News for hackers. Stuff that matters.

saool

Re:The Deadly Rise of Giant Trucks and S.U.V.s on Tuesday June 23, 2026 @01:56PM (#48648715)
Anecdotally...

Having spent time driving in both Europe and Southern California, I'd say that European drivers are more attentive to their driving and way less likely to be looking at their phone while driving, since it's policed. You can often see drivers in SoCal holding their phone for a video call.

Re:Ask HN: Who is hiring? (May 2024) on Friday May 03, 2024 @02:38PM (#40250830)
Plug | https://plug.vin | Senior Software Engineer, Full-Time | Los Angeles, CA (Santa Monica Clover Park area) | ONSITE

Come join our well-funded, revenue-generating team and help build the automotive auction of the future.

https://wellfound.com/jobs/2998538-senior-software-engineer

Re:The Quest for a Simple Smartwatch on Thursday June 29, 2023 @01:27PM (#36523634)
The Skagen Hybrids (cell battery powered for 4+ months) are the best I've found for this low-tech approach, much more so than any Garmin.
Re:Passage by 1Password on Thursday May 18, 2023 @06:54PM (#35995397)
Sorry, I should've specified that it's impossible as the standard is written, not necessarily cryptographically impossible.

A scheme could definitely be devised to add authenticator "stubs", but I don't think it's possible right now.

Unless you're saying the above is already available in the spec.

Re:Passage by 1Password on Thursday May 18, 2023 @02:19PM (#35991988)
1, 2, and 4) Yes, that's already possible. Look into Solo Keys for open source hardware and firmware. The standard allows for key manufacturer attestation but seems like the way it is going (especially with the proliferation of software authenticators) it likely won't be relevant in practice. You can also enroll many authenticators to the same account (provided the service allows it, which most do).

3) This is pretty hard/impossible, I think. The authenticators don't use the same key-pair for all websites (a la SSH through Yubikey), but rather create a per-service, per-credential key-pair, and encrypt it with the main key-pair. The encrypted credential key-pair is then handed off to the server for storage, and the service sends it back for the authenticator to decrypt and use during a challenge. Clever trick to not depend on local hardware memory and be able to have unlimited per-credential key-pairs, but afaik prevents you from just "adding lists of public keys".

I'm also not mentioning the resident keys aspect of the standard but that won't fix it as they're still service and credential based.

Re:Study Suggests Fructose Could Drive Alzheimer's Disease on Thursday February 16, 2023 @01:16PM (#34822941)
If you haven't yet, check out Dr Richard Johnson on the fructose metabolism.

https://peterattiamd.com/rickjohnson2/

https://drhyman.com/blog/2022/05/18/podcast-ep540/

Re:RIP, Passwords. Here’s What’s Coming Next on Thursday January 19, 2023 @03:54PM (#34445476)
In the typical case and handwaving a bit:

On registration, the server is handed a site/user-specific key pair _encrypted_ with the master key of the authenticator device (your usb key or your phone, etc), together with the plain-text site/user-specific public key.

On authentication, the server sends down that encrypted blurb, which is temporarily decrypted and then used to sign a challenge the server sent.

So basically the server is used as storage. There are exceptions to this (e.g. resident/discoverable credentials on hardware keys)

For an industry so enamored with scale and network effects, we sometimes fail to recognize how these work against us organizationally. Or maybe we don't, and the boards/execs just prefer a more controllable organization even at the expense of rigidness and efficiency?
Re:Fly.io: The reclaimer of Heroku's magic on Monday May 16, 2022 @02:06AM (#31394047)
You can. You gotta get Wireguard running on your local machine [0] and be able to see the ".internal" network, but once you do, you can ssh into any edge VM and if access its filesystem. I've SCP'd SQLite db files and dumps. It's also a pretty anti-pattern way of debugging an app if you're an outlaw :)

[0] https://fly.io/docs/reference/private-networking/

Re:Ask HN: Remotely helping elderly parents? on Saturday December 25, 2021 @01:54PM (#29685867)
wireguard (or tailscale) + sshd + VNC (macOS screen sharing) server bound only to the virtual interface or firewalled.
3.2g of arginine in a day doesn't sound like a lot. There's around 2g in most meat/protein servings, and 1g on each egg yolk[0]. I wonder how much of the study outcome is just the result of changing dietary habits of the patients.

[0] http://www.dietandfitnesstoday.com/arginine.php

As long as we are talking (de)colonization, the distinction makes all the difference.

The difference in the treatment of a land and its people as equals to the rest of the country's citizens and states is what makes Hawaiians regular Americans and Ceuties regular Spaniards, and what keeps Llanitos from being British _citizens_.

To answer your question: yeah, if Gibraltar was a self-sufficient state within the UK (instead of an -arguably- geo-strategic colony that is a tax haven according to the OECD) you likely wouldn't hear as many complaints about it.

Take for example the cession of Sardinia in the very same Treaty of Utrecht. You ever hear complaints about its sovereignty?

Not only is that a tu quoque fallacy but it also fails to take into account that both Ceuta and Melilla are integral parts of Spain and have been since the 16th century, centuries prior to Morocco's independence from France in 1956, whereas Gibraltar, being a British Overseas Territory, is not and never has been part of the United Kingdom.
I wouldn't extrapolate.

Most places in Spain have and need heating, apart from a few coastal enclaves in the south. Spain is the 5th largest user of energy for residential heating in the EU, behind Germany, France, Italy, and Poland.

Re:France's Basque Region Creates Its Own Currency on Saturday April 20, 2019 @08:06PM (#19709710)
While the Basque conflict was mostly about identity, and the Catalonian one is half about identity and half about economics, the Leon conflict is sheer economics.

The region took an economic hit during the 80s as the country transitioned to a tertiary-sector-heavy economy, which lumped together with the lack of investments from the new regional government and their inability to perform any sort of industrial restructuring quickly turned Leon from one of the most prosperous regions in the country to one of the least.

Basically the same issues and politics you see in coal country in the States.

Re:France's Basque Region Creates Its Own Currency on Saturday April 20, 2019 @07:58PM (#19709682)
It is, but in Spain's case it is sometimes nationalism too, as the Spanish Crown rules over several different old independent kingdoms which have cultural differences and languages that stem directly from Latin (ex. Euskera).

I don't know where academics put the bar, but in my mind any area that has its own non-dialect language or was once an independent entity for a good while can claim to be a nation. Though not sure what the claim would mean in practice.

That said, I'd rather see all these things die down and have a strong EU of federated states of whichever size helps democratic and economic progress. Tall order, I know.

Re:France's Basque Region Creates Its Own Currency on Saturday April 20, 2019 @07:51PM (#19709664)
While that is factually correct, the reference in the name of the autonomous community isn't to the city or the province, but to the Leon region [0], which expands to the south of the province, following old demarcations, and older language areas and finally the borders of the Kingdom of Leon [1].

[0] https://en.wikipedia.org/wiki/Le%C3%B3n_(historical_region) [1] https://en.wikipedia.org/wiki/Kingdom_of_Le%C3%B3n

Re:The Notre Dame fire and the future of history on Tuesday April 16, 2019 @02:12PM (#19675898)
The cathedral in Leon, Spain, a slightly older gothic church, was the scene of a very similar fire when a badly grounded lightning set the wooden roof on fire in May, 1966.

The damage wasn't as pronounced thanks to the stone used for the top, which was chosen for its lightness but had the added benefit of having volcanic-like properties. And especially thanks to a local mason who made the call to pull the fire brigade and sacrificed more of the wooden roofing to prevent the water weight from making the vault collapse.

I haven't found much info in English but here's a detailed account in a Spanish blog: http://cosinasdeleon.com/el-incendio-de-la-catedral-de-leon/

> it just uniquely identifies you

not even. you need other data points, like DOB, to build enough uniqueness, and there are still many stories of collisions.

Re:Physics Makes Aging Inevitable, Not Biology (2016) on Wednesday February 21, 2018 @10:03AM (#16429898)
Physics Makes Flying Impossible, Not Biology
Re:Peter Thiel sells most of remaining Facebook stake on Wednesday November 22, 2017 @03:11PM (#15760130)
> not worth holding long term

for him.

Even if he were confident that Facebook has a good chance of growing, say, 10% YoY for the next 20 years, with those smarts and his access he can put the money to work on the next facebook, or even less successful companies that will likely beat that 10% in aggregate.

Re:Ask HN: Who is hiring? (July 2017) on Thursday July 06, 2017 @10:57PM (#14715699)
Thinkful | Senior Software Engineer ¡ Brooklyn, NY or Remote | ONSITE, REMOTE, https://www.thinkful.com/

Founded in 2012 in New York City, Thinkful is on a mission to reinvent education. We are building a school that trains the workforce in the technology skills necessary to sustain innovation and growth in the economy. We are developing a method of online learning that emphasizes practical, sustainable skills and prepares students to achieve their career goals. We are looking for experienced engineers with a passion for education that want to join us and help shape the way people learn online.

The company was founded by Dan Friedman —one of the Thiel Fellows— and Darrell Silver, founder of Perpetually (acquired by Dell), our CEO and technical co-founder. The culture is balanced: analytical but fun, serious but sane. You will be joining a small, agile team with big challenges ahead of us.

If you are interested, check the job listing http://goo.gl/AoUW1M or drop us a line at [email protected] to hear more.

Re:Why Trello Failed to Build a $1B Business on Friday March 10, 2017 @07:19PM (#13843309)
So, this is how you make it to the top of HN, with an outlandish clickbait-y claim. Good to know.
Re:SSL Is Now Included on All Paid Dynos on Thursday September 22, 2016 @06:16PM (#12560802)
I must be out of date, but my impression is that heroku's ease of use deploying and configuring applications through the web UI can't really be matched with kubernetes, mesos or others, which would need thousands of lines of orchestration code to work. Is that not the case anymore?
Re:EU Referendum Results on Thursday June 23, 2016 @09:05PM (#11965510)

Older »