4oo4

JSshelter looks cool, I'm not familiar but this makes it seem like it operates more like resistfingerprinting by blocking outright instead of noise injection, at the expense of more broken sites?

https://jshelter.org/fpd/

What all security extensions do you run? After running into issues over the years, with extensions doing multiple things that fight each other, I switched to trying to block via ublock origin as much as possible, then prefer other extensions to just do one thing to extend coverage, like this one. Makes it much easier to troubleshoot/exclude/disable when it breaks something vs. fiddling in settings.

I tested this extension that I've been using for a long time on the turnstile page and it got through, fwiw. I think it's a bit more subtle than how resistfingerprinting works but not sure what the privacy tradeoff is.

https://github.com/kkapsner/CanvasBlocker

From personal experience:

- Don't tense up and play the most relaxed you possibly can. it's very hard to unlearn if you start off that way like I did

- Be kind to yourself since playing guitar is an unnatural thing to do (wrist position, hand strength required, calluses, etc.), so it takes time.

- Play along with songs as much as possible. Slow it down if you need to or just do a simplified version at first, and just focus on improving/learning one thing each time you play. This is also a great way to get comfortable with improv.

- If you're struggling with something, break things down to the smallest possible parts you can, play it really slow and repeat, until your muscle memory takes over, then slowly speed it up and put it back in context.

- If you're playing an electric, turn the volume up enough and let that do the work instead of your picking

- If you catch yourself noodling instead of playing consciously, stop playing. It's OK to noodle sometimes but if you do it a lot you'll get used to going on autopilot and your skills can plateau

- Don't be afraid of the upper fretboard. You can play super slowly up here and as long as you can at least fake being confident/intentional it'll sound nice. If you have smaller hands and have trouble with stretching your hands on lower frets, this can work to your advantage.

- You can get a solid guitar for $400-500. Spending more money up to about $2-3k will get you a nicer guitar, chasing that extra 1% of tone and have a nicer feel in your hands, but it's diminishing returns the more you spend.

- Same with pedals. Yes you can spend lots of money on fancy/unique pedals, but there's nothing wrong with sticking to cheap ones, especially Boss. A lot of great 80s/90s music was recorded with them, and bands frequently use the cheaper/commodity ones while touring instead of fancy boutique ones.

- Per Nile Rogers: "It's not about the shit you play, it's about the shit you don't play" (especially for funk stuff)

- Also for funk (and post-punk and experimental) stuff, a guitar is also a percussion instrument if you want it to be.

- Once guitar playing gets to a certain level of virtuosity (Steve Vai, IMO), it paradoxically can become extremely boring. Playing simply but with the right emotion channeled into your picking hand is much more interesting than super technical stuff.

- Related, remember that Bill Withers was in his 30s when he started making music and chose a very simple way of composing things, but was still able to do amazing things

Someone already found this years ago:

https://www.youtube.com/watch?v=XfcvX0P1b5g

I haven't read the full article yet but I'm guessing they didn't give credit, as the New York Times tends to do. Not definitive but it's a very convincing case.

Yes and no, in this case you don't need a local vscode instance to connect to your vscode container, just a browser. It's more similar to self-hosted Github Codespaces, and but I believe code-server was actually released first.

Personally I've fiddled enough with podman that that part of it doesn't bother me, and I don't like Docker/Podman desktop (which I think is what devcontainers assume the setup is) and just want to use the docker/podman daemon/cli, so that's something I also don't want to have to mess with. I know you can also point devcontainers at a remote or local docker daemon, but that means giving it full control of the daemon, which is a nonstarter and too risky for me from a security standpoint. I really like to have my podman containers really locked down in terms of capabilities, userns, gvisor, etc. and given that it just wants full control of docker I'm guessing it takes none of that into consideration (or, painful to try and graft on).

I also really don't trust VSCode's remoting protocols (especially remote tunnels, which is basically just a reverse shell). So for me it's a matter of having more control over container runtime security (the docker/podman ecosystem usually treats it as an afterthought in favor of convenience, and devcontainers appears to be no different), and it doesn't depend on anything on my machine I'm accessing it from. Since VSCode just a becomes another self-hosted web app this way, it's pretty much the exact same experience no matter where I'm connecting from.

code-server, instead of VSCode. I can build my own podman image on top of it with whatever dev tools I need for whatever languages I'm working with, and if I have to install something weird or something breaks I can just restart the container. Especially on my work machine that isn't Linux, I have this running in a VM and can just use in my browser and don't have to jump through hoops to get the dev environment I want. On my personal instance I also use it for automating building stuff from source. Before I had this, I just had build tools on pretty much every single machine I was building for and it was a hot mess.

https://github.com/coder/code-server

I had actually never heard of Nginx Unit, sadly looks like it's unmaintained now.

https://github.com/nginx/unit

Here are people documenting what they had to do for this, in both cases it necessitated the use of Faraday cages:

https://downrightnifty.me/blog/2025/02/27/eu-features-outsid...

https://lagrangepoint.substack.com/p/airpods-hearing-aid-hac...

what's the fork that you use?

I haven't seen it mentioned in the release notes, but if I'm understanding correctly there's no separate rt kernel now because PREEMPT_RT got merged?

From experience having an L2ARC SSD, especially if it's nvme, can really help with zfs performance. I'm curious if they have that in their setup.

I feel like they had to have read this and added that out of spite.

https://velvetshark.com/ai-company-logos-that-look-like-butt...

Wouldn't hosting a service to facilitate others' use of the exploits fall under CFAA? Since there have been numerous arrests for those hosting Ransomware-as-a-service, DDOS-as-a-service, etc. Just curious whether there is a legal nuance that prevents them from being criminally charged instead of just politics/diplomacy.

Have you tried opening the .exe with 7-zip to see if there are .inf (and I believe .sys files that go with) that you can extract?

If you do a search for the word rape, there are tons of discussions about it, so it's definitely not categorically off topic. I'm going to email [email protected] per the FAQ since the way this keeps happening feels abusive and against the spirit of HN.

Unlike other stories critical of Sam Altman, it's very suspicious the way this is so quickly and systematically downvoted and flagged every single time it's posted.

This happened the last time this was posted too. Sam Altman deserves the right to defend himself in court as does Ann to tell her story (who personally I believe).

https://news.ycombinator.com/item?id=37785072

The good news is that with the lawsuit it will be in the news more and much harder to silence, maybe at some point we can have a proper discussion about it on HN without people (or more likely bots) trying to memoryhole it every single time.

That's a consequence of growth they should have thought of and a basic part of running any business.

At least in the US Attorneys General are being forced to do this work for them. It's essentially the only way to get a hacked Facebook/Instagram account recovered.

https://www.engadget.com/41-state-attorneys-general-tell-met...

This is missing portant info. Nowhere does it say what the fixed package versions are, this is crucial for auditing whether you are fully patched.

Git Bash is really nice for when I want a unix utility that will do the job simpler and better than Powershell, however it's painfully slow for larger I/O operations.

I end up barely using it on my Windows 11 work machine because I'm allowed to have Linux VMs. Even with the VM overhead, and having fewer CPU cores and less RAM than the host, things still end up being way faster there.

I remember one time running a grep command on a large-ish (~ 1 GB) log file in Git Bash and waiting at least 5 minutes for it to complete. After getting impatient I did the same thing in a VM and it took about 30-45 seconds, at which point Git Bash still had not finished.

The discussion of container security is completely lacking any mention of userns remapping, which is an excellent container security feature that's extremely easy to enable and use compared with AppArmor/SELinux (and would work extremely well in parallel with them).

That way if someone does manage to break out of a container they have the privileges of a dummy user that doesn't exist on the host, so unless they are using a kernel exploit, they don't have any privileges to be able to do any damage.

https://docs.docker.com/engine/security/userns-remap/

You can make "disposable" razors last a very long time by rubbing them on a piece of old denim in between shaves. Most of the wear on razors comes from oxidation from air and water vs. cutting hair. I believe doing this helps remove the oxidated spots. This means I can make a pack of them last 12-18 months, and I only need a new razor when the plastic/silicone housing and pads break.

Reading the other comments I should still probably invest in a more permanent razor though.

Actual DNS services are still working but trying to log into my.nextdns.io gives an HTTP 429

EDIT: Up now

If you have concerns about having to potentially put down a pet, find an at home euthanasia vet, IMO it's the best way to deal with this process. Having animals be able to see and smell the death happening helps them understand, you don't have to worry about transporting an animal in rough condition, and having them in a familiar environment when it happens makes it far less stressful for them. Last year, I had planned to have my dog put down a few weeks after his health started really declining, but when it was obvious that he was in unbearable pain, the vet agreed to come out later that day, on just a few hours notice, no questions asked.

The dog was very closely bonded to my two cats (who themselves are a bonded pair of litter mates) and having the dog euthanized this way allowed the cats to understand what happened. They were pretty distraught afterward (as was I) but weren't looking for him around the house. Their personalities changed in that they were more stressed out when I had company at the house, and didn't really return to normal until I adopted another dog about a month ago that they were able to bond with in a really similar way. Because of how closely the cats are bonded I definitely will need to use one when the time comes for either cat.

I really don't know how someone could deal with putting down animals all day, but if you can find a good one they are fantastic. In addition to helping my cats, it definitely helped me process the situation way better than if it had been done in a sterile setting at a vet's office.

This makes me really miss the Stupid Shit hackathon, this seems like a perfect project for it.

https://stupidhackathon.com/

I've had really good results with Python's pdfminer.six, it's also very easy to use.

https://pypi.org/project/pdfminer.six/

Is there any good data out there about the cracking speeds against argon2? I was disappointed that I didn't see that mentioned along with the other memory-hard algorithms, good data on that seems to be really hard to find.

Not sure what you mean, 0.27.0 was released on f-droid last week, same as the latest github tag:

https://f-droid.org/en/packages/org.schabi.newpipe/

Having custom f-droid repositories isn't that unusual or necessarily malicious. For example the microG project has its own f-droid repo. iirc there's some overhead with getting something into f-droid since they have their own build process, versus just uploading an APK, which might be why they chose that.

https://microg.org/download.html