HNHacker News
TopNewBestAskShowJobs

tmm

705 karma · joined March 4, 2014

submissionscomments
tmm··on Socially Engineering Myself into High Security Facilities
I don't find them super distracting, but I do miss the days when you could hit the ESC key and stop the animation loop.

That ability seems to have disappeared from browsers sometime between when the spinning skulls and under-construction gifs stopped being popular and these 12-frame silent movies appeared.

tmm··on Turning minor-key songs major
I guess I'm not very good with music. These all sound basically the same as the originals to me.
tmm··on Deconstructing the Google Analytics tracking script
I don't know where it started for software, but I can give you an example that predates the web.

In the 80s and early 90s my mother was an interior designer at a high end furniture store. There were no prices on the floor models because most things could be customized (fabric, arm shape, wood, etc) before delivery. However there was a base price that the designer could use to (I guess) keep people within their budget.

They used a ten-letter isogram to print the base price covertly on the furniture labels so that associates could figure it out without going to the back office and looking it up in the computer.

The last word I remember them using was Cumberland. C=0, d=9. So if the base price for a dining room table was $15,840 the tag would have urnec written on it somewhere.

tmm··on An Ikea Bowl Has Been Setting Things on Fire
I saw one of these work at the Annapolis Boat Show a few years ago. Given that it was an October afternoon in Maryland, the angle of the sun was not ideal (and there were a lot of vendor tents in the way). It still made a hot hotdog in about 15 minutes. I'm sure it could do much better in the summer with a clear view of the sun.
tmm··on Zero-emission autonomous ship planned to start in 2018
Why not build a modern sail powered cargo vessel? A quick back of the napkin calculation puts this ship in the cargo range of a late 19th century clipper. These ships were as fast as modern diesel cargo ships, had relatively small crews (20-25), and were of course zero-emission. For a short coastal route such as this an even smaller crew could be used since you could dispense with a regular watch standing schedule.

It wouldn't be autonomous, but it would be way cooler.

tmm··on Rust Language Server Now Available with Rustup
Is there a list of editors which support RLS or is it just VSCode at the moment?
tmm··on Working remotely, coworking spaces, and mental health
> If you’re thinking of working remote, then think about what kind of working environment you’re happiest with before you take the job, and make sure you’ll have that environment available to you.

Seems to me that the best part of remote working is the ability to figure out what the best environment is for you. Don't be a theorist, be an experimentalist: try a bunch of different situations and see what you like best. It sounds like the author started down this path, but stopped too soon (at first).

> Are you sad when a lot of your office is out sick, or are you relieved?

Usually relieved, then I wonder why I bothered with an hour of driving to sit in the office by myself, when I could have done that from home.

> Do you get uncomfortable when you’re in quiet environments for too long, or do you revel in them?

Love quiet! My office at work has no windows (not even internal ones); being able to close the door and cut off the outside world is the best!

> Do you feel weirdly lonely when you’re in a noisy coffee shop, or do you feel energized?

Annoyed by the noise mostly. Coffee shops are for getting coffee and getting out. Libraries are way better for actual work, IMO.

tmm··on The Fallacy of Chesterton’s Fence (2014)
Did the link quietly change? Based on this thread and a google cache link in https://news.ycombinator.com/item?id=13065097 it looks like the original link was to an article in ldsmag.com, but now points to a post at abovethelaw.com.

Other than referring to Chesterton's Fence, they don't really intersect.

tmm··on Wells Fargo CEO John Stumpf Steps Down
I get the paywall, even in incognito across all browsers. They must also be tracking by IP.
tmm··on Trying to Solve the L.E.D. Quandary
I don't really see the long term problem. When light bulbs truly stop needing to be replaced, they will stop being _replaceable_. The market that will disappear is the light socket market. Consumers will buy a lamp with a permanently wired in LED and when they get tired of the way the lamp looks, they'll replace it along with the LED in it. This is already happening in wall and ceiling fixtures.
tmm··on EquationGroup Tool Leak – ExtraBacon Demo
The "enable" password is sort of like the root account on Cisco gear. When you first connect, you're in a low-priv state where you can do simple things like see the uptime of the device, interface info, etc. But to make any changes to the settings on the router, you have to run the "enable" command which typically asks for a password which is separate from the login password.

I guess the name comes from enabling admin functionality, but I don't know why Cisco didn't call the command admin. Anyway, this enable is different from enabling/disabling the login authentication.

tmm··on Ask HN: How did NASA make reliable software if they didn't invent unit tests?
Or, as W. E. Deming wrote: "You cannot inspect quality into a product."
tmm··on Microsoft is the first big company to say it's serving the legal marijuana trade
Also from stolen goods, unless you return them in the same year:

"If you steal property, you must report its fair market value in your income in the year you steal it unless in the same year, you return it to its rightful owner."

tmm··on Show HN: My own C compiler (just for fun)
Does the LLVM introduction tutorial[0] kind of fit what you're suggesting? You learn how to implement a toy language called Kaleidoscope on top of the LLVM infrastructure with one data type (64-bit float), if/else, for loop, and a few other things.

It covers the lexer, parser, AST generation, and a few other things.

There's also one for writing a backend targeting a fake hardware architecture.

[0] http://llvm.org/docs/tutorial/index.html

tmm··on Why do old statues have such small penises?
Is _that_ why his right hand seems extremely elongated? I've always wondered. Viewed from a steep angle, I imagine it would look quite normal.
tmm··on In Memoriam: Merle Haggard, 1937–2016
And female artists in a similar vein: Lucinda Williams, Brandi Carlile and Gillian Welch immediately come to mind.

A great site (IMHO) for keeping up with musicians in the style of these guys is Jessie Scott's musicfog.com. Jessie Scott was the program director for X Country on XM, before it was replaced with whatever Sirius runs there now and it was her programming that really expanded my music base (I would likely have never heard of any of these artists if not for X Country).

tmm··on Integrating a VT220 into my life
Visionect (https://www.visionect.com/) sells e-ink dev kits up to 32 inches, but they aren't exactly priced for experimentation (nor do they include any sort of case/bezel). On the other hand, their displays do come with Ethernet, Wi-Fi and cellular connectivity built in.
tmm··on Privacy Absolutism
This article links to another blog post where someone yet again proposes not just one master key, but a unique master key for every device manufactured (which would then presumably be protected by a master master key ... it is, as they say, turtles all the way down). But once again, someone will get a hold of that super-master key and it's game over.

Personally, I'm more afraid of the government/law enforcement (and by that I mean not just the US, but every country's government and law enforcement) having access to this. So maybe the US isn't looking at my data - after all they said they'd only look if they have a warrant[1] - but what's to stop the rest of the world? I'm not a citizen anywhere else, so there isn't any legal framework protecting my privacy there.

And besides, the LEA argument that having encryption they can break being no different than having houses, safes, safety deposit boxes, etc. accessible with a warrant is complete bollocks. If the technology existed which let a burglar break into every house in the world with a particular sort of lock, simultaneously and undetectablely and get away with the _entire_ contents of said house, these same agencies would be demanding better locks for everyone (well, actually they'd probably be demanding regulations on who can have access to the "be everywhere at once" tech and insisting that they needed it to fight terrorists and pedophiles). But make no mistake, that's what having an "encryption master key" means. It doesn't mean "great I have this super key, now when I burglarize houses I don't need to smash the door in", it means "great, now I can break into every house and no one will even notice until all their stuff is on eBay".

I don't believe that government/law enforcement should have this capability and I certainly don't believe that investigating a couple of _dead_ terrorists (or live ones for that matter) is worth giving up our privacy, but if this sort of tech is going to be required, at the very minimum using it must require physical access to and irreversible modification of the target device. For example, this mythical magic decoder ring device should have to work like so:

If I understand correctly how the security on iPhones works, your passcode is used to unlock a private key which is then used to decrypt your data. If a copy of that private key is also encrypted with an asymmetric cypher and different, per-device keypair and the private half of that keypair is stored in a special chip (which I describe below), then this should be pretty safe.

1. Get a warrant to take physical possession of the target device 2. Dismantle said device and remove the chip with the encryption keys 3. Insert the chip into the decoder machine 4. The decoder machine burns out one-time fuses (via pins which are left physically disconnected in the target device) in the encryption chip which enables access to aforementioned second private key (which is unique _per-device_) and prevents the device from working should the encryption chip (or a replacement) be reinstalled[2] 5. Data is decrypted using this copy of the private key 6. Now it is very obvious that this has been done, it isn't feasible to do it on a large scale and _no one_ is doing it remotely.

If you're still concerned that there may exist a remote exploit (and those fears are justified, even though as far as I can tell it should be impossible because the hardware to blow the fuses doesn't even exist in the target device), add an additional constraint that blowing those fuses also removes power from the radio baseband chipset, physically and permanently disconnecting the device from all networks. The obvious issue here is the potential for extreme mayhem if someone figures out this exploit, instantly bricking 100's of millions of mobile devices.

I'm not saying that this is a good idea or that we should back down from a pro-encryption stance, but if it comes down to some stupid law requiring such a thing, acting upon it must be _at least_ as difficult, time consuming, and apparent as my proposal above.

[1] I don't believe them, but that's not actually relevant [2] This is probably the most hand-wavy part, but technically feasible I think

tmm··on If you're alive in 30 years you might be in 1000 years too
Why would it? People always seem to assume that with extremely long lifetimes, humans would still reproduce at roughly the same age as they do now. I just don't believe that would be the case.

So many things change with lifetimes that long and it seems more likely to me that the human timeline would adjust to the new lifetime. Physically maturing into an adult may take the same amount of time, but now it's a tiny fraction of your overall life. You may spend 50 or 100 years in secondary education, then another 200 in a career at which point you should have enough money put away to live on the interest.

And it's at this point, when you're 300+ years old that you start having children. On this timescale, you'd still see more generational overlap than we have today, but no so much that overpopulation is a concern.

tmm··on Adding Comefrom to LuaJIT
Nope, it's from INTERCAL[1], which is (obviously) an abbreviation for Compiler Language With No Pronounceable Acronym.

[1] https://en.wikipedia.org/wiki/INTERCAL

tmm··on I took the $300k (2013)
I guess I'm in the other camp, I don't like it at all. I had to go back and look for the logo after reading your comment and I couldn't make out what it was supposed to be until I looked at the URL. Even then my brain didn't want to turn it into letters, but was bothered that the gray parts (especially the vertical parts of the 'u' and the 'n') didn't line up.

And of course since the logo is set in CSS it doesn't have alt text so I couldn't hover over it and get the company name.

That said, I am very pleased that the logo is a link back to the main company page and not to the main blog page; it's so irritating to read an article on a company blog, think "hey, I'm interested in what these folks are selling, let's visit their homepage", click on the logo and be redirected to the main page of their blog and not the company's actual web site.

tmm··on FAA records detail hundreds of close calls between airplanes and drones
I think birds might just be better adapted to making highspeed course corrections than deer, squirrels, etc. Plus, they have the advantage of another dimension (and gravity) to use for getting out of the way.

Consider also that if a deer is spooked and freezes on the highway, you hit it. If a bird is spooked and freezes in mid-air, it falls to the ground.

tmm··on Show HN: Tmux plugin manager
This is awesome! I've been using tmux for years and didn't even know there were plugins.
tmm··on Building Resilient Services with Go
Perhaps not readable in a single evening, but this is probably the most accessible thesis I've ever read. If you don't care about the history or motivation behind Erlang, just skip to chapter 3.

However, I think the "why" of Erlang is pretty compelling in and of itself, especially if you're interested in extremely high-availability telecom hardware with an operational life measured in decades.

tmm··on Why Startups Are Making the Expensive Switch to Traditional Employment
It should be the norm across industries. I don't know if this is done or not in retail, but it is common enough in manufacturing (even in non-union shops). It event has a name; it's called a shift differential, and it can be quite lucrative for the employee. Especially if they can work a normal 40-hour week and pick up a night shift on Saturday or Sunday. That one additional shift, with the shift differential and overtime could be the equivalent of two and a half or three normal days.
tmm··on Ask HN: ReactJS – Do you use it? Do you like it?
I am using React for a smaller enterprise application and find it quite difficult to reason about. But perhaps it's not well suited to deeply nested forms with lots of fields.

After about six months, I finally feel like I've got a handle on how it works, sort of. It's probably not something I'll use again on future projects though.

tmm··on Mathematicians Are Hoarding a Type of Japanese Chalk
I don't think time has anything to do with it. Rather it's the solvent in the dry erase marker. I used to use dry erase markers to remove extension numbers from the little tabs on 66 blocks back in the days before IP phones. Sometimes those numbers had been there for 15+ years.

So, my advice would be: if one brand of dry erase marker doesn't remove your permanent marker mark, try a different brand. I think I used Expo.

tmm··on YC Open-Source Sales Agreement
I am curious: why specifically .doc and not .docx? Is there some functionality of Word that works only with .doc and not .docx?
tmm··on RadioShack Prepares Bankruptcy Filing
I live near Baynesville Electronics[1] and somehow they've managed to stay in business for a really long time selling stuff that RadioShack couldn't seem to competently sell. (The 50 years part of their sign has been up there at least 10 years).

They do a surprising amount of business from local engineering firms, AV/network/cable installers, and little IT shops because where else are you going to get a 25 pair Amphenol connector, a quad op-amp, some colored heatshrink tubing, obscure batteries, and a 1% 27.1kohm resistor at 9am on a Saturday? They are expensive compared to online retailers (for small parts), but they carry Arduino and RPi and the cool-kids stuff too at only a small markup.

As a kid, the closest electronics shop to me was RadioShack (Radio Shack then) (and it was my favorite place to go). It was right next to where I got my hair cut and in the same shopping center as the grocery store, so I got to go at least every other week. Back then, they had two (maybe three) aisles of electronic components, copper clad PCBs for etching, ferric chloride by the gallon, both 40xx and 74xx series logic in DIP packages; all sorts of stuff. I haven't been in an RS for a long time, but last time I was there I couldn't even find a barrel connector and they used to have a dozen different sizes. Even in the early 90s I guess RS was an expensive store - a five pack of resisters was $0.50 or a dollar - but ordering on the Internet wasn't an option and mail-order was difficult if you didn't have a business account.

I miss what they used to be, but the state of the hobby has changed - most things center around a microcontroller now (RS never carried any in my recollection, though they did have some EPROMS ... maybe they had an 8051?) and I can do things with a half dozen discrete components and an Arduino in a few hours that would have required twenty or thirty TTL logic chips, wirewrap sockets, and a whole weekend not so very long ago.

I wish there existed something like a fusion between the traditional hobbyist electronics store and a modern hackerspace. Some place where I could go to rent time on a 3D printer, CNC machine or reflow oven and also buy the missing parts I need and get advice on whatever I'm working on.

I think the market still exists for walk-in hobby electronics stores, though I grant it's not an easy market to survive in. I don't have the answers, maybe the folks who own Baynesville do.

[1]http://www.baynesvilleelectronics.com/index2.ivnu

tmm··on Nvidia Corporate Network Breached

   why does HR's network need to be accessible from the same internal network that everyone else is on?
Convenience I guess. Every book I've ever seen on network design and system administration talks about "departmental" servers and segmenting corporate networks at functional borders, but in practice I've never seen it. It's hard enough to get people to use different network shares for different data (e.g. personal, departmental, project related) instead of one global, world-writable share. This occurs at every level, from small businesses to the largest corporate and government networks.

On top of that, even if you compartmentalize, there really isn't any technical method to prevent Sally in HR from emailing a list of personal email addresses, phone numbers and addresses to Sam in the Communications department so he can send out Christmas cards to everyone. And, Sally being a non-technical user will probably just "hide" the social security and salary columns in that spreadsheet instead of deleting them and then will blame Bob in IT when that list of salaries ends up on the global network share and eventually printed out and taped to the wall in the hallway.

← PreviousPage 3 of 4Next →