News for hackers. Stuff that matters.

detuur

First thing I do at a new job is make friends with IT, if at all possible. I end up being the guy with the new high-dpi screens they're trialling, more RAM in my laptop, and "just DM me in Teams" privileges for tech support. All for not treating these people like tech janitors (and obviously there's nothing wrong with being a janitor).

Cheat code for this: ask them if they need any custom tooling. I spent a few hours at a past job on a userscript for their ticketing interface to fix some annoyances. Brownie points for life.

Re:When imperfect systems are good: Bluesky's lossy timelines on Wednesday February 19, 2025 @09:05PM (#43110236)
The answer to that reply is you don't need to explain it to your users. People are used to fuzzy/best-effort sort of matching, especially when it's specifically presented as a "matching algorithm" instead of a "filter".
Re:Resigning as Asahi Linux project lead on Thursday February 13, 2025 @04:30PM (#43041627)
I can't believe you're the first person I find in this conversation who raises this issue. This is the exact reason why Marcan flipped his lid. Linus publicly championed a very technically complex initiative and then left all those contributors to the wolves when things didn't progress without a hiccup. Especially damning when you consider that at every step, the fief lords in Linux have seemingly done everything in their power to set up the r4l people for failure and Linus hasn't so much as squeaked at them. He personally cut the knot and asserted that Rust is Linux's future, but he constantly allows those below him to relitigate the issue with new contributors (who can't fight back because even though they're contributing by the supposed rules, they don't have enough social buy-in).
Re:Resigning as Asahi Linux project lead on Thursday February 13, 2025 @04:10PM (#43041399)
I have a few projects that I've abandoned because they only made sense as a FOSS project, and I saw how FOSS maintainers were being treated. I love FOSS, I love the philosophy, and I would love to "give back" one day by making the ecosystem richer, but I've not yet found a project that I love enough to be abused over.
Yes yes and a reminder that BSD Jails are better than anything Linux does and a bunch of other dead horses we like beating on the regular around here.

Which is a fanciful way of saying that I don't understand the relevance of your comment at all to the topic at hand, which is an interactive frontend.

Ah yes, famously one can only be a sysadmin if they're unable to use a different cli verb order.

Come on now. Either present a real argument or accept the fact that tooling isn't forever going to be frozen to what you used in your 20's. Newer tooling uses newer best practices and the improved verb order is part of that.

Re:A quick look at OS/2's builtin virtualization on Wednesday December 18, 2024 @04:48PM (#42455752)
I don't see how the real mode emulation on the 80386 (VM86) fails to meet the standard of the Popek and Goldberg definition. IA-32, yes, that took a while, but VM86 allowed 8086 (real mode) tasks to run as if they were running authentically in real mode while the 386 was in protected mode, and had all the features P&G describe in their definition. It runs natively, it runs with equivalent performance, and there's a VMM trapping privileged instructions to either emulate or arbitrate system resources. It's the full deal!
Re:No Nat November: My Month Without IPv4 on Wednesday December 04, 2024 @08:36AM (#42317287)
I looked right past `--resolve`, so yes that now makes sense.
Re:No Nat November: My Month Without IPv4 on Wednesday December 04, 2024 @07:56AM (#42316979)

    > one.one.one.one:443:64:ff9b::1.1.1.1
Is this a typo or a weird curl-specific address format I've never heard of?
Re:No Nat November: My Month Without IPv4 on Wednesday December 04, 2024 @07:46AM (#42316904)
NAT essentially has a "default deny" rule.
Re:Why Phishers Love New TLDs Like .shop, .top and .xyz on Wednesday December 04, 2024 @07:39AM (#42316853)
.de domains require a German postal address, so I would actually trust them more than the .ru equivalent. Plenty of other ccTLDs have even stricter nationality requirements for registration.
Re:FuryGpu – Custom PCIe FPGA GPU on Wednesday March 27, 2024 @12:41PM (#39841463)
I can't believe that this is the closest we have to a compact, stand-alone GPU option. There's nothing like a M.2 format GPU out there. All I want is a stand-alone M.2 GPU with modest performance, something on the level of embedded GPUs like Intel UHD Graphics, AMD Radeon, or Qualcomm's Adreno.

I have an idea for a small embedded product which needs a lot of compute and networking, but only very modest graphical capabilities. The NXP Layerscape LX2160A [1] would be perfect, but I have to pass on it because it doesn't come with an embedded GPU. I just want a small GPU!

[1]: https://www.nxp.com/products/processors-and-microcontrollers...

The pricing is $20/year if I'm not mistaken.
Can we add jxl to that list? Doesn't have nearly as wide support but you could be part of a turning tide.
Re:Fedora Atomic Desktops on Friday February 09, 2024 @02:41PM (#39319484)
Same. I can't be the only one who feels that Nix is doing the right thing the wrong way. The right thing being reproducible, declarative, composable environments; the wrong thing being its language and tooling. Too often I feel like serious Nix users spend a distressing amount of time manually doing package manager tasks, so the way forward is to stop doing exactly that. Going back to imperative composition is a step backward that will never help people free up time away from package management.
Re:4B If Statements on Friday December 29, 2023 @05:37PM (#38811068)
Optimization was explicitly disabled by compiler flag for this experiment
One day I'll kids with phones, and I'll want to save their sanity. Does anybody know if MDM allows you to configure notifications? I'd enforce the same setting I have on my phone, which is Do Not Disturb past midnight until 7:30.
Re:Unity plan pricing and packaging updates on Tuesday September 12, 2023 @03:22PM (#37486497)
And to contrast, Godot's GDScript has been great for me so far. I've been hacking at a personal project for a couple of days now and I feel right at home in the language, which feels right at home in the engine.
None of the links here seem to be the one post that I found years ago, but this one in particular is pretty interesting.

I found this[1] one while looking around, the thread has some additional interesting remarks, including an LD_PRELOAD attack vector.

[1]: https://news.ycombinator.com/item?id=3550944

Re:Show HN: Advanced Tab Manager for Firefox on Tuesday August 29, 2023 @07:44AM (#37306280)
The only way to hide the horizontal tab is with userChrome.css
I'm pretty sure they don't check certs. If they did, there would be many corporate networks and even entire countries where they wouldn't work, because they use DPI on all inbound/outbound connections with SSL stripping.
It's not that, but still very cool!
Some years ago, I read a post on HN where someone made a text-mode game(? or something similar?) available through SSH. People could play the game by opening an SSH session and play from their terminals. This was non-trivial, and they explained all the ways they configured sshd to prevent players from running binaries other than the game.

I didn't bookmark that post, and I haven't been able to find it again to my great dismay. If anyone remembers this post and still has it, I'd love to read it again.

Re:Pico Serial Bootloader (2021) on Thursday August 03, 2023 @07:13AM (#36984163)
It's for a Pi Wars robot. A robot that has to be driven by a Pi chip. AFAIK the ESP32 is made by Espressif, not the Pi Foundation.

Additionally, I've learned that when it comes to part choices, especially microcontrollers, just because another part is "more right" it doesn't make your choice wrong.

Re:A list of recent hostile moves by Google's Chrome team on Thursday August 03, 2023 @05:03AM (#36983231)
It was/is a very well thought-out format that had a lot of industry signalling they were willing or even enthusiastic about supporting it, which happens virtually never for new image formats. All the major browsers were working on support, many image processing pipelines were being updated.

Everyone agreed that it was not just a major improvement, but actually the best option out of all the contenders out there. Even the Chrome team. The only ones who didn't agree were the AVIF team at Google, who had developed a competing standard. Well, whoever was on that team had some pull, because not long after Chrome landed JXL support in stable and everything was about to pick up some serious pace, they suddenly landed a commit that reverted everything to do with JXL support in Chrome, and that was that.

An immense, cross-industry effort undone by internal Google politics. That's what's hostile about this situation. JXL is still limping along, but Google's unilateral reversal hurt everyone's confidence in the project but also the entire process. Apparently it doesn't matter what everyone in the world thinks is the most appropriate format. What matters is Lord Google's favour.

Re:SMS Pumping Attack on Thursday August 03, 2023 @04:49AM (#36983125)
The wild thing about this is that this isn't just a B2B fraud, but regular joes are hit with it as well and regular operators don't care.

My phone got stolen in Naples last year, just as I was about to board my plane. It was 11PM, so when I called my boss from my gf's phone he decided to block the number the next morning as he was in bed already. By the time the SIM was blocked, 10 hours had passed, and thieves had managed to place over 100 hours of very expensive toll calls to numbers in Algeria. It cost the company over 10k, and our operator was not willing to accept any responsibility over it. Admittedly, I turned off the PIN lock because my phone at the time would overheat and restart multiple times a day, but operators really should have lockouts on foreign payphone numbers, especially once they're being placed faster than a human can dial them.

Yup, they're just using the decks as convenient exhibition devices (which they are!). I doubt many of them ever went into desktop mode.
That is missing virtually all of the pictures (which were all full-resolution jpegs, blowing the page size up).

For me the site just went offline, it shows a 500. I'm betting it's hosted on a smal colo. They should consider cloudflare or another cdn/accelerator.

Re:DietPi – Lightweight justice for your SBC on Tuesday July 25, 2023 @04:42AM (#36859619)
https://github.com/MichaIng/DietPi/blob/master/dietpi/dietpi...

For those who are curious. I have to admit, this is never something I'd have done myself, but I struggle to justify a more complex approach.

Honestly, that a simple file sync service needs that kind of specs is bewildering to me.

Older »