Hacker Newsnew | past | comments | ask | show | jobs | submit | alufers's commentslogin

How does cleaning of the heat exchanger work? From my experience with Jaccuzzi-style baths anything that recirculates bathwater gets very nasty very quick and is a nightmare to clean.


in Japan you tend to shower & wash yourself clean _before_ getting into any bath. In the west people don't do it or do it very half asset. And tbh. a lot of places have combined bath/shower so you kinda can't even do it Japanese style nicely.

That alone probably will make a huge difference in how often you have to deep clean it.


> you kinda can't even do it Japanese style nicely.

I mean you can as long as you make the bathroom a wet room and shower outside the tub, which is exactly how the Japanese do it.


my point is most _rented apartments_ are not setup like that and do not provide a reasonable path to have it

most owned apartments also are not build in a way where it's easy to retrofit. So if you don't do a "in depth" renovation anyway, its often just not a good option from a financial POV. Especially if you have to reroute plumbing (for the floor level wet room sink), especially if beton floor or pre-existing floor heating is involved.


Yes. But then those wouldn't be the places which GP was talking about, where the shower head is set up so you stand in the bath tub to take a shower.


I’ve used a bunch where the shower head is on a hose not fixed to the wall. Usually with a two-way faucet.

The biggest issue in the west is the room being wet to start with.


    The copy of The Garbage Collection Handbook at ~/Documents/Books_on_vm/ is the 2023 second edition, and it covers G1, ZGC, and Shenandoah by name with dedicated sections. What follows is read directly from that PDF (page numbers are the book’s own page numbers, printed in each page header — the PDF file’s own page index has a fixed +37 offset from these, front matter accounts for the difference).
Why should I keep reading an article if author the couldn't be bothered to read it themselves after copy-pasting it from a LLM?


The few pages I've looked at seem to be mostly (if not completely) AI hallucinated, with semi relevant photos from WikiMedia linked. Despite the name there is no way to edit the articles or even log in.

Also the "BOMs" are provided for such generic objects as "Excavator", which makes no sense. Different excavators will be made of different parts. If you want to get the general idea you can ask an LLM yourself instead of going to that website.


I rewrote it quickly to C [1] (and changed the embedded binary to be aarch64).

Unfortunately it fails on calling bind() on my device, so probalby Android doesn't ship with that kenrel module by default :(. So no freedom for my $40 phone.

Putting it out here, maybe somebody else will have better luck.

[1] https://gist.github.com/alufers/921cd6c4b606c5014d6cc61eefb0...


Update: Checking the kernel config indeed confirms this.

   adb shell zcat /proc/config.gz | grep CONFIG_CRYPTO_USER_API
   # CONFIG_CRYPTO_USER_API_HASH is not set
   # CONFIG_CRYPTO_USER_API_SKCIPHER is not set
   # CONFIG_CRYPTO_USER_API_RNG is not set
   # CONFIG_CRYPTO_USER_API_AEAD is not set


A bit tangential, but in Poland we also had such traffic cameras with public access (it wasn't a live feed, but a snapshot updated every minute or so). It was provided by a company which won a lot of tenders for IT infrastructure around roads (https://www.traxelektronik.pl/pogoda/kamery/).

What is interesting to me is that the public access to the cameras has been blocked a few months after the war in Ukraine started. For a few months I could watch the large convoys of equipment going towards Ukraine, and my personal theory is that so did the MoD of Russia. I haven't seen any reports about that, just my personal observation.


Would have been a good opportunity to inject misinformation after they noticed (assuming it's what happened)... Convoy passing by? Quick, splice in alternative footage that has equivalent traffic/weather conditions. (Or an infinite convoy to scare them)

Or just block it i guess.


Wouldn't a switch with ONIE [1] and Sonic NOS support [2] do the trick?

(I don't know the prices of such switches or whether they are available to prosumers, which would explain why almost nobody has them in a homelab)

[1] https://opencomputeproject.github.io/onie/ [2] https://sonicfoundation.dev/


Where can I buy one?


I don't know how much you have used Telegram, but it's ridden with absolutely vile stuff.

You open the "Telegram nearby" feature anywhere and it's full of people selling drugs and scams. When I mistyped something in the search bar I ended up in some ISIS propaganda channel (which was straight up calling for violence/terrorism). All of this on unencrypted public groups/channels ofc (I'm pretty sure it's the same with CP, although I'm afraid to check for obvious reasons).

I think there is a line between "protecting free speech" and being complicit in crime. This line has been crossed by Telegram.


I use it a lot, and I run some large groups on it. I don't see any of that stuff, I've never gone looking for it, and I'm not even sure how to look for it. Can you tell me some examples of what to search for to see what you're talking about?


it's not specific to anything but humans, which are ridden with vile stuff.

just turn off any discovery and suggestion features


Not OP, but have to use the cloud version of Jira and Confluence. My biggest complaint is that they put the "Yes! Send me news and offers from Atlassian about products, events, and more." checkbox in the place where I would expect the "Remember me" checkbox.

Absolutely psychopatic behaviour.


I can’t explain how frustrating it is on Amazon where that checkbox instead reveals your password in plain text. Super easy way to dox yourself.


Some gun calibers are measured with inches, so maybe they have some imperial markers on hand to measure bullet casings?


Many measuring devices used in eg Germany have both proper units and Freedom units printed on them. It's probably just easier to have one model that you can sell anyone on the globe. Economics of scale and all that.


I'm Norwegian, and it's very common in Norway as well to have e.g. rulers and other measuring devices with both inches and metric units. It's if anything pretty rare to have just one or the other unless it's a "format" where displaying both affect usability - e.g. make the writing too small.


I know everybody says how bad SMS 2FA is, and how we should replace it with the next cool thing $BIGCORP invented (thus requiring you to have an account with them, which only defers the problem).

But couldn't we pressure the telecoms to improve it?

I have an idea that would make SIM swaps way harder to execute. Namely a website that wants to authenticate you should be able query the telecom for some kind of SIM card ID. This would happen before sending a 2FA code.

With such a feature it would be easy to store the SIM card ID in a database when enrolling the phone number. Later when the user tries to authenticate and the ID does not match what saved before, the account is locked out. For enterprise accounts you would need to explain yourself to IT and for personal accounts a fallback 2FA would have to be used. Alternatively the authentication would be delayed for a few days to give the legitimate owner of the SIM card time to react.

Another thing that could be added on top of this is to send a SMS to the old "inactive" SIM, alerting the original owner of the attack.

EDIT: To add to this, here are some advantages of SMS 2FA over time based OTP or passkeys:

1. My grandma can use it with her dumb phone and poor digital skills. 2. Your SIM card will most likely survive if your phone is destroyed due to water or physical damage. (Sadly not true for eSIM) 3. You can dictate an SMS/OTP code over the phone, or forward it to somebody you trust. 4. Banks can append a short description of what you are currently authorizing. It can tip you off in case your computer is infected with malware, or you are victim to one of those TeamViewer scams.


I think this is conceptually wrong from a layering perspective because youre punching through the abstraction and making it leaky on purpose. This just moves the problem down one layer in the stack - there will be legitimate new use cases for “sim card ID spoofing” and then we’re back to square one. Also from a usability standpoint “getting a new phone” is precisely the wrong time to lock users out of their accounts

A perfect analogy would be trying to implement security with mac addresses but applied to internet. It just makes a mess of an abstraction layer and then you have to rebuild it because those abstractions were useful (mac address spoofing has legitimate uses because mac addresses were used for security and then people realized they needed to be able to transparently swap things out)


In your scheme, how do I transfer money from my bank after my phone is stolen and I need to get a new phone without access to the original sim? Or access my email?

If that’s just impossible, how do I fix the issue? A “fallback 2FA” what is that exactly?


Probably one time use recovery codes you are supposed to print and keep in a safe place. In case of a bank this could also mean a trip to the nearest branch for ID verification.

The same issue you mentioned applies to other 2FA methods. Your TOTP codes and passkeys also live on your phone, Yubikeys can be stolen too.


Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: