sdflhasjd

l’année dernièrediscuss

Google (not saying it's a good search engine, but people use it) puts putty.org at the top of search results.

The results shows as:

  Download PuTTY - a free SSH and telnet client for Windows.
  PuTTY is an SSH and telnet client, developed originally by Simon Tatham for the Windows platform. PuTTY is open source software that is available with source...

sdflhasjd

l’année dernièrediscuss

I think I remember Windows 7 (and maybe even Vista) supported UEFI natively.

sdflhasjd

l’année dernièrediscuss

I've got my own personal story about a cold call revealing my personal phone number had been leaked by Lusha, a "GDPR Compliant" B2B tool that sourced data from shady apps.

On a day off work, I got a cold call to my personal mobile. This salesperson called me by my name and then tried to flog something relevant to my job. Being hugely irritated, I shared my thoughts with the caller demanded to know where they'd found my number. They were at least a little bit apologetic, and said they found it on LinkedIn using a plugin called "Lusha".

Lusha's website has claims about being GDPR compliant, but at the same time being a "crowsourced data community". They do at least publish a "Privacy Policy" and some contact details for a data controller.

I emailed them with a Subject Access Request, which they responded to two weeks later in a very cagey manner. Actually, I did some sleuthing of my own. I found an unlisted link for a broken OneTrust request form. This didn't seem to be linked anywhere on the website and I literally guessed the URL for it. After some poking around in the debugging console, I recieve a more fully furnished copy of my profile.

The data source for my email was... "Lusha's email guess algorithm" - now, one of the downsides of working for a small business and getting a [email protected] is that guessing it isn't particularly difficult.

The data source for my phone number was more interesting. "L.S Mobile Apps Holdings Ltd." a company I'd never heard of, but eventually found an App Store[0] and Play Store[1] listing under a very similar name.

Looking at the apps published by this company, you can immediately see where this is going: a "Caller ID" and an even more transparent "Contacts Backup" app - both having complete access to all your contacts. At this point it becomes clear where my contact information has actually come from: someone I probably work with has created a contact in their phone with both my email and personal phone number, then used one or two of these apps.

I decided to pick the Contacts backup app to take a closer look. Installing the app on a wiped phone, I explored the UI, disassembled code and snooped the requests to their servers to see where exactly this mysterious "GDPR Compliance" was. The primary functionality is of course to create an account, upload all your contacts, and let you sign in on another phone to download them. There was some effort to make this work for most users, workarounds for edge cases, etc. It was more than the low-effort app I was expecting.

All the sharing functionality was checked behind a "consent" dialogue (and I use that term extremely loosely). The deal was that app would helpfully hydrate my entire contacts book with missing details! All I had to do was share it in turn. What I found peculiar about this was it simply didn't work. It seemed as through not only would the server not populate the missing data, but the code that handled this client-side was unfinished.

If you're wondering what the link between Lusha & L.S Mobile Apps is, they're effectively the same company. Yoni Tserruya, the co-founder of Lusha, has their fingerprints all over the the certificates used to sign the Android LSM Apps. It's clear this app's data is what they've built their company on.

Now, both Google and Apple have well known to display "Data Sharing" information as part of the store pages. The Play Store page explicitly says "No data shared with third parties", whereas the App Store omits the usual section you'd see when data is shared with third parties.

I contacted both Apple and Google with full details about what I'd found, and in the least surprising event to my saga, they did nothing.

Sadly, instead of having any satisfying conclusion, what I saw was what I already knew. I even got angry when reading their privacy policy, and how completely clear that all this "GDPR Compliance" labelling they have is there to sell their product to EU customers and they're clearly not compliant.

Here's some ragebait for the rest of HN who cares about their data:

- French DPA (CNIL) says Lusha is full of shit, but they can't do anything because they're based in Israel[2]

- Lusha doesn't think consent is important[3]

  [0] - https://apps.apple.com/gb/developer/lsm-apps/id1634388352
  [1] - https://play.google.com/store/apps/dev?id=5128998142474323958
  [2] - https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000046775564?isSuggest=true
  [3] - https://www.lusha.com/privacy-articles/please-show-me-where-i-have-consented/

sdflhasjd

l’année dernièrediscuss

Ebay do something similar too. You can immediately provide positive feedback, but you have to wait 7 days to add negative feedback. This is ostensibly to encourage sellers to address issues to retain reputation. Sellers can also get negative feedback removed after the fact by doing refunds, etc.

This means high volume low value sellers have little incentive to actually properly describe things or post correctly. A common issue I keep seeing is sellers using slower postage than paid for. You can immediately see from the tracking number, even if you wait 7+ days to submit feedback, you'll get a 'sorry' refund and the feedback is somehow 'addressed' without them going back in time and delivering it faster.

Online reviews are just a sham now, Goodhart's law etc as even if the reviews aren't fake, they're encouraged or incentivised from real customers. Look up any service provider on TrustPilot and it's the same: hundreds of 5-star reviews from people told to add a review just after signing up, a dozen 1-star reviews from bad customer service, and barely anything in between.

sdflhasjd

l’année dernièrediscuss

BS546 is very uncommon now, but can still be found in some relatively modern british homes and businesses where the sockets are used to "code" for connected appliances. For example, the 5A socket may be wired up to a switched lighting circuit to connect lamps but prevent connecting higher power appliances. I've also seen the 15A sockets being placed in communal areas of flats to provide cleaning and maintenance staff power while discouraging tenants from using them.

sdflhasjd

l’année dernièrediscuss

The thing is, I'm not talking about my 6th cousin twice removed, it's my literal siblings. At least in the UK, it seems nobody born after 1990 will use anything other than WhatsApp to message people.

sdflhasjd

l’année dernièrediscuss

The thing is that shunning WhatsApp and Facebook doesn't put you back to a time before they existed, it cuts you off completely because they've dispaced what used to exist. Before Facebook there was email and SMS, before that there were phone calls, letters, etc. None of those really exist any more. If something happens, it goes into the family WhatsApp group, if you're not in the group then you don't find out. My parents and their generation still answer the phone at least, and I convinced some fairly close people to use Signal, but generally I'm more disconnected from my family than I would have been in another time.

sdflhasjd

l’année dernièrediscuss

Not MiniDisc sized, but there's M-DISC which can be had in Blu-ray capacities (~100GB). They're a different chemistry than the old organic dyes from CD-R days and should last a pretty long time under some reasonable conditions.

sdflhasjd

l’année dernièrediscuss

I did some testing with the new Gemini model on some OCR tasks recently. One of the failures was it just getting stuck and repeating the same character sequence ad-infinitum until timing out. It's a great failure mode when you charge by the token :D

sdflhasjd

il y a 2 ansdiscuss

I remember removing the IR filter from a cheap webcam and seeing everything in a new light (haha, pun intended) was fascinating. One of my black coats that didn't get hot under the sun and appeared more reflective and. I remember some opaque things like Coke being much more translucent.

These winning photos are a bit boring my comparison, the ghostly effect of foliage in IR is cool but a bit overdone when there's so many and there were so many other interesting differences in every day objects.

I'd love to do the same with my mirrorless camera but it's a quite destructive operation.

sdflhasjd

il y a 2 ansdiscuss

My previous phone had a scheduled "night time mood" which put the display into greyscale. Without this there's an intensity to the screen that reducing the brightness doesn't fix.

sdflhasjd

il y a 2 ansdiscuss

My I also mention the Nyancat Progress bar for Jetbrains IDEs? https://plugins.jetbrains.com/plugin/8575-nyan-progress-bar

sdflhasjd

il y a 2 ansdiscuss

My thought is that Expo prioritises web compatibility too much to the point that it leans into conventions with things like navigation that are web-oriented and these contribute towards an app not feeling like a native app.

sdflhasjd

il y a 2 ansdiscuss

Probably the first "we adopted x" blog post that I can find relatable and spot-on.

I think it's one of the big misconceptions that React Native is _the_ path to get your web devs or even existing code onto mobiles. That's how you get the criticism that RN builds bad, mouldy apps.

Between our clients that have had this issue with quality and shops in the same space as us that haven't (one who boasts a review on one of their apps being "an example on how to build a proper fully native app"), having a good portion of native devs on the team is a big differentiator. Unfortunately this means a RN Team isn't as cheap as some hope.

sdflhasjd

il y a 2 ansdiscuss

Hackernews isn't a problems & answers forum, the process is just as important as the conclusion.

sdflhasjd

il y a 2 ansdiscuss

They fixed it in the sense that there's an opt-in offline-only print mode and they do work without a connection. It still requires you to do an initial setup using the mobile app, so if you're an offline-first kind of person, their printers are definitely not for you

sdflhasjd

il y a 2 ansdiscuss

For making enclosures, I use my 3D printer. It's not a replacement for sugru, but let's you get a lot of the same tasks done in a different approach.

sdflhasjd

il y a 2 ansdiscuss

This costs money, requires some agreement signing and can "dox" developers, so not everyone wants a cert.

sdflhasjd

il y a 2 ansdiscuss

I used an A7C2 + Sony FE 50mm f2.8 macro. The lightbox was a custom build based on the design that I found linked on HN recently: https://jackw01.github.io/scanlight/. This was then mounted vertically on the toolhead of my 3D printer with the camera on a tripod, I then used the Z and X axes to scan across the negative.

Although I had success with PTGui and it "just worked", I didn't fancy paying for it and instead used Hugin in the end. This lead me to take around 63 pictures with 50% overlap.

The film was a 4x5 negative and after stitching I'd say the effective DPI was ~4500

sdflhasjd

il y a 2 ansdiscuss

I see you mentioned using a 3D printer for scanning medium format film. I did something similar, but took the opposite approach. I placed the film on a lightbox and mounted that to the printer, then had that move around in front of a camera with macro lens. I did not have much of a problem with alignment.

That being said, this was a one-off, but once I had enough overlap with each capture, PTGui was able to switch it together relatively hands-free, even with it having lots of sky.

Submissions

Ask HN: Has anyone had their Mac Studio trip the electrics?

Apple certs used to sign provisioning profiles expired, affecting store uploads

Cloudflare have made it impossible for me to unsubscribe from marketing emails

comments