jknutson · HackerTrans

5 месяцев назадdiscuss

You’ve just explained my own thoughts better than I ever have been able to, especially what with the political minefield that is literally anything mentioned in your post. Brilliantly articulate. I have half a mind to commit your entire comments text to memory and just repeat it ad verbatim whenever I am asked about my opinions on these things.

jknutson

7 месяцев назадdiscuss

Well, every shell has its quirks and gotchas. I’ve found nushell’s to be the least intrusive and most workable thus far.

jknutson

7 месяцев назадdiscuss

With external commands you might have to collect the output of the program before doing any sort of manipulation. I’ve been got by this before too; the fix is simple (for me at least). `external.exe | collect | from json` et voila

jknutson

7 месяцев назадdiscuss

If you like Powershell but have some complaints, you might find nushell to be the best of both worlds. My elevator pitch for it would be imagine the object-oriented / typed nature of Powershell, minus the verbosity and windows-centric design of it. As someone who develops on and for windows computers, nushell is a real breath of fresh air.

jknutson

8 месяцев назадdiscuss

I would agree. That’s exactly what the example I gave (list-to-tree) does. LLMs are actually pretty OK at writing regexes, but for long word lists with prefix/suffix combinations they aren’t great I think. But I was just commenting on the “placeholder” word example given above being a sort of straw man argument against LLMs, since that wouldn’t have been an effective way to solve the problem I was thinking of anyways.

jknutson

8 месяцев назадdiscuss

I think they would want a more optimized regex. Like a long list of swears, merged down into one pattern separated by tunnel characters, and with all common prefixes / suffixes combined for each group. That takes more than just replacing one word. Something like the output of the list-to-tree rust crate.

jknutson

10 месяцев назадdiscuss

Anecdotal but I have found that at least some times, rideshare drivers are willing to take cash for rides under some circumstances. Not at all common though, most of the time I have asked I’ve been unceremoniously shot down. The one time I distinctly remember it working out was during a packed event in Vegas (EDC LV, music festival). I just asked if they were going to be driving for the concert the second day, since it was so ridiculously packed and hectic to get a ride the first day, and they said yes and I just offered $100 for the ride tomorrow (I was already paying that much with uber, but with poor service from the app and many cancelled drivers). They agreed, they got a double-rate fare for one unsanctioned ride, I got better service since they were better incentivized to get my ride done, and overall everyone was happy. Except Uber I guess. YMMV

jknutson

11 месяцев назадdiscuss

If you don’t mind me asking, how were you able to immigrate there? I have family that lives in Norway on my father’s side and I’ve sometimes fantasized about packing up my life and moving there after I visited them and saw what an amazing place it is. The few times I’ve been manic enough to actually consider its realistic plausibility I’ve always been stopped at the dead end of their immigration policy. Maybe things have changed but when I looked into it, it seemed like a very difficult bar to meet (I would’ve either tried to find a skilled trade immigration policy, or perhaps used my extended family as a reason, but neither of those routes seemed particularly possible).

jknutson

в прошлом годуdiscuss

Music festivals or similarly congested public events would be good use cases

jknutson

в прошлом годуdiscuss

I would say that IOS AdBlocking is significantly less effective than that which you’d expect from a Desktop adblocker (and presumably android, so I’ve heard— can only speak for iOS though). My little brother likes to watch Anime on his iPad through some bootleg Crunchyroll equivalent (the kind of website that uses a .to domain, you know?), and I’ve tried my absolute damndest to defeat the hyper-intrusive ads and scripts served by that site so he can watch his Naruto or whatever without having his poor innocent eyes bombarded with salient requests from hot singles in our area.

No luck, and not for lack of trying. I’m not entirely certain what feature is missing in WebKit that results in the hamstringed adblocking capacity, but it’s definitely much worse than you’d hope for. You can get adblocking extensions on iOS that will block ads on most websites, but when it comes to the truly shady ads that do not even try to masquerade as being legitimate, iOS falls short. It’s likely something I could handle on the DNS layer if I wanted to dedicate a day or two towards, but I’ve similarly travelled down that rabbit hole to no avail as well.

jknutson

в прошлом годуdiscuss

I agree with you. When I was younger, I played a lot of Minecraft PVP servers, and for whatever reason these PVP servers cultivated a weird and toxic community of cyber criminals about them. For reference/star value, the recent headline of the kids stealing 200m in crypto via social engineering— I played with those very same people when I was younger. As in, the people who were sent to jail.

Their story repeats itself a dozen times over from my now-fragmented friend group from that time. Many young kids getting into ill-fated get rich quick schemes ranging from credit card fraud to refunding (mail fraud) all the way to sim swapping, blackmail, doxxing, and even real life violence and gang activity. A few of my earliest friends were just indicted for home invasions and armed robbery in some scheme to steal crypto. All of them from Minecraft, weirdly enough.

Anyways, those who didn’t end up in jail or “on the run” from participating in these stupid schemes, I tend to notice a common trend towards security related work. I know one guy who went from fraternizing with the same now-criminally-indicted people I hung around to working for the FBI’s cyber crimes unit (fitting, I guess). Another one now works with a defense contractor developing spyware, as far as I can tell. Many more work in different areas of cyber security and programming et al, including myself.

The cyber-crime adjacent to cyber security pipeline is very much so real.

jknutson

2 года назадdiscuss

Love the idea. I’m always finding myself writing little user scripts / browser extensions to extend websites I use all the time, and trying to use an API I found in the devtools network requests page always gets annoying when I have to try and do anything beyond replicating the exact input/output I found in the original request.

Haven’t fully looked through the features/docs, so forgive me if my question is answered in there, but what does support look like for:

- Exporting to Swagger/OpenAPI Spec

- Exporting to generated SDK (I know some tools exist that can generate SDKs from OpenAPI/Swagger, so maybe some of these tools have licenses that are compatible with your product?)

- Support for URL path variables (e.g. `/users/{user_id}`)

- Support for URL query parameters (and filtering for common “noise” parameters, e.g. Google analytics)

- Support for non-JSON input/output (e.g. an endpoint that accepts multipart form data)

Awesome idea though. I’m definitely going to try this out. Beautiful UI and website too. I’m stoked to play around with this!

jknutson

2 года назадdiscuss

3 ways to declare functions? I am probably blanking but I can only think of:

``` function foo () {} const foo = () => {} ```

jknutson

2 года назадdiscuss

Perhaps it could be misaligned incentives? The primary variable YT optimizes for is time spent on the platform. Being able to instantly find and skip ahead to the part you wanted means you didn’t spend the extra time that you would’ve otherwise.

Granted, I can’t see this specific feature really moving the needle one way or the other. But, internally, they might apply some sort of lens to their decision making that asks “does this increase or decrease time spent and eyeballs monetized?”, and if that is the case then there is a real argument to be made that this feature would not meet the standard for a “good feature”, based off that criteria.

Probably more likely that their entire UI is just so deeply fine tuned and A-B tested that any individual change to it has a lot of friction, lest they push an update that decreases watch time by 0.1%.

jknutson

2 года назадdiscuss

Technically speaking, how do they accomplish this? Given the amount of advertisers they have, the amount of ads that each advertiser is showing, and the amount of variations of those ads that they’re showing (5s, 15s, etc), I think we can safely rule out the possibly that they’re just splicing together an infinite amount of permutations of ads and videos and saving them to disk.

They must be doing some sort of on-the-fly streaming of these ads? It cannot be the case that they’re trying to actually transcode / edit all those different ad possibilities together.

jknutson

2 года назадdiscuss

Maybe it’s some sort of in joke for the company. At least, that’s how I took it— alongside it being an obvious reference to a speedometer. My intuition was that maybe the company’s name was “gauge”, or better yet the CEO’s name was gauge. I really hope it was the latter. Makes me think of Hooli from Silicon Valley for some reason lol

jknutson

2 года назадdiscuss

I laughed out loud in my office reading the dilbert strip line. Thanks for the giggle, that’s a new one for me lol

jknutson

2 года назадdiscuss

Yeah, for real. Isn’t the entire point of cryptocurrency (or at least a key principle) to be resistant to censorship / centralized attempts to “kill” it? I don’t doubt that there is some damage that could be done to crypto as a whole by governments taking steps to “ban” it, but I don’t think we can put the toothpaste back in the tube here.

I suppose the highest leverage card that legislators could play to try to hurt cryptocurrency would be to put a stranglehold on the fiat currency on/off ramps (eg making businesses like coin base flat out illegal), but even after doing that peer to peer markets would survive (albeit likely after also taking some damage to user base, maybe).

jknutson

2 года назадdiscuss

I’m not who you replied to, but I agree with his sentiment about signal being superior to telegram in terms of security (or more specifically, privacy).

For me, there’s two big reasons for this:

Signal chats are E2E at all times, while Telegram is only E2E when you explicitly create a “secret chat” with whoever you’re conversing with. I don’t fault Telegram too much for this, because they still provide the option to use E2E for everything, but Signal gets brownie points in my book because they just do it by default without getting in the way of the User.

Secondly, as far as I know, Telegram uses their own in house encryption techniques as opposed to industry standards. I am not at all knowledgeable about encryption or cryptography— I only know what’s required of me in my job (basically the bare minimum), and so I don’t actually know whether this is anything of serious concern. It could very well be that Telegram’s encryption techniques are just as effective as the established norms, but I do see the general consensus trending towards “roll your own encryption = bad, use established norms = good”, which is primarily what I am basing my opinion on here.

To further detract from my own point, it actually seems like Telegram might be using “established norms” for encryption nowadays anyways [1], although I couldn’t really tell from the brief description I read on Wikipedia.

Overall, I think Telegram is perceived as being less secure than Signal primarily because of the reputation Telegram has for implementing their own in house encryption techniques, even if they don’t use those techniques anymore— their name has become associated with their known history of using ad hoc encryption.

[1]: https://en.m.wikipedia.org/wiki/Telegram_(software)#Architec...

jknutson

2 года назадdiscuss

I can’t be sure of whether this specific line in their user agreement applies to this specific situation (balance of an account that has been locked isn’t specifically mentioned), but a cursory glance at their (Canadian) user agreement [1] states the following:

“PayPal combines your balance with the balances of other users and invests those funds in liquid investments. PayPal owns the interest or other earnings on these investments.”

(I can’t seem to find a way to hyperlink to selected text on iOS, so I’ve also included a screenshot of this quoted statement instead, below [2])

I assume that (unless stated otherwise in their agreements / legal documents) PayPal continues to apply the same policy to funds that are held by them in accounts pending closure for high chargeback rates. I could be wrong though, I just ctrl+f’d for “balance” on the first legal document linked on their site. Also, only applies for Canada, since I didn’t check any other country’s agreements (but my guess is that wherever it’s not expressly illegal for them to do so, they’ll use whatever money they’re “holding” for you as a revenue generating investment vehicle).

———

1: https://www.paypal.com/ca/legalhub/useragreement-full?locale...

2: https://ibb.co/KXc33RP