HNHacker News
TopNewBestAskShowJobs

starfox64_

61 karma · joined August 8, 2016

submissionscomments
starfox64_··on The Amazon Appstore for Android devices will be discontinued on August 20, 2025
Couldn't people move over to another app store like F-Droid?
starfox64_··on LLM pricing comparison tool
Sorting by price doesn't seem to work as it sorts alphabetically
starfox64_··on Serious incident to the 777-300ER on 5 April 2022 at CDG [pdf]
> 4.2 Safety measures taken by the manufacturer

I would have hoped for Boeing to add a warning system in the case of dual input, like in Airbus aircrafts, but it seems they did the bare minimum here. Simple warnings were added to the pilot hanbook that basically amount to "don't apply opposite inputs".

starfox64_··on What PWA Can Do Today
It's kinda sad that the website doesn't prominently display which features have "universal" support across iOS and Android. The whole point of PWAs is to provide cross platforms apps so if a feature isn't available on all/most platforms, I don't think it's fair to say that it's really usable at all in your PWA.
starfox64_··on 15 Years of Android Memories
I've noticed that tapping notifications has a significant delay (350ms or so) before it opens any app since upgrading to 14.
starfox64_··on Email Authentication: A Developer's Guide
I think it's a good initiative, it's obviously there for CAs to make a buck but it's finally a way to arguably curb phishing emails that rely on similar domain names or IDN characters all the while making your brand identity more prominent.

It seems to also have learned from one of Extended Certificate's shortcomings by relying on trademark instead of company name. I actually wish something similar was created to replace EV certificates as it's easier than ever to perform phishing attacks now that everyone and their grandmas has a DV certificate on their site (which is a good thing).

starfox64_··on Microsoft faces antitrust scrutiny from the EU over Teams, Office 365
> Microsoft was already contemplating separating the two products, possibly as a pre-emptive measure to prevent antitrust investigations.

More like a pre-emptive measure to charge customers more for access to Teams

starfox64_··on UUIDs are obsolete in the age of Docker
When did this change? Last I checked the PHP driver still relied on the pid.
starfox64_··on UUIDs are obsolete in the age of Docker
I've had a similar issue with MongoDB's ObjectIDs. They are generated using a combination of process id, UNIX timestamp and a counter that is randomly initialized during process creation. The issue when docker comes into the mix is that the root process id of every container is 1 so a decent chunk of entropy is removed from the ObjectID. Add to that the fact that the timestamp doesn't have millisecond resolution, the only thing saving you is praying the counter of any of your processes never overlaps during the same second.

It's unlikely to happen but still possible and it has brought down some of our parallel worker pool because once you have a collision, you are bound to keep generating the same id sequence until you restart your whole process to randomize the counter again.

starfox64_··on Show HN: Make domain verification as easy as verifying an email or phone number
I was very excited at discovering this protocol thinking it could solve a few pain points of our domain onboarding process.

However the fact that you need to go to every domain provider to get your template manually approved makes this completely useless, what even is the point? This barely adds any security too since I can just use each provider's official API and create whatever records I want this way.

It's really sad because the protocol is designed for auto discovery but then does a 180 by having this manual step.

starfox64_··on HBO Max accidentally sent an integration email test to users
This reminds me of when I took over a project after a developer that left they company.

They had just added SMS notifications to production but to my horror left some test code that would text you "Hey motherf**r" every time you would change your phone number.

To this day I still wonder how many people got that text.

starfox64_··on Temporal Tables PostgreSQL Extension
Does anybody know of an equivalent for MongoDB?
starfox64_··on Cloudflare Waiting Room
This is pretty neat, I'm actually surprised I haven't seen something like this on any website before.
starfox64_··on Bitwarden releases “emergency access” feature
Unless I'm reading this wrong, this lacks a lot of granularity. I'd like to be able to only give access to a subset of my vault, not all of it. I'm of the opinion that my accounts should just disappear with me, apart for some things related to real life like utilities and the likes. Come to think of it, my GitHub account could be worth preserving too but right now I can't think of much else being worth it.
starfox64_··on Report may suggest that login requirement for Oculus Quest 2 is anticompetitive
I have encountered the exact same situation just a few days ago to get a developer account running. I created a new account using my personal phone number and this one hasn't been shut down yet so here's hoping it stays that way.
starfox64_··on What we learned after a year on Kubernetes
I find that the best place to have an actual documentation for writing yaml files is the API Reference[0] and falling back to the "regular" documentation for more detailed explanations about specific topics. The reference lists all properties and type for everything that you can shove in your yaml files.

[0] https://kubernetes.io/docs/reference/generated/kubernetes-ap...

starfox64_··on I lost €4k in a Facebook scam
I doubt many banks would refuse a charge-back considering this transaction obviously didn't use 3DSecure since it went through PayPal. You'd probably get your PayPal account shutdown if it went through though.
starfox64_··on GitHub Censors Catalonian App Tsunami Democratic
GDPR
starfox64_··on France Set to Roll Out Nationwide Facial Recognition ID Program
It's not stated clearly in the official publication but it seems that their medium term goal, beyond using this on government websites, is to also allow private companies access to the tool.

It'd be pretty useful as a way to standardize the way various companies do identity verification online.

I'm honestly pleasantly surprised to see such a thing coming directly from our government, as it can be sometimes quite outdated.

starfox64_··on Swiss Copyright Law: Downloading Stays Legal, No Site Blocking
They have different pricing depending on the type of storage medium (Phone/USB Drive/Regular HDD)

https://www.copiefrance.fr/images/documents/tarifs_FR_2019_0...

Looking into it, it seems to not be considered a tax as it's not collected by the government, it also states that if you are importing a drive from a country that also collects such a "tax" you should seek to be reimbursed from the exporting country and pay the "tax" to the importing country.

Their FAQ: https://www.copiefrance.fr/fr/ressources/questions-reponses

starfox64_··on Swiss Copyright Law: Downloading Stays Legal, No Site Blocking
Legally speaking you have to declare imported drives and pay taxes on them.
starfox64_··on The world in which IPv6 was a good design (2017)
Yes, you would probably then have to allow inbound traffic to these addresses in your ISP router's firewall or whatever you have.

If your router's default configuration is sane it should (by default) only allow returning connections and drop any other.

starfox64_··on The world in which IPv6 was a good design (2017)
Is there anything preventing you from assigning static IPv6 addresses on your machines?
starfox64_··on Mozilla and Google Chrome Refuse to Support Gab’s Dissenter Extension
They don't stay enabled though I think, you need to turn them back on after every restart.
starfox64_··on Observatory by Mozilla – automated website security testing tool
I've been running a few tests progressively fixing various issues and now I'm getting an "Error: Site down" error however I am still able to access my website over HTTP and HTTPS on my browser.