HNHacker News
TopNewBestAskShowJobs

spansoa

1,672 karma · joined July 24, 2021

submissionscomments
spansoa··on Ask HN: How do you keep tabs on the ideal tech stack?
I stick to a baseline of CSS/JS/HTML5 and avoid any flavor of the month software designed for efficiency. Most of those tools (Tailwind etc) are powertools and like bringing a gun to a knife fight. Eventually you will need to do something the framework can't do by itself, and you know, do some CSS (god forbid!).
spansoa··on [dead]
I started my Twitter account by doing a lot of 'follow trains' where you ask people to follow if you follow them. This is a free way to boost your follower count from the start without having to buy them on 'gig' sites like Fiverr etc

Then once you've reached a number you like, just delete all those follow train tweets and start building an audience the right way.

Why do this? You gain credibility having at least 100 followers than having none. It's a sleazy tactic, but it works.

spansoa··on Ask HN: Why hasn't Git been adopted outside of software engineering?
Over the years, I've seen entire books being written on Github, with all the grammar and spelling mistakes, warts and all to be seen in the diff. This is true of documentation & blogposts on Github too. Github is not just about software.
spansoa··on Taking a break from social media makes you happier and less anxious
Not if you train your feeds to be high signal. Facebook has an 'unfollow' feature which enables you to mute people you don't like, but still have them as a friend (for whatever reason, went to school together once, or they're a colleague etc). As for Twitter, I just curate a bunch of Lists and avoid their algorithmic timeline and 'suggested' content.
spansoa··on Why to care about privacy after years of sharing data
I used to have a large online presence pre-Snowden leaks and was signed up to hundreds of services, some even in my legal name. Gradually I attempted to 'go dark' and delete all those accounts, which was tedious, but worth it.

There's two extremes to being online: you can wear your heart on your shirt sleeve and post under your legal name, and share details about your private life, or you can be a ghost and leave no traces, or at least minimize your footprint.

There is this thing: some people are just so famous online, that reverting back to some private mode is nearly impossible for them. They're so out there and involved with so many services, that 'going dark' for them would be very difficult, but there are steps you can take to minimize your footprint. It's not too late to take those initial steps.

I encourage everyone to attempt to 'go dark' gradually and make it very expensive for people to dox you. If you turn it into a game, it's even better. I said it was tedious, but honestly I kind of like becoming a ghost. I'm so opaque to big tech now, that it must really piss them off, including dragnet surveillance.

It's not a life for everyone however, and sometimes I have to participate in big tech like using my smartphone to do online banking, or buying something on Amazon, but 99% of my activities online are all more-or-less anonymous and private now, and I'm happy with that.

spansoa··on Kicksecure – Secure by Default Operating System
Whonix is based on Kicksecure and is much more secure than Kicksecure itself since Whonix uses two VMs which run in tandem (Workstation & Gateway) so that it can mitigate rogue scripts that try to decloak you.
spansoa··on The Reliability of Optical Disks
Worth looking into Millennium Disc or M-DISC[0]. Apparently it's media that can last 1000 years. Thinking of buying two 50GB disks and putting some backup files on them when I have a few coins to drop.

[0] https://en.wikipedia.org/wiki/M-DISC

spansoa··on Ask HN: How to enable 2FA for Google Account to use Authenticator app?
Be careful with the Authenticator app, if you lose your phone, or it gets damaged or stolen, you have to resort to 'recovery codes' to get access, which only work one time in one browsing session only. If you're not careful you get locked out of your account meaning possibly hours on the phone to Google looking for an actual human.

I typically save the QR CODE TOTP seed image aswell as a recovery code to be safe. Stuff it in Bitwarden if you must, but do save these crucial items incase you forget your credentials.

spansoa··on Ask HN: How do you manage your investments?
Any niche market I can find. The low hanging fruit have been exhausted. Seems the real hard problems like space faring civilizations are only been scratched at the surface with Blue Origin, Virgin Galactic, SpaceX, so we will let them take care of that. Unless you want to make a splinter startup focused on rocketry that can outpace those, but you're already losing in that case. Just tap into niche markets and build your 'thousand true fans' and you're golden.
spansoa··on FORCEDENTRY: Sandbox Escape
Have you ever heard of the `swiss cheese method of security`, where each slice of cheese has a hole in it? The idea being: each slice may have a hole, but when sandwiched together, the route of entry is blocked. I've heard the adage: 'complexity enlarges the attack surface' before, but not in all cases especially. Sometimes security 'maxims' get in the way of security.
spansoa··on FORCEDENTRY: Sandbox Escape
> Layering may create more complexity in the system overall

Have you ever heard of the `swiss cheese method of security`, where each slice of cheese has a hole in it? The idea being: each slice may have a hole, but when sandwiched together, the route of entry is blocked. I've heard the adage: 'complexity enlarges the attack surface' before, but not in all cases especially. Sometimes security 'maxims' get in the way of security.

spansoa··on FORCEDENTRY: Sandbox Escape
What if we had multiple sandboxes instead? Then we could make the rogue malware 'think' it has escaped by using a decoy environment, and then it has to break another sandbox. Having just one sandbox is a SPOF and once that's breached, it's fair game. (Good) security has always been about /layers/ of security.
spansoa··on Phenethylamines I Have Known and Loved (1991)
As Terence McKenna said, "When you get the message, hang up the phone."

It's useful advice, for those who don't want to get burnt out on acid. So many suffer the 'grim meathook reality' as Hunter Thompson wrote. I mean psychedelics do induce spiritual experiences when the set & setting is right, but too many over-indulge and think they're the Messiah / Second Coming after it all, which is dangerous.

Also: the west has no shamanic centers where we can do psychedelics safely, apart from the Native American churches where you can do peyote rituals without getting arrested. Sadly the men in white coats are the closest thing to a shaman you can get in the West, and we sometimes need a sitter/guide especially with high doses, preferably someone who has done it before multiple times, and can calm you down incase you start having very pronounced anxiety.

spansoa··on The CSS Cascade (2020)
> When we add !important to the end of our declaration, it jumps to this level of the Cascade. Ideally, you reserve this level for Hail Marys, which are needed to override styles from third-party libraries

Or when you write Stylus[0] themes to create custom skins for your favorite sites. Sometimes the Stylus theme doesn't honor what you've coded, and you have to manually over-ride with an !important

[0] https://addons.mozilla.org/en-US/firefox/addon/styl-us/

spansoa··on Ask HN: How do you define the singularity?
The singularity is when we've exhausted all the low hanging fruit of technology and have started to work on the real hard problems of society. It's essentially our last invention.
spansoa··on Ask HN: Why is Web3 Fiverr not a thing?
What you mean like little gigs like 'buy 1000 Instagram followers', but web3 based?
spansoa··on Ask HN: How do you deal with the fear of judgement?
The most successful companies have a secretary that isn't constantly replying to email, chatting on the phone, etc

They are successful because when the phone rings, they make money. They've turned making money into a pull versus push situation.

spansoa··on Ask HN: Do you use an anti-virus program?
> I dont have much critical information or useful things on my computer so security is not my top priority

So when is security a top priority for you? Do you have separate machines for sensitive things?

spansoa··on Ask HN: Did HN go down just now?

    We are unable to serve your request. Sorry!
spansoa··on No news is good news

    “If you don’t read the newspaper, you are uninformed. If you do read the newspaper, you are misinformed.”
Which is a hard problem. Personally though, I do a quick skim of the news each morning just so that I know we haven't nuked each other to death or that a new pandemic-like world event hasn't happened. I enjoy Reuters, Associated Press, and a local news feed for my area. Sumi.news[0] is great too if you want to essentially scan & skim the whole Internet in one fell swoop.

[0] https://sumi.news/

spansoa··on Ask HN: How to Sell Domain Names?
Add some free hosting to the domain (Github allows you to create pages for a domain of your choosing, for free). Then add a contact email so prospects can get in touch if they want the domain. Then you just give them the transfer code upon payment. Only caveat, they have to trust you to give them the transfer code, which is why you should probably use a middleman to broker the deal. And there's plenty of 'domain flipping' services to do just that:

https://www.dontworkanotherday.com/guide-to-domain-flipping

https://sitebeginner.com/domains/domain-flipping/

https://www.sidehustlenation.com/domain-flipping/

https://www.makedollarswork.com/domain-flipping/

spansoa··on Why do you use this site?
The UI is hackable because it's so bare-bones. If you don't like it, install Stylus[0] and create your own skin.

[0] https://chrome.google.com/webstore/detail/stylus/clngdbkpkpe...

[0] https://addons.mozilla.org/en-US/firefox/addon/styl-us/

spansoa··on So, you want to be a darknet drug lord
> This section tries to be as operating system independent as possible

But if you are going to interact with Tor and setup hidden services, Whonix[0] is your best bet. The idea behind Whonix being that even if there's some javascript-based 0-day that tries to decloak you, it can't leak your naked IP, because it fails closed and everything is routed through Tor.

[0] https://www.whonix.org/

spansoa··on Start Self Hosting
> Do you really have any search and seizure protections on a VPS?

I'm aware of this, which is why I do full disk encryption of any VPS instance I operate. See the Third Party Doctrine[0] which applies to the US only AFAIK.

[0] https://en.wikipedia.org/wiki/Third-party_doctrine

spansoa··on Start Self Hosting
I haven't tried it, but Piwigo[0] looks promising for photo albums & management. That or Ente[1] although Ente doesn't have a self-hosting option like Piwigo.

If you really want true self hosting you would run it off your own on-prem machine and use your ISP to push & pull content. Putting things on a VPS is not really 'self' hosting as you're entrusting a third party to not get their datacenter burned down, or the hard-drives corrupted, etc

That said, the only caveat to hosting in your own house is it could suffer a fire, and your data is wiped, so having /BOTH/ a VPS and an in-house on-prem solution means you're not putting all your eggs in one basket and you have a contingency plan in place, which one day may be worth it. It buys you peace of mind because of the redundancy.

[0] https://piwigo.org/get-piwigo

[1] https://ente.io/

spansoa··on Ask HN: Is Apple down?
It's times like this that force us to remind ourselves how reliant we are on critical services like these. On one hand, we can celebrate (Internet snow-day!) but on the other we are forced to shop around for alternatives too.

I often wondered how medieval the world would become if there was a huge sun flare ejection that breached the magnetic field and destroyed a bunch of data-centers. Think of the mess we'd be in!

spansoa··on Using files with browsers, in reality
Came here to say this too. Principle of least privilege doesn't exist here, even with the browser prompting for access to files, people are going to make mistakes and upload their entire C: directory by accident. Reminds me of Kazaa where you could essentially browse the contents of a person's hard-drive because they configured the wrong folder.
spansoa··on Startup idea: Improving SEO ranking without an expert?
Writing good quality content is good enough SEO on its own. People don't really write to please Google anymore, and prefer to get their traffic from social media platforms & newsletters instead. The problem with SEO is it forces you to game search algorithms, and before you know it you're buying back links off Fiverr and doing keyword stuffing. Just consistently churn out high quality content that is structured well, and has tags & categories for it, then syndicate out to social media, and you're golden.
spansoa··on Ask HN: Why did Atom Text Editor failed?
I tried Atom, but preferred Brackets instead. I sometimes use VSCodium too. Previously I used Notepad++ and for quick and dirty hacks, Notepad2
spansoa··on Ask HN: What Happened to Svbtle?
I think this is a case of 'don't build your castles on other people's land'
← PreviousPage 4 of 6Next →