jttnr

Discussion from 3 weeks ago on the refrigerator "hacks" in the french supermarkets:

https://news.ycombinator.com/item?id=50055304 (~1000 comments)

That is exactly what I value in IDEA. Language server integration offers the same level of completion and functionality in all other editors, too.

IDEA is much smarter than what a language server alone offers.

I can totally relate. The quality of Japanese-made products is incredible and that's as true today as it was back then, for the most part. Especially woodworking tools like chisels and saws are outstanding. And I don't just mean the expensive, handmade ones. Even the mass-produced tools feel years ahead of their Western counterparts.

TIL: The official Signal app can now use one account, shard over two devices.

This was my main reason to use Molly over Signal.

https://aboutsignal.com/news/signal-allows-iphones-to-be-lin...

This should have been a "Show HN" as OP is also the creator of the game.

Next step is to sue the satellite companies for spying and request that they blur your property in the source images before selling them to Google and others.

You are free to manage your local trust store yourself. Either remove the CAs that look fishy to you or, conversely, start with a blank one and add only the ones you personally trust.

I would argue that there are two distinct kinds of trust here:

- Legal trust: Lawyers draft hundreds of pages specifying what may and may not be done with the data.

- Evidence-based trust: Looking at Microsofts actual track record, past privacy incidents, regulatory findings, and whether its data-handling practices have matched its disclosures and contractual commitments.

For the latter point, here is a nice summary from related to the use of Office prodducts in the Dutch goverment: https://www.privacycompany.eu/blog/new-dpia-on-microsoft-off...

That is likely the case. Microsoft is shoving Copilot down everyones throat, whether they want it or not. The sales argument is always: "Why pay for another license if it's already included in O365?" Plus the fact that some data protection contract is already negotiated to be able to use O365 for email.

In the end, if employees are dissatisfied with Copilot, blocking Anthropic and OpenAI will just make people switch to their personal devices and use those services on their smartphones if necessary.

At first I was like: Nice, they ban AI because its all US based vendors and using them for government related data is not a good idea.

But then the story goes on and say MS Copilot is an approved AI... Sad thing to read.

True, but at least with GLS, you can run their app even on rooted Android phones (with Magisks DenyList configured) and use the app's built-in NFC payment functionality. This is super nice, as Google Wallets NFC payments don't work on rooted phones.

I don't know what the situation is like on GrapheneOS, though, as I run LineageOS.

Oh man, good that they are leaving the CA business.

https://news.ycombinator.com/item?id=50195110

I'm a happy GLS Bank customer, and I've just learned about its involvement in Taler. Pretty awesome.

Europe desperately needs its own digital payment solutions to reduce its dependence on US companies and its exposure to sanctions that could target EU citizens if the president has a bad day.

GLS is also on board with Wero, which, unfortunately, hasn't seen big adoption yet.

I really hope Taler takes off.

You an actually see what the pressure vessel looks like in the recent Top Gear episode.

https://www.youtube.com/watch?v=JdkIOhFmbKI&t=1239

Doesn't look too big, tbh. They also explain some of the mechanics used to make it happen.

Agreed, it's not necessarily Danfoss's fault. The customer bought the appliance and is free to do whatever they want with it, that's what ownership is about and I fully support this. But in a situation like this, who bears responsibility? The customer whose appliance is exposed to the internet, likely having been installed by an authorized technician in the first place, or Danfoss, whose now-insecure maintenance interface listens on 0.0.0.0?

As others have pointed out, this interface is intended for use by service personnel.

My point is simply that situations like this can be prevented in several ways: on the customers side, if they have a capable IT department, or on the vendors side, by designing with the expectation that some customers will inevitably expose devices to the internet, regardless of what the manuals and training materials say.

We all know the saying: The S in IoT stands for secure.

A quick search puts the list price of the touchscreen-equipped controller at around €7,000 [1]. So this is hardly the typical dirt-cheap IoT device you can buy for a few bucks from China. The product label also says "Made in Denmark."

This vulnerability certainly appears more complex to exploit than the ones routinely found in cheap IoT devices.

Still, I wonder why, in the age of Tailscale and Nebula, a large company like Danfoss doesn’t use overlay networks to make these services accessible only to technicians and other authorized personnel, rather than exposing them publicly. From a technical standpoint, a company with 40,000 employees should be capable to pull this off.

[1] https://www.lefroid.fr/fr/c/p/402785

Cyprus and Deloitte, why am I not surprised to see those names mentioned together in connection with alleged tax evasion?

For those who don't know, Cyprus is widely regarded as one of Europe's tax havens. And, of cause, Deloitte has offices there.

Aside that its created by AI, I find the choise to implement it in Go interesting. go.mod lists Ebiten and it is amazing to see how well it works.

I second this. I've been using Lineage on older, second-hand OnePlus phones for about a decade now, currently a OnePlus 8T. You can pick them up pretty cheaply from eBay, and they're solid devices, often in near-new condition. Pair them with Lineage, and you're golden.

That might be coming to an end, though, if OnePlus no longer allows bootloader unlocking.

Same goes for the bitwarden cli (`bw`). Its super slow and if you use it in scripts to pull multiple values (username, password), it takes ages. I personally switched to rbw (https://github.com/doy/rbw) and its day and night.

Back in the early 2000s, I always had a good laugh whenever I was flipping through TV channels and stumbled upon Takeshi's Castle.

Exactly, but it is not a binary thing. The most capable solution is a combination of both. The batteries can kick in within seconds to bridge a couple of hours, while the gas turbines have enough time to fire up slowly as the batteries get close to empty and there is still no wind or sun.

Except for the rhino, I must admit I liked the effects.

That was a fascinating read, I really enjoyed it. Literally like exploring lost knowledge. Great work and a great write-up.

I also liked the aesthetics of it and the little effects (meteorite and volcano, but please fix the rhino and the text flowing around it while it rotates).

I wonder what else could be found in such archives. Some ideas: - Locations or routes of sunken ships and their missing cargo?

- Some pirate stories, maybe about a now-forgotten but once-legendary pirate captain?

- Unusual weather events, like snow in the summer?

(edit: formatting)

On the one hand, it's nice that they're doing it.

One might think that they've come to the conclusion that it's time to phase out coal and move towards renewables. But coal is still big in Germany, and with the current Minister for Economic Affairs, Katarina Reiche [1], the fossil fuel lobby has installed a puppet in that position, one who is going all in on fossils again and pushing legislation that makes it much harder to expand solar and wind capacity. Even though no one needs coal anymore, big companies like RWE still forcibly demolish villages to expand their mines and show off their power .

[1] https://en.wikipedia.org/wiki/Katherina_Reiche [2] https://en.wikipedia.org/wiki/Hambach_surface_mine

Maybe the coffee machine is subsidized by a residential botnet?

Hey, do we have the same manager? Love it!

The thing with all these vibe-coded email clients is: how well do they sanitize the full-content view of HTML emails? Thunderbird and the like go to great lengths to make viewing those emails safe, e.g., by preventing inline JavaScript and all kinds of tracking techniques (pixels, CSS references, etc.). Without having checked, do these vibe-coded clients just render the HTML in a WebView, or do they have similar protections in place?

The new version requires a monthly subscription and is cloud based.