News for hackers. Stuff that matters.

lashkari

Re:I think we might lose public key cryptography on Thursday October 08, 2026 @05:52PM (#50012900)
Re:Ask HN: What are you working on? (October 2026) on Friday October 02, 2026 @11:27AM (#49934601)
This is a really cool idea!

If you don't mind a little feedback:

- It took me a lot longer than it should have to figure out how to click into an item on the results list; I instinctually clicked on the card and then the photo of the item, assumed that they weren't clickable, then accidentally clicked into one before realizing that only the name of the item is linked. The grid cards on the main homepage don't have this issue.

- The visual design of the Child/Adult radio group makes me think that the white item is selected, but I'm pretty sure it's the black one (based on the fact that the Medium ratings turn to High when Child is rendered black). It's clear enough in the filter at the top that the item rendered black is the one selected, but it wasn't clear to me in the radio group.

For anyone else that's interested, the researcher's own blog post (linked to in the article) gives a lot more detail: https://zerotistic.blog/posts/find-my-people-linux

I was curious if this used rustpush (https://github.com/OpenBubbles/rustpush) to do the heavy lifting and it looks like Zerotistic referenced rustpush/PyPush/FindMy.py in addition to their own reverse engineering to create their own implementation.

Re:Linux 7.2 Released on Thursday August 20, 2026 @02:06PM (#49378076)
It doesn't give any specifics about what changed on the HDMI Forum side, but this article [0] from June indicates that Valve worked closely with AMD to get it pushed through prior to the release of the Steam Machine (which supports HDMI 2.1 VRR).

[0] https://www.digitalfoundry.net/news/2026/06/valves-hdmi-2-1-...

Re:Ask HN: What are you working on? (June 2026) on Monday June 15, 2026 @02:11AM (#48537224)
I built Update My Address Book (https://updatemyaddressbook.com) more than a decade ago to make it easier to collect addresses from family and friends so that we could send out Christmas cards. It's been the app that I've rewritten every few years when I want to test out a new tech stack.

After getting laid off a few weeks ago, I decided to give it a complete rewrite with some new features (offline support, lists, passkeys) and a new UI.

It's still very much a work in progress, but I'd really appreciate any feedback that could help make it useful for others as well.

If it's really accessible from *.google.com, wouldn't this be simple to verify/exploit by using Google Sites (they publish your site to sites.google.com/view/<sitename>)?
Re:Ask HN: Is accessibility worth it? on Friday February 04, 2022 @12:45AM (#30203318)
I can't share the work I referred to above, but it was very similar to the last example on this page: https://salesforce-ux.github.io/dnd-a11y-patterns

Disclaimer: I have no affiliation with Salesforce or the creation of that example page. I just found it in a web search.

Re:Ask HN: Is accessibility worth it? on Thursday February 03, 2022 @10:35AM (#30193733)
We made drag-and-drop interfaces accessible by allowing users to TAB through the original list, press ENTER on the item they want to move, then use the arrow keys to move the item and press ENTER again when done (or ESC to cancel). After each move, the item's current position, and any necessary local context, was announced via `aria-live` region.

There are other ways that this can be accomplished with even fewer keystrokes, so I can't imagine a scenario where drag-and-drop interfaces would have to be avoided because they couldn't be made meaningfully accessible.

Re:Ask HN: Is accessibility worth it? on Wednesday February 02, 2022 @02:09PM (#30182383)
It helps to reframe your thoughts on accessibility as a subset of user experience (UX). Putting aside any potential moral argument, how important is UX to your business/project?

When accessibility is thought about and incorporated ahead of time, your overall user experience tends to be better. This is sometimes referred to as Universal Design.

I managed a project where we implemented a UI redesign for our existing enterprise SaaS software and we "went the extra mile" to not just make the experience accessible but to make that experience pleasant for our users with disabilities. In the end, some of the features -- especially around keyboard navigation -- that came out of that accessibility work were considered the best part of the redesign to our users.

Re:Monkey Island PC-speaker music player on Thursday July 29, 2021 @02:25PM (#27999741)
Heads up: I opened this link in a new tab and it immediately started playing a very loud, constant tone.

If you're wearing headphones or have your speakers turned up, be careful!

I've taken the approach of only reading the 3-star reviews.

In most cases, a 3-star review will provide a pretty thorough assessment of the pros and cons, and it's generally easier to determine the authenticity of the review.

Re:First Apple Silicon Benchmarks Destroy Surface Pro X on Monday June 29, 2020 @04:37PM (#23682629)
It's worth noting that this is comparing the Apple Developer Transition Kit (with the A12Z SoC from the March 2020 iPad Pro) to the Surface Pro X (with the MS/Qualcomm SQ1 from October 2019).

It'll be interesting to see what Apple actually ships in production hardware.

Re:Encoding your WiFi access point password into a QR code on Monday December 30, 2019 @08:45PM (#21918334)
Pretty much any Android device from the past 4-5 years should support connecting to WiFi via NFC (assuming the device actually supports NFC).
I get your point that a highly-motivated attacker has other, less sophisticated, ways of getting to your data.

However, if we're playing poker and I learn your tell, it's in my best interest that you are naive to that fact. While not the best analogy, I would think that the same concept would apply to state actors.

An "unknown caller" is typically one that has no caller ID information provided (e.g., unlisted number). However, getting a random telemarketing call from a VoIP-provided (or spoofed) local number would still come through since the caller ID information is provided, even though the number is not in your contacts list.
Re:I Can No Longer Recommend Google Fi on Friday January 11, 2019 @04:55PM (#18887546)
Except that many services (e.g., Family Libraries, Family Link, etc.) don't work with G Suite accounts.
I read once that the answer to any article whose title is a question is always "no."

In my own anecdotal experience over the past couple years, this no hypothesis has been right about 90% of the time.

As silly as it may sound, three-finger drag is the primary reason why I will likely be purchasing a MacBook Pro instead of a Surface Book as my next laptop.
Re:MacOS 10.14 Wishlist on Friday June 01, 2018 @04:50PM (#17210128)
I get your point, and somewhat agree, but I think it's important to remember that the two (feature updates to Terminal and Notes vs. stability/performance/etc.) aren't typically mutually exclusive; the developer that would implement Markdown support in Notes isn't likely the same developer that would be implementing performance/stability enhancements to the core of the OS.
Re:Gusto launches a free HR product for small businesses on Friday March 16, 2018 @06:22PM (#16604415)
Took me a while to find it too, even though it's linked in the article. The product is called HR Basics and includes onboarding, employee directory/resource lists, and PTO management: https://gusto.com/free-hr
Re:CSS Grid for UI Layouts on Wednesday February 14, 2018 @04:11PM (#16379408)
It's not as simple as using auto-prefixer, since IE10 and IE11 use the older syntax. However, it's surprisingly not that bad for simple layouts.

Here's a great resource covering the hows and whys: https://rachelandrew.co.uk/archives/2016/11/26/should-i-try-...

And here's a simplified example I threw together recently to demonstrate it in action: https://codepen.io/shahab/pen/ypWmZG

Basically, you lose auto-placement, named grid areas, and simple grid gaps, so you have to manually place items in the specific row/column for IE. But, I've found that it's still easier than the alternative in many cases.

Here's a link for anyone else that wants it: https://www.youtube.com/playlist?list=PL8FE88AA54363BC46
Looks like it prints automatically once Page.loadEventFired is triggered.

Alternatively, you can run Chrome headless with the remote debugging API (--remote-debugging-port=9222) and send a Page.printToPDF (https://chromedevtools.github.io/devtools-protocol/tot/Page/...) after some delay.

Re:Signal Desktop beta now publicly available on Friday April 08, 2016 @10:12AM (#11454748)
The Android app also supports standard SMS with non-Signal users. Those messages are not encrypted, so they show the lock to indicate whether the message was sent via Signal or SMS.

Think Apple Messages blue versus green.

Re:Another Dell root certificate discovered on Wednesday November 25, 2015 @05:33PM (#10630196)
I just went through this with a new Dell XPS for my dad.

I performed a wipe/reinstall (with media created directly from a Microsoft download) and Windows 10 never asked me for a key after reinstalling it, and it reports as being activated.

Seems like they've moved away from requiring an OEM key in addition to the SLIC BIOS signature.