Hacker Newsnew | past | comments | ask | show | jobs | submit | alexfoo's commentslogin

I sat a similar test at the start of my ADHD diagnosis (in the UK for reference).

The one I did (QbCheck) was a similar setup but you were presented with shapes on the screen, either a square or a circle, and either blue or red. All you had to do was press the spacebar when the shape on the screen was the same shape and colour as the previous one. No sound distracitons (or maybe I just had the volume muted.)

You also had to do the test on a laptop with a forward facing camera so the software could track eye movement.

I remember starting the test and thinking "This is exactly what my brain is wired for, I'm going to be awesome at this test!"

Within a minute my mind had already moved on to "I wonder how they score this test? I guess they're looking at accuracy, reaction times, how those trend over time, whether the accuracy/reactions goes up/down if they show the same shape/colour more than twice in a row?" etc...

It didn't take long for me to then get jolted into a "wait, did I just zone out a bit there and miss one?"

Then I became overly conscious of my eyes wandering around and not looking at the screen.

Then my mind moved on to "what if I'm too good at this and it means I won't get a diagnosis?"

Soon it was "When will this ever end? This must have been going on for ages!" only to find it had only been about 3 minutes.

The test took 20 minutes or so and I was mentally exhausted by the end of it.

My actual ADHD diagnosis was backed up by an 80 minute interview, basically doing the DSM-5 questions but linking it all back to childhood experiences too. I've no idea how much weight the QbCheck test had.

Glad I got the diagnosis, I've been masking both for years (diagnosed in my late 40s) but just got burnt out doing so. Medication helps but isn't perfect and since I'm probably AuDHD I find the ADHD medication amplifies some of the Autism traits and makes me into a bit of an emotional zombie, but that seems to be better than having zero motivation (aside from stress/deadlines and serious consequences).


> ... my understanding is that in Europe it's virtually unheard of to have an adult diagnosis.

Can't speak for the whole of the continent but UK here and I got my ADHD diagnosis a few years shy of 50 years old. Wasn't tricky at all, just a long-ish (8 month) wait for a non-private diagnosis (not full NHS but via an outsourced provider via Right-To-Choose).

When going through the DSM-5 questions (during an ~80 minute interview) I was asked to give examples from both current life experience and from childhood, and that was enough.


Honestly it's really gratifying to hear that people around the world are getting the help they deserve, thanks for sharing.

It works both ways though.

The traffic was separated so that anything on the public hotspot was not attributed to the private subscriber network.

Secondly for years I lived somewhere very remote so that meant that hardly anyone ever got to use my broadband connection via such a hotspot, but I got to use hundreds of other peoples hotspots when I was somewhere less isolated.

I was quite happy to opt in to this system as I benefitted hugely from it.


A bit into tinfoilhat territory but just because they don't advertise that they have an 802.11 radio doesn't mean the devices can't have one. Or an LTE/4G/5G radio.

If the user data is worth that much then I wouldn't be surprised if some manufacturers put such radios in their non-smart TVs in order to try and gather such data.

I live in a densely populated part of a large UK city and (checks `nmcli dev wifi list`) there are 14 distinct wireless networks near me that aren't mine. There's a good chance that any IOT device could find something nearby, and there's even a whole load of LoRa nodes that it could use for a very slow uplink.


I think they'd have to have some FCC boilerplate on the outside if the device had a radio?

[edit: or whatever UK FCC would be]


I'm just wondering when 5g or 6g will start getting iot devices online without consumer intervention.

search for 5g miot or 5g redcap or 5g mmtc


They didn't. Sounds like they gave the robot an AWS key from an account that was already linked to a credit card.

The robot decided to spin up an expensive setup prior to getting access, so the setup was sitting there costing money whilst it did nothing.

If it had designed the setup but not spun it up until it had authorisation to join the network then it would have been much less costly an exercise.


AWS and Azure stress on spending limits you can set for each card... in their documentation !

Some gen AI and ML folks seem to see a way out to make things without reading any doc or scientific literature. Gen AI is a pretty clever bit of computing, but not witchcraft yet


That is false for AWS. There are no spending limits that stop usage and cost after some threshold.


oh my bad, thanks for the info

AWS Budget can mostly notify you indeed, and terminating instances from that isn't as straightforward as on Azure


It all comes down to where the boundary for data access is implemented, and how strictly.

If your webapp has unfettered database access then don't be surprised if it is hacked and someone can do `select * from users` and then posts that dump somewhere.

The attack surface changes if your webapp can only do a REST call to pull a single user record at a time. That way you can put some auditing in, you can put rate limiting in to detect that, etc.

Obviously the user record REST api endpoint is still vulnerable, but it's a much smaller attack surface, easier to audit, and can be monitored a lot more closely.

Yes, ultimately, there will still be a set of vulnerable humans that have access to the database servers themselves and they can always walk out of the place with an SD card hidden in a Rubik's cube but there has to be an element of trust somewhere.

The problem is that too many people put that trust boundary way too far out into the big bad Internet. Or don't even consider it at all and just rely on the fact that other targets are more appealing.


There are layers of understanding about security and people assume they are doing best as per their knowledge.

Databases (SQL) have concept of views, restricted access going all the way to column level.

Connections can be restricted from firewall itself.

One can have MTLS connections with database on the top of it to beef up security.

Unfortunately the generation of people who knew and did all this is just considered friction and has been made obsolete.


Plus addressing (or movable periods in gmail addresses, etc) is increasingly pointless for a whole host of reasons.

It may keep out the bottom x% of spammers/hackers but it doesn't do much for the increasingly sophisticated scams that are appearing.

If the bit before the + ends up in your inbox anyway then it'll just get stripped off and used. Spammers seeing this kind of thing across several breach dumps:

bob+trello@example.com, bob+spotify@example.com, bob+chase@example.com

and will leverage that to target spam at you for other sites, or just email bob@example.com as there's a good chance that'll get through.

Years ago I did a test with my own domain where I created who unique aliases with plus addresses, e.g. steve.smith+iawer@example.com, bob.jones+wpoqe@example.com

It didn't take long for emails to start arriving to steve.smith@example.com and bob.jones@example.com even though that email address had never been used anywhere ever before.

As others have said, you're better off just creating unique emails with `pwgen -s 16` such as wmR5pNhGI8yidU7N@example.com and storing that in your password manager alongside a similarly random password. (Yes, this is roughly what those unique email address services provide.)

Also many services/sites/providers simply assume the username is immutable. $DEITY forbid you might have to change your email address at some point in the future.


Can confirm it's free. I tried it based on the GP comment. There are various ways to prove it is your domain: token sent to one of a small number of email addresses like {admin,security,webmaster}@, DNS TXT record, place a small file in the root of the website, etc.

The only extra bits I saw for the other emails on my domain was a plus address I'd used for last.fm which had been leaked. None of the other emails (wife, kid, family, etc) appear in any breach.

I'm slowly moving away from using my own personal domain as it's becoming an ever increasing burden. I'm also concerned that my wife/kid will be left with something they may not have access to, or would stop working at some point, if I suddenly dropped dead.


Someone in the house pressed the button to update the printer (Brother DCP-L3550CDW) firmware and the CSV page that was the basis for an existing Prometheus exporter (drum/toner lifespan, page counts, etc) stopped being a thing. Instead there was an HTML page with all of the information buried in various divs/etc.

I'd planned on writing something myself to parse the HTML and write a suitable exporter but I thought I'd give Claude a chance.

In a sandboxed VM I gave Claude a single static HTML file of the status page from the printer, also in the directory was the equivalent of "hello world" in Go, literally just the minimum needed to do `fmt.Printf("OK\n")`. The directory was called `brother-exporter`. That was it. No other instructions or information. I hadn't told it what it needed to write. I hadn't said what it should do. I hand't told it what language it was supposed to use.

Just by doing a `/init` in that directory Claude decided that it needed to write a Prometheus exporter in Go that would fetch and parse the HTML file from a printer (defaulting to 192.168.1.1) and then present the associated metrics in a way that they could be scraped by Prometheus.

It did this flawlessly in about 10 minutes.

I could have done it in several hours but this was definitely an "oh shit" moment for me. I think the biggest thing was the fact that it guess/assumed so much (correctly) from so little information in the beginning.


Dave Eggers' novel _The Circle_ (2013) is looking more and more prophetic every day.

https://en.wikipedia.org/wiki/The_Circle_(Eggers_novel)


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: