HNHacker News
TopNewBestAskShowJobs

stblack

1,012 karma · joined January 31, 2011

Steven Black

[ my public key: https://keybase.io/stevenblack; my proof: https://keybase.io/stevenblack/sigs/9d5N5CA-0j4p31zG1-Q8Lt3aQV-TJ-FGHHCGWVZuM38 ]

submissionscomments
stblack··on Block Adware and Malware with /etc/hosts
Hey this is my repo!

I'm happy to answer any questions arising.

I must say: the lists we offer — 31 variants in all — result from fine work by all our curators. Some are extremely diligent and maintain their lists every day. It's just remarkable what dedicated people can do together over time.

stblack··on That people produce HTML with string templates is telling us something
Because hard-coding HTML in source code is supposedly better?

What are you gonna do, recompile and ship new and different executables to all {1, 10, 100, 1000, …} of your customers or end users for each point release?

WTF? That’s bananas. No thank you.

stblack··on Ask HN: Examples of desktop software with 20+ years of longevity?
Beyond Compare by Scooter Software.

Beyond Compare is perfect software (in my not so humble opinion). I use it every day.

https://www.scootersoftware.com/

stblack··on Dimensions of Scalability
Definition of scalability: (Change in performance) over (the change in something else).

As math:

  Scalability = δ Performance / δ x
  
... where x can be almost anything.

Take note: performance == "throughput" in most cases.

THEREFORE, when scalability questions arise, you should be specific about which dimension of scalability is in question.

Some dimensions of “scalability”

* Number of customers

* Total number of users

* Number of concurrent users

* Number of locations where a business or application runs

* Size of the database

* Transaction volume

* Output volume

* Response time

stblack··on Idiot Proof Git
I might be mistaken but this post is basically describing git-friendly which I've used for years, is 100% flawless, and you'd need to pry from my cold, dead hands.

https://github.com/git-friendly/git-friendly

stblack··on Does anyone else finds AWS and other Amazon services overly complicated?
Here's how this is playing out.

* We need a way to serve image files.

* I create an organization account, add an S3 bucket.

* We serve images as our application grows.

* Fast forward a few months, get an email saying, we're at 85% of free-tier limit.

* I invite my boss to the Organization, and make her the financial contact.

* Neither I, nor my boss, have been able to figure out where, or how, to enter a credit card number.

* We continue to get monthly 85% limit emails. Following the link in the email leads nowhere where we could enter the payment info.

* What a completely insane and stupidly opaque UI. Take our money! How?

* Will probably move to a service that's better organized. We're just serving image files, a few hundred per day.

We have both tried and are unable to figure out how to tie payment info to our AWS organization.

stblack··on Does anyone else finds AWS and other Amazon services overly complicated?
I envy you.

I am using a simple S3 bucket to serve image files.

We’re getting close to busting the free tier web traffic limit.

I can’t figure out where, or how, to enter my boss’s credit card so we can start paying for the service.

I’m not kidding. I’ve looked everywhere. Several times. I’ve probably spent two hours on this.

stblack··on Mathics: A free, open-source alternative to Mathematica
> Mathematica is ridiculously expensive

This is something I used to believe.

I am a hobbyist user. Mathematica was not required for my work or for any other interests outside personal curiosity and an ever growing love of math and science.

I’ve made it an indispensable part of my work. A small side-project in Mathematica blossomed into one of the key ways my clients analyze data now.

Mathematica costs less than a dollar a day. It’s always open among the apps on my desktop on both my work Mac and my kitchen Mac.

To stop using Mathematica, you’d have to pry it away from my cold, dead hands. It’s really that great.

stblack··on Protonmail can delete the wrong email and nobody cares
“ To be honest, their web client is probably less secure and trustworthy than other mail toolchains you could run locally. ”

To be honest, you’re guessing amirite? Be honest.

Bizarre statement, it’s like in-browser security doesn’t exist? The password manager browser extension you may use, that’s Swiss cheese right?

stblack··on Protonmail can delete the wrong email and nobody cares
No.

Proton mail is a paid service. It comes with the bridge. The bridge is not extra.

Free-tier Proton Mail may charge for the bridge. I don’t know, I don’t use free-tier Proton Mail.

stblack··on Protonmail can delete the wrong email and nobody cares
Yes.

Some people want to subscribe to a premium encrypted email provider so they can download that email locally so it can live perpetually in ever expanding sub folders on disk, in plaintext.

These are the people who need Proton Bridge.

stblack··on Protonmail can delete the wrong email and nobody cares
Thank you for that. This goes without saying.
stblack··on Protonmail can delete the wrong email and nobody cares
To clarify because comments (so far) seem to ignore what Proton Bridge does.

Proton Mail is web mail, like Gmail. That part is fine.

You use Proton Bridge as a connector to mail client software.

The thing that’s perhaps unclear is, Proton Mail is end-to-end encrypted email. You use Proton Bridge to walk your secure email beyond that enclave into whatever YOU are running in your userland scenario.

Part of all this is, you’re completely unclear on the concept of secure email the moment you need to use this bridge.

Which begs the question, why would you use Proton Mail if you’re gonna negate its unique value proposition?

Proton Mail is fine. It’s this misguided extension that’s the problem here.

If you’re fine with web mail then this issue doesn’t matter. If you’re not fine with web mail, maybe Proton Mail isn’t really for you.

stblack··on Replit Mobile App
Presently on iOS it appears this is an iPhone app that doesn't scale to iPad screen dimensions, even when expanded. It's using between a third and a half of the available viewport in landscape orientation.

That said, it appears to work pretty well in side-by-side mode, concurrently with another app, but it still uses about half the available viewport in this mode.

I expect this will get addressed PDQ.

stblack··on Cache your CORS
Brevity? It's a 1,500+ word article.
stblack··on Cache your CORS
Downvotes for a comment like this is really the low-side of Hacker News.

Me: web developer since 1996. I had to look it up. Came here to make the same comment, and see you being lambasted for it.

Don't let these haterz get you down. It's standard practice across ALL domains to define acronyms, and those who give this article a pass because ReASonS!! aren't people I'd willingly choose to work with: anglo-saxons who believe the whole world shares their lived experience, and their mental model.

Hacker news is just horrible for that attitude. Accessibility is a thing.

stblack··on Solving the Australian Signals Directorate cryptography challenge coin
The article mentions the use of CyberChef in cracking the puzzle.

CyberChef is an online Swiss knife that merits a lotta love.

https://gchq.github.io/CyberChef/

Here is a GitHub repo of about 70 CyberChef recipes, and other related things:

https://github.com/mattnotmax/cyberchef-recipes

stblack··on Trending tabs are being deprecated due to low usage
GitHub is owned by Microsoft. This sort of BS should surprise nobody.

Never underestimate Microsoft’s ability and propensity to fuck things up.

I remember when Skype was great, for example. We could easily cite 30 other such examples.

stblack··on Use TouchID to Authenticate Sudo on macOS
Except... is it just me, or is TouchID on MacOS unreliable for mostly everyone? It seems like I have a 25% success rate with TouchID. I have the same fingerprint mapped to three "fingers" and still it's awful.
stblack··on Border Wallets – a new way to quickly and reliably memorize Bitcoin seed phrases
This falls into the general category of brain wallets.

https://en.bitcoin.it/wiki/Brainwallet

I once generated a Bitcoin private key with a SHA-256 hash of a pop song lyric. Within 3-days the roughly $100 I sent to that wallet, as a test, was drained.

Entropy matters.

stblack··on Gambling and Adult content DNS blocking using Mullvad VPN
Here is the readme: https://github.com/StevenBlack/hosts

If that could be more clear, please tell me how?

stblack··on Gambling and Adult content DNS blocking using Mullvad VPN
I'm Steven Black and they cite my repo as their source for adult content domains.

Mullvad VPN seems unclear on the concept, at least in regard to my resource.

Using my porn hosts variant directly, they are presently pulling-in 188,735 domains, of which only 43,108 are porn domains. The other domains are adware, malware, etc.

I also notice the mullvad/dns-adblock repository been in existence since June 7 2022, the date of its first commit. So this is a very new thing.

stblack··on Rogers Canada, please fix the damn internet in Canada
It’s [time to live](https://en.m.wikipedia.org/wiki/Time_to_live). Once a bad route is published and propagates, TTL determines how long it remains cached.

The real issue is, it took Rogers engineers so long to diagnose and address the problem, allowing incorrect route maps to propagate to deep and far corners of the internet.

Anecdotally, a friend in Greece roaming with a Canadian Rogers SIM card was unable to use her phone. Perhaps other Canadian Rogers subscribers, traveling on far continents can confirm?

My guess (pure speculation) is Roger’s TTL values have been dramatically decreased by now, which will increase the bandwidth requirements for network state management. This is also not great news for Rogers customers and peer networks.

stblack··on The Great Crypto Grift May Be Unwinding
Oh we're here.

Just watching all this collegial self-agreement among people who don't fully understand the subject, because what they know, they learned from writers who don't understand the subject, like the author of the laughable media piece posted here.

stblack··on A new career in software development: advice for non-youngsters
Maintaining and extending legacy code is, in many ways, orthogonal to its underlying language.

You can make a 2x2 matrix with "legacy code quality" on one axis, and "language percieved desireability" on the other axis.

You can make truckloads of money, earn much respect, with nearly zero negative ageism, in at least one of those quadrants.

"Building new" versus "maintaining existing" are different mindsets, and often a choice.

For older people just getting started, "maintaining existing" is often the wiser first decision. From there, the particular mix of language and tech stack count, and often the more obscure the better.

Find a good niche.

stblack··on Monet: The Water Lily Pond
The Monet room on the fifth floor of MOMA in New York, with its two enormous Water Lilies’ works on opposing walls, is a deeply beautiful space. You should go there.

Here’s what’s remarkable about Monet. Zoom in. Look closely. Regardless of how close or how far you gaze, you get a different painting, different scenes and subjects, and possible interpretations. It’s wild.

Follow OP’s link here, zoom in, and see for yourself.

stblack··on Tony Fadell: The Nest Thermostat Disrupted My Life
We've had a nest thermostat for five years.

For the past four and a half years it's been on a shelf in the basement, in its box. Gonna throw it out someday.

What crappy tech. Its problem: its backing plate heats up. Causing the house to be perpetually cold.

Three Nest backing-plate replacements later, we gave up.

We presently have a much dumber thermostat that can be remotely controlled. We're happy now, but we'll never purchase another Nest product again.

stblack··on Master’s Degree in Computer Science
So tech is a lot like crossing a river hopping from rock to rock. You make these leaps, and you try (or mostly hope) these leaps lead to a great career.

At the beginning, you're a 20-something person. You mostly don't get to pick your steps, especially if you're in the employed-by-others track.

Standing in the river on my rock, at this advanced career stage, I'm certainly not looking to "learn programming languages". That was long ago.

Right now it's all about picking the next leap based on the conviction that it's going to be a great ride in the future, which is much closer to sunset for me than most in this forum.

stblack··on Master’s Degree in Computer Science
Yeah I should probably clarify, I'm not looking to compete in a Fortune 500 job placement situation. Where I'm at, Fortune 500 calls me.

I'd do a master's degree because I'm curious as hell, and having tons of fun learning surrounded by smart people is all I want to do now.

stblack··on Master’s Degree in Computer Science
OP may already possess a master's degree, school-of-life alumnus.

But I "get" it. I've thought of doing this too.

I would add one criteria: I get to do the whole master's degree using Rust.

I'm sure this would narrow the field of schools.

I want a master's from a school that recognizes that it's effectively over for C++ and Java. At least it's completely over in my own mind. There's no way in hell I'm doing a master's degree where the school's obsolete syllabus dictates those legacy languages.

This stipulation might garner considerable traction. This quirky old guy, with more industry experience than anyone on faculty, will run advance reconnaissance for us, which is something he's been doing much longer than our typical master's students have been alive.

Because let's be honest guys: it's all about Rust going forward. If you feel otherwise I respect that view, but you haven't seen the shit I've seen.

I'd do a Rust-centric master's degree in a heartbeat, and I'm sure I'd love every minute of it.

← PreviousPage 2 of 10Next →