Hacker Newsnew | past | comments | ask | show | jobs | submit | saool's commentslogin

Anecdotally...

Having spent time driving in both Europe and Southern California, I'd say that European drivers are more attentive to their driving and way less likely to be looking at their phone while driving, since it's policed. You can often see drivers in SoCal holding their phone for a video call.


One thing I was surprised by when driving in Coquitlam where I have cousins is that drivers there would start moving right after the green. This is strange to me because drivers in San Francisco will frequently be stationary for seconds afterwards. Looking at the rough statistics, it appears the RCMP police for smartphone usage in a stricter manner than SFPD does (or at least they write more citations) which makes me think that drivers in that region have adapted by not using their smartphones as much.

I wonder if this metric of "traffic light change to driver action" delay is a thing we could use as a performance metric for how well cities are ensuring smartphones aren't used by drivers.


In downtown LA I routinely spot on-duty police officers, who are usually cruising in large SUVs, texting while driving.


Hah, near me the Police Chief claimed this was fine as they were professional drivers who'd had "special training".

I wonder why this "special training" to allow people to be able to safely text and drive isn't available to all of us... but I think I can hazard some theories...


Never know when there might be a snorlax around



I’m pretty sure I’ve seen drivers in the Bay Area conducting a full blown Zoom call, video and all.

(I used to have a corporate laptop I put a 4G WiMax chip in, and would boot it and connect to corporate VPN, open Lotus Notes, and then start my one hour commute. Then at work my Notes would be fully sync’d which otherwise took a half hour.)


Plug | https://plug.vin | Senior Software Engineer, Full-Time | Los Angeles, CA (Santa Monica Clover Park area) | ONSITE

Come join our well-funded, revenue-generating team and help build the automotive auction of the future.

https://wellfound.com/jobs/2998538-senior-software-engineer


The Skagen Hybrids (cell battery powered for 4+ months) are the best I've found for this low-tech approach, much more so than any Garmin.


1, 2, and 4) Yes, that's already possible. Look into Solo Keys for open source hardware and firmware. The standard allows for key manufacturer attestation but seems like the way it is going (especially with the proliferation of software authenticators) it likely won't be relevant in practice. You can also enroll many authenticators to the same account (provided the service allows it, which most do).

3) This is pretty hard/impossible, I think. The authenticators don't use the same key-pair for all websites (a la SSH through Yubikey), but rather create a per-service, per-credential key-pair, and encrypt it with the main key-pair. The encrypted credential key-pair is then handed off to the server for storage, and the service sends it back for the authenticator to decrypt and use during a challenge. Clever trick to not depend on local hardware memory and be able to have unlimited per-credential key-pairs, but afaik prevents you from just "adding lists of public keys".

I'm also not mentioning the resident keys aspect of the standard but that won't fix it as they're still service and credential based.


A simple proof of possession (pop), signed ahead of time, solves #3.

The message: `{"pay":{"alg":"ES256","msg":"I own this key","tmb":"9PcBWntvjAktwfiPp8WxgOyQOwc1h6Lo1UnB_gkWXKk"},"sig":"eXuV0_HYCM-WnS2CbOnGXdce-9M8AzivCw23Hihtp1h69Ix6HwWCA79FR6cs3Nym2bWJoKajtnIY0xcTnuRnNQ"}`

The public key: `{"alg":"ES256","kid":"Zami Mobile 2","x":"PZpmb3CI_2LTWcxopqjliqohPpmxFmNwKLb52wJgMg-4Xd0hTRKn7OruUMa3LvHmuTA9pHidocLHnEdOcQ04OA","tmb":"9PcBWntvjAktwfiPp8WxgOyQOwc1h6Lo1UnB_gkWXKk"}`


Sorry, I should've specified that it's impossible as the standard is written, not necessarily cryptographically impossible.

A scheme could definitely be devised to add authenticator "stubs", but I don't think it's possible right now.

Unless you're saying the above is already available in the spec.


If you haven't yet, check out Dr Richard Johnson on the fructose metabolism.

https://peterattiamd.com/rickjohnson2/

https://drhyman.com/blog/2022/05/18/podcast-ep540/


In the typical case and handwaving a bit:

On registration, the server is handed a site/user-specific key pair _encrypted_ with the master key of the authenticator device (your usb key or your phone, etc), together with the plain-text site/user-specific public key.

On authentication, the server sends down that encrypted blurb, which is temporarily decrypted and then used to sign a challenge the server sent.

So basically the server is used as storage. There are exceptions to this (e.g. resident/discoverable credentials on hardware keys)


For an industry so enamored with scale and network effects, we sometimes fail to recognize how these work against us organizationally. Or maybe we don't, and the boards/execs just prefer a more controllable organization even at the expense of rigidness and efficiency?


You can. You gotta get Wireguard running on your local machine [0] and be able to see the ".internal" network, but once you do, you can ssh into any edge VM and if access its filesystem. I've SCP'd SQLite db files and dumps. It's also a pretty anti-pattern way of debugging an app if you're an outlaw :)

[0] https://fly.io/docs/reference/private-networking/


wireguard (or tailscale) + sshd + VNC (macOS screen sharing) server bound only to the virtual interface or firewalled.


I did something similar. I installed ZeroTier, OpenSSH server, and TightVNC server on my parents' computers.

Their computers and mine are connected in the same ZeroTier network. I SSH to their computer and connect to VNC over an SSH tunnel. VNC is only bound to 127.0.0.1 so nobody on the network will be able to access it.

Perhaps I could have skipped the SSH part of it since ZeroTier should have covered the network security, but I also wanted an easy way to run commands too.

It's a couple steps to get connected, but it works well.


Agreed. Get all the way on the network, youll be able to troubeshoot more things. Having teamviewer with a hardcoded password is a good fallback. Have two ways in.


3.2g of arginine in a day doesn't sound like a lot. There's around 2g in most meat/protein servings, and 1g on each egg yolk[0]. I wonder how much of the study outcome is just the result of changing dietary habits of the patients.

[0] http://www.dietandfitnesstoday.com/arginine.php


It's well known that elderly people have reduced ability to absorb protein through the gut. I'm just speculating here but could that be one of several reasons why elderly patients are at higher risk of COVID-19? Perhaps some of them are simply deficient in essential amino acids.


I think 500mg is a reasonable starting dose. It’s a vasodilator so too much would cause hypotension.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: