Hacker News: mixdup

New comment by mixdup in "Show HN: SimCity, but with Permits"

mixdup — Tue, 20 Oct 2026 19:42:31 +0000

Fun fact, that's basically the case in large swaths of the country. Many states do not have home rule, which means counties can't set zoning rules. So in mostly rural areas of these states, it's wide open unless the state has decided to set rules or to be benevolent enough to grant the county the right to set zoning rules

New comment by mixdup in "Facebook Pages require paid subscription to post more than two links per month"

mixdup — Tue, 20 Oct 2026 16:34:06 +0000

Is this what's behind the "link to the article in comments" that all news outlets do on FB?

New comment by mixdup in "The obscure trust looming over Anthropic's IPO"

mixdup — Mon, 19 Oct 2026 18:24:24 +0000

Never once have heard about Warby Parker being a PBC

New comment by mixdup in "Let's Encrypt is adding two additional remote perspectives for domain validation"

mixdup — Mon, 19 Oct 2026 17:19:59 +0000

Let's Encrypt has always had short-lived certificates, long before they were mandated by the CAB. They've been pushing the cutting edge here

New comment by mixdup in "Let's Encrypt is adding two additional remote perspectives for domain validation"

mixdup — Mon, 19 Oct 2026 17:11:46 +0000

The point is to prove you control a domain. If you are answering traffic to requests from clients at that domain, you control it. Whether you're supposed to have control over it is outside the scope of this validation

New comment by mixdup in "The Fatal Flaw of 911"

mixdup — Fri, 16 Oct 2026 20:08:53 +0000

The linked article isn't entirely correct. Yes, in smaller counties and towns the 911 call center may be led by the police department but in any city of any meaningful size, the E911 call center is a stand alone department. Sometimes within a wider public safety department but that department usually includes fire in addition to police, and 911 is usually a peer to the police not subordinate

The focus should be on who is dispatched on the types of calls, not the organizational structure, because in most places it's already what you'd expect and not part of the police

There needs to be a force that can be dispatched to these types of calls, just like they know to send the Fire Department if it requires some kind of engineering/rescue but isn't a fire and isn't a medical call

New comment by mixdup in "Someone on Torrent Sites Kept Fucking with My Sonarr"

mixdup — Fri, 16 Oct 2026 12:56:17 +0000

>It even grabs your Sticky Notes for WHAT????

Because people very VERY often will stash passwords/account numbers/other commonly needed secrets in Stickies

New comment by mixdup in "ASML's strong orders ease fears AI spending boom is running out of steam"

mixdup — Wed, 14 Oct 2026 18:33:50 +0000

ASML's order book is way way way at the tail end of where the signal of the bubble's bursting will be felt

Users sign up for Claude, Claude buys more compute, AWS/Azure runs out of capacity, Microsoft buys 10,000 acres in Virginia, Microsoft places order for a million GPUs from NVidia, Nvidia places order for a hundred million GPUs from TSMC, TSMC buys 1,000 acres in Arizona, TSMC places an order for a bunch of new ASML machines

Yes, the end of that chain is the one I'm goin to watch to know when the bubble has burst, not the beginning of it

New comment by mixdup in "Google is silently linking your phone number across all signed-in accounts"

mixdup — Wed, 14 Oct 2026 18:29:34 +0000

Having two phones is more common than you think, and has a very plausible explanation even if it's not true for the particular individual: One is my work phone, issued by my company, other one is mine

That happens all the time

New comment by mixdup in "Passkeys are not a trap"

mixdup — Wed, 14 Oct 2026 18:16:57 +0000

I'm sure they exist but I have yet to come across a service that both removes the ability to also use a password when you register a passkey and also has no other recovery methods if your passkey (and/or password) become unknown or unavailable to you

In theory if I locked down my Apple account with the advanced protection features that are optional, I could lock myself out, but it would be on me to save recovery codes/secondary passkeys/etc during enrollment in those optional configurations

Otherwise, I'd walk into the Apple Store and they'd be able to get me back in my account if I didn't have some alternate method to get in

New comment by mixdup in "Passkeys are not a trap"

mixdup — Wed, 14 Oct 2026 18:13:54 +0000

I don't need to, I'm not bouncing around password vaults with the frequency of a cheap HAM radio. I've skimmed over announcements of the feature becoming available in a product or two

New comment by mixdup in "Passkeys are not a trap"

mixdup — Wed, 14 Oct 2026 18:12:27 +0000

I cannot possibly game out all future adverse design choices that a vendor may make. Today, October 14th 2026, Passkeys offer more upsides to me than they do downsides, so I use them

If a particular app vendor or website changes how they accept or use Passkeys, then I won't use them for that app or site. If my computing platform vendor(s) make it harder or worse to use Passkeys then I'll bail out

There's a lot of what-ifs in every decision, and I cannot possibly nor would I want to, figure out 82 steps ahead in 4-D chess how company X may try to screw me over

New comment by mixdup in "Passkeys are not a trap"

mixdup — Wed, 14 Oct 2026 15:46:25 +0000

As long as they didn't turn on the advanced protection features on their account they just go to the Apple Store who can help them get back in

New comment by mixdup in "Passkeys are not a trap"

mixdup — Wed, 14 Oct 2026 15:45:31 +0000

What's the difference between using a really good password vs. public key authentication in SSH?

New comment by mixdup in "Passkeys Are Not a Trap"

mixdup — Wed, 14 Oct 2026 15:41:50 +0000

Okay? At some point mail applications didn't support IMAP, because it was new. Was IMAP bad because it forced POP3 clients to build new support that they didn't previously do in order to support the improved functionality?

OAuth wasn't about lock-in (since any client can support it), it was about getting off shitty legacy auth

New comment by mixdup in "Passkeys Are Not a Trap"

mixdup — Wed, 14 Oct 2026 15:40:18 +0000

Is that the same thing we're talking about here? That sounds like a CAPTCHA, not Passkeys. I mean iOS isn't doing attestation in Passkeys, I'm sure there's some thing on the phone that it's doing that is a version of attestation

New comment by mixdup in "Passkeys are not a trap"

mixdup — Wed, 14 Oct 2026 15:38:53 +0000

Well, at that point I'll figure out what to do. I can't live my life constantly working around bad design that doesn't actually exist yet

New comment by mixdup in "Passkeys are not a trap"

mixdup — Wed, 14 Oct 2026 15:37:38 +0000

Well, they're synchronized to my Apple account so that's not an issue. They're available on all of my Apple devices, or even ones I don't have right now that I log into in the future

Plus, none of the sites that I use passkeys for would I be locked out. They all have account recovery procedures just like if I forgot my password. And, finally, for the important ones like my Google account (where my email lives) I have other non-Apple devices like a Yubikey setup as additional Passkey/FIDO authenticators

New comment by mixdup in "Passkeys are not a trap"

mixdup — Wed, 14 Oct 2026 15:34:44 +0000

It's fairly easy to export/transfer passkeys (I think, I've never actually done it)

Also, many if not all of the sites I've got passkeys setup with support multiple keys, which I sometimes take advantage of. For example I've got a passkey into my Google account in my Apple account ecosystem but I also have a physical Yubikey setup as a Passkey device, in case I were to get locked out of my Apple account

New comment by mixdup in "Passkeys are not a trap"

mixdup — Wed, 14 Oct 2026 15:30:55 +0000

Just don't setup biometric authentication on your device, then? You don't have to use FaceID to unlock passkeys in iOS for example