alance
alance on Hacker News
It's been about 99% fine. I do remember last year noticing that my parent's gmail flagged (an admittedly very short) email of mine as spam, but when she went into her spam folder and told gmail it wasn't spam, all was fine from then on. I think it probably goes a long way to have SPF/DKIM/DMARC correct and doesn't hurt that it's AWS' mail servers.
Does the same behaviour manifest in Chromium?
You've mentioned some roles are fully remote - ok to apply from Australia or no? (it's absent from the extensive list of locations on the jobs)
They deprecated that one.
The pixel 5 ticks a lot of the same boxes as the pixel 4 btw. Similar form factor, but bigger battery and wireless charging. Plus if you install florisboard from f-droid you can customize a one-handed mode for the keyboard, which works quite well.
Also this: https://lineage.microg.org/ so you can run a less-google-ish phone, but also run maps if need be.
The firefox bit has these:
> Disables native privacy and anti-tracking features
> Disables DNS-over-HTTPS
Why?
Posted by
alance on Saturday August 15, 2026 @09:11PM
from the self-post dept.
Maybe more of a big deal should be made about the flood of internal private company information that can pass through to third-party Slack app developers?I suspect most that install Slack apps aren't aware (or don't care?) that their entire list of employees and Slack profiles can get shipped out pretty easily. Anyway here's a little blog-spam on it,...
Ok are you riding with two huge boxes containing all your work on an electric unicycle and I guess the hi-vis top means you're headed into traffic and the box-cords seem to be balancing at the halfway point of the boxes and this is too much anxiety for me. But hey, glad you optimized for minimalism on the PCB ♡
As soon as the thumbs-up started rotating and the severed wrist was revealed, it became apparent: I had never wondered where the rest of the thumbs-up person was before. But more chillingly: A thumbs-up from a person off-screen is fine, a disembodied hand wishing me apparent good-will? Not so good. It's a corpse-part!
Oh! And if one felt like solving the puzzle, it might lead to that person being mis-identified as being a bot. Which would be a perverse incentive to avoid wrecking the trap.
I'm suggesting that one should not be able to obviously detect that they're being challenged.
Eg I could respond in Pig Latin to you right now because I can see that's what you're asking, but if that particular request were masked or hidden or behind a puzzle, and you received a Pig Latin response well, maybe it's a bot (or a capture the flag sort of a person)
This whole thing was more of a shower-thought. But the trap I left behind was a link hidden in a full-stop in a deliberately acquiescent comment.
The link went to an imgur image. The image consisted of a bunch of numbers. The numbers were a simple off-by-n alphabet cipher (eg a=8, b=9...) which when decrypted, spelled out a message to the AI. Oh, and also the image looks very dark, a human might not even see the numbers.
This is all ridiculous. But I am wondering about other approaches to see if I can get a bot to bite and reveal itself.
ps: the message once decrypted, suggests that the commenter is incorrect about the thread. I am hoping this would give the bot the necessary pushback it craves to continue the conversation aggressively.
Posted by
alance on Thursday July 16, 2026 @10:48AM
from the self-post dept.
We're all experiencing it. Are you replying to AI right now?So I was thinking. The LLMs solve problems. Compulsively.I'm wondering about leaving problems behind in comments that are slightly human-time-consuming. If the comment-replier solves it then blergh you're chatting with AI. If the entity didn't detect the puzzle or couldn't be arsed solving it, then hey maybe you're talking with a real...
A local neighbourhood cake-stall marketplace. Got a great recipe and some time to bake? Put a picture of your sweet treat up, and get strangers knocking on your front door. You get cash-in-hand, delicious reviews and get to share your family recipes with your local community. No need for shopify, websites, and middle-men. Not sure what to call it, maybe something like onlynonnas.com ?
Did you take a look at one of the chat-based queuing platforms, something like
https://dibsonstuff.com people seem to use it for taking turns with servers, but it sounds a bit like it might work for your use-case too.
Sounds like you might need to screw your own mounting post in at the 30mm mark.
Location: Melbourne, Australia
Remote: Yes
Willing to relocate: No
Technologies: Linux, AWS, DevOps, Python, Bash, Security, Sys-admin, Compliance, Web applications
Résumé/CV: This guy https://alexlance.net/?src=hn99
Email: [email protected]
Currently enjoying the freelance life, but would love to find a team again - especially in an industry with an ethical and social impact.
Posted by
alance on Sunday May 17, 2026 @08:15PM
from the alexlance.blog dept.
Perhaps they should phase out the encryption on WhatsApp as well?
I only found cal.com in the first place because I searched for an open source calendly alternative.
Or why not include the source of your claim up front?
From GitHub comments:
https://github.com/signalapp/Signal-Android/issues/10247
Greyson:
> Hi there, sorry, this issue was fixed in 5.17 (which hit 100% production on 7/21)
They had a difficult to reproduce problem reported in late December 2020, and got the fix rolled out seven months later.
Not sure your criticism "absolutely inexcusable slop code" is well considered.
There are probably parallels with rap artists. There are those that improvise and flow.
(the rest of us edit and re-edit)
Jotted down my backup process for home. Spoiler: it's a bunch of SSDs sitting on top of a Raspberry Pi. But there's a few fun things in there too: raid, encryption, cron, make, rsync, ssh, Home Assistant and a tiny loaner dog. Enjoy.
Posted by
alance on Saturday February 07, 2026 @09:35PM
from the alexlance.blog dept.
Just on your first suggestion, this also means that if a person or process can drop a file (unknown to you) into your ~/bin/ then they can wreak havoc. Eg they can override `sudo` to capture your password, or override `rm` to send your files somewhere interesting, and so on.
Btw on the second suggestion, I think there's a command named `command` that can help with that sort of thing, avoids recursive pitfalls.
Fwiw termux + rsync for android phone backup (eg rsync /storage/emulated/0/) will grab most things.