HN user

RossM

1,355 karma

[ my public key: https://keybase.io/rmasters; my proof: https://keybase.io/rmasters/sigs/KmCzs7LC7r6fFECJb7t5rsG41ErUSgvwu_fMr9A451Q ]

Posts23
Comments561
View on HN
gmail.com 10y ago

Google Postmaster Tools

RossM
3pts0
wiki.php.net 12y ago

PHP RFC: Name of Next Release of PHP

RossM
3pts0
play.google.com 12y ago

Basecamp for Android

RossM
1pts0
www.fitbit.com 12y ago

2013 Fitbit Activity

RossM
2pts0
www.kickstarter.com 12y ago

The year in Kickstarter 2013

RossM
84pts55
www.digitalattackmap.com 12y ago

Digital Attack Map

RossM
63pts8
techcrunch.com 12y ago

Twitter Alerts: Push Notifications From Emergency Organizations During Crises

RossM
1pts0
thenextweb.com 13y ago

Meet Lumi, the no-effort content discovery engine from the founders of Last.fm

RossM
5pts0
news.ycombinator.com 13y ago

Ask HN: How do you deploy updates to web apps seamlessly?

RossM
1pts2
news.ycombinator.com 13y ago

Ask HN: Devices for sleep monitoring?

RossM
13pts5
code.google.com 13y ago

Registration for Google Code Jam is open

RossM
4pts0
blog.twitter.com 13y ago

Mobile app updates: Enhancements to search, web browsing and more

RossM
2pts0
bitbucket.org 13y ago

What's new in Bitbucket

RossM
1pts2
www.bbc.co.uk 13y ago

Viewpoint: Steve Jobs is missed by Silicon Valley

RossM
1pts0
www.codinghorror.com 13y ago

Todon't

RossM
157pts80
ch00ftech.com 14y ago

Making of an iPhone stethoscope

RossM
3pts0
www.getupp.com 15y ago

Getupp - iOS app that shames you into getting motivated

RossM
2pts1
news.ycombinator.com 15y ago

Storing semi-confidential data

RossM
1pts1
www.websiterepairs.net 17y ago

Protecting against SMTP injection

RossM
4pts0
codeutopia.net 17y ago

Creating a simple abstract model to reduce boilerplate code

RossM
1pts0
www.codediesel.com 17y ago

Selecting all except some columns in MySQL

RossM
1pts0
news.ycombinator.com 17y ago

Ask HN: I'm going to a Uni preview day - what can I talk about?

RossM
3pts1
news.php.net 17y ago

PHP decide on namespace operator

RossM
1pts0

It's got to be pure marketing - the British media certainly loves a buzzword, but I suspect that's more to do with their clickbait strategy. ("What is blishing? Have I fallen for it?"). Perhaps it helps some people compartmentalise, but I couldn't find any research that looks into any increased cognitive load.

Our workplace cybersecurity training introduces at least 1 new word each year. This year's was "vishing" which apparently is just social engineering/credential extraction that takes place over the phone. Of course, it's presented to non-technical users as a well-adopted term that is very important to know (for the checkbox quiz in 3 slides time).

I can't find any good information post-privatisation, but at least before 2013 the postcodes themselves were copyrighted by Royal Mail (likely Crown Copyright as with government data). There were attempts to enforce this in 2009[0]. I suspect the copyright is now owned by Royal Mail Group Ltd.

That aside, a practical issue is that Royal Mail still retains the rights to _allocate_ new postcodes for any new properties. Yet another failure of this particular privatisation.

[0] https://www.techdirt.com/2009/10/06/uk-royal-mail-uses-copyr...

For context, Thameslink operates a route through central London, and transitions from overhead power in the north to third-rail in the south. This happens when stopped at stations and is fairly quick - the pantograph/shoes are raised/lowered around the same time as the doors open - the dwell times seem the same as usual.

As for charging, Jago Hazzard has a video on a fast-charge trial[1] for a battery-only route. As it's using a modified tube train, I'd assume it's lighter and thus requires smaller batteries, but recharging from third-rail takes roughly 4 minutes.

[1] https://www.youtube.com/watch?v=dV441HnVI34

I did this for a bit. The main issue was that air intake on my older model was through the keyboard, so clamshell mode was inadvisable - not sure if that’s true of the newer models and M1 should run cooler.

If you’re wiping it and installing Linux it’s like any other server, but if you’re running macOS you’re open to a wider spectrum of vulnerabilities that wouldn’t normally apply (desktop software). Your apps could also have vulnerabilities that expose access to personal credentials, etc (e.g. filesystems, apple id) depending on your setup.

You can insulate yourself a bit with tunnels/proxies to expose specific services (e.g. cloudflare, ngrok).

I had a lot more peace of mind buying an old, cheap computer, raspberry pis, and eventually NUCs.

Correlates with my experience of late 2013 MBP batteries (it might be the same model actually). My original Apple battery lasted until 2019. Both of the iFixit replacements have lasted a year until not holding original charge, and just last night I noticed a cell starting to swell.

I doubt I'll ever find factory original cells again for the 2013 but if Apple sells them I'd consider buying a MBP again.

Nobody is forced to install the app at all (at least in the UK's case).

Unfortunately, that's not quite right. Citing the latest rules:

The rules on what you need to do when a group enters your venue have changed. You must ask every customer or visitor to scan the NHS QR code using their NHS COVID-19 app, or provide their name and contact details, not just a lead member of the group. [0]

[0] https://www.gov.uk/guidance/maintaining-records-of-staff-cus...

Delving into the rules, it appears this applies to all sit-in venues, while takeaway customers are exempt. A paper-based system should be available, if you trust the business to handle your data responsibly (or forge fake data if not).

This morning at a cafe I was asked to scan the QR code "or we can't serve you" for a takeaway order. Clearly some misunderstanding, and I didn't press about a paper-based list as I hadn't read the details myself. Hopefully it's an isolated incident, but it wouldn't surprise me if there was some simplified comms (/FUD) about "just get customers to scan the code".

This feels like it's just designed to encourage rapid replies, like their chatrooms. I've always admired HN's time-delay on posting replies the deeper you get into a thread - it deliberately reduces engagement but seems effective at stopping things getting too heated.

Using Cloudflare with DoH is documented here: https://docs.pi-hole.net/guides/dns-over-https/

You essentially run a little proxy server on your pihole setup, and configure pihole to use it as your upstream dns resolver.

E.g., a proxy server running at 127.0.0.1:5053 which uses the Cloudflare ipv4/ipv6 DNS over HTTPS endpoints. This can also use other DoH endpoints as desired:

    /usr/local/bin/cloudflared proxy-dns \
      --port 5053 \
      --upstream https://1.1.1.1/dns-query \
      --upstream https://1.0.0.1/dns-query \
      --upstream https://2606:4700:4700::1111/dns-query \
      --upstream https://2606:4700:4700::1001/dns-query

Not OP, but I never got on with forced stops either. I had some success treating it like a mini-deadline to achieve flow-state - work on something for 25 minutes, and if I don't feel like I want to keep going, take a break and try again.

I migrated the company's services from AWS to OCI at the startup I was at. The trade-off is simple, if Oracle can say $product runs on OCI, they'll put you in front of the biggest industry players who are using their POS, database - and since our sales pipeline pivoted around web integrations this was crucial. They also give a bunch of credits (as do the other providers).

We argued against it in the dev team, but it wasn't the worst cloud migration I've done. The console reminds me of early days AWS as it's essentially just VPC+EC2+S3, but it was refreshing to spin up a server without a pages of config being presented to you. We took the opportunity to containerise our older sites and ran everything in their managed k8s cluster. I very rarely had to use the console for anything, which tbh is a bit of a grab-bag of managed services beyond the core cloud offering. Terraform support is there if you need to do anything serious.

Gitlab was down 7 years ago

At the bottom of the page they list availability of third party services used - Fastly has a warning symbol, and I imagine they put that CDN in front of everything.

Daftness aside, I think the courts/rights-orgs have just correctly identified registrars as the weak link - see the ease of which a number of right-wing sites had their domains dropped. My experience with registrars doesn’t feel like they’re aiming to provide a quality service (with ancient web UIs for example) - they’re there for the volume recurring revenues. Hopefully domains will have their letsencrypt moment soon.

But what is the user facing benefit?

Syncing bookmarks, recently opened tabs, passwords, autofill(?). These are genuine benefits when you're working with laptops, desktops, phones and tablets. Whether they're worth the cost of data mining is another matter of course.

I always liked Reddit's intended approach: downvote comments that don't add to the conversation.

Sadly, votes are too easily mapped to agree/disagree or truth/falsehood - see the "1,800 karma" comment below as a key example, where it furthers the conversation but is downvoted "because they are incorrect".

This is important (though I'm oddly yet to run into this issue with pip; I've only had conflicts with npm and composer before). Freezing dependency sources in Docker images and using (pip install --require-hashes -r requirements.txt) for development seems to cover everything.

If you remember that so, so much old PHP was reliant on global scope included from other files, it explains a lot of the DI obsession. If you were lucky, it was just a single bootstrap.php, but often not.

I feel it's worth reminding that there's a difference between autonomous trains, driverless trains and unattended trains. The L train is considered Grade of Automation 2 - it starts and stops itself, though it has someone in the driver's seat who controls the doors and gives control to the ATO system. Driverless (GoA3) trains move that role to a train attendant who controls the doors from within the train. Unattended (GoA4) trains function without needing an on-board operator at all.

The driver probably is just sitting with a hand near the emergency stop button most of the time, but they're still required to pay attention. I imagine it's harder work now that they don't have to necessarily concentrate to operate the train.

I live in London, where a lot of tube lines are already (or soon to be) GoA2, with the introduction of a part-GoA2 mainline service this year (Thameslink). I don't think we'll see a GoA 4 tube for many years; aside from the obvious union rows, you've got safety concerns (primarily platform-edge-doors, which can't be retrofitted to cramped stations), and there's mixed public opinion on the idea of being stuck on a broken down train in a tunnel without on-train staff. Then again, people don't seem to acknowledge that the airport terminal transfers are unattended GoA4.

How's the touchpad nowadays? I'm probably spoiled by Macbooks, but that's my one bug bear with the older model. It just feels very cheap and unresponsive.

Re: ML - I think it might be possible to do some sort of generic popup-detection: a container that's initially invisible, containing a clickable that the mouse accelerates towards shortly after becoming visible. With opt-in, they could use those detections that aren't reported to identify good use-cases (though sending passive data like that might not be very Mozilla).

The tricky bit will be getting rid of the darkened full-screen overlay as well as the modal, but I guess you could track element visibility changes/removals around the same instant as the mouse click.