News for hackers. Stuff that matters.

jechamt

Re:How to ripen and store avocados on Thursday November 30, 2023 @04:31PM (#38479463)
This is what I was looking for, in the article as well as comments. Lemon juice has also worked for me, especially in combination with the sealed plastic wrap, but I was not scientific about it and was hoping for some mention of testing this in the article!
Re:Ask HN: How is your job search going? on Wednesday November 29, 2023 @07:40PM (#38467624)
I am in the US, but otherwise your situation highly resonates with me, and I feel your description could be used to describe my own search.

I've been looking, applying, and interviewing (though not as often as I would like nor expect from my volume of applications) for 8 months. After some recent disappointing news, I am looking to be moving away from software development and systems-at-scale roles, and spending more time and effort at IT support / system administration roles in the future as I can't help but feel the industry just isn't interested in any desire to grow and develop professionally, they just want the perfect applicant that has already used the technologies they need for 2-5 years and won't waste time on anyone else.

It doesn't help my own confidence that I have "FAANG" experience (I'll leave it to the reader to decide which FAANG belongs in quotes), and it hasn't helped my response rate or evaluations.

In any case, it's disapointing, and I feel your struggles. I wish you the best, and hopefully your newfound perspective separating the CV and the interview will help you spend less time and anguish over the less important parts

https://www.aboutamazon.com/about-us/leadership-principles

> Have Backbone; Disagree and Commit Leaders are obligated to respectfully challenge decisions when they disagree, even when doing so is uncomfortable or exhausting. Leaders have conviction and are tenacious. They do not compromise for the sake of social cohesion. Once a decision is determined, they commit wholly.

In this context, “leaders” is (at least) aspirational, and meant to include all employees. I have a good deal of experience with the LPs, though I can’t claim to be an expert in evaluating the merits of their various applications. Particularly with this one, as it appears to be sort of encouraging situations that are more likely lead to discord and conflict. I would venture that, in my experience, this one is one of the more highly prone to differing interpretations among individuals. The times I have seen it used, or examples broadcast of its value, it is used in the spirit of starting or engaging in a good faith discussion, and at some point concluding a time box to the discussion by one party asking another to disagree and commit. In other words, two well-intentioned parties that both have meaningful contributions to the discussion (and represent that they understand the other party also has meaningful contributions) reach an impasse and know they need to get past it. By invoking disagree and commit, they both agree to commit their full energy and attention to the same concluded direction, work to see the success of that path, and (usually) discuss as an after action lessons learned, so that future disagreements of a similar nature can point to the data / conclusions to make better decisions. Again, I don’t know I have the best understanding of this LP, and it has not come up often for me personally, so I welcome feedback here from others with experience.

This is completely independent from my opinion on this particular issue, which I will omit. It does differ somewhat from the representation in the reporting:

> In other words, once any company decision is made, workers are expected to fall in line, even if they disagree with it

https://web.archive.org/web/20231129174929/https://fortune.c...

First time posting an archive / access link. If this link doesn’t work for anyone, feel free to hide this post. I’ll monitor and delete if it’s failing / not helpful.

Re:Robert De Niro accuses Apple of censoring awards speech on Wednesday November 29, 2023 @12:28PM (#38462250)
I don’t doubt any of the reporting I have read thus far from either theverge or variety, but the sequence of events seems utterly disconnected and difficult or impossible to reason about. Standing out to me:

> in response to “feedback from the filmmaking team that wanted the actor’s remarks to be centered on the movie.”

the idea that someone could make edits to the text that will go to the teleprompter and thus favorably control what a human being will say, after being surprised on stage with edits to what they certainly planned and practiced, strikes me as phenomenally absurd and disconnected from reality.

It is even more striking that included in the cut speech (which the reader sort of must take for granted was part of an alternative, planned speech) is an impassioned description of the pervasiveness of lies and efforts to present alternative/revisionist histories.

It recalls comedy scenarios like a scene from Anchorman, or more acutely, that someone made decisions thinking people will actually behave this way.

Re:The Six Types of Conversations with Generative AI on Thursday November 16, 2023 @11:51AM (#38291925)
Under "Our Research" section near the top:

"At the end of the study, we conducted in-depth interviews with 14 participants."

I wondered something similar while reading, but recognized the choices of explicit gender and detailed inquiry inclusion while intentionally changing the names. These pointed me to the likelihood this was in-house/controlled research. I believe that is the case from the quote above, though I don't see any additional details about how the study was conducted.

Re:Using GPT-4 Vision with Vimium to browse the web on Thursday November 09, 2023 @04:08AM (#38202692)
https://www.bleepingcomputer.com/news/security/openai-confir... News reports and their https://status.openai.com/incidents/21vl32gvx3hb incident reports indicate they are mitigating / fighting off attacks recently
Your comment:

> this is for Windows-specific features, so it would require them to think through an open, stable & forever-supported API

seems to directly disagree with the author's analysis:

> These special links only exist to force users into using Microsoft Edge. They serve no other purpose than to circumvent the user’s default browser preference to promote a Microsoft product.

Why do you suggest these are for Windows-specific features?

Re:How I Got my $3500 Camera Kit Stolen on KitSplit on Tuesday June 25, 2019 @04:06PM (#20278317)
Now that the medium post and this HN response (and possibly others) have gained traction, the author and other similarly affected parties may be interested to communicate this shift in momentum to investors, conveniently listed on kitsplit's website: https://angel.co/company/kitsplit/jobs

Mostly individuals (and perhaps this is not the complete picture) through AngelList, perhaps AngelList (angel.co) itself might be interested to know in more detail the actual policies and communications of one of its listed companies.

Deciding to not cover this claim and claims like it seems to be a short-sighted and heavily financially-motivated decision. Perhaps if the financial stakes of that decision were more clear, the author could pursue a different result.

Perhaps, though, this momentum has come too late. Food for thought as I haven't seen it discussed here so far.

I fully agree with you and I came here to post this.

On the other side, I would never click on a headline like this from another source, but it being here on HN provides some benefit of the doubt. Yahoo news reveals its consistent character, as usual, but at least this is balanced by the always insightful comments toward the material subject matter of the article (my own comment here notwithstanding).

Re:Sleep tweaks boost night owls' wellbeing on Monday June 10, 2019 @03:47PM (#20150102)
To the other night owls out there, I would love to know:

-Do you struggle to sleep every day? Or is it only as the work/school/lark-world responsibilities progress through the week?

-Would you characterize your difficulty as struggling to sleep or struggling to wake up, or both?

-How does this impact your days off (i.e. weekends), and what is the first and last day off typically like in comparison?

-Is this the kind of struggle that you manage, but it frustrates you, or has other effects, or is it something that regularly threatens to derail your life? (i.e. late for work or class, or other real-life consequences)

-Do you feel like it is something you will always live with, or do you feel that there could be a lifestyle/solution, either involving your change, or accommodating to your current behavior and/or natural inclination?

I'm a night owl, and I won't go into detail about my situation with hope to not impact responses too much, but it would help me (and hopefully others!) to understand just how similar/different I may be. Thank you!

Re:Chrome, the perfect antitrust villain? on Monday June 03, 2019 @06:32PM (#20089639)
E) All of the above.
Re:Don’t Get Clever with Login Forms on Friday February 15, 2019 @08:49PM (#19176467)
I really think it's counterproductive to downvote posts such as this one. Effective security absolutely must be based around user experience - your application needs users, and if you give them friction, they will vote with their feet. It's not about an emotional decision or stubbornness or unwillingness to learn, it's a statistical inevitability.

I'm confident experienced security professionals know this idea well: I'd posit that no one hates passwords more than the person who has to design the training explaining to everyone why they need to use unique passwords, of a certain length, of a certain complexity, and how the risk behind those changes in different environments. I hope mostly everyone would agree passwords are a terrible security solution. So if somebody wants to post that's how they feel about this, and their experience with a solution to get away from passwords, or minimizing them, let's have a discussion about what better options are out there (as some have already done in this thread).

In my view, the most important posts in the discussion of user-accessible security management are these posts that identify what makes every user need to be a hashing expert to select and manage the ever-expanding repository of account credentials we have today.

I agree completely.

The article above is pretty dated (which is noted in the post), and so leaves out some better options for security that are available today, such as authenticator apps for 2fa. In the context of when it was published, it was an excellent and important stepping stone in security awareness, but working with the tools of the time.

Now, we have better options and Troy Hunt (among others) has covered many of them in separate posts over the years.

Re:Apple blocks Google from running its internal iOS apps on Thursday January 31, 2019 @05:06PM (#19049401)
This is the key sentiment I feel is missing from much of the discussions (and in some cases, reporting) taking place surrounding these events this week. Thank you for posting it.

It's useful to discuss the philosophical implications of any tech company having too much power. To add the most to that discussion, it's helpful to understand that these actions are not directly affecting customers (aside from those who were using these enterprise apps outside their intended scope).

The attack described is two-part:

1. The criminals launch a phishing campaign against you specifically to get your bank username and password. This is defensible, although the harder step, by being vigilant, not clicking links, regularly changing your password, ensuring your password is unique so they won't be able to find it on a database of another breached web service, etc.

2. They intercept your SMS-based 2FA. This is not possible if you are not using SMS-based 2FA. Switch to a more secure method of 2FA, or communicate your concerns to your bank if none is available (really, make it public, because this is a big deal), or switch banks.

I believe there are things you can do to defend yourself, although having to do these things is clearly not ideal. Hopefully just knowing about it will improve a person's defensive posture against such types of attacks.

Edit: formatting (for anyone who's ever wondered: https://news.ycombinator.com/formatdoc)

I don't yet see any discussion here on the effective difference between the assumed conclusion of this news, so I'll add this: How do you expect the difference between Google and Facebook's internal ecosystems, and even their competitive stance (or lack thereof) with Apple, would affect the decision to revoke the enterprise certs? Hypothetically, if Apple proceeded to revoke Google's enterprise certs on the same basis, wouldn't it have significantly less effect on Google's day-to-day operations? Certainly there large teams of iOS developers working on iOS apps, but I would expect (with no basis but idle speculation) that most other Google employees outside those teams are on Android and it would simply cause issues with Google's ability to develop apps on a competing platform. If this is correct, then couldn't this act be interpreted as more of an anti-competitive move? I'm curious others' thoughts on this aspect of the recent sequence of news.
Re:Zero-shot transfer across 93 languages on Tuesday January 22, 2019 @08:05PM (#18974686)
I came here to post this (and add little to any substantial discussion). I'm glad to see someone else beat me to it! Also: Slovak (Solvak) and Slovenian? (Solvene). There were so many I thought maybe I misunderstood how they were being represented in that graphic.
I think that the points you make are not trivial or inconsequential. I'd be very interested to read more about the challenges that face communications companies that facilitate networks, if you'd be willing to provide references to a few items, such as:

'a general understanding that peering is free ...' - (might this be spelled out in the business service contracts between Comcast and a provider such as Netflix?)

a metric for how to determine and verify by both parties how much data is predominantly flowing and in which direction

And if these details to an agreement had been discussed and agreed upon by some parties that later entered a public debate about them, I might also wonder:

if a metric is determined for how an ISP will route traffic, how will it identify and share how much traffic it can handle, and how much it has received?

What peer relationships is Comcast, or any other ISP, also bound by of similar terms that might connect a candidate business to remote customers that the ISP does not directly service, further along on the internet? How will this also impact the ability of an individual customer or business to make decisions on the terms described above?

I've identified recursion in my reaction to this comment
Thanks for replying here. I'm not so interested in the debate about decorum and word choice as the technical matter, but it's good to head off the branches of speculation (if you will) into them to have your insights.
Re:Kansas runs one of the most secretive state governments on Monday November 20, 2017 @03:59PM (#15743226)
For a citizen and their family that live somewhere, it's either 100% or 0%. It's of marginal benefit to say a 'problem is much smaller' than somewhere else; this is similar to telling those citizens and their families they can solve it by moving, which has its own issues.
Re:Out to Get You on Tuesday October 10, 2017 @08:49PM (#15446495)
Authored by Zvi Mowshowitz, Magic PT Hall of famer. I was surprised to see intersection here of two of my interests.