HN user

itsananderson

136 karma
Posts1
Comments37
View on HN
[dead] 11 months ago

because they prefer flexible schedules

Any theories about why they might prefer flexible schedules?

Google also finds these names confusing. Whenever I try to search for something Stream Deck related, Google returns results for the Steam Deck. It's quite annoying.

It can be hard to understand complex legal issues. Let me explain.

He was convicted of US Code 18 Section 241 which describes 2 or more people conspiring to deprive victims of their constitutional rights.

Simply tweeting something that is false wouldn't count, and it seems that even intentionally tweeting misinformation wouldn't break this law unless you were conspiring with others to do it.

+1 https://www.youtube.com/c/PaulSellersWoodwork

I started watching his videos about 10 years ago, and while I've shifted a bit toward using more power tools in recent years, I still use his foundational hand tool techniques all the time. He can be a little preachy about his "hand tool only" woodworking philosophy, especially on his blog. If you can overlook that, he has a ton of skill and is good at teaching and demonstrating that skill to others through his videos.

Rather than exhaustively list mine, I'll just list the ones I don't see mentioned in other comments.

- Swag - Nginx reverse proxy for my other services. Similar to other reverse proxies people have mentioned, but it plays nice with other linuxserver containers I run so it's what I've stuck with. Has decent letsencrypt integration.

- Authelia - Integrated with Swag to handle single sign-on for most of my services

- Mylar3 - Helps keep track of comic series and, if you choose, can be used to search and download them as well

- Komga - For organizing/reading comics. I use Klutter as a companion app for reading comics from my Android devices

- readarr - Newer member of the *arr family. Still a bit clunky compared to its siblings, but it's a relatively useful way to organize ebooks and audiobooks. It doesn't do well with mixed book types, though, so I run one instance for ebooks and one for audiobooks.

- Ombi - For managing media requests

Ngrok Alternatives 4 years ago

I feel like half of Ngrok's value prop is being undervalued here. Namely the fact that it captures requests for inspection and replay. That feature is an absolute game-changer for developing things like Webhooks.

First, it lets you easily see what the Webhooks payload looks like in real life. Second, it lets you hit your endpoint repeatedly with the same payload (while iterating on your code), without having to trigger the 3rd party event again.

Because vaccinated people mostly don't believe they're immune. We believe we have a strong protection against infection and a stronger protection against death, but that doesn't mean immunity.

My wife and I have been fully vaccinated since May, but we've had several tests since then (so far all negative) when we learned about contact with infected people or were experiencing suspicious symptoms.

I bought a copy shortly after it came out. I think I've played it twice for a cumulative play time of perhaps an hour. I expect I'll pick it up again here and there for some stress free fun, but even if I don't I feel it was money well spent.

I used power delivery from my Dell monitor for the last year, but occasionally under heavy workloads it couldn't keep up and my battery would slowly drain. I may have had something misconfigured, but if so I never figured out what it was. Between Yubikey, Ethernet, and two external monitors, I didn't have much choice.

I finally gave up and bought a Thunderbolt dock that actually delivers enough power while also providing expanded port capabilities.

True, if an attacker has control of your device you are probably screwed anyway, but there are still different degrees of screwed. There are more and less privileged portions of your system, and keeping sensitive data to less secure areas is still not a great idea. With browsers offering clipboard access as a JavaScript API, it is definitely an area I would consider less well secured than, say, read protected memory or a process-isolated browser extension sandbox.

If an attacker is on your device, they very likely have access to your clipboard, so how is that more secure? I cringe whenever my password manager's autofill fails and I have to fall back to copy/pasting, because I know that I'm now storing my password in system memory in plaintext. Most password managers clear the clipboard after some timeout, but that's hardly helpful against an on-device threat

Potentially even more interesting information further down the tweet thread: https://twitter.com/DaveLeeFT/status/1347724205379309568

Trump's campaign claimed $69k in email marketing expenses paid to SendGrid, but Twilio/SendGrid has no record of a Trump campaign account. Upon further investigation they found that they do have accounts for his private businesses. Not necessarily a smoking gun for campaign finance violations, but sketchy enough looking that I'm curious to see what further investigation turns up.

You may find the "Make No Law" first amendment podcast interesting. It's created by Popehat (Ken White), a well known first amendment lawyer. In his podcast he talks about the history of "fire in a crowded theatre", along with many other first amendment topics. It provides a really interesting view into how the courts have applied the first amendment over the years.

It's a great idea to have a template for writing secure Electron apps, but this particular template should only be used with caution. I don't think it has been reviewed or endorsed by the Electron team as actually following those best practices, and I see a few issues just skimming from my phone:

They're trying to expose IPC to the renderer in an unsafe way. See their discussion on this GH issue https://github.com/electron/electron/issues/21437 (referenced from the main readme as blocking some features they want to implement)

On their "building a secure app" page they complain about Electron's quick release cadence https://github.com/reZach/secure-electron-template/blob/mast...

The trouble that I've found with electron, is that their release schedule is crazy, with only a few months before each major release. We know that electron is a young framework, but it is hard to keep up so quickly!

Electron releases quickly to pull in critical upstream security fixed from chromium. That reasoning is explained pretty thoroughly in the best practices documentation https://electronjs.org/docs/tutorial/security#17-use-a-curre...

I haven't looked at their implementations of the other security best practices, so these might be the only red flags, but I'd still recommend against just blindly copying the template without understanding and verifying the best practices they're attempting to implement.

My grandfather was taken in by a Ponzi scheme a few years before his death. He poured tens of thousands of dollars (his entire savings) into the sceme, despite my father's protestations. At one point my father gathered as much info about the "investments" as he could, and forwarded it to the authorities. He and my grandfather were on less friendly terms after that, even after the scheme's author was arrested and sentenced. My grandfather was convinced that my dad singlehandedly shut down a legitimate operation. My grandfather passed away about 6 months after the swindler was sentenced to 20 years in prison. https://www.forbes.com/sites/billsinger/2011/11/18/botfly-ll...

Cool idea. I see some weird rendering issues on my retina Mac. Is that a known issue? https://www.dropbox.com/s/uq18mm1q9braipa/Screenshot%202019-...

Mainly what I see is the face cards are rendered HUGE and the pips in the centers of the cards seem jumbled.

I tried playing solitaire, but gave up when it came time to flip through the deck 3 cards at a time. Going through the first time would be OK. Resetting for subsequent passes would be really painful.

My understanding of that shift is that the average "user" has become less savvy, because of improved UX and an overall increase in the percentage of the population who are "users". This is because over the last 30 years computers have moved out of just the business/academia/enthusiast space into people's homes (and then pockets).

The average "user" can't program a computer because we've been able to bring computing to a whole new population of people with neither the opportunity nor inclination to learn to use a computer at that level. You don't have to be a computer nerd to get immense value from computing, and in my mind that's a very good thing.