News for hackers. Stuff that matters.

daghamm

Email is visible in commit messages. So nothing new at all
Re:Liberapay on Friday March 21, 2025 @12:44PM (#43437897)
But maybe they can negotiate a better deal for their payments?
How will this affect tourism?

I can't see people paying thousands of dollars for a US vacation if there is a small chance of them being randomly detained and locked up for days.

No idea, but technically some phones are now water-cooled.
Re:Liberapay on Friday March 21, 2025 @12:26PM (#43437635)
I like librapay, I wish more people would use it.

I also hope they can reduce the ratio paid to paypal/stripe. More money should go to devs.

Do you know where to find statistics on accidents and fatalities per vehicle or brand?

Do for example insurance companies provide such data?

I like this approach.

But can you safely do this with multi room devices?

US is pushing for these to replace classic crypto in commercial applications by 2030.

The C in CNSA 2.0 is for "Commercial".

Sorry, can you expand on the issues with KEM?
At his level, the only thing he cares about are tax breaks.
I think the biggest fear is lack of accountability.

We have already seen this causing real problems for real people. Please see Jeremy Howard's lecture on ethics in AI for some real world examples.

Re:Volkswagen Introduces ID. EVERY1, Its Most Affordable EV on Thursday March 06, 2025 @06:37AM (#43279005)
"Easier to trust Tesla or VW."

Teslas are now old enough to be subject to mandatory yearly inspection in EU. They are dead last in the German and Swedish rankings based on the number of issues found during the yearly inspection.

German TÜV EV+ICE ranking:

  1. Honda Jazz

  2. VW Golf

  ...

  110. Ford Mondeo

  111. Tesla model 3

Swedish Besktining EV car maker ranking

  1. Polestar

  2. Lync

  ...

  X-1. Dacia 

  X. Tesla


Source:

https://www.carscoops.com/2024/11/tesla-model-3-comes-bottom...

https://www.tjanstebilsfakta.se/teslas-besiktningsresultat-a...

Re:Towards a test-suite for TOTP codes on Monday March 03, 2025 @10:55AM (#43242947)
Given that nobody uses TOTP with Sha256 today I assume there is no real reason to upgrade.

But has anyone actually reaserached this? For all we know, using hma-sha256 in TOTP may actually make it less secure.

Re:Towards a test-suite for TOTP codes on Monday March 03, 2025 @02:40AM (#43239233)
This is very useful to anyone writing TOTP tools, big thanks to the author.

However, reading the article this section caught my eye:

"As we now know, SHA-1 has some fundamental weaknesses. ... But the TOTP authors disagree and allow a for some different algorithms to be used."

With significant compute resources SHA1 can be broken for some use cases, but I don't think this is one of them. Is HN aware of any practical attacks against TOTP-SHA1?

Re:WhiteSur: macOS-like theme for GTK desktops on Monday February 24, 2025 @10:17AM (#43160486)
Counterpoint, from the developers pov:

https://github.com/bragefuglseth/fretboard/issues/30

Re:WhiteSur: macOS-like theme for GTK desktops on Monday February 24, 2025 @10:11AM (#43160410)
Why do you need to theme everything when it always result in a broken UI?

Please see this thread https://github.com/bragefuglseth/fretboard/issues/30

Re:WhiteSur: macOS-like theme for GTK desktops on Monday February 24, 2025 @10:01AM (#43160323)
Thank you. This is exactly how I feel.

libadawita has been a game changer. Now gnome suddenly has the best looking apps among all DEs and platforms.

I hope WhiteSur is useful for OSX developers using GTK, but please keep it out of gnome and Linux.

No, but a self-sustained 8-bit or even 32-bit MCU may be cheaper than a 555.
You are wrong on two accounts.

There are plenty of ways for getting rid of underperformers in a goverment organisation. I've seen entire teams being sacked, and also some of the hardest working people I know work for goverment organisations.

Also, you cannot run the goverment like an startup that is always running on the edge. A majority of startups fail and that's fine, but one goverment organisation failing could cause problems for the entire country.

Re:Kevin Mitnik FOIA Final on Friday February 14, 2025 @03:34PM (#43052799)
I've far more respect for Tsutomu. In the end he turned out to be the better hacker.

Reading Mitnicks book I sometimes get the impression that the he is making up half of it.

Compared to other CVEs, the description for this one looks very different.

Does anyone know why it reads so apologetic?

Wonder how much of that was wasted by poor Firefox users.
At least on android the browser is limited by the android permission system, i.e. if you dont give browser GPS permissionit cannot give pages dito. In addition the browser will ask if you want to grant an app access to something like positioning data.

Furthermore, it is hard for a web page to run in background and receive user data.

Re:Python 3, Pygame, and Debian Bookworm on the Miyoo A30 on Saturday February 01, 2025 @03:56PM (#42902214)
This looks very interesting.

The CPU is pretty close to rpi2 and zero W2, which can run latest vanilla Debian. Not sure why the official OS is stuck on such an old kernel.

Re:The Debian Publicity Team will no longer post on X/Twitter on Wednesday January 29, 2025 @12:17PM (#42867954)
Are Linux distros particularly active on twitter?

I for one would like to go back to the old IRC days.

Re:SiFive's P550 Microarchitecture on Monday January 27, 2025 @01:39PM (#42844202)
Yes, I had no idea they were still working on it.

You could buy their products in west as a sort of a low-power PC for a short while, but I think once netbooks arrived those just vanished.

Re:SiFive's P550 Microarchitecture on Monday January 27, 2025 @10:06AM (#42841854)
China tried to create a homegrown CPU 15-20 years ago with their MIPS variant but that died out. I think this time they are much wiser and will pull it off. In 5-8 years we may have China CPUs dominating the Asian market at least.

Riscv leading to more open designs is wishful thinking, plus probably a large dose of PR. MIPS has been open for years and how many open source MIPS desisgn have we seen so far?

Re:DeepSeek-R1 on Friday January 24, 2025 @03:55PM (#42816842)
One thing that makes this whole thing even more interesting is that DeepSeek is published by a crypto hedgefund. It start essentially as skunkwork by a couple of employees using unallocated GPUs.

And all this happened while Sam Altman was spending $7B on training his latest model.

You can run their pipeline locally with better observability.

Older »