arrakeenrevived

If you have an Android phone (even if just an old one you don't use anymore, or a cheap one you're willing to buy) and you're willing to root it and wipe all data on it, you can:

1. Unlock the bootloader (if not already done) (this will wipe your device)

2. Install Authy on it and log into your Authy account

3. Root your device (I used Magisk https://github.com/topjohnwu/Magisk)

4. Once rooted, you can access the Authy app data and extract the TOTP secrets, then import them into a different app (there's a script to make this easier here https://gist.github.com/gboudreau/94bb0c11a6209c82418d01a59d..., but you can also just go exploring manually in the root file system and find the Authy storage file)

It was somewhat of a pain in the ass to do this, but Authy really annoyed me with how difficult they make it to migrate off of their bullshit, so it was worth it to me to finally be able to delete their app after extracting the secrets this way.

Decrypting the OTPs on another device has required a password for a long time now (maybe always, I can't actually remember if it was always there or just added years ago). It isn't only bound to your phone number.

The cited "40% of college age women report being choked during sex" article is an NYT opinion piece where some of the respondents actually say they _wanted_ to be choked during sex, but the author of the opinion piece thinks they're wrong and choking (even if you want to be choked) is bad.

This isn't about protecting children, it's about prudes who don't like the way that other people enjoy sex.

Note they said Lufthansa freight fleet, which is why it's only 11 planes. Lufthansa (the passenger airline) is indeed still a very large airline.

This is pedantism, and is also just wrong. "if you have the right key" IS authentication. Encryption keys are used as a form as authentication all the time, it's one of the main use cases of public/private key encryption. I challenge you to explain how OpenSSH does non-password authentication without referring to encryption.

Authentication just means proving who or what you are. Secret keys, whether they be passwords or encryption keys, are one of the primary ways to do this. Just because the key is also used for something else in addition to, or as part of, that process doesn't change it from being authentication.

I'm not going to claim that it's much better these days, but it's worth noting that the launch center in the link is quite old. The launch center have had multiple upgrades since then; the link here [0] shows some videos from inside a newer configuration, which does look a little bit more comfortable, and even that video is from the early 2000s. I would have to guess that more upgrades have been made since then.

0: https://news.ycombinator.com/item?id=40289005

Yes, that video looks to be the "REACT" [0] upgrade that was done in the 1990s. It specifically says it changed it to make the operators sit side-by-side.

0: https://en.wikipedia.org/wiki/Rapid_Execution_and_Combat_Tar...

His spiel starting at 14 minutes in about how seemingly every tech product these days is a partially-baked, unfinished, barely even usable, yet full-priced product with a vague promise of "it'll receive updates and be better" rings very true, and is frustrating as hell.

Marques specifically mentions it happening in video games, cars (Tesla self-driving), smartphones, and these AI things as particular offenders. I've also seen it with SaaS. Even a lot of the things being released by the big cloud providers at their yearly conferences are mostly in some half-baked state.

We've taken the concept of a "minimum viable product" and turned it into "minimum hype-able product". It sucks.

The article directly says the opposite, and reinforces what GP comment was saying about the union not being helpful:

Although Dugan, Shaffer, and other members say their union stewards on site helped press their concerns to management, they say that local and international IBEW officers who visited the facility scoffed at their concerns. Dugan says a local officer refused to file a grievance on his behalf about the mold in January. One worker requested to stay anonymous out of concern that union officials might withhold his future job placements if he spoke out.

I've literally never heard "socked by a hurricane" despite living in an area where hurricanes hit the coast every year. I just did a google search for "socked by a hurricane" and there were a mere 8 results. Seems like a stretch to say this is used "all the time".

I know I'm being pedantic and it doesn't really matter that much, but I stand by my original comment that the headline phrasing was offputting to me.

I think my original comment about "flagship" was worded poorly, and has led this thread down a path I didn't intend.

I know what "flagship" means, and I did correctly assume that the article was trying to convey importance of _something_ related to Ford (my first thought was a flagship car model, but after reading the article I can infer it's about some sort of factory). My gripe with the title is that the article doesn't actually explain why or how it is important, and just assumes you will take the "Ford's Flagship..." description at face value and trust the author that it's important. It's unsurprising to me that an LLM would interpret it this way, because you asked it to just interpret the headline, which it did.

However, in _my_ reading of the article, I'm skeptical of the "Flagship" claim in the article because 1) it is never really explained and 2) the article seems to be going extra hard (too hard) to imply this is a big deal by attaching a bunch of other names (Joe Biden, Department of Energy, Inflation Reduction Act, multiple contracting companies, a SK investment company, state of Kentucky) to the project, but again never really explains why or how. It's almost like the journalistic equivalent of an appeal to authority, I guess.

Yes I'm aware that "flagship" indicates importance, but I stand by my comment that the article does a poor job of explaining it. It only says "flagship" in the title, and also the title is the only place where it really even links the factory to Ford to explain why it's important to Ford. Also from reading other sources, the factory mentioned in this article is only 1 of 3 factories that are being built as part of the project.

Other than that, the article calls the factory a "banner project for Joe Biden", as well as saying it's an "unprecedented" project for Kentucky", mentions investment by the Department of Energy, and also that it is being built for "SK On, a South Korean company". The article seems to be going out of its way to try and imply that this factory is some huge deal by name-dropping a bunch of people and attaching grand sounding adjectives, but doesn't actually explain why. It is, as the GP comment said, "all over the place".

It seems there's a story here about mold that needs to be told, but in the best case this article is just bad writing, and in the worst case it seems like it's actively being clickbaity/deceitful.

FWIW I agree with you. The title hardly makes sense to me as well.

"Ford's Battery Flagship" - even after reading the article I'm still not sure what this is. "flagship" is used only in the title and nowhere else. Based on my knowledge of Ford, I would assume their "flagship" would be the F150, but this article seems to be talking about some sort of battery factory that a South Korean company is building?

Similarly, "socked by mold sickness" is a weird phrase. Feels like an inappropriate use of "socked" here. If the project is delayed because workers are getting sick, just say that.

The title strikes me as a failed attempt at clickbait, and immediately makes me distrustful of the rest of the article, which is confirmed by the "all over the place"ness that you mentioned as well.

security needs to be the easiest path. If it is not, then that is the fault of the Security folks; not the end user.

There's truth to what you say, but you're blaming the wrong crowd. Security people are rarely (if ever) the same people that are creating the tools and the security features of the tools you're using. In most cases, I'm powerless as a security engineer to "make security easy to use", the only thing I could do in that regard would be to loosen our security requirements and make our systems less secure, which isn't what you want either.

IMO the problem is more that when developing products, security (and ease of security) is still not seen as that important of a feature (if its even seen as a feature at all and not an annoying cost that the product managers have to deal with). In our application security group, we actually do have requirements that any new product being built must have certain security features that make it easier to secure things, but those requirements are often some of the very first things that the product development teams try to justify delaying or ignoring.

S3 buckets have never been public by default. They were, however, very easy to make public before things like Block Public Access existed, so lazy devs would just click that button rather than doing proper access control.

so you’re not gaining anything and losing some functionality by doing this instead of running an API GW

You're gaining the fact that Function URLs are free while APIGW can be pretty costly, as well as the fact that Function URLs are fantastically less complex than APIGW if your use cases fit it.

My understanding is that cold starts on containerized Lambdas is actually better than non-containerized for some workloads, because using containers allows Lambda to do better caching of the code, as well as lazy-loading. YMMV of course based on exactly what image you use (eg if you're not using a common base, like Ubuntu or Amazon Linux, you won't get as much benefit from the caching) and how much custom code you have (like hundreds of MBs worth).

There's a very interesting blog post about it here, as well an an accompanying whitepaper: https://brooker.co.za/blog/2023/05/23/snapshot-loading.html

You're correct, it is 2 MB/s. The actual bandwidth from the AWS Lambda docs is:

Uncapped for the first 6 MB of your function's response. For responses larger than 6 MB, 2MBps for the remainder of the response

Some of the other numbers in the article are also incorrect. Lambda functions using containers can use a 10 GB container image (the article claims 50 MB), and container images are actually the faster/preferred way to do it these days.

Clouds (like, the big fluffy things in the sky) are made up of many droplets of liquid. Using "droplet" to refer to the things that make up cloud computing is a pretty natural nickname for any cloud provider, not just DO. I do imagine that DO uses "droplet" as a public product branding because it works well with their "Ocean" brand, though.

...now I'm actually interested in knowing if "droplet" is derived from "ocean", or if "Digital Ocean" was derived from having many droplets (which was derived from cloud). Maybe neither.

There's a lot of advertising activity that ublock doesn't catch, but Pi-Hole does. Usually it's tracking APIs rather than ads themselves.

It's also useful for clients where I can't install client-side adblocking, ie smart TVs (which try to phone home a _ton_ of advertising/analytics information). I also don't use client-side adblock on my work laptop (can't install unapproved extensions) nor my iPhone, so Pi-Hole still lets me browse ad-free on those.

But what if all three go offline for any random reason? Are you planning to add a fourth?

Can this be engineered with a reversible option to switch it from functional to non-functional, depending on the seat configuration?

That's exactly how it's engineered right now, though.

This same design has been used for decades and apparently without problem, so it's probably just a case of someone designed it this way originally, and nobody thought to fix what wasn't (at the time) broken.

Aircraft are often sold between airlines, or reconfigured even with the same airline. If United ever wants to reconfigure their 737s to be higher density (which is pretty common), they might need to start using that door as a real emergency exit.

I think HN really overestimates the impact of events like this with the general public.

The very first A320 demonstration flight crashed, killing 3 people, allegedly due to software issues in the new fly-by-wire system, and then involved allegations that Airbus had tampered with the investigation. The demonstration flight was mostly journalists on the plane. [0]

The A330 crashed on one of its certification flights due to an issue with the autopilot, killing all 7 onboard. [1]

Both went on to be some of the all-time best selling aircraft, and meanwhile today in this thread you have people touting Airbus as a paragon of safety. Humans have a short memory.

0: https://en.wikipedia.org/wiki/Air_France_Flight_296Q

1: https://en.wikipedia.org/wiki/Airbus_Industrie_Flight_129

I mention these two specifically because they're examples of high-profile failures attributed due to issues with the aircraft early in their lifecycle, but basically every single popular aircraft type (except the B777 and A350) have had serious issues and loss of life due to manufacturing defects, but still went on to be overall successes. Hell, people still flew on the DC-10 even after its _numerous_ issues like AA 191..

The pictures clearly show that the seat is still there.

It also wasn't a window... that's a plug for an unused emergency exit location. Planes have spots in the fuselage where emergency exits can be placed if the aircraft is configured with enough seats where it needs more exits. This one wasn't, so instead of an emergency exit, there's a plug bolted into the spot instead. Would have to guess that there was a defect in this one though...

I'm fascinated by this thread for many reasons, but something interesting (or baffling to me?) that I don't see mentioned yet is the marketing or target audience for this thing.

The tagline is "Create without limits". The page says "the first creator keyboard" as well as "Maximize your screen space for apps and content while you create with Clicks." In one of the videos on the page, the big pitch is that this can "double your effective screen size when you're working on captioning your Instagram stories".

Is this keyboard specifically marketed at content creators / influencers? Why? Is there some special market for this that I'm not seeing? Is adding a caption to your instagram story really something that needs extra screen space?

Boeing moved their HQ to Chicago in 2001, and experienced wildly successful growth from 2001 until 2019. Seems like it might be recency bias to correlate Boeing decline with its HQ location.

Exxon is another example I can think of. Until recently, their HQ was in a tiny building in Irving, TX while the majority of their workforce was elsewhere.

There's also a whole slew of companies that have a lot of employees "in the field" that are separate from their corporate workforce and would inherently be HQed in locations other than where their large employee bases are, eg manufacturing companies, Intel, car manufacturers, Walmart, UPS, several airlines, banks... Even Boeing would fall into this category. I'm not sure how those factor into things.

Maybe this is true for many parts of Amazon culture, but the big factor recently is that the RTO mandate is company-wide. With very few exceptions, it doesn't matter what org you're in, RTO affects you, and can have a drastic change on the entire company's culture.

This is just arguing semantics over the word "culture", but I'll bite.

The culture of Amazon during 2019-2022 was that people throughout the organization "thought about work" as something that could be done remotely (yes, even before 2020 there was remote work at Amazon), but required different working styles. There was more focus on employee engagement, encouraging things like taking online training or organizing team meetings that were focused on team connectedness. Teams were less overworked because there were always new people being hired to pick up the extra slack.Pay was constantly increasing, and especially so during the pandemic (Amazon famously removed its salary cap in 2022, and readjusted its entire pay scale to be higher).

Post-pandemic, but pre-layoffs, Amazon encouraged work travel to go and see coworkers in-person. You didn't even need a reason to do so, but book the travel and your expenses would be auto-approved. Expense budgets were large, and planning team events or happy hours were encouraged. Pay increases continued. Rapid hiring and team growth only got more rapid.

After layoffs happened, that all changed. Work travel began to be actively disallowed, pay increases slowed (or stopped). Team training became restricted unless it was free (and even then, only a certain amount of days were allowed). Hiring slowed to a crawl, so teams were more overworked, and overall mindset was more negative because you knew no help was coming.

All of the things I'm describing are vast culture changes that I personally saw happen between 2019-2022. You can go ahead and call these "policies", but policies are an important factor that shapes culture.

From personal experience: yes. But I don't really see what that has to do with anything, because even just looking at during the pandemic (remote work culture) to now (in-office culture) is a demonstrably different culture, so I still have no idea what you're arguing.