News for hackers. Stuff that matters.

flower-giraffe

Re:ICAO issued new power bank restriction on flight on Sunday March 29, 2026 @03:14AM (#47561027)
That is actually included in the amendment, the should seem to be a softening to allow for airline discretion for medical devices etc.

ICAO Technical Instructions (Part 8, Table 8-1 amendment):

“Spare batteries, including power banks: must not be recharged on board the aircraft; should not be used to charge portable electronic devices on board the aircraft; the number carried is limited to a maximum of two per person.”

Re:A Beginner's Guide to Split Keyboards on Friday February 20, 2026 @06:42AM (#47086774)
I’ve been using split boards since the original Microsoft Natural Keyboard, the one with the awful number pad. Then a Kinesis Advantage, then the 360. The DIY boards like a Lily58, Corne and a similar custom are mostly for travel.

Switching to split or ortholinear takes time. Doing both together is a significant and slightly annoying adjustment and takes a few weeks to feel normal. The payoff is when you lean into it. Home row mods so the home keys become ctrl shift alt meta when held, plus a thumb layer for navigation so you get vim-style movement everywhere, and a symbols layer for the stuff not on the top row.

Two thumb keys per side works well. Layer on both sides, enter on one thumb, space on the other. About 6x4 per side is the sweet spot for me. A function row on things like the Advantage 2 or Glove80 can be handy.

If you want to try it in steps, the Kinesis mWave is a decent bridge. Split but not ortholinear, full keyset so you don’t have to relearn everything at once, mechanical, runs ZMK, and in US pricing it’s very cheap for what it is, roughly $120.

Why did this fall of the front page so quickly? Older posts with less points are still there?
Re:Big LLMs weights are a piece of history on Sunday March 16, 2025 @09:44AM (#43379057)
Or 80 years to MVP memex

“Vannevar Bush's 1945 article "As We May Think". Bush envisioned the memex as a device in which individuals would compress and store all of their books, records, and communications, "mechanized so that it may be consulted with exceeding speed and flexibility".

https://en.m.wikipedia.org/wiki/Memex

Re:Modernist Cuisine: The Art and Science of Cooking on Monday February 24, 2025 @03:07PM (#43164311)
For those that don’t know the primary author is Nathan Myhrvold who was the first CTO at Microsoft.

https://en.m.wikipedia.org/wiki/Nathan_Myhrvold

Re:A $1k Wheelchair on Wednesday October 02, 2024 @02:03AM (#41717629)
There should be an IKEA for medical devices relying on scale to absorb design, testing and regulatory compliance.

The AirPod hearing aid feature and other OTC hearing aids from headphone manufacturers demonstrate it’s possible to leverage modern consumer electronics improvements for devices with a higher engineering barrier to entry than a wheelchair.

I think paying a premium for anything via insurance is detrimental to markets and only benefits bottom feeding bandits and deferring or deflecting the cost.

Re:Noyb files GDPR complaint against Meta over "Pay or Okay" on Tuesday November 28, 2023 @03:22AM (#38443568)
I’d rather donate the 250 than pay meta https://noyb.eu/en/donations-other-support-options
Re:Preparing for the end of third-party cookies on Saturday November 25, 2023 @07:40PM (#38418202)
That’s exactly what meta/facebook have been facilitating https://developers.facebook.com/docs/marketing-api/conversio...
Re:Privacy is Priceless, but Signal is Expensive on Thursday November 16, 2023 @12:07PM (#38292145)
Did I read that right $19m people cost for 50 people.
Re: on Friday November 10, 2023 @04:51AM (#38216970)
When combined with the rate limiting on 365 email api and ultimately removing imap access this seems like a strategic goal to capture our data.

The dark patterns pushing content to one drive from office apps and web access opening attachments and keeping them in one drive is another example of this data grab.

It’s an example of shareholder value trumping customer value, the primary purpose of cloud is to make you pay more without having to provide more in return.

Re:Jupe: Off-grid shelters that pop up anywhere on Earth on Sunday October 15, 2023 @12:52AM (#37886978)
They didn’t think too hard about the name.

Jupe pronounced like dupe.

dupe -to trick or cheat someone.

Re:Rollbar security notice and response Sept 8, 2023 on Saturday September 09, 2023 @02:13AM (#37442731)
Thank you for the clarification.

I think you are saying the attacker did or could have aquired the encrypted customer credentials but not the decryption key.

If that is the case could provide some more detail about the type of encryption to reassure us that it can not be brute forced.

Re:Rollbar security notice and response Sept 8, 2023 on Friday September 08, 2023 @10:55PM (#37441787)
The wording is concerning, the “including” suggests the breach could be wider.

I’d like to see a more explicit statement that lets us know things like GitHub credentials for source code integration have not been compromised.

“our initial forensic research indicates the unauthorized party accessed data about your account, including:

Rollbar usernames and user email addresses Account names Project and environment names Project access tokens Project service link configuration”

| quality regulations have been reduced (see: Grenfell where that literally killed people.

Grenfell was a horrible tragedy. It was built as social housing in the 50’s or 60’s to a much higher standard (in terms of space and utility) than the so called luxury apartments of Canary Wharf.

The installation of cladding to modernise the building to meet modern energy efficiency standards and the apparent failure to make sure that work was completed within the regulations seems to be the cause of the catastrophic spread of the fire.

London planning is a complete mess. We waste millions on poorly executed projects to modernise social housing to save on CO2 emissions and at the same time we have the wealthy living in Victorian and older houses that are not allowed to install double glazing in order “to preserve the character of the property”.

Canary Wharf is surrounded by poverty in a brown field redevelopment that has been a permanent construction site for over thirty years. It is not really representative of London.

London is an expensive city, you’ll need several million pounds for a decent family home but if you can afford it it’s an absolutely fantastic place to live.

Unfortunately the lack of affordable housing makes it less likely to be so in the long term.

Arguably it is developments like Canary Wharf and the associated planning concessions that have fuelled the London property market to make it practically unaffordable for the vast majority of people that do the real work.

Re:We Ruined Status LEDs; Here’s Why That Needs to Change on Thursday August 17, 2023 @07:58AM (#37160266)
I use three solutions depending on the circumstance.

1/ kapton tape ( the orange/yellow semi transparent tape you find on battery packs and cable assemblies).

This not only reduces the light level, it can make it more green. Multiple layers for very bright leds.

2/ black vinyl wrap for LEDs that have no useful purpose.

3/ replacement LEDs and resistors for non SMD stuff that it is cheap enough to hack.

It is perhaps a sign of how pervasive the assumption that a subscriber is an asset rather than a stakeholder that they have thought it is reasonable for a commercial communication service to claim copyright on private communications of their subscribers.

Can you imagine the response to telephone company saying they can use your voicemail messages for their own purposes.

I think the influx of very low cost Chinese mini PCs makes the NUC, Asus PN and Asrock devices a bit less attractive. Also thelow power AMD APU has been very good for the form factor. Maybe the margins are too tight for Intel. Another take maybe that the NUC came in when low power Arm desktops looked viable and Intel needed a low power small form factor to defend against that.

The Minisforum, Beelink and the generic aliexpress units are incredibly cheap.

There are celeron based fanless models with 4 2.5gbe NICs available for less than $200 on Amazon.

Personally I have been using the AMD 15w Ryzen variants it’s a nice balance for performance. I have several, my daily driver is an Asus PN50 with 2Tb nvme disk and 64GB ram driving 3 sceeens at 2560x1440 in a completely silent Akasa case.

As long as you are prepared to fiddle and potentially destroy the original case rhe Akasa cases are fantastic.

Re:D2: A new declarative language to turn text into diagrams on Wednesday August 31, 2022 @01:00AM (#32658538)
I use https://github.com/yuzutech/kroki in my github actions to build plantuml and other diagrams.

Also playing with 11ty and this to replace our home grown tooling based on markdown with embedded dot.

Re:No Fixed Address Bank Account on Sunday May 08, 2022 @11:33AM (#31304976)
Interesting that the selection of branches includes Belgravia and Notting Hill Gate, two of the most expensive areas in the UK

The branch list does not include Camden Town where there are homeless people sleeping in the streets near HSBC.

The underlying issue here is that Covid has accelerated the transition to cashless digital first transactions that are controlled by private entities that have their own agenda.

Re:The World Order Reset on Monday May 02, 2022 @12:44AM (#31231560)
>And then it pivoted all the way to full-scale complaining about wokeness.

I thought the article seemed very credible, and I also picked up on the author’s possible anti work sentiment.

I don’t think the analysis is any less credible and it is certainly worth the hour it takes to read.

Re:Incident with GitHub Actions and Codespaces on Thursday April 14, 2022 @04:10AM (#31024438)
9 hours ago they posted "We have started a cleanup of incorrect billing information and expect that to be completed in a few hours."

2 hours later they marked the incident as resolved, but they clearly have not completed the "cleanup" yet.

status page :

Resolved This incident has been resolved. Posted 7 hours ago. Apr 14, 2022 - 01:28 UTC

Update Actions and Codespaces are operating normally except for incorrect billing reports. We have started a cleanup of incorrect billing information and expect that to be completed in a few hours. Posted 9 hours ago. Apr 13, 2022 - 23:36 UTC

Update We've applied a mitigation to unblock running Actions jobs and using Codespaces. We are currently working on addressing the inconsistencies in billing information. Posted 11 hours ago. Apr 13, 2022 - 21:07 UTC

Re:Incident with GitHub Actions and Codespaces on Thursday April 14, 2022 @02:35AM (#31023979)
I find it concerning that the incident is marked as resolved and the incident history suggests that have corrected the billing.

We still have a $7m dollar balance on our account, so the issue clearly is not resolved.

Providing incorrect information on status pages makes it hard to trust in the future.

>> As it stands, the data centre will use up much of the green energy that NL has created

Has somebody confused or misrepresented measures of capacity and consumption ?

A quick search suggests FB consume on average about 1 gigawatt globally. The original article calls it a 200 megawatt DC. That would be 20% of facebooks global energy consumption.

Given FB seem to have 18 existing Data center locations it would imply huge growth or consildation plans for that DC to consume 200 megawatts all the time.

In 2020 the global renewable energy supply capacity was approximately 2500 gigawatts so facebook used less than 0.5% of that capacity.

There are lots of valid reasons to oppose facebook, but it doesnt seem that monopolising the consumption of renewabel energy is a credible one.

https://sustainability.fb.com/report/2020-sustainability-rep...

https://www.irena.org/publications/2020/Mar/Renewable-Capaci...

SRP of 199usd and 2x SFP28 25GbE.

It’s not for the enterprise but I’ll get some for home.

Re:Windows Defender is enough, if you harden it on Sunday March 06, 2022 @06:11PM (#30582219)
> I suspect what's happening is that you ran one of those "disable telemetry scripts", and that unintentionally broke it.

I am 100% certain that’s not the case. — Yes - the point is when setting all the most private privacy options on Windows 10 stops keeping a win+r run history. I didn’t go as far as installing a custom root CA and intercepting binary telemetry data to prove that the data was being sent. I think the fact that the MRU list is disabled strongly suggests that the product team assumed or new that it was collected.

If your experience is based on LTSC Windows/Office you probably have a different experience.

Re:Windows Defender is enough, if you harden it on Sunday March 06, 2022 @05:37PM (#30581985)
I observed first hand that disabling sending telemetry also disabled the history for win+r.

It’s also quite easy to observe that when you type anything into the start search interface you are steered or defaulted to searching Microsoft internet services.

Re:Windows Defender is enough, if you harden it on Sunday March 06, 2022 @05:32PM (#30581944)
> I have a script that sets default privacy preferences

Then you will probably notice that you no longer have a history for Win+R run history.

It’s not unique to Windows to mine user input but it’s more recent than for example the search in iOS and less obvious than Google search.

I believed that the “personal” in Personal Computer meant that it belonged to me, and that used to be true. We are sliding down the slippery slope of allowing the software vendors to own our devices.

I think the staring point with Windows was product activation in XP, and that was quite legitimately intended to stop software licence abuse. I am still comfortable paying for closed source software but Microsoft seem to have given up on that business model.

Re:Windows Defender is enough, if you harden it on Sunday March 06, 2022 @04:56PM (#30581682)
> Microsoft both delivering a good product and acting in good faith

I’m going to call you out on that. Microsoft lost my trust to act in good faith with personal data when they started capturing my private OS user input (e.g. the history from Windows R (run) and forced me to link it to my personal identity.

And passport number, home address and date of birth.

Older »