News for hackers. Stuff that matters.

anowlcalledjosh

Re:Vim/Neovim Arbitrary Code Execution via Modelines on Tuesday June 04, 2019 @05:54PM (#20099638)
Presumably it's no more confusing than, say, a shebang is for Windows users.
Re:What's new in Ubuntu 19.04 on Thursday April 18, 2019 @04:41PM (#19694596)
Sorry, totally missed that. Looks like some other people have had similar issues with upgrading to previous versions: https://github.com/Microsoft/WSL/issues/3489 (though the issue is for (I think) 16.04->18.04, someone mentions that it also affects 18.04->18.10)

it's strange that that's all the output you get, though. Apparently it puts logs in /var/log/dist-upgrade/, is there more there?

Re:What's new in Ubuntu 19.04 on Thursday April 18, 2019 @03:18PM (#19693953)
Sorry, brain fart – you have to upgrade between non-LTS releases sequentially, as far as I know there's no supported way to upgrade to 19.04 from anything but 18.10. (in general, to get to release n, you must either be on release n-1, or n must be an LTS and you must be on the previous LTS.)
Re:What's new in Ubuntu 19.04 on Thursday April 18, 2019 @03:06PM (#19693852)
IIRC, do-release-upgrade won't upgrade between LTS releases until the .2 release.
Re:What's new in Ubuntu 19.04 on Thursday April 18, 2019 @03:05PM (#19693844)
Not exactly the same, but: https://whydoesaptnotusehttps.com/

tldr: if you verify the download against a trusted PGP key, it doesn't matter where the download actually came from.

Re:What's new in Ubuntu 19.04 on Thursday April 18, 2019 @03:03PM (#19693829)
One difference between ctrl-tab and alt-~ (or alt-`, depending on your keyboard layout) is that tabs within a window are very close to each other, and obviously distinct from windows in their own right, whereas it's frequently not immediately obvious whether two windows belong to the same application.
> Installing F-Droid is easy

but nevertheless harder than installing Netflix

> installing and managing apps through it is also easy

but updates are not automatic (unless you root)

I don't dispute that F-Droid is not terribly difficult to use, but the original statement that "It's easier to use than the Play Store" is obviously false as soon as you take into account the mechanics of getting it installed.

It also doesn't come preinstalled on any devices I'm aware of, which adds a significant amount of friction.

Even once you've installed it, it can't auto-update apps.

Re:Post-mortem of March 12 Google outage on Thursday March 14, 2019 @09:16PM (#19395581)
Re:Show HN: This Question Does Not Exist on Thursday March 14, 2019 @09:10PM (#19395542)
Likewise, I'm not sure I'd think anything was strange if I came across https://stackroboflow.com/#!/question/12110.
Re:Show HN: Random Wikipedia browser extension on Friday March 01, 2019 @07:52AM (#19280077)
That's from the "tabs" permission; I'm not sure why the extension requests it, as it doesn't appear that it's required by the code (the chrome.tabs API does not require it, you only need the permission if you're reading the URL/title/favicon of existing tabs AFAIK).
Re:The CPython Bytecode Compiler Is Dumb on Monday February 25, 2019 @06:32AM (#19244841)
Because it's not true! Threads in Python can muck around with the state of any other thread, at any time – it would be a language change to assume otherwise.
Re:lsix: ls for images on Wednesday December 26, 2018 @10:53PM (#18767159)
Probably not, see https://github.com/tmux/tmux/issues/44 (tldr: maintainer says no).

There's a fork that purports to add support, but it's not been updated for a while: https://github.com/yatli/tmux-sixel

Re:Google to Charge Phone Makers for Android Apps in Europe on Tuesday October 16, 2018 @06:56PM (#18234000)
Is this speculation, or sourced? The article seems to contradict you:

> Google said it would sell a license for a package including its Google Play app store, Gmail, YouTube and Maps. Another license will be available for companies that want to pre-install Google Search and the Chrome browser, allowing handset makers to team up with rival services. The company did not say how much it would charge for the licenses.

Although you can change your nick, you can't have a per-server profile picture, which may or may not be a problem for business use.
Re:Make a “Literary Clock” from a Jailbroken Kindle on Sunday August 05, 2018 @01:00PM (#17692211)
If you have a firmware 5 kindle (Touch, Paperwhite, Voyage, Oasis), see the screensavers hack thread on Mobileread:

> Dou you prefer to just show the last thing that was on screen, with an overlay indicating when the device's alseep? Just drop a blank file named last in the linkss folder. Restart your Kindle ([HOME] -> [MENU] > Settings -> [MENU] > Restart; or simply use the Screen Savers > Restart framework now button in KUAL), and you're done

from https://www.mobileread.com/forums/showthread.php?t=195474

Obviously make sure you read everything (really, everything, including all the tiny text, even if it doesn't seem relevant) before you start.

> What if animations started at a slightly slower speed, and gradually increased in speed the more you used them?

Ubuntu's Unity does this; it keeps track of the number of times you've minimised a window, and as you minimise windows more, it progressively speeds up the animation (maxing out after 100 times).

Source: https://ubuntuforums.org/showthread.php?t=2204321&p=12923084...

Re:Reddit Security Incident on Wednesday August 01, 2018 @04:49PM (#17666851)
There are a couple of comments on the linked thread suggesting that someone may be using it (scam emails containing people's old reddit passwords).
Re:Gnome has moved to GitLab on Friday June 01, 2018 @09:04AM (#17204878)
Quick reminder: JWZ despises HN, so you'll need to copy-paste that link in order to remove the referrer header.
Re:Using a mobile phone to clone a Mifare card (2016) on Monday May 28, 2018 @01:51PM (#17173750)
Sadly no detail on how to find the keys, which is the hard bit.

Vulnerabilities in the protocol make it relatively trivial to discover the keys if you have the correct hardware (e.g. a Proxmark3), but as far as I know nobody has done this with a phone – all these writeups conveniently only clone tags with keys in the list of common keys distributed with MifareClassicTool.

Re:Dumber phone on Tuesday April 24, 2018 @01:20PM (#16914577)
I figured it out after a few minutes poking around.

You'll need some way to set "secure" settings – if you're not rooted, the easiest way is via a Tasker plugin called AutoTools. Once you've set that up, create a task with an action of "AutoTools Secure Settings", then configure it as follows (under "Custom Setting" in the AutoTools menu):

    - setting type: secure
    - name: accessibility_display_daltonizer_enabled
    - input type: toggle
    - value: 3
That task then toggles greyscale mode, so you can hook it up to an application context or whatever. (Switch the value to 1 if you want a task that always enables greyscale, or 2 to always disable.)

If it doesn't work, diff the output of `adb shell settings list secure` from a PC with greyscale mode enabled and disabled, and use whatever name you get there.

Re:Let’s talk about usernames on Monday February 12, 2018 @09:11AM (#16358629)
Would it be ridiculous to suggest that this is no different to requiring all usernames to be composed of CJK characters? That would be inconvenient and exclusive, no?

(also, a nitpick: "just ascii" is still the wrong approach, since you probably don't want people putting BEL or NUL in their usernames)

Re:Why I left Google (HN search results) on Thursday January 25, 2018 @11:42AM (#16232153)
There's also:

- cloud storage

- shared document editing

- translate

- instant messaging

- calendar

- maps

Not that any of those have no non-Google alternative, but they're all things that Google offers.

Re:Wine 3.0 Released on Thursday January 18, 2018 @03:47PM (#16181261)
Personally, I'd much rather run my old Windows games directly from Linux than spin up a whole Windows VM – it's much more convenient.
Re:In defence of swap: common misconceptions on Sunday January 14, 2018 @08:00PM (#16147634)
The issue is that the current OOM killer doesn't support this usage at all.

To extend the analogy: what do you do if grandma comes and fills your house with stuff? You need space to work, so you go and drop it off at the self storage place, but what if she just keeps filling your house up?

The OOM killer will do absolutely nothing until both your house and the whole self storage place are totally full. By that point, you've spent a huge amount of time just driving to and from self storage, so you haven't had time to do any actual work; it would probably have been better to tell grandma that you don't want any more stuff once she filled up your house for the first time.

Re:GitHub down on Thursday January 11, 2018 @11:36AM (#16125232)
Yes, I noticed that too. I wonder when the charts got removed.
> at least in Edge, I can disable javascript

Note that you can also do this in Chrome: Settings/Site settings/JavaScript.

If you're looking for another way to block ads on mobile, DNS66 works pretty well for me, and it's FOSS IIRC (obviously it doesn't get everything, there's only so much a DNS-based blocker can do, but it catches most ads except YouTube's in my experience).

Re:Introducing the new SourceForge on Tuesday January 09, 2018 @06:51PM (#16111298)
Question: how many of those 430 thousand projects have seen an update in the last year?

Older »