HN user

lovingCranberry

317 karma
Posts3
Comments64
View on HN

Curious question: Why are all these sites behind Cloudflare and why is Cloudflare not acting?

These sites are literally made to steal my grandma's money when she's buying presents for Christmas and what not.

I find the recommendations genuinely horrible. I only get channels like real life lore, Adam Something etc, with sometimes very shallow takes at politics. And after marking those channels with "I don't want to see this", I get their hundreds of copycats.

I mostly watch channels like Aswath Damodaran, mCoding, etc., which are not related to the contents of the mentioned channels at all, yet their recommendation engine still shows me all this stuff.

Hmm, in Germany children and teens can still enter contracts, as long as they are able to pay it with their monthly pocket money. Every single thing you buy here in a supermarket is also an implicit contract (Kaufvertrag).

So, you could theoretically rent servers and buy ad space on Adsense as long your pocket money covers it. On the other hand: this is a liability for Google and $provider -- as most of them are post-pay. If a teen ever decides to spawn an A1000 instance with 36 cores and cannot pay, the contract is void and Google has no entitlement for compensation.

Pre-paid stuff like a small instance on vultr.com should work fine, though.

"unsafe forbidden" (GH tag)

Unrelated to this project, but I dislike the obsession of "unsafe" within the rust community.

Sometimes I need to dereference a raw pointer (rare!).

Sometimes I actually know what I'm doing (very rare!!).

Sometimes I rigorously tested my code (exceptionally rare!!!).

When I see people making PRs (to e.g. Actix) to change unsafe code to safe code in an API the user *never* sees, which results in a performance penalty, just for the sake of not using the word "unsafe" in the code, I get mad. I totally understood Nikolay's reaction back then. Random people opened PRs and flamed him without knowing anything about the internals and the consequences.

The unsafe keyword means that I know what I'm doing. Just trust me for once, please.

Edit: if you actually want to know what you're doing too, I recommend you writing some linked lists. I hate linked lists with passion, I think they are a bad data structure and you should use Vectors 90% of the time and VecDeque the other 10% of cases. But they help you to understand what you're spending your electricity on.

Some might see Occham's razor in this, but I could imagine this being a real edge case:

When I had an Android (OnePlus) device I often factory reset when tinkering with it, go to bed and continue whatever I wanted to do on the next day. Of course my phone had it's bootloader unlocked and TWRP recovery, since I was trying to get lineageOS + spoofed signatures + microG to work.

So basically the scenario is: factory reset your phone, go to bed, wake up with banned google account, have a new brick decor for your garden.

Would be funny if they didn't think of this possibility.

Question: Assuming you have a modern android phone like samsung galaxy S20. When you factory reset your phone you need to log in with your google account to use it. This prevents people from stealing your phone.

How does this work when your account has been banned? Is my phone a brick afterwards? Someone should try this out.

I dislike this kind of overblocking a lot. Not just TLD blocklists, but also IP blocklists.

I recently had to write an email to my local police station (xx@polizei.nrw.de) and their server was rejecting it because my IP (vultr) was on the "Proofpoint® Dynamic Reputation"-blacklist. I owned this single IPv4 for at least 3 years, so they whole vultr range must have been blocked by Proofpoint.

Great if you can't even contact your government because they are using some shitty blocklist product.

Personally, I run a mailcow instance with Rspamd and get only very few spam mails, albeit my email was being leaked in the ledger.com hack a few years ago. When I was still using mailbox.org, I got crypto spam mails (update your wallet yada yada) in my inbox twice a day. So just a configuration thing(?).

I would shoot straight. Not once in my career have I ever suffered for an honest assessment given humbly

Same. It is frightening how many comments point to the exact opposite, presumably with the ulterior motive that this increases the chance of self-preservation.

But at the same time nothing can be improved by this. Although a team should have exactly this as a goal: improvement of the product/service.

"Challenging the government" doesn't make sense there, because the government never ordered anyone to take down the source code.

Microsoft just did some risk management and decided that it's not worth it to keep their own users data. I find it quite interesting that someone puts Github's management in a difficult situation. Are they gonna terminate Prof Green's account too? Are they gonna hunt down every copy of the source code on Github? Are they giving high-profile users a special treatment?

Looking forward to how this plays out.

OT: I just went through Adyen's prohibited businesses. Why does every major payment processor prohibit vendors of adult toys from using their payment services?

I mean, those aren't even high risk businesses. Credit card fraud usually happens when you offer high priced electronics. Chargebacks usually happen when you sell digital goods like templates, ebooks, videos etc.

I tried to create a spotify client for the nintendo switch as my very first rust project. I initially wanted to use librespot as a backend. I gave up pretty quickly, things just went over my head and got too complex.

Congrats to Mogery for releasing this!

The article tries to make the reader feel bad about Facebook by pointing out how the site can create negative emotions. However, the author does not seem to be aware of the fact that he is doing the same thing.

Using Facebook has been scientifically demonstrated to cause depression

Not to say that this line is wrong, but that the evidence for this claim is far from conclusive. The findings from such studies are mixed, partly due to differences in how variables are operationalised.

I believe your interaction with digital technology can be a main driver of depression, but not in the way it's being framed. My psychologist (back when I was suicidal and in a strong depressive episode) told me, that I should have at least 20 minutes of face-to-face conversation to day. That I should go outside and find meaningful contacts, goals, and sense in life. I believe that a lot of people, who sit in front of their computer the whole day are missing this. It doesn't matter what medium you consume as much as what you're actually missing. The few girls which I met during therapy were mainly on tumblr, discord, instagram. I didn't use fb either. Welp, even HN didn't keep depression away!

Having at least a 20 minute long face-to-face convo per day was honestly a great helper, besides the full-time therapy to stop my head thinking, and pills, of course.

Just my two cents to this line. I agree with the other comments about non-chronological feeds being lousy. The article is really trying to push negative emotion towards facebook.

This made me think of the encryption export ban. Looks like there are still some restrictions:

Militarized encryption equipment, TEMPEST-approved electronics, custom cryptographic software, and even cryptographic consulting services still require an export license[9](pp. 6–7). Furthermore, encryption registration with the BIS is required for the export of "mass market encryption commodities, software and components with encryption exceeding 64 bits" (75 FR 36494). In addition, other items require a one-time review by, or notification to, BIS prior to export to most countries.[9] For instance, the BIS must be notified before open-source cryptographic software is made publicly available on the Internet, though no review is required.[10]

https://en.wikipedia.org/wiki/Export_of_cryptography_from_th...

I was recently looking into an equivalent for V8 isolates. I'd like something like this for python, but it looks like micro VMs is my best bet here. For anyone working in this field or having hands-on experience: is weave's ignite a choice if I'd want to execute long-running python scripts of users? I remember that there was a lot of overhead for I/O. Or should I just go with raw Firecracker like Stan does in this article?

The scripts would be long-running, but don't require much computational power. Just a few arithmetic operations on an array every second. The array is being fed in via WebSocket.

I lol'd pretty hard at this comment.

Then I went on to actually google "6 minute countdown" to check the view counters of the youtube videos (which are right at the top of the search results).

My jaw dropped.

2,505,001 views

95,726 views

66,394 views

44,479 views