News for hackers. Stuff that matters.

NSAID

Re:The unattributable “db8151dd” data breach on Friday May 15, 2020 @02:55PM (#23195920)
I use Firefox with numerous tracker blockers and only had to hit the checkbox.
Re:Lidar: Peek into the Future with iPad Pro on Thursday April 16, 2020 @01:56PM (#22891851)
I live in a large midwestern city. They aren't common by any means but they definitely exist. I'm sure more expensive properties are more likely to have features like this but I've seen starter homes in the mid $100k with scans.

They really helped me as a buyer and while I don't know what they cost, I think I'd spring a couple hundred dollars to have it whenever we sell our house.

I think the biggest problem is that as a seller, I want qualified leads, but I get the feeling realtors just want leads because there's always another house. This mis-alignment of incentives means that in my experience listing agents don't always want to take steps that would limit foto traffic to a property, even if it would be excluding parties that probably wouldn't buy.

>The team managed to send information from one chip to another instantly without them being physically or electronically connected

Doesn't current quantum teleportation require optical connectivity because the state transfers along photons?

The abstract says

>Here, we report the demonstration of chip-to-chip quantum teleportation and genuine multipartite entanglement, the core functionalities in quantum technologies, on silicon-photonic circuitry

So while there may not necessarily be a phsyical connection this does require line-of-sight by my read, and "silicon-photonic circuitry" sounds like this is all on one physical board.

I guess I don't understand how this is "two different chips" as the article claims. Did they use two photomasks? Baby steps, I suppose.

Re:Netflix's UX design is keeping people up at night on Friday December 27, 2019 @11:29AM (#21892206)
This is an interesting thought. Over the holidays I've been watching my TV than I would during a normal week and I've noticed that my time in front of the screen is much different when there are commercials (forced 2 minute breaks) than when there are not commercials.
Re:Sonos smart speaker controller API and CLI written in Rust on Tuesday October 01, 2019 @01:26PM (#21128045)
I own a couple of these. Because it has multiple options for virtual assistants, nothing is running out of the box as it wouldn't know which account to use or what service to route to. You have to go through an additional setup process after setting up the speaker for music playback.
Re:Don’t Put Your Work Email on Your Personal Phone on Wednesday July 24, 2019 @09:37AM (#20515105)
> When you add a work email address to your phone, you’ll likely be asked to install something called a Mobile Device Management (MDM) profile. Chances are, you’ll blindly accept it. (What other choice do you have?)

I use the Nine mail/calendar app[1] to keep all that contained. It integrates nicely with the native Android apps but keeps all of the security and control options within Nine itself. It looks like they are also beta testing an iOS app but I have no experience with that version of it.

For example, if the mail account security settings require a screen lock code, Nine will require a code to access the app but this won't affect the actual phone's unlock screen.

Similarly if a data wipe request is sent from the server it will only affect Nine.

[1] https://www.9folders.com/product/

It protects against the 'Silhouette attack"

Original research paper: http://www.ntt.co.jp/news2018/1807e/180718a.html

Twitter Blog: https://blog.twitter.com/engineering/en_us/topics/insights/2...

"A website can request a page from Twitter in the background with JavaScript using standard browser APIs. That request will be made using login credentials (stored in cookies), so if you're logged into Twitter, that request will be made as you.

Our site implements common CSRF protections on POST requests to prevent actions being made on your behalf (for example, being able to send a Tweet). The browser also enforces a number of limitations on cross-origin requests for security reasons. For example, another origin cannot read the response content. However, the requesting page is able to determine how long the request took to load.

This timing data will only reveal information if the response times can be manipulated into result based on a specific user. Generally, your page load time will depend on the Tweets you're viewing, and these aren't easy to predict.

However, when you are blocked by another user, we prevent you from being able to load their profile page, and just show a basic empty page. That page is much faster to load than a profile full of Tweets.

In our tests, profile page load times reliably dropped from around 500ms to about 200ms. In this way, one user can affect the page load time of another user viewing a specific url."

Re:Ask HN: What do you do with your Raspberry Pi? on Monday June 24, 2019 @05:05PM (#20268466)
The infinite zoom project is really interesting. I'm shocked that it never got picked up! The use cases you describe sound incredibly obvious for big events.
Re:I Made a Deal in a Bike Race on Monday May 06, 2019 @03:31PM (#19842904)
This same race was a topic in a recent episode of the This American Life podcast

https://www.thisamericanlife.org/668/the-long-fuse/act-three...

Re:The latest on Messages, Allo, Duo and Hangouts on Thursday December 06, 2018 @11:10AM (#18619211)
Same result on current Firefox with Windows 10
Almost perjury. There's a good faith clause, so if someone believes in good faith that their magic black box AI correctly identifies their IP and never issues incorrect takedowns, it's not perjury.
OnePlus includes a nice, simple Android setting to require your security PIN/figerprint/etc for any app.

https://www.techrepublic.com/article/how-to-use-the-oneplus-...

Re:Introducing Android 9 Pie on Monday August 06, 2018 @02:22PM (#17700138)
> Samsung Pay (works on credit card readers)

I hadn't heard of that before. That's pretty cool.

"Magnetic Secure Transmission (MST) is a technology that emits a magnetic signal that mimics the magnetic strip on a traditional payment card. MST sends a magnetic signal from your device to the payment terminal's card reader (to emulate swiping a physical card without having to upgrade the terminal’s software or hardware)"

https://www.samsung.com/us/support/answer/ANS00043865/

Re:Introducing Android 9 Pie on Monday August 06, 2018 @02:19PM (#17700115)
I was pulling for (unbranded) Petit four

https://en.wikipedia.org/wiki/Petit_four

Not in the US. I've received one or two important letters from the IRS (that is, I unintentionally owed them money) that arrived via regular post. I'm not sure if that speaks to the reliability of the USPS or a lack of imagination on the IRS's part (or maybe the government trusts the government postal service?). Certainly people and businesses do use registered and certified mail, but not everyone.
It'd be even better if my user agent could simply indicate my acceptance (or lack thereof) for me
Re:Special-Use Domain 'home.arpa.' on Thursday May 17, 2018 @02:19PM (#17093942)
Not the case.

> In response to the report, ICANN labeled the .home and .corp strings as "high risk" and proposed that neither of the strings be delegated until it could be proven that risk is low. These two strings are currently severely delayed and some community members guess they may never be delegated.

https://icannwiki.org/.home

Re:The days of .dev domains for testing code are over on Wednesday December 06, 2017 @01:15PM (#15863416)
Yeah, fake domain names and TLDs are an issue with Microsoft sysadmins in regards to .local. I aggressively move environments away from using anything half-baked like ".dev.", and while some people like ".local", I'm not a fan. Ignore the spec at your own peril.

https://en.wikipedia.org/wiki/.local#Microsoft_recommendatio...

Use m.facebook.com. The mobile site has "Reply" buttons next to the comment text fields.
Re:Ask HN: How to manage bookmarks? on Wednesday July 26, 2017 @05:28PM (#14860534)
Liberally tagging bookmarks with http://www.pinboard.in/ and going through the list once a year to prune
Wow, I had forgotten about that. I never understood what the cause of this issue was either, but it sure took up a lot of my time.
Re:How to shoot on iPhone 7 on Friday May 12, 2017 @09:38AM (#14323839)
2013 Moto X here, too. I recently replaced the battery and it's been great to get through a full day again, but I'm nervous about the day when this thing actually dies. I'm looking for something with those 3 requirements as well, and it's incredible how few options there are.
Re:Ask HN: Who is hiring? (April 2017) on Monday April 03, 2017 @01:30PM (#14024995)
It looks like you might be picking up the word "remote" from descriptions instead of the heading and then incorrectly showing those jobs as remote positions. For example, https://news.ycombinator.com/item?id=14023471 https://whoishiring.io/s/hn14023471
Re:America's Reverence for the Bachelor's Degree on Monday March 13, 2017 @01:13PM (#13859895)
Wisconsin's university system, for one.

https://flex.wisconsin.edu/

Re:Ask HN: Who is hiring? (March 2017) on Wednesday March 01, 2017 @05:33PM (#13769219)
Happened to see this on Stack Overflow this morning and sent in an application there before I saw it here. Having lived in Rockford several years ago, it's very cool to see a solid tech company in the area.
Re:Bringing Wide Color to Instagram on Monday January 09, 2017 @04:04PM (#13359771)
Same.

Here's the link from the article with the download flag removed:

https://www.dropbox.com/s/tgarynpj65ouafd/insta-logo.png

Older »