HN user

Dangeranger

5,251 karma

[ my public key: https://keybase.io/dangeranger; my proof: https://keybase.io/dangeranger/sigs/qcCcOOJEOEFQXUs104UmmIGYfrH8_ucqq-YEbfNs1Js ]

Posts260
Comments507
View on HN
www.luiscardoso.dev 5mo ago

A field guide to sandboxes for AI

Dangeranger
1pts0
emsh.cat 5mo ago

Good Taste as a Super Power

Dangeranger
1pts0
consumer.risk.lexisnexis.com 2y ago

Request Your LexisNexis Disclosure Report

Dangeranger
4pts1
zed.dev 2y ago

Zed – Optimizing the Metal pipeline to maintain 120 FPS in GPUI

Dangeranger
6pts0
news.mitel.com 2y ago

Unify Acquired by Mitel

Dangeranger
2pts0
fate-zero-edit.github.io 3y ago

Fate/Zero: Fusing Attentions for Zero-Shot Text-Based Video Editing

Dangeranger
3pts0
tut.anv.nu 3y ago

Tut – TUI for Mastodon with Vim inspired keys

Dangeranger
5pts0
wormhole.app 3y ago

Private file sharing with end-to-end encryption and automatically expiring links

Dangeranger
2pts0
instant.io 3y ago

Streaming file transfer over WebTorrent – Torrents on the web

Dangeranger
3pts0
9to5mac.com 3y ago

Apple's iOS Privacy Concerns Deepen

Dangeranger
2pts0
journals.lww.com 3y ago

Consciousness as a Memory System, Andrew Budson et al.

Dangeranger
1pts1
backstage.io 3y ago

What Is Backstage?

Dangeranger
3pts0
github.com 3y ago

GitHub Privacy Changes, effective Sept. 1, 2022

Dangeranger
4pts1
www.joshwcomeau.com 4y ago

Statements vs. Expressions in JavaScript

Dangeranger
1pts0
www.axios.com 4y ago

Tech companies may surrender abortion-related data

Dangeranger
1pts1
mitpress.ublish.com 4y ago

Software Design for Flexibility, How to avoid programming yourself into a corner

Dangeranger
1pts0
paperprograms.org 4y ago

Paper Programs

Dangeranger
2pts0
www.youtube.com 4y ago

Programming with Something [video]

Dangeranger
1pts0
google.github.io 4y ago

OSS-Fuzz: Continuous Fuzzing for Open Source Software

Dangeranger
2pts0
support.discord.com 4y ago

Discord Premium Memberships

Dangeranger
2pts0
pdodds.w3.uvm.edu 4y ago

Rules for Biologically Inspired Adaptive Network Design [pdf]

Dangeranger
2pts0
journal.stuffwithstuff.com 4y ago

Stupid Dog

Dangeranger
2pts0
epub.press 4y ago

EpubPress, turn web content into ebooks

Dangeranger
130pts53
www.nytimes.com 4y ago

Elon Musk offers to take Twitter private

Dangeranger
9pts0
twitter.com 4y ago

MIT Graduate student vote to unionize succeeds

Dangeranger
31pts9
friday.app 4y ago

Friday.app is shutting down

Dangeranger
111pts154
glitch.com 4y ago

Glitch in Bio – Get a better link page. For free.

Dangeranger
9pts0
blog.cloudflare.com 4y ago

Wrangler 2.0 – A new developer experience for Cloudflare Workers

Dangeranger
3pts0
metasyn.github.io 4y ago

Learn Orca

Dangeranger
2pts0
www.nytimes.com 4y ago

Managing A.D.H.D is Hard. These coaches want to help

Dangeranger
2pts0

You should never store passwords in plain-text, encrypted or not, you should always use a one-way cryptographic hash like bcrypt [0], scrypt [1], or PBKDF2 [2], combined with a single use salt [3] and optionally a pepper [4], and then store the output of the hash in the database.

To confirm a user supplied password matches you run input into the same hash function again with the salt+pepper and compare it to the value in the database.

That way if the database is stolen, the attacker cannot recover the contents of the passwords without brute forcing them. Encrypting passwords is not recommended because too often attackers are able to recover the encryption keys during the same attack where the password data is extracted.

[0] https://en.wikipedia.org/wiki/Bcrypt

[1] https://en.wikipedia.org/wiki/Scrypt

[2] https://en.wikipedia.org/wiki/PBKDF2

[3] https://en.wikipedia.org/wiki/Salt_(cryptography)

[4] https://en.wikipedia.org/wiki/Pepper_(cryptography)

AirPods Max 2 4 months ago

Yes, my AirPod Pros do this too, and I've found that the issue is due to a problem with the external microphones which are involved in active noise cancelling. In order to fix the problem I had to disable ANC, and use them like a pair of basic wireless headphones, which has been quite disappointing. I've found that basically any instance of dropping the headphones on a solid floor, even while in the case, will result in this rattling sound occurring.

AirPods Max 2 4 months ago

I've been using the AirPods Max 1s for the last five years and you should get the Sony XM-6s. The Apple AirPod Max sound great, bur are heavy and fairly uncomfortable on the head when worn for more than an hour or two. Furthermore, I experienced persistent wireless connectivity problems and eventually sent them back to Apple under warranty. They were replaced successfully, but with a different pair of the same model which had a worn out headband. Overall it's been a bad experience and I wish that I purchased the Sony XM-6s insead.

Deno Sandbox 6 months ago

The AI agent can run `echo $API_KEY` all it wants, but the value is only a placeholder which is useless outside the system, and only the proxy service which the agent cannot directly access, will replace the placeholder with the real value and return the result of the network call. Furthermore, the replacement will happen within the proxy service itself, it does not expose the replaced value to memory or files that the agent can access.

It's a bit like taking a prepaid voucher to a food truck window. The cashier receives the voucher, checks it against their list of valid vouchers, records that the voucher was used so they can be paid, and then gives you the food you ordered. You as the customer never get to see the exchange of money between the cashier and the payment system.

For context: This post by ptorrone suggests that leadership at Sparkfun has been engaged in a long running harassment campaign against the founder of AdaFruit (Limor Fried) and is now attempting to weaponize their CoC to cast blame on the victim in order to deflect from their own behavior[0].

    for anyone still reading:
    in july, we told sparkfun they needed to get their house in order. for years, sparkfun's leadership ignored specific behavior from leadership (and employees, now former... they had created and promoted hate sites, photoshopped images, and harassment targeting limor, me, and others at adafruit. this was done on company time, shared, promoted. this was reported to them. it was documented and ignored. that was the big issue i wanted them to get some hr training on, or _something_

    months later in 2025, the same individual resurfaced and re-promoted it with what appears to be nate's blessing at the time. we again told sparkfun to deal with this. instead of addressing the behavior, sparkfun’s response was to “ban” adafruit from purchasing teensy by invoking a vague, secret set of rules that neither we nor paul (the creator of teensy) were allowed to see.

    this is not a one-off. nate (the founder of sparkfun) has done this before. anyone who has worked with him long enough knows this is how conflict is handled: deflect, escalate, and try to punish rather than deal with the underlying conduct.

    we do not respond to bullying by backing down. we never have. that is why we are here.
https://forum.pjrc.com/index.php?threads/open-source-teensy-...

Both you and the parent commenter are correct; A saddle that matches your personal anatomy will make a tremendous difference for all riding conditions, and the amount of times you vary your position on the bike will alleviate discomfort by allowing blood to flow naturally as your weight shifts. More intense riding conditions necessitate moving around on the saddle more often.

Additionally, if you simply ride your bike more often your groin and siting bones will feel more comfortable by acclimating to the pressure and movement. It's helpful to wear appropriate clothing in the areas that contact the saddle as well, such as a chamois liner, to reduce friction and add an appropriate amount of cushion.

If you have any interest in writing a series of blog posts about your experiences in the “turnaround” and linking to them in your profile I believe you would have an audience. Your explanations are clear and your experience is worthwhile. Just food for thought.

There is a speech that was given at EPIC (Electronic Privacy Information Center) in 2015 that is likely to have the quote you are looking for.[0][1]

There is a short clip of his speech at the event which was reported by NBC News, in which he states the boundaries of their advertisement program at the time.[2]

EDIT: There is also this story from the Verge in 2014 which includes a lengthy quote about the advertisement program.[3]

[0] https://archive.epic.org/2015/06/tim-cook-backs-privacy-cryp...

[1] https://archive.epic.org/june1/

[2] https://www.nbcnews.com/tech/apple/its-wrong-apple-ceo-tim-c...

[3] https://www.theverge.com/2014/9/17/6368669/tim-cook-talks-up...

My ADHD symptoms have been drastically reduced after running daily for the past couple of months.

Even while using medication, running improves results on top of what I had been seeing. It also helps to have a physical challenge to complete every day in order to maintain a routine.

For my body, I need about 90 minutes of challenging physical exercise every day, or I start to seek stimulation in any form I can find, which is usually distracting from my primary goals.

For the past year I’ve been running a lot, and I’ve found that listening to podcasts and/or audio books is a great way to stay cognitively engaged with something other than the physical sensations of running, as a bonus you get to learn and experience cool stuff.

There is also a benefit to running without audio, in that you have a chance to let your imagination go wild, or try to focus hard on your breathing, cadence, and form, but I can understand that being challenging for many people to do for an hour or more at a time.

Could you volunteer any of your time to help an organization that does something that is important to you? If you can, I would recommend connecting to a non-profit or public benefit organization and seeing if they have needs that you can fill, even on a limited time basis. If possible, try and do this in-person, so that you can see the fruits of your work, and the witness the appreciation of those who receive it.

Volunteering to help others has several benefits; You will have a tangible and meaningful impact on others; You will see that your skills are useful, and you are capable of employing them; You will form real human connections with other people in a context different than the one you're currently experiencing.

Another outcome of helping other people is that you will form a network people who know about you and what you can do. It's possible to use that network to earn a modest living, doing side jobs and small contracts. This is not the end-game of volunteering, that is still the help you provide to others, but it's a nice side-effect anyways.

Since you are someone with technology skills, I can tell you that there are many non-profit organizations who need a little bit of tech help, or a lot of tech help, and cannot find someone to do the things they need for nothing, or a even a reasonable amount of money. Don't be afraid to work for free, the thanks you will get are more than worth it.

There's a talk by Sandie Metz that I've shared with a lot of people called "Madame Sandie tells your future"[0] and I would give that a watch, it's quite inspirational and may help you to shift your perspective in a way that helps.

[0] https://www.youtube.com/watch?v=JOM5_V5jLAs&t=216s

These sorts of sterile PR responses ...

"As part of a continued planning process where we regularly assess our resourcing levels against our company priorities, we decided to realign some of our resources to better drive focus and support our long-term growth. This resulted in some hard decisions that impacted approximately 4% of all Unity workforce. We are grateful for the contributions of those leaving Unity and we are supporting them through this difficult transition.”

... are dehumanizing, and serve only as a legal smoke screen.

I really wish that layoff announcements acknowledged the pain of those people let go, and the pain of those people who will remain who have to take up the slack under a tighter fiscal belt.

This best expressed by George Carlin's quote on "soft language"[0], which stated; "Americans have trouble facing the truth, So they invent a kind of a soft language to protect themselves from it"

Pretending it doesn't hurt doesn't help. Let go of the euphemisms.

[0] https://www.thoughtco.com/soft-language-euphemism-1692111

This statement is not accurate[0].

But copyright law only protects “the fruits of intellectual labor” that “are founded in the creative powers of the [human] mind.” COMPENDIUM (THIRD) § 306 (quoting Trade-Mark Cases, 100 U.S. 82, 94 (1879)); see also COMPENDIUM (THIRD) § 313.2 (the Office will not register works “produced by a machine or mere mechanical process” that operates “without any creative input or intervention from a human author” because, under the statute, “a work must be created by a human being”). So Thaler must either provide evidence that the Work is the product of human authorship or convince the Office to depart from a century of copyright jurisprudence.

[0] https://www.copyright.gov/rulings-filings/review-board/docs/...

Since the example given in the article is an integration test, it does not prevent using an HTTP replay server to simulate making real calls to the service within end-to-end tests.

I think the author even linked to some of his favorite examples for using an HTTP test server to replay responses to requests.

Orkut 4 years ago

My memory of the first version of Facebook was that it too didn't have a feed. I have fond memories of having to visit all my friends manually to see what they were up to in the last day. This made me more conscious of who I was thinking of and who I wanted to see the most. A side effect was seeing the comments of other people who were commenting about my friends updates, and then naturally diving into their profile pages. This changed dramatically following the introduction of the timeline.

[EDIT]: I personally believe that humanity has been conditioned to expect, perhaps even crave, a timeline/feed based social network, and therefore a non-feed based social network will be up against a general "expectation" of what a social network is by the populace. This expectation is driven in part by an "addictive" feeling that networks such as Facebook, Twitter, Instagram, TikTok, and Snapchat have fostered over the past decade.