HNHacker News
TopNewBestAskShowJobs

timoth

424 karma · joined October 1, 2014

submissionscomments
timoth··on Account regional namespaces for Amazon S3 general purpose buckets
The name suffix might look a little clunky at first sight, but having just been thinking about replicating buckets to other regions for DR, having a built in naming template seems useful (of course, you can devise your own, but...).

Using the account regional namespace is also described as a security best practice:

> Creating buckets in your account regional namespace is a security best practice. These bucket names can only ever be used by your account. You can create buckets in your account regional namespace to easily template general purpose bucket names across multiple AWS Regions. You can have assurance that no other account can create bucket names in your namespace. If another account attempts to create a bucket with your account regional suffix, the CreateBucket request will be rejected.

https://docs.aws.amazon.com/AmazonS3/latest/userguide/gpbuck...

timoth··on Tell HN: MitID, Denmark's digital ID, was down
> You may need to authenticate payments a dozen times in an hour one day, when you are on a farmers market which doesn't take card payments or you are out dining with friends, and another day not at all.

It's very unlikely people would need to mess about with MittId/BankID if they can't use card payments at a market. Firstly, if they're doing the almost-unheard-of clunky approach of using their mobile banking app to make a bank transfer, it would probably be authorised using their touch/face ID instead of BankID/MittID. But far more likely, they'd use one of the ubiquitous mobile payment apps: Vipps (Norway), Swish (Sweden) or MobilePay (Denmark).

timoth··on Launch HN: Enhanced Radar (YC W25) – A safety net for air traffic control
It's been a long time since I worked in flight simulation (full flight simulators and simpler pilot training devices, including simulating TCAS), but I believe at that time TCAS would be switched to a mode in which it only alerts of "Traffic" instead of providing avoidance instructions precisely _when_ entering busier airspace -- e.g. airport proximity. In that environment it was undesirable for TCAS to be giving instructions. That seems like the environment in which Enhanced Radar's (future) product(s) could be of most interest.

(By the way, I believe EGPWS would take priority over TCAS anyway.)

timoth··on WiFi suspended at big UK train stations after 'cybersecurity incident'
> Especially nowadays, with Britain out of the EU and "roam like at home" policies no longer in effect.

I thought they were generally still in effect. The multiple UK and non-UK networks I'm aware of still allow free roaming across UK and EU etc.

timoth··on We're ending our Samsung collaboration
It does. But not beyond iOS 15. Most recent update: 15.8.2 a couple of months ago. Personally I'm really impressed that Apple is still supporting an 8-year-old phone and it's probably the main thing that has been tempting me to jump ship from Android for a while. (Though it seems like Android might be better on this in future.)
timoth··on Netflix Ships Last DVD
"Inside the last-ever red envelope that we shipped out was… the Blu-ray disc of True Grit (2010)."

https://twitter.com/dvdnetflix/status/1707771256039428513

timoth··on I want an iPhone Mini-sized Android phone
You can do that with the stock Android too, once you've enabled the developer options in settings. The setting needed is "Display cutout" --> "Hide".
timoth··on French moratorium on prion studies after two cases of fatal brain disease (2021)
I don't read any implication that they see they were likely wrong. According to the article, he actually refused to comment on the French cases and said their own lab "only use mouse-adapted sheep prions, which have never been shown to be infectious to humans." Not even "_had_ never been shown". It seems unclear what his view is.

It immediately goes on to talk about their own discovery 10 years ago that prions could be spread through aerosols which "totally shocked" them and might "warrant re-thinking on prion biosafety guidelines" but that seems an entirely separate thing from the decision to use only sheep prions for research.

timoth··on French moratorium on prion studies after two cases of fatal brain disease (2021)
I'm a complete layman in this field, but the logical conflict between these two sections concerned me:

> she stabbed her left thumb with a curved forceps while cleaning a cryostat — a machine that can cut tissues at very low temperatures — that she used to slice brain sections from transgenic mice infected with a sheep-adapted form of BSE

Then later:

> Aguzzi declined to comment on the French CJD cases, but told Science his lab never handles human or bovine prions for research purposes, only for diagnostics. "We conduct research only on mouse-adapted sheep prions, which have never been shown to be infectious to humans," Aguzzi says.

Am I missing something, or is the logical conclusion that Aguzzi thinks his lab is avoiding disaster by only using mouse-adapted sheep prions, but the lady is suspected to have been infected by an injury related to "transgenic mice infected with a sheep-adapted form of BSE". I hope there's some nuance here, because otherwise it sounds like Aguzzi's lab isn't actually avoiding infection. Perhaps the lady's case isn't considered to have definitely confirmed infectiousness due to uncertainty (though no uncertainty seemed to be mentioned)? Or the mouse-adapted sheep prions Aguzzi's lab uses are different to the transgenic mice infected with a sheep-adapted form of BSE? I have no idea; it's just that the apparent conflict between these two sections jumped out to my layman's eyes.

timoth··on 286 vs. 386SX
> I remember the excitement when the SB meant my computer could play, e.g., human speech in my games—I forget what the games of that day were; one of the early Ultimas?—rather than just the beeps and boops of the PC speaker (although some people could do amazing things with that speaker!).

They certainly could do amazing things with that speaker. I remember being blown away when I loaded up a PCPlus magazine "superdisk" cover disk some time in the early nineties IIRC and speech came out of the PC speaker -- "Welcome to SuperDisk 61" (or whatever number it was).

timoth··on Minoan language Linear A linked to Linear B in new research
In general, assuming some (types of) words are more common is reasonable, but the specifics could be tricky. I know it was only an example, but "the", for example, might not exist in the language -- it might not have definite articles, or any articles equivalent to English articles at all.
timoth··on SEC Charges 1inMM Capital, LLC with Operating a $690M Ponzi Scheme
AbeBooks does have independent sellers, but for anyone who was unaware, it was acquired by Amazon in 2008.
timoth··on AstraZeneca vaccine safe and effective in U.S., Chile, Peru trials
This is a few days old now so doesn't include the latest Norwegian cases, but that seemed to be the thinking (though the article feels a bit of a mix between certain and equivocal at different points).

https://www.vg.no/nyheter/innenriks/i/KyGv2G/professor-says-...

timoth··on A lost tourist who thought Maine was San Francisco
The US is teeming with UK or UK-inspired place names for obvious reasons. Here's the Georgia section on the list of US places with an English name:

https://en.wikipedia.org/wiki/Locations_in_the_United_States...

It's a pretty lengthy page and is unlikely to be exhaustive. It can be a bit of a minefield though. For example, that page lists Boston Georgia, but according to the top of this page:

https://en.wikipedia.org/wiki/List_of_U.S._places_named_afte...

Boston, Georgia is named after a person, not the location in England.

timoth··on Skyline – Your GitHub story in 3D
WFM on firefox 85.0.1 on ubuntu 18.04. No problems looking up a user and getting the 3D model. (well, it's slow because it's in virtualbox on an ancient Macbook Pro because my new one died and is away for service but's that's tangential... unless the slowness is a factor in it working -- I've seen stranger!)
timoth··on Show HN: ustaxes.org – open-source tax filing webapp
I don't think anyone would support that, but that's not what happens -- you can see the breakdown of gross/net salary & taxes on every payslip you receive from your employer, as well as on your annual P60 https://www.gov.uk/paye-forms-p45-p60-p11d/p60
timoth··on Faroe Island roundabout under the Atlantic Ocean
It sounds like Norwegians were involved in building this, and they have precedent for this look. "hardanger bridge roundabouts" is a search term which will get you some pretty images for roundabouts like this. Admittedly they're not under the ocean, but they are underground at each end of the world's longest tunnel to tunnel suspension bridge. Underground funkily-lit roundabouts are pretty amazing!
timoth··on Windows Subsystem for Linux: The lost potential
I remember using Interix back in the late 90s to port our home-grown source control system that we used on various UNIX flavours over to NT. The source control system was basically a bunch of shell scripts which wrapped either SCCS or RCS depending on which was available on the system in question. Porting them to Interix on NT worked pretty well, though there were some wrinkles with file permissions.
timoth··on 1MB Club
Also reworked for newer contexts:

https://github.com/storax/kubedoom

https://github.com/gideonred/dockerdoomd

timoth··on Hostage Situation at Ubisoft Montreal
Link: https://www.cbc.ca/news/canada/montreal/montreal-police-ubis... "Montreal police confirm hoax triggered major police operation at Mile End Ubisoft offices"
timoth··on Vimflowy
Interesting. I never use Y or D, I use yy and dd which both operate on the entire line. I like that they're lower case and 'fit' in my mind with their other 2 character counterparts, yw, dw etc. (and I use d$ for delete to end of line).
timoth··on AI outperforms humans in speech recognition
Indeed. Or even native speakers speaking our native language. A fond memory of mine is having to translate a Glaswegian colleague when we were on business in Kentucky. By which I mean I basically just repeated what he said in my "standard" English accent for the benefit of a couple of locals we were talking to, because their reaction when he first said something was along the lines of "Hell, I didn't understand a word he just said!"
timoth··on India, Jio, and the Four Internets
It seems a little unfair to single out Europe or the EU for this. If the EU didn't exist, then the situation wouldn't be any better (of course, you can hope that the EU would make the situation better than it is, but that requires greater harmonisation which is non-trivial and some may find unpalatable). And it's not just countries in Europe that require businesses to charge taxes according to the rules of the various countries -- many countries around the world do exactly the same. And as I understand it, differing sales tax across states in the USA can also create headaches. So it doesn't seem to me that this issue is specific to either Europe or the EU.

As for the behemoths being able to solve the problem, there are options for smaller players as well, like using a specialist who handles all the tax issues for you worldwide -- for example Paddle (I'm unaffiliated and have never used them; I'm just aware of their existence).

timoth··on Internet Archive responds: Why we released the National Emergency Library
"Give away" implies permanence (as does the reference to BitTorrent, though I realise that strictly speaking it doesn't necessarily entail illegality), but according to the post they're still limited to 2 weeks before they have to be checked out again, and they can't be distributed further. They've just removed the concurrency limitation so digital lending isn't backed 1-to-1 by a physical copy of the book. So yes, they're lending more than they physically have, but it's not permanent. To be clear, I'm not claiming it's legal, just pointing out it's not permanent. (I'm also not claiming you're saying it's permanent -- you do say "lend out" later on -- just clarifying in case anyone jumps to conclusions.)
timoth··on More Than 750M Worldwide Would Migrate If They Could
You can move freely among EU countries, not just Schengen countries. Schengen isn't just a subset of EU countries -- it's many EU countries and some non-EU countries, and it's to do with a lack of border checks rather than the basic freedom of movement right.
timoth··on More Than 750M Worldwide Would Migrate If They Could
If you're in the UK for more than 183 days in the tax year (6 Apr to the next 5 Apr), you're classed as resident though.

https://www.gov.uk/hmrc-internal-manuals/residence-domicile-...

Up to 60 days can be disregarded in the case of "exceptional circumstances", which generally have to be pretty extreme.

timoth··on Europe continues to wrestle with the long arm of American law
It's even annoying for non-Americans living in other countries who have to declare that they're not American and don't have any tax liabilities to the USA.
timoth··on Europe continues to wrestle with the long arm of American law
It seems that in most countries few control most of the wealth, regardless of whether they're dictatorships or democracies.
timoth··on U.S. drone strike kills 30 pine nut farm workers in Afghanistan
Reminds me of this story of the British paying "blood money" in Iraq which I found quite illuminating at the time: https://www.theguardian.com/world/2003/jul/02/iraq.features1...
timoth··on Getting 2FA Right in 2019
I feel like I must be missing something here, especially given who I'm replying to, but doesn't it mean that, even if your password is compromised, it can't be used to log into the service which is also protected by TOTP? Regardless of impact on other services if someone reuses their password. So in theory, there's no desperate need for you to reset your password for the service (though of course you should) because it's still protected by your TOTP setup. (Well, unless your current TOTP was leaked and someone reuses your password and current TOTP before it times out, if the service allows that.) Of course, it depends on the nature of the breach. I've assumed the password leak via request logging as you mentioned (and possible leak of single TOTP), but if the seed for the TOTP is also leaked (e.g. DB breach), then naturally you're in trouble!
Page 1 of 2Next →