Recent submissions

Comment · 2 years ago
I am super fortunate that my spouse likes to do the home projects as well. She is artistic, and I am mechanical. We solve problems together....when I don't know how to do something electrical or plumbing, and she has no idea at all, I can explain to her what the problem is, and either she gets it enough to point me in the right direction or in the process of explaining the problem I get the solution.

When she is agonizing over some color scheme (which in most cases doesn't interest me much) she will explain what she wants to achieve, and I can ask "stupid" questions that lead her to the answer...or in the odd case I make a suggestion and the lightbulb pops on.

It seems to me the mental health professionals do the same thing.

Together we have tackled installing over a 1000 sqft of hardwood flooring, removing popcorn ceilings (yuk), re-engineering built in cabinetry to accommodate an 82" TV, gutting and rebuilding 3 bathrooms, re-upholstering a livingroom suite that has no right angles (all curves), running a 90ft PEX pipe through a ceiling crawl space after receive a quote from a plumber for $8000 (took a day of our time).

The problem I have with "professionals" is that they all tell me a different story of what I need, and the "other guy" is always dead wrong.

I need a new roof and am getting quotes from multiple vendors....Just today I had calls with a couple of the vendors and they told me opposite stories of what "I need". One told me I need to replace all the wall flashings (which is very difficult and expensive given the siding must come off), and the other said don't touch it if its not leaking. Who to believe?

At the end of each project we are amazed at our accomplishment (note youtube helps). It certainly took 5x longer than a professional might take, but the end result was unique, we could change direction mid project, and in the end I know it is not crap work from some guy who left a leak in the wall. I believe the elation we achieved (and compliments from the neighbors), far exceeds the sweat equity that we put into the projects.

Comment · 2 years ago
Interesting site on hsts.

I don't think HSTS will help if he is running his own WWW site on his laptop with a proper CA signed cert. If I understand correctly his laptop was presenting a proper WWW login page presumably over HTTPS after victims connected to his WIFI. What he was probably faking was the redirect to the Identity Provider (IDP) by staying on his own properly credentialed HTTPS site which would pass all HSTS checks. He may have also been faking DNS responses to keep users where he wants them.

Comment · 2 years ago
sounds like he was simulating openid-connect flows by saying "login with Google" or "login with Facebook" and then storing the credentials entered which would be cleartext.

I always suspicious of these flows for specifically this reason. The flows are secure as long as you know you are talking to the correct identity provider, but I think most laymen would not understand that concept.

Comment · 2 years ago
> Now you get to choose whether to take it or not.

The question is who is paying for these treatments? Drug companies are not shy about charging tens of thousands of dollars a year for a course of treatment that may or may not help. Insurance companies and Medicare partD will probably be reluctant to reimburse. Drug companies have large incentives to get patients to pay out of pocket, and no, they won't refund if the product is not effective.

Perhaps if the FDA were to create a new class of approval that states: Drugs under this class are shown to not cause harm but are also not proven to be helpful. They may be taken, but drug companies may not charge for supplies until efficacy is shown in controlled conditions.

The primary issue here is there are plenty of Snake Oil salesmen ready to tell you anything you want to hear and have no qualms about taking "somebody's" money.

I am sure creating a new class such as this, will also create a host of unintended consequences though.

Comment · 2 years ago
The sounds are not that intrusive...While others have pointed out the costs involved in solving them, the real question is "will muting each and every sound sell more cars?". Of course from an engineering point of view the other question is "are these sounds indicative of something that will fail prematurely?". The complexity of adding some sort of muting may introduce other modes of failure. Sometimes the best solution is the simple solution.

At this point in the EV marketplace the I would say the answer is no to both questions. Tesla is far better concentrating their engineering teams on new products that can continue their growth.

Now if some competitor comes up with a perfectly quiet car and that becomes a selling point, then it is time to revisit the engineering.

Comment · 3 years ago
This is why the IRS should be providing tax prep software directly. They should already have w2s, 1099s etc and should be able to process them directly into the forms. The only reason we have to pay third parties is they bought the politicians.
Comment · 3 years ago
This is what virtual Credit Cards are for... Each site gets a separate number and I can expire them as needed. Unfortunately, if they get popular vendors will figure out a way to detect and refuse.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton