News for hackers. Stuff that matters.

gry

Re:I Bought $250k Worth of Physical Nickels on Tuesday October 21, 2025 @11:27PM (#45664637)
Curious to know how buying a pizza with tip in [Florida](https://floridianpress.com/2025/05/desantis-approves-law-all...) with [10 dimes pre-1964](https://www.ngccoin.com/price-guide/series-detail.aspx?MVDet...) goes.

Joking aside, not a bad bet.

Re:You can't outrun a bad diet on Thursday July 24, 2025 @10:59AM (#44671533)
Too much food is not the conclusion. It's the food itself.
Re:Ask HN: What's Wrong with WordPress? on Friday October 04, 2024 @11:02PM (#41747432)
You're not selling microservices to a small business. You're selling the CRUD. Monolith doesn't matter.
Re:Show HN: Free Certificate Monitoring via RSS on Monday February 26, 2024 @11:26AM (#39513181)
Fantastic. I love when someone stitches existing tools to solve a problem in a novel and elegant way.
Re:Waterway Map on Tuesday January 23, 2024 @11:41PM (#39113712)
Minnesota's has expansive rivers feeding the Mississippi[1] and it has one million acres designated to a canoe wilderness -- the Boundary Waters Canoe Area Wilderness -- bounded by the Canadian Quetico to the north[2].

They are navigable by canoe by design, yet they are flitting dots.

It gives me pause; what is this site trying to convey? It's a fantastic effort, yet for the water we have, it doesn't match.

[1] https://www.dnr.state.mn.us/watertrails/interactive_map/inde... [2] https://www.paddleplanner.com/tools/maps/bwcaqueticomap.aspx

The Verge story dangerously links only to the 2013 recall which does *not include* the 2023 recall models.

2013: https://greedehumidifierrecall.com/ProductEntry.aspx

2023: https://www.cpsc.gov/Recalls/2023/Gree-Recalls-1-56-Million-...

Re:Why the Government Isn't a Bigger Version of a Startup on Tuesday November 12, 2019 @05:05PM (#21518676)
This is captured in the Layers of Time diagram[1]. The tension fashion to nature is at diametric odds with time and responsibility; governance is squarely inbetwixt.

https://media.longnow.org/files/2/LayersOfTime-simplNEW.jpg

[1] http://longnow.org/about/

Re:Ask HN: What is the best IDE for python notebooks? on Friday September 28, 2018 @11:25AM (#18094148)
Re:Stop hitting ESC in Vim on Sunday September 23, 2018 @01:36PM (#18052136)
FWIW, Ctrl-[ is ESC's equivalent.

Ctrl-C escapes insert mode, and does not check for abbreviations. It has a different behavior.

    <Esc> or CTRL-[ End insert or Replace mode, go back to Normal mode.  Finish
                    abbreviation.
                    Note: If your <Esc> key is hard to hit on your keyboard, train
                    yourself to use CTRL-[.
                    If Esc doesn't work and you are using a Mac, try CTRL-Esc.
                    Or disable Listening under Accessibility preferences.
                                                    i_CTRL-C
    CTRL-C          Quit insert mode, go back to Normal mode.  Do not check for
                    abbreviations.  Does not trigger the InsertLeave autocommand
                    event.
https://vimhelp.appspot.com/insert.txt.html
Re:Ask HN: Do you password protect your SSH keys? on Friday July 20, 2018 @01:15PM (#17576919)
Yup. You can add a key to your agent using `ssh-add` to enter it once until reboot or force a password reentry say every N hours.

https://www.cyberciti.biz/faq/unix-linux-appleosx-bsd-ssh-ad...

Re:The physics of baking good pizza on Sunday July 01, 2018 @09:19PM (#17438711)
Related: I highly recommend the Cooking Issues podcast with Dave Arnold [http://heritageradionetwork.org/series/cooking-issues/].
You can use a YubiKey for a portion of a master password. This is best used by manually typing "correct" and autocompleting the latter portion with plenty of entryop of the password/phrase "battery horse staple" from the key. This way, if someone steals the key, you've still got a secret.

You'll still need a password manager to store the unique passwords for your services.

https://www.yubico.com/support/knowledge-base/categories/art...

https://www.yubico.com/wp-content/uploads/2015/11/Yubico_Whi...

EDIT: Explanation

Re:Show HN: Fruits and vegetables in season in your zip code on Monday November 20, 2017 @10:35AM (#15740594)
I toyed with this idea just the same and expanding it to provide recipes with the peak fruits and vegetables.

Not only was collecting the data time intensive, but determining the feature ingredient(s) was a challenge.

Re:DevDocs API Documentation on Thursday October 19, 2017 @12:03PM (#15509071)
Remapping `K` to devdocs.vim is quite handy.

https://github.com/rhysd/devdocs.vim

In 2005, Bruce Schneier noted the purpose is to provide a fallback password[1] if the primary password was forgotten, but the reality is, security questions are a much less secure protocol than passwords themselves.

While on a personal level you can fix this by using a password manager and generating another random string as an answer, other cute and terrible implementations like United[2] (calling you guys out) obliterate it, making yet another, terrible, horrible, no-good secondary protocol.

Why companies use them is because the Powers That Be(TM) believe it to be a secure protocol. They localize the problem to themselves and since they haven't been exposed using their mother's maiden name, it's good enough. Also, everybody else uses security questions, even our competitors, so we have to be at least as secure as them, right? The key phrase is "at least". Then you are equivalent in policy and protocol; certainly not more secure. :D

[1] https://www.schneier.com/blog/archives/2005/02/the_curse_of_...

[2] https://www.united.com/ual/en/us/account/enroll/default

It's never a technology problem. It's always a people problem.
Re:Stupid security things on Friday April 28, 2017 @10:43AM (#14219737)
Re:Password Rules Are Bullshit on Friday March 10, 2017 @04:55PM (#13842510)
I ran across something similar on United.

https://www.united.com/ual/en/us/account/enroll/default

Derp.

Re:My search for a MacBook Pro alternative on Saturday December 10, 2016 @12:05PM (#13146571)
Also, Shortcat. https://shortcatapp.com/
Ponies aren't free. Review their contribution guidelines and create an issue. Just saying, lamenting a missing OS-specific feature is a big ask.
Re:A Javascript journey with only six characters on Saturday October 08, 2016 @03:14PM (#12668197)
Re:Ask HN: Is identity theft protection service worth it? on Tuesday September 27, 2016 @02:27PM (#12591778)
A credit freeze is another tool; it prevents potential creditors from extending credit since they won't be able to pull your file to verify your creditworthiness. Temporary unlocks can be done when you need to apply for a loan, etc.

http://krebsonsecurity.com/2015/06/how-i-learned-to-stop-wor...

Re:Cryptpad: Zero Knowledge, Collaborative Real Time Editing on Friday September 23, 2016 @03:55PM (#12567492)
While the ideas and implementation are neat, this suffers from the chicken and egg problem[1]. You have to trust server's resources are not tampered with. Adding an event binding to tamper or siphon data before it's encrypted is simple.

[1] https://www.nccgroup.trust/us/about-us/newsroom-and-events/b...

Older »