

It might simply be that he isn't particularly interested in learning it. If he isn't motivated by being an art director, then it would very likely lead to burnout.

sha666sum··on Why All of Our Games Look Like Crap
I never managed to play any games in the Avadon series, because they don't have as good keyboard shortcuts as the Avernum series. One of the Avadon games even has a Linux port, which wasn't done by Jeff himself
sha666sum··on Why All of Our Games Look Like Crap
The article is about more than just his new game. All the criticism that he addresses is about his previous games, and even the title of the article is "Why All of Our Games Look Like Crap". I'm quite certain that the comment in the Avernum 3 caption was about changing the perspective from isometric.
sha666sum··on Privacy Sandbox – Open standards to enhance privacy on the web
I left out of my comment that there's significant overlap between users who block cookies and those who use adblockers. Many users simply don't want to see ads, but are subject to intrusive tracking nevertheless.

However, you are right that most people would probably be fine with personalized ads if it was possible to show them without identifiable tracking.

Personalizing content without identifiable tracking is a really hard issue that I'll be surprised if anyone ever manages to solve. It will also most likely involve some compromises that hurt Google's bottom line, so I think the financial incentives just aren't there for them. Given those two assumptions and Google's track record, I think it's absurd to assume that any standard they create will meaningfully improve user privacy.

Also, I fear their new standards would most likely just circumvent the tools available for users to avoid tracking, as the tracking would be baked into the browser itself.

sha666sum··on Privacy Sandbox – Open standards to enhance privacy on the web
> Second, blocking cookies without another way to deliver relevant ads significantly reduces publishers’ primary means of funding, which jeopardizes the future of the vibrant web.

Herein lies the issue. Users blocking cookies are trying to avoid being tracked and "seeing relevant ads". Essentially, he is trying to create web standards in order to do the thing that users specifically don't want them to do. Google's business model requires Schuh to twist logic in a manner that makes it seem like it isn't so.

sha666sum··on Why All of Our Games Look Like Crap
As expected, a lot of people in this thread are giving "valuable" advice about his art style. Jeff's self-ironic way of saying the game looks like crap and calling his art style inconsistent seems to have set the tone of the conversation.

Having played through the Avernum trilogy last year, I don't think the art style is inconsistent at all, especially considering how old some of the assets are. Please have a closer look at some actual screenshots from a recent Avernum game[1] before providing your invaluable input on how he should manage his game art.

[1] https://www.gog.com/game/avernum_escape_from_the_pit

sha666sum··on Why All of Our Games Look Like Crap
The Avernum trilogy, starting with Escape from the Pit[1] is a remake of the original Exile-trilogy. I highly recommend especially the first game in the trilogy.

[1] https://www.gog.com/game/avernum_escape_from_the_pit

sha666sum··on Microsoft Edge preview builds are ready to try
Microsoft advertises their own products and wants you to pay for products in their ecosystem. They will shove the same stuff down your throat (Azure, Onedrive, etc) pretty much whatever you do, which means they don't have a vested interest in behavioral advertising.

Google on the other hand shows ads across the internet, so they have to track you a lot more intimately in order to make you buy a new toaster or whatever (I haven't seen online ads in years, so I don't really know what they're like).

sha666sum··on When zebra mussels colonized Lake Erie, it began to recover
It refers to getting two 1's when rolling dice. https://en.wikipedia.org/wiki/Snake_eyes
sha666sum··on Gmail’s API lockdown will kill some third-party app access, starting July 15
That sounds nice in theory, but even as a highly technical user, I don't have any knowledge about what information apps actually gather about me.
sha666sum··on Ask HN: How do I make sure my kids are safe online?
It's a lot easier to keep your kids safe than your parents. Your parents are unlikely interested in learning new things about computers, but they need it for all kinds of important stuff, like spending money and communicating with people. Your kids don't have that issue, and don't have any important credentials to steal. However, if they're to be safe when they grow into adults, it helps to learn while they're young.

I think kids should grow up using PCs and not phones/tablets. I doubt kids can grow up to be computer literate if they spend their screen time in front of smart phones instead of PCs.

Here's what I would do: Put a PC with usable specs and the latest Windows in a semi-public place in the apartment. They're supposed to have some semblance of privacy but still have an adult passing by every now and then. Give them a Windows computer that's isolated from the rest of the network, and set up an unprivileged user with an adblocker. Give them access to the administrator account (or let them figure out the password as you type it in front of them), and tell them to be careful what they run on their computer, especially as admin. Sternly tell them not to plug in USB's/CD's/whatever into any other computer except that one computer which they're allowed to use.

The expectation is that they'll catch some adware sooner or later, download dubious game cracks, and generally mess up their computer. This is fine, you they're supposed to be allowed to experiment in moderation. If you fix something, try to have them around watching so that they see you solve the problem. Another good option is to take the computer away for a few days because "they messed it up, and now it has to be fixed". Even better if they have friends coming over to use the computer, as kids learn a lot from each other. Over time they might try to solve problems themselves and screw up Windows, at which point you'll reinstall it and incidentally wipe all their data.

Let them surf the web, as long as they stay away from porn, violent content, etc. Instruct them to stay pseudonymous, and not to tell people or websites/games who and where they really are. Tell them it's perfectly fine to lie on a login form. Tell them that there are all kinds of people on the internet, that everyone lies on the internet and that websites are competing for their attention. If something is bothering them, they can always just close the computer and talk to you about it. Most importantly, let them make mistakes and learn from them.

sha666sum··on Microsoft, currently the most valuable company, is having a Nadellaissance
Even when Microsoft does FOSS, they do it in a way that has "proprietary" written all over it. I'm quite excited about writing C# on Linux, but slapping a MIT license on code you release is only half the deal.

Yesterday I decided to write some C# code on Linux. That's easy, I thought: VSCode and .NET Core can both be found in Arch's repos these days. I just have to set an environment variable and edit VSCode's settings to disable telemetry... But alas! It turns out that I need to install Microsoft's proprietary release of Visual Studio Code because the C# debugger is only licensed to work with Visual Studio Code

Here's the Github issue about it, providing a bit of context and a lot of useless discussion: https://github.com/dotnet/core/issues/505

sha666sum··on Giistr – Search, filter and help on GitHub issues
I saw a completely white page on my desktop. The site renders on my phone, so now at least I know what we're talking about.
sha666sum··on Giistr – Search, filter and help on GitHub issues
I'm unable to see anything at all even after enabling scripts/xhr in uMatrix. Usually disabling tracking protection and fingerprinting in Firefox would fix this, but as far as I'm concerned, the site is broken.
sha666sum··on Should you be concerned about LastPass uploading your passwords to its server?
pass is amazing, as it makes synchronization incredibly easy in comparison to keepass. It even has a decent Android app. My biggest issue is that using it isn't nearly as convenient on Windows as on Linux, although WSL makes it quite simple.
sha666sum··on Man makes money from cold calls with his own higher-rate phone number (2013)
While cold calls are an issue, I don't think phone numbers should be able to charge you money without you being aware of it.
sha666sum··on Ask HN: Best way to test accessibility of a website?
Disable javascript and see if it still works.
sha666sum··on In a study of senior CS majors, U.S. students are tops in skills
Of course US students perform better in a US field test. The students should also do Chinese, Russian and Indian tests translated to their languages to eliminate bias.
sha666sum··on Goodbye, EdgeHTML
Eh, at least it only takes a few clicks to remove them.
sha666sum··on Disable Google Chrome Sign In and Sync
I've ran into various comments around the internet/reddit that Google sites like Youtube are slower on Firefox, and that changing the user agent to Chrome fixes it.
sha666sum··on Why I’m done with Chrome
Firefox DRM is only downloaded after explicit user consent.
sha666sum··on Why I’m done with Chrome
He understood it and it's mentioned there in the blog post.
← PreviousPage 2 of 3Next →