madog
madog on Hacker News
Ignoring any supposed security benefits, personally I use it because it's much more convenient/ faster than logging in with a password since.
You're still slightly less likely to get phished if you only ever login with passkey and only use the password in case of lost passkey. Of course you could get phished that one time but entering your password once (maybe never) has got to be better than entering it daily.
I don't have any passkey accounts where I didn't start off with a password and after adding a passkey the password login method was always retained. What services are people using where you don't need to set a password?
> Yes, there's the minimal risk of lockout if you lose access to the passkey (though almost every site I've used that implements pk's lays it on top of their traditional user/pass auth flow)
Exactly, if you lose your passkey you just sign in with your password like you did previously. I'm yet to find an app/website that has passkeys only and no passwords.
Seems like a total non-issue to me.
Posted by
madog on Thursday January 15, 2026 @11:58AM
from the ft.com dept.
If you have wired I just found out you can get a $30 wireless dongle for this these days. Available for both CarPlay and Android Auto. Meant to work pretty flawlessly although mine is the mail so I haven't tested it out yet.
It's not entirely, because Github simply does not support inter-version diffs when you have multiple commits. If you force push onto multiple commits there is no way to show a diff between version 2 and version 3 of those commits. How Github lacks such basic (and imo necessary) functionality in 2025 is amazing to me.
Something like linked and dependent PRs in a chain would go someway to replicating Gerrit but again this basic functionality is not available out of the box for whatever reason.
Something like Gerrit. Instead of carefully crafting a logical series of patches that are all well documented with commit messages, PRs are just garbage filled diff soup of "fix typo" commits. I hate it. It's hard to review and seems to be based on putting the least amount of effort into proposing changes to the code. See
https://gist.github.com/thoughtpolice/9c45287550a56b2047c631...
Migrating to Obsidian looks to be very easy now:
https://help.obsidian.md/import/evernoteWhen I converted many years ago it required 3rd party tools and was slightly more involved (but still totally worth it).
Presumably they were using a decompiler e.g. IDA Pro to know what characters to change in the hex editor? I've done that before to find offsets in the binary to NOP out some function calls.
5% at 70 mph is 3.5 mph
10% at 30 mph is 3 mph
I saw this with various European cars.
My experience is that it seems to be a fixed percentage rather than a fixed amount i.e. the absolute difference increases with speed.
It's not a rumour. They usually read somewhere between 5-10% over actual speed. Use a more accurate GPS speedometer on your phone to check that.
For sure. $1000 Herman Miller Aeron has been worth every penny considering the time spent sat on it.
Just use gettimeofday/clock_gettime via vDSO.
struct timespec ts;
clock_gettime(CLOCK_MONOTONIC, &ts);
On arm64 it directly uses the cntvct_el0 register under the hood but with a standard/easy to use API instead of messing about with inline assembly. Also avoids a context switch because it's vDSO.
I agree.
Seems like the first step should be understanding that you CAN have control over it, even if you don't currently; and that you have the agency and strength to do that without appeal to some higher power.
The admitting you have no control sounds fatalistic to me and robs you of agency/responsibility. Then you're reliant on some externality or higher power instead of finding it within yourself.
Even those who go for the higher power are ultimately doing it themselves, they've just kidded themselves something else is involved, and if that helps you find that you can have some control over it, then great, I guess?
Not to mention Meta is ad tech so these will be full to the brim of tracking and adverts to recoup R+D costs.
I'm yet to be convinced these are useful and not just another way to inject ads directly into eyeballs.
Posted by
madog on Wednesday March 19, 2025 @10:56PM
from the ft.com dept.
Last time I tried to report a fake product to Amazon it's literally impossible. It simply isn't one of the pre-determined options available through customer service, either the self service chat or to the advisers. The closest thing and what the advisers select would be "item not as described" which might be somewhat correct, but hides the problem to whatever reports get generated for management. Hard to believe that isn't intentional.
Actually with vaping it becomes pretty easy to quit. You just taper down the nicotine slowly until you're on nothing and eventually you just kind of stop because you don't feel the need to do it anymore.
There is PhotoGIMP[1] that copies the hotkeys and tool layout. It doesn't replicate behaviour exactly obviously but it does make it actually usable for me as someone who used Photoshop a lot in the past, and was eternally confused by GIMP.
1: https://github.com/Diolinux/PhotoGIMP
What country is that? That's a lot. At least in the UK if you don't watch regular TV you don't have to pay the licence fee (£159/year).
There are modern alternatives to many of the classic utils e.g. `fd` for find, with better CLI args and other improvements
ripgrep for grep also comes to mind
Where's the list that show all car brands? Doesn't seem to be easily found on that page or any of the linked ones.
This is what I want from a new search engine:
1. Respect exact match searches - this used to work enclosing the search terms in "" quotes, but no longer works. If there are no exact match results, return nothing.
2. Allow blacklisting or removing results from certain websites entirely e.g. I want to be able to configure geeks4geeks to never show up in any results ever
If someone could make this new search engine they would have a good shot at replacing Google :)
They also do not have an option to report an item they sent as counterfeit/fake which is amusing given how prevalent it is with their mixed bins between 3rd party items and legitimate goods.
The closest related option is "not as described" or something like that.
Even if you contact support chat that is the only option available to the advisers too.
So it's actually impossible to report something as counterfeit.
I always imagine some C-level exec looking at the stats and congratulating themselves on having no counterfeit items reported. Well done Bob! We did it again.
Nope. Tracepoint eBPF programs require root to load always. For eBPF you select a program type, and that limits what you can do (aka what helper functions are available to you) and what privileges are required.
What you can do is quite limited. You're restricted to some preset eBPF program types, and each program type has a restricted set of operations it can perform (eBPF helper methods). So arbitrary modifications, absolutely not without adding a helper method and/or program type for this purpose. More program types and helper methods are being added all the time but overall it's pretty limited in use cases and operations.
If you want full control then kernel module is the way to go, but this doesn't have the same security and stability guarantees.