Tomdarkness
Tomdarkness on Hacker News
What kind of leverage do these browser CA programs have with eMudhra given they are no longer issuing TLS certificates?
If eMudhra just don't comply with Mozilla/Chrome, is there anything they can actually do?
It's a upstream targeted fix that was made available significantly faster in packages/images maintained by volunteers, it's not some untested downstream patch. Customers at this point would have likely taken their applications offline over this issue so it would have been difficult to make the situation any worse.
If this is only a retrospective find then they should make it more clear, from the blog it reads to me as promoting their MadPot tool for detection pre CVE disclosure:
"Subsequently, from 2026-10-21 0200 UTC to 2026-10-21 0800 UTC, Amazon Threat Intelligence identified additional exploitation attempts of PHP2Shell targeting MadPot from additional anonymized infrastructure." (i.e almost 12 hours before the release of the patch)
"Invest in detections that don’t rely on a signature for a specific CVE. The first exploitation will often come before those signatures exist."
"We analyze over 200 billion events per minute and integrate threat intelligence from our MadPot honeypot network to identify and block known exploitation attempts in real time. Our honeypot system provides us with early detection of exploitation attempts, enabling rapid response and threat analysis."
So Amazon knew about this exploit and that it was actively being used several days before the release of any patches. Despite this they still took 18 hours AFTER the release of the patches to provide updated version of their Amazon Linux packages?
https://github.com/amazonlinux/amazon-linux-2023/issues/1148
I don't think this blog post is sending the message AWS intended...
The issue with text on OLED panels is typically due to the sub pixel layout, they tend to use different sub pixel layouts to traditional monitors which causes issues with subpixel rendering and can make text look blurry or have color fringing.
However, recently you can now get OLED panels from LG with RGB stripe sub pixel layouts (matching traditional monitors) which eliminates this problem and text should be just as good as an non-OLED display.
I'd be curious about this as well, I have one of these Logitech dongles and if I plug a USB3 device in the port next to it (say a SD card reader or external drive) the logitech device, my mouse in this case, becomes basically unusable due to the interference.
How are they even going to know if there is an airtag in someone's luggage? Are they particularly obvious on an x-ray or is there some kind of specialised detector?
As someone from the UK I'm a bit confused why he can't seem to get the college to pay him? If a court has ruled that the college has to pay how can they avoid this? In the UK if a company failed to pay a debt then ultimately you can apply to the court for a winding up petition which if they didn't resolve the situation the company would be liquidated by the court.
Personally with DP cables, especially if you're looking for a longer length cable or wanting to push a higher bit rate through it, then you're better off just spending a bit extra and getting a proper VESA certified cable.
Yeah, on the list on the article the only "modern major payment service" I actually recognised was PayPal and Alipay. I noticed that Rubles are mentioned multiple times in the article, perhaps the author is Russian. Is Stripe even available in Russia?
However saying that I thought PayPal had suspended operations in Russia.
I mean you can get pretty comparable counter top dishwashers for a similar price or even less that just use regular dishwasher detergent with no DRM features.
If you're looking for a KVM over IP for a hobby project with a Intel CPU you might want to first check to see if your CPU supports Intel AMT/vPro. If you enable this then you get a built in KVM over IP without any additional hardware/software. Once setup you can connect via a VNC client.
Not really sure the comparison is valid. TrueNAS uses Samba to provide SMB network shares.
The technical quality of Netflix originals is really high. One thing that annoys me though is for some reason despite having rigorous standards for the camera it seems a common trend through numerous Netflix Originals to use the Vantage Hawk V-Lite Vintage '74 line of anamorphic lenses. I guess it's a stylistic choice but it results is some (for me at least) annoying image distortion that can really distract from the show. They are literally described at claiming the flaws are a feature: "The Vintage’74 version has certain gentle aberrations and other characteristics that might be considered flaws by others but are welcomed storytelling tools for cinematographers"
You can see this is some example footage: https://www.youtube.com/watch?v=GhbRkoeNb9U
Note the distortion and blurred top and bottom of the image.
From what I understand after briefly looking into this earlier this month the issue seems to be basically NVIDIA want to push their own buffer API (EGLStreams) rather than use the buffer API developers are actually using (GBM).
If you use one of the "big" compositors like GNOME or KDE I believe they have sort of added EGLStreams support so you can use it on NVIDIA but it's not perfect. If you use a more niche one, e.g sway, then it won't work on the NVIDIA proprietary drivers because they don't support GBM.
There is some news recently that NVIDIA may be coming around and are in the progress of implementing GBM support in their drivers, but it's not confirmed.
You can also use the nouveau nvidia drivers but from what I understand the performance is trash in 3d applications using modern cards, it seems more orientated to supporting older nvidia cards.
8k seems... optimistic. The PPI of such a display would be off the charts. Not to mention the kind of hardware required to run such a device. The NVIDIA RTX 3090 can barely run a 3D 8k game at 30fps, let alone in 3D for VR.
What would you even connect such a device with? Displayport and HDMI wouldn't support two 8k streams.
If it's any conciliation personally I think you have the nicer car mechanically. The m240i is a rwd straight 6 with the legendary zf 8hp gearbox whilst the newer m235i is an awd 4 cylinder with some inferior aisin gearbox.
At $549 they better be rather impressive. The same amount of money can buy you some fairly high end conventional headphones.
Seems extremely expensive, especially the data transfer part. Just a quick calculation at $0.50/GB we would end up spending $10,000s in just data transfer costs vs $0 with AWS ECR (transfer within region is free).
Guess this would work out okay for storing some development images but definitely does not seem feasible for production use.
Unless I'm missing something? There's some fine print about it being free within the context of a github action, but this doesn't really seem clear. Does my fleet of ec2 instances pulling down the image after a new deployment count as within an "action"?
Despite having all of those requirements I still can't get 4k streams on my PC. All I've managed to find are rumours from unofficial sources that there's some issue with HDCP 2.2 when using displayport with certain monitors. Either way it's extremely convoluted. In fact it's vastly easier just to pirate the 4k version. I don't feel bad about doing this because I already pay for netflix.
I'm pretty sure you can't do it via the UI but if you use the API you can delegate access to any account in your organisation without confirmation. Once you've delegated access to that account you can then login as that user via the standard user switcher that appears if you have multiple accounts.
One thing I immediately noticed is that apparently it supports exporting full backups of the device? Surely this is a terrible idea? I'm far from a security expert but I'd have thought you'd want to make it so that it is extremely difficult to extract key material from a security key, not offer it as a feature?
Looks cool. Maybe I'm missing something though, but it's not really clear how you'd set this up? Is there a quick start or some examples of configs for different situations?
What's worse is the documentation straight up lies. It states you can perform a major version upgrade by resorting a snapshot and selecting a higher version. I mean it's still not ideal except if you do try this you'll find the option doesn't actually exist - either via the console or API/CLI!
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide...
This has really put us off using other AWS managed products and was a major factor in us deciding against using Amazon Elasticsearch Service.
Totally wish we could upgrade but for some reason AWS have still not implemented any upgrade path for Aurora PostgreSQL other than dump and reimport despite apparently working on it for a year...
From their post it seems like their SSL/TLS certificate is expiring? Seems rather overkill to discontinue an entire product in the first place just because of that.
The Yubikey 4 does a lot more than just U2F though.
You've been able to pay for Dominos in the UK via PayPal for years now.