Live data from Hacker News

Viewing profile — geofft

geofft

HN member
Joined
Tue, Apr 10, 2012, 12:06 AM UTC
HN karma
29,438
Public activity
8,636 items

About geofft

https://ldpreload.com/

@geofft on Twitter and GitHub; also that username at that domain name for email.

I live in Brooklyn, NY, and can generally be found thinking too hard about kernels, linkers, or crypto.

'lizdenys and I make a podcast about practical personal digital security: https://looseleafsecurity.com or search for "Loose Leaf Security" on your favorite podcast app.

Recent public activity

  1. comment
    Comment #33872758

    I was about to post roughly this comment, but then I remembered reading https://www.gwern.net/Nicotine a while ago: > many asso⁣ci⁣a⁣tions with harm are con⁣founded by past or pres…

  2. comment
    Comment #33776651

    I believe NixOS does not (there's a "nixos-rebuild switch" command that sounds vaguely like it requires a reboot, and NixOS does aim for declarative confgs, but it knows how to res…

  3. comment
    Comment #33755325

    The link seems to be down, but this is the speech itself: https://www.marxists.org/archive/debs/works/1918/canton.htm

  4. comment
    Comment #33755260

    This is an excellent point from the comments, from one of the signatories: > If you as a public university had no power against racism beyond the nobility of your intentions, your …

  5. comment
    Comment #33661002

    This is not pointlessly-spent energy! It is part of the job of software engineering, in much the same way as fixing compiler errors and debugging is part of the job of software eng…

  6. comment
    Comment #33564856

    Yeah, but I think the term "self-host" is a little bit conditioned on the HTTP model itself. If we had some sort of Usenet-style distributed infrastructure, you could imagine two w…

  7. comment
    Comment #33563421

    My personal website is a publicly-accessible static site. Blocking people from it is not meaningful. It might be meaningful under the model of direct HTTP, where you could be DoSin…

  8. comment
    Comment #33563284

    Honestly, I think if the GDPR had been around before HTTP, we would have seen HTTP as the unreasonable part in this system. You don't have to make a direct TCP/IP connection for tw…

  9. comment
    Comment #33563165

    From GDPR article 2: > 2. This Regulation does not apply to the processing of personal data: > (c) by a natural person in the course of a purely personal or household activity My s…

  10. comment
    Comment #33352248

    https://github.com/twosigma/libvirtcpuid works around this. (But in practice, we mostly rely on the fact that if you are in Google Cloud and specify a minimum CPU version, Google m…

  11. comment
    Comment #33308465

    In general "factual information" is not a defense to a whole bunch of things that society generally recognizes as not protected by free speech (the broad concept, not solely the le…

  12. comment
    Comment #33308244

    Then how do you decide what is (or should be) a right and what is not? Suppose someone claims a right to gay marriage, or a right to employ only people of their race, or a right to…

  13. comment
    Comment #33308186

    No, but he happened to be wrong for it. The NSPA's goal was never to actually hold a march. They never did hold a march in Skokie, after that defense. Their goal was to harass Jewi…

  14. comment
    Comment #33308131

    "Moon" is the name of the person who spoke the thing above that is being discussed in this thread. Advising underage people through a wiki on how to make hormones at home is neithe…

  15. comment
    Comment #33227504

    Stars don't represent anything real. You don't star a project when you clone it, when you grab a packaged version from a package repository or the home page, when you use it as a t…

  16. comment
    Comment #33226355

    I very much agree with you that the lack of supply is a major problem, but the article is making a case here that what the algorithm is doing is tantamount to price-fixing / collus…

  17. comment
    Comment #33226027

    Absolutely agree, but how do you do that in practice? Do you self-host your services on some Linux distro? How many FAANG employees have upload access to that distro or maintain it…

  18. comment
    Comment #33223962

    It protects the user's privacy against attackers other than Google. To be fair, this is an entirely reasonable threat model for a lot of people. For instance, if you're a reporter …

  19. comment
    Comment #33218000

    Not that I disagree with you about whether the average person realizes it, but it's not just a risk because Google has JavaScript trackers on your porn site. Google could just make…

  20. comment
    Comment #33208096

    For Slack in particular, the deal is that new signins return a token that starts with "xoxc", not a token that starts with "xoxs", and that token requires corresponding cookies in …

  21. comment
    Comment #33146913

    One might hope, but they didn't. How do you tell in Java if stderr is a TTY, and if so, what its width is? How do you do an NSS passwd lookup (as in getpwnam("pjmlp") in C etc.)? (…

  22. comment
    Comment #33146911

    Well, kind of. Docker is a product, with official support for Linux containers on Mac (and Windows containers on Windows!). Docker for Mac comes with a Linux VM as a feature of the…

  23. comment
    Comment #33104100

    2016, and https://langui.sh/2015/07/24/osx-clang-include-lib-search-pa... (linked from the GitHub thread) seems to explain it better - if I understand right: - Apple, in 2015, depr…

  24. comment
    Comment #33103883

    " individuals from diverse backgrounds and groups historically underrepresented in the research community " according to https://science.osti.gov/grants/Applicant-and-Awardee-Resou…

  25. comment
    Comment #33103869

    I'm not sure I see how that's connected to the article or the linked DOE policy - can you expand on what gets you that feeling? It seems to be saying the precise opposite of that, …