HNHacker News
TopNewBestAskShowJobs

tucif

576 karma · joined February 1, 2012

hello@tucif.mx

[ my public key: https://keybase.io/tucif; my proof: https://keybase.io/tucif/sigs/H2SATvE_ZprdH2ajuOaNHpG7ky7X2sQA2dcnXDt6NGs ]

submissionscomments
tucif··on Ask HN: What are some examples of good changelogs?
I like their use of alphabetical order within each section, first word being component it seems. Makes it easier to follow a particular aspect changed, nice one!
tucif··on Ask HN: What are some examples of good changelogs?
I guess the key would be in writing those “clear commit messages”. Do you use a template/format for uniformity?
tucif··on An update on our security incident
Probably just the old hashes to prevent a user from reusing the last N passwords.

If you know the value of N (from UI errors trying to reuse one) and want them to get rid of an old hash for some reason then you could reset your password N times.

tucif··on VS Code without Microsoft branding/telemetry/licensing
Even can run vim locally and edit a remote file via scp.

vim scp://user@example.org//path/to/file

(Basically edits a local copy and pushes saves as scp uploads)

I've found this very useful in combination with a decent ssh config file.

tucif··on WARP is here
It does
tucif··on WARP is here
Or host it for free in one of Oracle's cloud 'always free' tier VMs.

Disclaimer: I'm an employee

tucif··on I find journaling indispensable
You should probably look into https://standardnotes.org, it was mentioned here a while back.

Free editor is quite clean and simple.

tucif··on Websites have been quietly hacking iPhones for years, says Google
What kind of sync is that? Only if you manage your vaults externally (e.g. Dropbox)?
tucif··on The clever cryptography behind Apple’s “Find My” feature
The nearby phone is the one encrypting its own location with the public key broadcasted, so in theory fake location is possible if you had control over the protocol in all nearby devices.
tucif··on My Chromecast Ultra would not start until I began answering 8.8.8.8
does this work with apps using certificate pinning?
tucif··on Secret Service Warns of Chip Card Scheme
At least in my country I've seen a common practice for the bank to mail (separately, days before/after) an envelope with a temporary PIN to the customer, so that they can activate the card and change it.

Not sure if they do that in the US or if they'd do it for corporate cards as well, but I guess it wouldn't be a problem to intercept the second envelope for whoever intercepts the cards. In that case the PIN wouldn't add any value.

Now regarding card destruction, I wonder how hard would it be for them to just print fake cards with fake chips that just have the same numbers.

Probably a better solution would be forcing to activate the card in an atm, so that the chip would be validated.. cumbersome but safer.

tucif··on Facebook turned on face recognition silently
Here is the facebook site explaining how this works/will work.

https://www.facebook.com/about/basics/manage-your-privacy/fa...

tucif··on Show HN: Six Degrees of Wikipedia
I was getting interesting results until I noticed a pattern involving the presence of "Wayback machine" as the only connecting dot between really different things.

That adds noise, since articles now automatically use the wayback machine for "archived" links, thus generating many paths that do not really connect topics, just because the text "wayback machine" is part of the link text.

It may be an interesting exercise to find outliers like that and compute paths without those nodes.

tucif··on Why your developers are slow
> Schedule meetings at the beginning or end of the day, or near lunch.

Please don't unless you can make sure it won't make your devs miss lunch or leave late because it got extended.

I'd prefer to just schedule meetings ahead as a suggestion.

tucif··on Google’s Airpods competitor do real-time language translation
I also think the situations where I'd find useful this kind of translations are when I'm not in my home country which most likely means my data plan does not work or is very expensive, which makes it less useful than it sounds at first.
tucif··on Why Must You Pay Sales People Commissions?
I think the whole (non)deterministic thing is off.

Engineers could also execute a perfect development strategy to deliver a product and it could fail through for circumstances beyond engineering team (budget is yanked, project is delayed, etc.)

But I do agree sales is more risky as it is the "last-mile" of the business and they have a target to make, so it's their neck on the line and we live in a system where we reward how much neck someone is sticking out and yet survives, rather than work performed on the backstage. Same thing applies for C-level compensation.

tucif··on Facebook, You Needy Sonofabitch
"I’m likely not going to delete Facebook entirely since I do genuinely enjoy staying in touch with the people in my life, and for better or worse Facebook is where those people hang out"

Is it likely that most people are willing to move and the only problem is there are no compelling options?

tucif··on Boston Red Sox Used Apple Watches to Steal Signs Against Yankees
You probably misread, the camera was allegedly used by the Yankees. That was the complaint filed in response by the Red Sox.
tucif··on As Coding Boot Camps Close, the Field Faces a Reality Check
couldn't this open the path to approving programming courses without ever handing in compiling code?

What about pseudo code that has the "right logic" but will never compile?

What if I submit python code that works as a c file, should that count?

tucif··on As Coding Boot Camps Close, the Field Faces a Reality Check
How do you "decide how much partial it is worth" ?

Generally the task is not writing code, it is solving a specific problem and non-compiling code is a non-solution, not a partial one.

tucif··on How Instagram uses your mobile microphone to spy on you (and serve ads)
Mods: Title is misleading and not the original.

This post never shows "how" ig uses a mic, just theorizes about it without any proof.

tucif··on How Instagram uses your mobile microphone to spy on you (and serve ads)
I believe this is how it works at least in iOS if the mic is used by an app in the background
tucif··on I’m Peter Roberts, immigration attorney who does work for YC and startups. AMA
Are there legal ways to be hired as remote worker for a company that only has operations in the US and live/work from another country? Edit: As a Non-Us citizen.
tucif··on Facebook – You are the Product
I also adopted a similar approach, where I unfollowed ALL my firends so that none of them will show up in newsfeed.

Then I added the few ones I truly wanted to know about to the "Close friends" list which allows you to activate notifications for everything they post.

Now when I log in I only see a bunch of notifications which have a very handy "Mark all as read" link, and I only click further when I see a non-meme status update or an interesting share from them.

I can always search someone and go to their profile, or click on a firend list and see what certain group is up to. And I still find messenger useful, except for the forced "Add to your day" part, from which I daily hide any friends "day" as they post it without opening it (hold click to show that option). I'm about 1 year like this and it has been great, don't feel like I'm missing anything.

tucif··on Facebook – You are the Product
"you are NOT the product that facebook creates"

Right, of course.

But I believe the point here is you are, in terms of the sum of your data and your attention, the product facebook sells

You don't explicitly and consciously pay with your data and attention in exchange for a social networking service, you are tricked into a "free" service that you implicitly pay with your data and attention.

tucif··on Macie: Automatically Discover, Classify, and Secure Content at Scale
I don't think their svm classifier would work over encrypted data, so if a service stores data encrypted at rest is this useful at all?
tucif··on It’s Complicated: Unraveling the mystery of why people act as they do
What would be a good book to read before this book? Or is it friendly enough for someone new to behavioral science?
tucif··on Programmers are confessing their sins to protest a broken job interview process
Reminds me of http://rejected.us/
tucif··on What Vizio was doing behind the TV screen
> Ask for network access Assuming you have a decent router that supports wpa2 I find it difficult to believe a TV would crack it.
tucif··on Is Private Browsing Really Private?
> so obviously this article has marketing lean.

The domain belongs to the DuckDuckGo blog.

← PreviousPage 2 of 4Next →