News for hackers. Stuff that matters.

laundermaf

Re:Ring0VBA – Getting Ring0 Using a Word Document on Wednesday October 26, 2022 @05:57AM (#33341635)
To be fair, you're supposed to get a permission dialog and it seems you have to pick the specific device(s) to connect to them.

https://web.dev/usb/#get-access-to-usb-devices

However I suppose that the mere existence of this API means that there could be a way to bypass the request; The browser already does have full access to every device.

Hotel searches on Kayak are pretty poor simply due to the fact that they somehow always show low-res images. I generally book on Agoda or search on Google Maps nowadays. Kayak is still my go-to for flights though.
For flights yes, for hotels I suppose it varies on location.

In South East Asia hotels are cheaper on Agoda and even contacting the hosts directly wouldn't get you a better price most of the time. It's a waste of time to try so I stopped doing that.

It's also possible that they suggested worse options just to get a bigger fee without looking more expensive than what you could find with a single search.

I think the best "cheap" travel agents nowadays would just do the job of searching for you for an explicit fee, and then just send you the links. This is generally useful when you have specific requests and not much time to find them.

Re:macOS Ventura is now available on Tuesday October 25, 2022 @01:57AM (#33326770)
Hasn't 2000s+ Apple always talked that way in their marketing copy?
Re:Curl doesn't add libproxy due to its quality issues on Sunday October 23, 2022 @09:07AM (#33306690)
What you describe is exactly why people use dependencies. You just decided to trade your time for the noble act of having “no production dependencies”, while one of the 275 modules installed by Jest (real number) stole your production secrets anyway.

As for point 2, Node 18.1 I think just introduced a native argument parser.

Re:Show HN: Contact Form Delivery on Sunday October 23, 2022 @09:02AM (#33306653)
One of many, existed since at least 2013. The most popular one went bust since it was free and many more were born, bought and died since.

It’s good to keep seeing alternatives though since the lifespan of such services isn’t very long.

I myself ended up making my own version on AWS Lambda and SES and that worked well for 7 years without a change. This pattern is so common I think an example lives on AWS’ own help site.

Re:State of CSS on Friday October 21, 2022 @02:42PM (#33291577)
Page media has been supported for decades. Line numbers aren’t strictly related to page media. It’s hard to complain about the lack of in-depth support for a media that isn’t meant to display “the web”.

I do agree that it could be better. They have been adding print-related features though, at least I remember some in CSS3. CSS Colors Level 4 includes cmyk functions.

Re:State of CSS on Friday October 21, 2022 @02:40PM (#33291551)
Dialog is fine, but what I’m most excited is the upcoming Popup API. The finest part is that “the most recent popup gets the top-most layer”. You never have to fight z-index again because popups now live in a compositing layer outside the document itself (even though they’re still part of it), akin to position:fixed but without the conflicts.
Re:State of CSS on Friday October 21, 2022 @02:26PM (#33291377)
:is() exclusively reduces nesting if your nest produces a single rule, which is the least common situation and is generally dealt with by just duplicating the selector rather than nesting.
Re:State of CSS on Friday October 21, 2022 @02:22PM (#33291337)
Your comment reads like a lot of complaining by someone who doesn’t do a whole lot of CSS.

You’re complaining about the mere availability of color functions, that alone kills the rest of the comment.

Re:EasyList is in trouble and so are many ad blockers on Thursday October 20, 2022 @12:40AM (#33270888)
EasyList is a txt file. If they can’t host it on CF, it means they can’t use CF for EasyList.

They didn’t ban the whole organization, but effectively told them to stop. I don’t see a difference.

Re:EasyList is in trouble and so are many ad blockers on Wednesday October 19, 2022 @03:40PM (#33266971)
This issue caused CF to irreversibly ban them though, so it's not "just a bandwidth issue" anymore.

> Based on the URL that are being requested at Cloudflare, it violates our ToS as well. All the requests are txt file extension which isn't a web content

> you cannot use Cloudflare to cache or proxy the request to these text files

Re:Starlink for Aviation on Wednesday October 19, 2022 @04:20AM (#33259181)
First class has its own levels I think, just because you spend 10k for a flight you're not going with a limo directly under the plane without any wait in the airport. Some airports do have shortcuts though, that's true.
Re:Starlink for Aviation on Wednesday October 19, 2022 @04:19AM (#33259169)
Isn't PreCheck supposed to lessen that a bit?

I don't think "security" is going to be lessened in our lifetime, if anything it can only get worse. Disrupting the space would take an insane amount of money you don't have. People who have money, can fly private.

I don’t think anyone is saying that it’s less safe, it’s just that our standards (and fear) have increased. 1960s vehicles didn’t have airbags, now we don’t buy cars without them.
Your view on "the way of life" is so superficial.

Yes, we all breathe, eat and die. Day to day things are different. Interactions are different. Food is different. The time you spend between work and sleep is different.

Saying that "the way of life" is the same between South of India and the US is completely laughable.

> Popular things are popular for a reason

Meh, it really depends. Some places look amazing on cameras and especially on drones, but aren't that interesting if you're not a bird.

Specifically, "un-popular tourists" generally don't like to hang out with hundreds of other tourists, pay exorbitant fees and being hassled by street sellers anywhere they go.

> the locals' way of life is definitely not unique anywhere in the world

This reads like satire. You can't tell me that life in Vietnam is anywhere near life in the US. I don't need to visit any tourist places in Vietnam to enjoy living there.

The US equivalent is to go to LA instead of NY. Hanoi is the capital, the second largest city and very touristy. Picking Hanoi over HCM isn't off the beaten path at all.

Try Đà Lạt if you want to travel like a local.

> In many cases, he slept on the plane, and never even got a hotel room.

Doesn't sound like such a great life. Anything short of a bed is pretty awful to sleep, let alone planes; even less once-a-day long-haul flights that would allow any acceptable amount of sleep.

I'd guess "never even got a hotel room" is an exaggeration.

Rates yes, but fees not. Unless you're a US resident and can get a Charles Schwabs, you're going to pay all those ATM fees that a lot of countries charge, for example the inescapable US$6 fee in Thailand.
That suggestion that people buy iPhones merely because of iMessage is outrageous to a non-American. While I might certainly be one of the reasons, I doubt it’s the reason, unless the user is 12.
It’s kinda cool but apparently you can’t really be accessible AND script-free because they say you should change some aria attributes and potentially some focus when you open modals like menu and dropdowns.

A #menu href coupled with :target style is technically more accessible because the focus naturally shifts to it. Then the exit button should point to #menu-toggle so that closing the menu brings the focus back to the origin.

Kinda unrelated. This is more of an issue with that brokering site triggering an action on a GET visit, not related to HTML
So when do I use `<div onclick>`? /s

It’s disappointing how developers are so lazy to not even know the basic concept of a link. It’s completely ridiculous yet super common to see click handlers on DIV elements that set the value of location.href

As for A/BUTTON, we really need an attribute that clears the button’s style entirely, safely and forever. Nobody knows how to properly and full drop all useragent styles from a button, try googling it.

There’s a webpack plugin for that. You can use it to drop all the locales.
Re:Improving Firefox Responsiveness on macOS on Tuesday October 11, 2022 @02:08PM (#33166777)
Ah yes the second one is exactly it.

> Could be a lot better now?

Effectively zero progress. Last year I heard some work being done on an alternative API but I haven’t see that since. I don’t expect anything to be done before 2025 if ever.

It’s expensive to be poor.

Like poor people can’t buy bulk, real countries with limited budgets can’t spend freely for a 100-year project. It will be well worth it in the end, but you have to pay it all now.

Re:Improving Firefox Responsiveness on macOS on Tuesday October 11, 2022 @01:36AM (#33159842)
> just write my own WYSIWYG editor

For your own mental health, don’t. I was looking for an old article describing how bad the API is, written by one of the authors of a WYSIWYG JS editor, but I can’t find it.

Re:Halfix – A portable x86 emulator written in C99 on Monday October 10, 2022 @10:53AM (#33152122)
The only crime I see is how they wrapped this function https://github.com/nepx/halfix/blob/37a2d1394617397b817bbcd6...

Older »