HN user

dsl

9,213 karma

It is very likely you will use at least one product or service today that I played a key role in.

This is my HN account where I can share my thoughts anonymously. You can email me at my HN specific account: dsl @ fea.st

Posts102
Comments1,991
View on HN
mintmobileplus.com 5y ago

New free streaming service from Mint Mobile

dsl
2pts0
www.raspberrypi.org 7y ago

Official Raspberry Pi Poe Hat

dsl
31pts11
www.youtube.com 7y ago

Waymo Car Responds to Human Direction at Broken Traffic Light

dsl
6pts0
www.oath.com 7y ago

After a year, Oath (AOL and Yahoo) is rebranding again

dsl
4pts1
github.com 7y ago

Generic Terminal Colouriser

dsl
2pts0
teslatweets.com 7y ago

Class action lawsuit against Musk and Tesla

dsl
1pts0
www.bloomberg.com 7y ago

The U.S. Housing Market Looks Headed for Its Worst Slowdown in Years

dsl
4pts2
radar.qrator.net 8y ago

New BGP hijack attempted on 6% of all IP space

dsl
2pts0
success.docker.com 8y ago

Docker Cloud will no longer scan for security issues without Enterprise account

dsl
2pts0
www.graybeardgames.com 8y ago

The original pitch for Diablo (1994) [pdf]

dsl
241pts88
gizmodo.com 8y ago

FBI's Use of Paid Best Buy Informants Goes Deeper Than We Knew

dsl
204pts111
wifi.yt 8y ago

Show HN: Wifi.yt, a site for triggering captive portals on wifi networks

dsl
3pts1
medium.com 9y ago

Samsung Leaking Customer Information

dsl
2pts0
groups.google.com 9y ago

CloudFlare is requesting SSL certificates without user consent

dsl
1pts0
www.oregonlive.com 9y ago

Google buys another 74 acres in the Dalles as data centers expand

dsl
1pts0
flightaware.com 9y ago

Misery Map: Nationwide airport delays

dsl
2pts0
zakird.com 10y ago

Study: Users Really Do Plug in USB Drives They Find [pdf]

dsl
1pts0
www.metzdowd.com 10y ago

One man wrote all your next-gen crypto

dsl
10pts1
dev.openwrt.org 10y ago

Glibc vulnerability was identified in uClibc and fixed 6 years ago

dsl
128pts11
www.walmartlabs.com 10y ago

Walmart open sources cloud portability platform OneOps

dsl
1pts1
finance.yahoo.com 10y ago

Google is now offically Alphabet

dsl
1pts0
www.mcsholding.com 11y ago

MCS Response to Google Regarding CNNIC

dsl
3pts0
blog.checkpoint.com 11y ago

Volatile Cedar – Analysis of a Global Cyber Espionage Campaign

dsl
1pts0
www.aljazeera.com 11y ago

Secret documents, leaked from numerous spy agencies, offer rare insights

dsl
3pts1
gigaom.com 11y ago

OpenStack comes up huge for Walmart

dsl
2pts0
www.drugsfromdirt.org 11y ago

Drugs from Dirt: a citizen science project

dsl
8pts0
www.tested.com 11y ago

CES 2015: Hands-On with Sony's SmartEyeGlass Prototype

dsl
1pts0
www.businessinsider.com 11y ago

Amazon datacenter under construction catches fire

dsl
2pts0
securityledger.com 11y ago

New Clues in Sony Hack Point to Insiders

dsl
2pts0
xn--hmr.net 11y ago

Monitor the North Korea / US Cyber War in Real Time

dsl
1pts0

Put simply government officials created a scheme to buy up a bunch of unused water rights, then use state and federal dollars to pay themselves incentives to continue not using the water.

Here is your easy solution:

Per employee tax = $0.20 * commute_miles * 2 * (commute_miles / 10)^2 * mandated_office_days_per_year * (1 + 2 * share_of_workforce_over_10_miles)^2

Tech companies can have more distributed offices and assign employees based on geography instead of teams, go back to WFH, pay employees enough to live close to their mega campuses, or pay out the ass into adding more lanes.

THIS IS A GRIFT.

Joel Ferry, the executive director of Utah's DNR retooled state laws to allow water right leasing and promoted HB187 which allows you to hold water rights without developing them.

He also happens to be a large shareholder in Bear River Canal Company and has been going around quietly buying up water rights from smaller canals and municipalities.

Grow The Flow is closely aligned with Great Salt Lake Rising (ran by the son of Mitt Romney), who plan to solve the issue ahead of the 2034 Olympics by buying up water rights from private owners. They committed $100 million of their own money, but got it matched with $300 million in state funds and a $1 billion budget line item from the Trump administration.

Be wary of environmentalism that is being driven by the wealthiest families in the state.

Heh. I built "Fusion" a few months ago as an MCP using OpenRouter. The idea was to give Claude a "panel of experts" to go talk to when it got stuck.

After extensive testing and benchmarking I discovered that when you ask one model to judge another's response you don't actually get a better answer. You are just asking it "how closely does this resemble the answer you would have given me." Additional rounds and all the "obvious" solutions that pop into your mind reading the proceeding sentence are essentially just cranking up the temperature.

I did find a solution, but it is insanely expensive. Maybe if this gains traction I'll release mine.

That is like saying you can't get a virus on your computer because Facebook doesn't allow viruses to be posted to the internet.

Differential parsing is a whole class of security bugs and they matter a lot. Take a look at HTTP Request Smuggling for examples.

Also, I am pretty sure there are more non-web x509 certificates out there than all the "browser trusted CAs" combined have signed. :)

You either die a hero, or live long enough to see yourself become Akamai.

The reason everyone came running when Cloudflare first started was obviously the "burn VC money to gain marketshare" but it was also the sheer simplicity. They had one product and a handful of features.

Until someone on the business side takes a step back and says "when I mouse over 'Products' on the homepage, why the fuck is there a 'See All Products' link" it will be impossible to have a usable customer experience. Start killing things and making them features.

Yeah, but Google has the money for this. They are quite literally the most profitable company in the world.

"Alphabet announced that its 2026 capital expenditures are expected to be $180-$190 billion, and that it expects 2027 capital expenditures to significantly increase [...] over the 12 months ended March 31, 2026, Alphabet generated $174 billion of operating cash flow"

Which is just wildly backwards. It is the same mindset of the cyberpunk "privacy advocates" of the early 2000s, move your stuff to Sealand or Switzerland.

The fundamental flaw with this plan is if your fear is genuinely of the United States, your data is far more protected inside the US. The intelligence community has no restrictions operating on foreign networks and servers.

Rather than go to a FISA court for approval, we just hack your box and take your data. Or ask a European intelligence service to use the much more lax laws to compel its disclosure.

Yes, data collection happens on US soil. But ask anyone who has worked on the inside how much of a pain it is to view or process USPER data.

Googlebook 2 months ago

gLinux already exists. Its meh.

ChromeOS was honestly the best they could do.

The internet worked for so long because people responsible for each little island did what was for the most part in the best interests of the rest of the islands. If you didn't, other islands would shut off their links to you. Law enforcement was a last resort because 1. the courts don't move at the speed of the internet and 2. nobody wanted the internet getting top down governmental regulation because it was trans-national.

Cloudflare spent a bunch of venture capital to give away expensive things for free and buy market share. If you convince all the grocery stores to move to your island, you can operate a den of criminal activity with no fear of everyone else shunning you.

Talk to anyone who fights botnets, malware, or online scams. Once you hit the Cloudflare dead end you just have to give up. Law enforcement isn't going to take up a case where only 7,000 peoples computers are infected, and Cloudflare isn't going to investigate and take action themselves.

The first is what a cellular network does for tracking a user. It's not returning a set of GPS coordinates.

From the perspective of someone working on the RF side of cellular networks, you are absolutely correct.

Modern cellphone baseband chips however are required to implement MT-LR, which allows the network to request that the device respond with its latitude and longitude. In the US this is legally required to be accurate to within 300 meters, so it comes from GPS or AGPS. By sending LAWFUL_INTERCEPT_SERVICES as the client type in the request, the phone is required to not notify the user in any way or log the request.

There is a reason China has been caught with their hand in the US "lawful intercept" cookie jar at least three times.

It is missing the most important function.

If the first tile you build is a lobby in the bottom left corner, it is supposed to double your starting money. :)

Not exactly.

Security patches aren't like bugs or features where you can just roll a new version. Often patches need to be backported to older versions allowing software and libraries to be "upgraded" in place with no other change introduced.

Say you had software that controlled the careful mix of chemicals introduced into a municipal water supply. You just don't move from version 1.4 to 3.2, you fix 1.4 in place.

Everything from dog fighting rings to child trafficking has dedicated non-profit organizations with paid or volunteer staff doing investigative work. They collect OSINT, do surveillance, and yes, pay informants. As long as you don't break the law in the process (like doing surveillance from private property), you can build evidence to turn over to law enforcement to help open a case.

Something important to note here is informants aren't always in the organization or participating in the activity. It could be a truck stop attendant who texts you when the same guy stops in to buy a case of water and then slips it under the roll up door on his cargo van, or a dishwasher at a cafe who noticed a group of guys with the same tattoo. Things that on their own don't rise to the level of someone calling the police. Payments help people who otherwise would keep their mouth shut because they are in financial situations where they can't afford to lose their job.

They were paying people to infiltrate the KKK and Nazi groups. It is the same as the arson investigator paying someone to hang out with the kids who play with matches to see who is starting the fires.

The only "criminal" thing they did was encouraging non-white people to use their right to vote. How dare they do such a thing before the mid-term elections!

Imagine if one day someone came up with a "better" way to chew food, but you had to learn how to do a super complex jaw movement and it wouldn't work in restaurants. It has no obvious benefit to you. The only motivation is that a small group of obsessively passionate (but not in a good way) people say at some unknown point in the future food won't be edible anymore.

IPv6 just tried to do too much so it failed at everything. Putting letters in IP addresses made it near impossible to remember what your network settings were supposed to be.

It is nothing short of a miracle that devices can even get IPv6 addresses. SLAAC was supposed to replace DHCP, but it couldn't provide DNS server addresses. DHCPv6 was introduced to replace SLAAC, but this time they forgot to add a way to communicate a default route. This lead to Cisco, Microsoft, and Google all taking completely different approaches, and the IETF helpfully blocking any efforts at cross vendor standardization because of v6 zealots.

Tailscale is really losing the plot to the movie.

It is an app that sits in the background and provides connectivity. Occasionally you need to change a setting. Absolutely nobody wants a rich windowed UI, or a menu bar widget that drops down a complex detail card.

I hope they can see this is exactly what killed desktop anti-virus: something that was supposed to be quietly doing its job in the background started getting in the users way. It needed to poke its head up and scream "hey remember me?" at the behest of some product managers or growth hackers. Eventually it got so bad Microsoft just baked it into the OS. Tailscale is on even worse footing here because Apple is even quicker to act when you destroy user experience.

SSH Secret Menu 4 months ago

This is a very common misconception. The issue is not IPv4 or CGNAT, it's stateful middleboxes... of which IPv6 has plenty.

The largest IPv6 deployments in the world are mobile carriers, which are full of stateful firewalls, DPI, and mid-path translation. The difference is that when connections drop it gets blamed on the wireless rather than the network infrastructure.

Also, fun fact: net.ipv4.tcp_keepalive_* applies to IPv6 too. The "ipv4" is just a naming artifact.

It all seems like a backdoor to let tech companies build power generation on site without all the red tape and sell the excess power to consumers. This indirectly allows them to offload some of the fixed operational costs onto consumers.

We just approved the first nuclear plant in 20 years to a company owned by Bill Gates and in a state that has basically nothing but farmland and a Microsoft datacenter.

This absolutely cannot backfire. /s

MacBook Neo 5 months ago

A keyboard backlight is such a cheap and useful addition to a keyboard

Useless LEDs that burn battery budget.

The thing everyone seems to be missing is this isn't a laptop for you or me. It is to compete with Chromebooks in the educational market, and to have a SKU to sell in developing countries.

It is a simplification, not a strawman.

If you want to make the decision to install Hay Day, the user should be able to know that it is the Hay Day from Supercell or from Sketchy McMalwareson.

99.9% of apps should have no issue with their name being associated with their work. If you genuinely need to use an anonymously published app, you will still be able to do that as a user.