News for hackers. Stuff that matters.

Ugohcet

Re:I Use Zip Bombs to Protect My Server on Wednesday April 30, 2025 @05:38AM (#43842956)
Why use squashfs when you can do the same OP did and serve a compressed version, so that the client is overwhelmed by both the uncompression and the DOM depth:

yes "<div>"|dd bs=1M count=10240 iflag=fullblock|gzip | pv > zipdiv.gz

Resulting file is about 15 mib long and uncompresses into a 10 gib monstrosity containing 1789569706 unclosed nested divs

Re:Why does Cloudflare Pages have such a generous Free tier? on Wednesday January 15, 2025 @04:55PM (#42717677)
The thing with ISPs is the small guys are more likely to have to pay, and the smaller you are the more likely you are to pay more.

If you are a Tier 1 ISP, everyone is willing to pay you to carry their traffic and other Tier 1s just make peering agreements with you.

If you're johnscheapvps.com, you're likely to pay all your upstream ISPs for your traffic. If you're GCP or, say, digitalocean.com, everyone would love to be paying you to get faster access to all the sites hosted on your platform (and because paying you is probably going to be cheaper than their regular upstream)

Re:DOJ will push Google to sell off Chrome on Tuesday November 19, 2024 @03:33PM (#42187803)
There is much more Android phones, tablets, TVs, Linux routers and other gear sold every year than Intel-based PCs with ME, so the articles' claim may need narrowing to "OS used in PCs" and even that has a chance of being wrong, given how AMD is doing these years.
You don't. This is basically a clock display with extra knobs and dials. It doesn't have any sensors or inputs except 1sec pulse.
Re:Rotz: Cross platform dotfile manager written in Rust on Monday April 08, 2024 @04:20PM (#39973298)
I also don't get these, but for another reason: why write a dotfiles-specific configuration management tool with templating, conditions and all of that when we already have proper SCMs like salt or ansible that perfectly scale down to a single user and a small number of configs, but are still orders of magnitude more powerful when you need it.
Re:Swing VPN app is a DDoS botnet on Monday June 19, 2023 @08:21AM (#36390230)
At that point, I believe Mullvad (who is actually behind Mozilla VPN service) is more trustworthy than Mozilla themselves. And if that is true, why don't just use Mullvad directly?
You don't. I almost always use termux with virtual keyboard and it feels fine for doing something quick and on the go. Modal UIs (like vim) work better than modifier- and functional keys-heavy though.
(Termux will appear on the left side bar beside "Internal memory", sd cards and google drive)
You can use any file browser that supports android's document api to browse termux's filesystem. If you are using something like samsung oneui it can't do that, but you can install Anemo and use its shortcut to open android's default "Files" instead of samsung's
Re:FarPlay: Low-Latency Audio over the Internet on Thursday November 25, 2021 @12:42AM (#29338540)
You probably should try to do it old analog style: just plug your microphones into each other’s PCs and set up soundcard's mixer to add mic input into the mix
Re:Signal not in compliance with new rules, say officials on Thursday June 24, 2021 @09:46AM (#27617296)
Signal can pull a Durov and start hopping popular cloud hostings and CDNs, pushing latest server IPs via FCM. This worked for a year in Russia - they banned several large subnets of AWS and DigitalOcean, millions of IPs and smaller subnets, temporarily banned Google, but in the end still gave up after a year.
Re:K6: Like unit testing, for performance on Saturday November 28, 2020 @01:55AM (#25235844)
In their documentation ( https://k6.io/docs/ ) they claim that

> JavaScript is not generally well suited for high performance. To achieve maximum performance, the tool itself is written in Go, embedding a JavaScript runtime allowing for easy test scripting.

How is it possible that pure go JavaScript interpreter (goja) with bindings for net/http and some reports would be faster than the same tool written in nodejs using its http-client (which if I remember correctly is written in C)?

I don’t mean to downplay the importance or usefulness of k6, I just find their reasoning behind choosing go somewhat contrived

Re:Shirt Without Stripes on Monday April 20, 2020 @12:33PM (#22925506)
Google started doing that with its regular search queries several years ago. There are thousands of complains on HN about how it's almost impossible now to find anything without "quoting" "every" "word" "of" "your" "query".
Re:Shirt Without Stripes on Monday April 20, 2020 @12:29PM (#22925458)
I would prefer results containing words "shirt", "stripes" and "without". I don't want search engines to freely interpret my query and guess what I probably wanted to see while burying exact results in hundreds of pages of useless garbage.
Here is an interview with one of the survivors: https://meduza.io/en/feature/2019/05/07/i-was-the-last-one-w...

TLDR: news about passengers taking luggage and blocking the evacuation are probably fake, most of the people who died couldn't evacuate because they died from CO-poisoning in seconds.

For those who prefer not to learn another configuration management system just for dotfiles but already know salt, here is a masterless salt template for dotfiles: https://github.com/stiletto/salt-dotfiles-template