News for hackers. Stuff that matters.

indigane

Re:Graphene OS: a security-enhanced Android build on Friday July 25, 2025 @06:42AM (#44681711)
> [A]pps you install from F-Droid are signed by F-Droid rather than the developer.

Having recently gone through the F-Droid release process, I learned that this is not necessarily the case anymore.

F-Droid implements the reproducible builds concept. They re-build the developer's app, compare the resulting binary sans signature block, and if it matches they distribute the developer-signed binary instead of their re-built binary.

This is opt-in for developers so not all apps do it this way. I'd sure like to know how common this is, I wonder if there are any statistics.

Re:Collection of Git graph drawing implementations on Saturday October 26, 2024 @10:19AM (#41954875)
This is a collection of Git graph drawing implementations I cleaned up from notes I had as I've slowly worked on a Git GUI for my own use.
Re:My favourite animation trick: exponential smoothing on Thursday March 07, 2024 @11:59PM (#39637934)
I'm working on a Git GUI for myself, in which one of my top priorities is making it more understandable than Git's own UI.

I usually dislike animations. I used to disable transitions whereever possible, as they made the UIs feel sluggish. And I still do.

But working on the project made me for the first time really appreciate in practice how much amimations help with understanding. I paid a high price in complexity to add transitions whenever the state of the visual graph changes, and suddenly it was really obvious what was happening. Commits and whole branches were sliding into their new position, and I would go "a-ha! I see" instead of "wtf just happened, what am I looking at now?".

EDIT: Fair warning, it's heavily WIP https://gitlab.com/indigane/visual-git

We already have a Push API specification that supports arbitrary push server URLs and self-hosting. It's called the Web Push API, although it can be used for mobile push as well.

The only problem is that no one is using it.

A bit longer comment on it:

https://gist.github.com/indigane/70ed13d5287c2d18b3e8e5d4f0c...

Re:ROFL: An open-source license that promotes fun in coding on Wednesday June 07, 2023 @02:44AM (#36223649)
This is a day later now, but for posterity I'll add that thanks to this thread I learned that there is a concept of "OSI approved licenses"[1], and that those licenses include MIT No Attribution License (MIT-0), and that MIT-0 is also a supported license in the GitHub UI.

It is likely I will be moving from Unlicense to MIT-0 in the future.

[1] https://opensource.org/licenses/

Actually I read through your links, and they seem to imply, that there does not exist (can not exist?) a license that you could use if you want to release your code to the public domain. That's a bummer if so.
I stand corrected then. I had heard a similar comparison that you should prefer Unlicense over WTFPL, but I had not heard it is impossible to dedicate works to the public domain. What a weird world.

If I want to use Unlicense, can I dual license as MIT and Unlicense?

I know most of these sort of licenses are just for fun, but on a serious note, if you don't care about licenses, and you don't care what people do with your code, I would recommend you use The Unlicense, instead of one that sounds funny.

The Unlicense is almost like MIT License but without any burden on those using your code.

On the other hand it offers you the same (perhaps handwavy) protections from liability as MIT License does.

If you're familiar with Creative Commons, it is similar to a CC0 license, but for code.

Basically it's a legitimate way of saying "I don't care about licenses, stop bothering me, do whatever".

If you use GitHub, then Unlicense is one of the choices you can select when setting up a repository.

Re:Ask HN: What are your “scratch own itch” projects? on Sunday November 13, 2022 @09:39AM (#33583451)
I needed an online card sort tool for another hobby project, and I just couldn't find one that fit my needs, so I built https://github.com/indigane/cardsort

One requirement I had if I were to build it myself was that it would be maintenance-free and still work years after I have forgotten about it, so having a server was a no-go.

Thanks, that's a good catch.
In case someone reads this in search of another tool, I did a search again, and found one I had missed, that actually has a usable free tier as of writing https://uxmetrics.com

Show HN: A tool for conducting a virtual card sorting

TL;DR: I ended up yak shaving a tool for conducting a card sorting online, and wanted to share it because I couldn't find one myself. Also I don't have to maintain or host it so it should stay up for a long time, hopefully.https://github.com/indigane/cardsortThe long version of why:I wanted to conduct a quick, one-off card sorting for a side project, but after spending hours looking at the...

( Read More... | 4 comments | 4 points | on HN )

Ask HN: How is Google prompt more secure than Google authenticator (TOTP/HOTP)

Google is constantly pushing to move from authenticator codes to Google prompt, due to it being more secure according to them. I can not find any explanation on the security of authenticator vs prompt. With my limited knowledge, I believe both are susceptiple to phishing, so what's the security benefit?

( Read More... | 1 comment | 4 points | on HN )
Re:Fully Functional 1KB Hard Drive in Vanilla Minecraft on Wednesday August 20, 2014 @11:17AM (#8202670)
Command blocks also bring a whole new level to that.

There is vanilla and then there is vanilla with command blocks.

They are getting closer and closer to modding and are almost like an in-game programming language.

For example, here [1] is a command block command that procedurally generates giant oak trees [2].

[1] http://pastebin.com/raw.php?i=QzS0M4Vn

[2] https://youtu.be/6cJL4lM7KR4