News for hackers. Stuff that matters.

kogir

Re:I don't like passkeys on Friday September 18, 2026 @11:22AM (#49755715)
It’s the passkey that should be protected with MFA (biometrics, PIN), not the account with the third party service.

My Yubikey supports passkeys and protects them with a PIN of my choosing. No services need challenge me further.

Re:HomeLab #1: MikroTik as a Home Router on Sunday July 19, 2026 @10:38PM (#48973810)
I’ve not tried with 10gbps or faster links, but since we’re talking home use my success with 2.5 gbps links on standard amd64 hardware would suggest you’re wrong.

Modern CPUs are quite capable. The problem isn’t performance, but power use.

Re:EF Core 11 makes your split queries faster on Sunday July 12, 2026 @11:40AM (#48882003)
I’ve always solved this with Multiple Active Result Sets and stored procedures.

Collect the data in the stored procedure with temp/in-memory tables and return minimal, non-duplicated, related result sets.

Single round trip, still accumulates results in efficient bulk batches, and allows results to be processed by the client as they stream in.

Re:Make macOS consistently bad (unironically) on Friday March 27, 2026 @05:35PM (#47548586)
MacOS assumes you won’t full screen every app because all of them ship with large enough, high enough resolution monitors that full screening a single app is a waste of valuable space. Unlike on cheap laptops with 1080p screens.

I suppose you could splurge for a Mac desktop and then get the cheapest, smallest screen possible, but I hope it’s rare.

Re:Everything You Need to Know About Email Encryption in 2026 on Wednesday January 07, 2026 @07:18PM (#46535271)
Yes, and highlighting a failing in email that cannot be fixed, but which is addressed in other services where confidentiality is desired.
Re:Email Verification Protocol on Sunday November 09, 2025 @10:21AM (#45866178)
OIDC is usually limited to a small selection of providers.
Re:What happened to Apple's legendary attention to detail? on Thursday October 23, 2025 @07:15PM (#45688673)
Any properly grounded device will do that with specifically incorrect electrical wiring and/or a shoddy charger. Did this happen with a properly wired outlet, and an undamaged Apple charger?

I have doubts that it did, as that would warrant a safety recall.

Re:New paradigm for psychology just dropped on Thursday May 15, 2025 @03:41PM (#43998543)

  Another example for all you computer folks out there: ultimately, all software
  engineering is just moving electrons around. But imagine how hard your job would
  be if you could only talk about electrons moving around. No arrays, stacks,
  nodes, graphs, algorithms—just those lil negatively charged bois and their 
  comings and goings.
I think this too easily skips over the fact that the abstractions are based on a knowledge of how things actually work - known with certainty. Nobody in CS is approaching the computer as an entirely black box and making up how they think or hope it works. When people don't know how the computer actually works, their code is wrong - they get bugs and vulnerabilities they don't understand and can't explain.
Re:Fun with Logitech MX900 Bluetooth receivers (2006) on Friday November 22, 2024 @08:58AM (#42213875)
I really miss the feature of CSR devices that allowed keyboard and mouse use before OS boot, and wish any modern Bluetooth receiver was capable of it. Is it a patent issue?
Re: on Saturday July 27, 2024 @11:42AM (#41087274)
Am I misunderstanding this? Isn’t this just the view, rating, and comment data required to offer the service?

Building an interface to search that data is exactly how you’d evaluate a recommendation engine.

While I’m all for physical controls, especially ones that self-adjust to reflect the state of the remote device at all times, I wonder if the author just doesn’t know you can finely adjust volume in iOS control center by force/long pressing and then dragging.
wget begs to differ.

Kidding aside, where exactly does it end? How do you consider when you’ve hit “too much” and how many pieces must be split out when you do? Should every product in the Office suite be offered only individually?

Re:Serialization for C# Games on Tuesday June 18, 2024 @09:08PM (#40723737)
This seems to cover many common pain points, but I’ve written my fair share of .NET serializers and for anything I build now I’d just use protocol buffers. Robust support, handles versioning pretty well, and works cross platform.

I’d like to know their reasons for making yet another serializer vs just using pb or thrift.

I’ve never actually been detained or questioned (but know people who have).

If I were I’d tell them the truth that I feel more vulnerable during the chaos of travel and don’t want any risk that a lost or stolen device could leak anything personal.

Would this satisfy them? No idea. Getting stopped at the border is legitimately a single small concern of many more likely scenarios.

I’m probably a little odd but I wipe my devices before international travel. All my travel documents are printed. If they want to steal a device, I’ll just replace it.

When I arrive safely I restore from backup and nothing is lost except an hour or so.

Re:Why CockroachDB doesn't use EvalPlanQual on Saturday April 06, 2024 @11:16AM (#39953015)
READ COMMITTED is great for applications that need a coherent snapshot of the database but not necessarily the absolutely most recent data, which in my experience is actually most apps.

It allows readers to see valid data (relationships are correct), while not blocking writers. It can be the difference between constant deadlocks and super-high throughput without lock contention.

Everything works fine via iCloud private relay. No account or other mitigations required.

So perhaps it’s not VPNs that are blocked and instead the traffic you’re sharing an IP with.

svchost.exe is literally what the name implies. It's a generic service host. You pass it a dll and an entrypoint (via command line arguments and registry keys) and it runs it.

You should look at which thing it's actually running to see what's using all your CPU.

Some articles detailing what it does and how it works: [1] https://nasbench.medium.com/demystifying-the-svchost-exe-pro... [2] https://pusha.be/index.php/2020/05/07/exploration-of-svchost... [3] https://blog.didierstevens.com/2019/10/29/quickpost-running-...

Obviously not? Where are you living where even if fiber is available in your city, it’s not just a small section you’d need to deliberately account for in your selection of housing?
Bitlocker requires a Professional or greater license of Windows, but needs neither an internet connection nor a Microsoft account.

I have mine setup with TPM + PIN, and have archived the recovery keys myself, not stored them with Microsoft.

This happened to me on one of my domains, and Spotify support was similarly useless.

I finally resolved it by resetting the passwords and deleting 5-10 accounts a day, until the spammers decided continued use of my domain wasn’t worth their time.

Re:Desktop Linux Hardening on Monday June 12, 2023 @01:34PM (#36297539)
Hibernate is usually used to allow the computer to shut down completely and not remain in standby, saving battery. It’s not about boot speed anymore.
Re:We reduced our iOS app launch time by 60% on Tuesday February 07, 2023 @09:41AM (#34693341)
I wish they’d name the third party library.
Re:Materialized View: SQL Queries on Steroids on Sunday January 01, 2023 @01:14AM (#34204097)
Materialized views are a much more powerful tool when used on databases that properly support them.

When I’ve used them the database has transparently handled updating them efficiently as the source data changes.

Re:Ask HN: Can we delete our accounts? on Sunday November 27, 2022 @02:41PM (#33765990)
Since nobody has linked it yet, there's a comprehensive document covering this and related topics, here: https://www.ycombinator.com/legal/

YC has multiple in-house lawyers. They're not going to risk their business over this. However, I'm unaware of any law that requires the process be completely automated.

Re:So I lost my OpenBSD FDE password on Tuesday November 08, 2022 @12:08AM (#33516053)
AWS is my largest annoyance in this regard.
Re:Lufthansa bans AirTags in checked luggage on Friday October 07, 2022 @06:40PM (#33127753)
I was able to determine that someone with the exact same bag had taken mine from baggage claim and retrieve it from them before they left the airport with it. We both had much better vacations as a result. I’m going to keep mine in my luggage, sorry.

Older »