News for hackers. Stuff that matters.

oriesdan

Re:Why is the US Green Party's site blocked? on Monday August 09, 2021 @10:00AM (#28116927)
By that logic, any site that allows to display third party content is a phishing/spam site and should be blocked - including twitter, facebook, HN and of course gmail.
Re:Hackers hide web skimmer inside a website's CSS on Saturday December 12, 2020 @05:37AM (#25397334)
I'm glad you enjoy our dystopian world.
Re:Hackers hide web skimmer inside a website's CSS on Saturday December 12, 2020 @05:28AM (#25397294)
Good for Denmark, it doesn't exist here. Plus, there is no way I will install a proprietary banking app. For this to be acceptable, it needs to be a standard and have multiple implementations. At which point, using cryptocurrencies is the easiest way.
Re:Hackers hide web skimmer inside a website's CSS on Saturday December 12, 2020 @05:10AM (#25397216)
And for people often saying it's a solution in search of a problem : that's why we need cryptocurrencies. At least, the ones that could be used as actual currencies.

It would be so much better if I could click a payment link that opens an external wallet software like "mailto:" links, verify the amount it proposes to transfer, and click "send" to send the money at the prefilled address instead of allowing someone to take it.

I really hope that one day, we'll tell our grandkids about that time where we were giving secret codes on the internet and anyone having them could take money on our account as they wish, and those kids will think we're delirious.

Re:PinePhone KDE Community Edition is now available on Tuesday December 01, 2020 @09:00AM (#25265148)
Nope, there's no option for that in phosh settings. Actually, it's the compositor (phoc) that starts gnome-session in /usr/bin/phosh. I've just tried to edit the startup script to launch gnome-session directly, but it would refuse to start.

It's also a pure wayland system, so it's quite unlike what we're used on desktop.

Re:PinePhone KDE Community Edition is now available on Tuesday December 01, 2020 @08:46AM (#25265043)
For reference, this was the post, in case you come around the author : https://news.ycombinator.com/item?id=25101199
Re:PinePhone KDE Community Edition is now available on Tuesday December 01, 2020 @08:43AM (#25265015)
Thanks for mentioning it.

How does fluxbox works on mobile? Is it basically the same than the desktop on a small resolution, or it can receive phone calls and have a notification bar?

Re:PinePhone KDE Community Edition is now available on Tuesday December 01, 2020 @08:13AM (#25264800)
For the record, I received yesterday the new mainboard that will be in those phones to replace the one of my pinephone UBport edition. The boost in RAM (3gb instead of 2gb) does the trick for me, allowing to use firefox. Not to the point that the experience is even close to android, but at least usable (before that, I used elinks on the phone).

The system I use (mobian/phosh) still feels sluggish, but I suspect it's more a matter of software than hardware, now. I tried yesterday KDE neon/plasma with that new board, but had problems that the screen would black out after a few minutes of use (had to do hard reboot to recover).

I see in this release announcement that their build of plasma is on top on Manjaro, I'll have to try that one. It's especially interesting because someone from Plasma mobile team told on HN the other day that they support MMS.

> If you're skilled I'm sure you can find a company that you can put in 10 hours per week at

Do you have real world experience with that? I found on the contrary that the more skilled I get, the less companies are willing to make me work only part time. Which is too bad, because part time high paid job is really the best of both world.

Part time jobs in restaurants is what allowed me to learn programming when I was in early adult life, and I crave for as much time to learn new things, nowadays. Sadly, while people I work for are willing to negotiate insane amount of money (in my opinion), they are not to concede the slightest amount of time.

Re:Moving from Macbook to Linux on Friday November 20, 2020 @03:03PM (#25164332)
I'm on Gentoo myself, but for people coming from MacOS, I would recommend to give KDE Neon a try.

It's based on Ubuntu, but made by interfacers (the KDE team). I have used it for about a year and I thought during that time that it was "osx on linux", because of how well integrated everything was.

The Plasma desktop and the KDE project have been known historically to very well integrate their softwares with one another, but Neon is going a step further, by controlling the OS itself and being way less buggy that other distributions of the Plasma desktop.

That would probably be a good transition OS coming from Apple products, before people get a taste for chaos and pure freedom and want to go wild.

So basically, on a planet whose surface is covered mainly by oceans, a meteorite fall in an urban area, is big enough not to disintegrate in the atmosphere and small enough not to blow the house and kill the man (I mean, what happened to craters?), and it suddenly makes him rich.

I'm not a religious person myself but I totally get why this man decided to build a church. I just hope he won't make it any weirder by proclaiming himself a chosen one or something, because there's room for that.

Not any bigger than package repositories on linux distributions, which include the list of all known software and sometimes even rules how to build them.

It's just plain text. If I can have a local dump of wikipedia, I'm pretty sure I can store a list of developer IDs. Especially when I'm a company controlling the hardware and knowing what is the minimum amount of space the hard drives have in my computers.

They're basically just promising they won't be bad guys, which solves nothing.

The proper way to implement their feature without causing privacy issues would be to periodically update a list of authorized certificates and check against that list locally when launching apps. That would probably also increase performances.

Re:PinePhone – KDE Community edition on Sunday November 15, 2020 @09:15AM (#25101323)
That's awesome. Great job!
Re:PinePhone – KDE Community edition on Sunday November 15, 2020 @08:45AM (#25101115)
Hi, thanks for taking questions.

What is the state of the phone call/sms/mms support in Plasma Mobile on Pinephone?

Also : will the CE edition be some sort of Neon mobile, or will it be based on PostmarketOS or something?

Re:Is a billion dollars worth of server lying on the ground? on Monday November 02, 2020 @07:26AM (#24967361)
I think the main reason they can afford pricing their services that high is because of peer pressure - probably itself the result of clever marketing, or that would be a really happy coincidence.

I've worked in many startups now, several of them where I was the first (and for a while, only) developer and had to decide on the infrastructure. Each time I was going with OVH, and each time the CEO was trying to push for moving to AWS instead, despite having no clue what the difference may be.

Their problem was that "startups are supposed to use AWS". They were having impostor syndrome. One would come to tell me every month or so how "all his friends use AWS, and they say it's very good". An other one was afraid what possible investors may say when he tells them we're not on AWS.

If people will pay overpriced services to be with the cool kids, why bother competing on price?

I usually search for documentation or tech problems in a text browser with cookies disabled, no js, no css, using tor and using an empty user agent.

I won't try to guess why, but the few pages I can access are always high quality, while poor quality pages (as discovered when opening the page anyway in a full browser) always try to block that setup.

Indeed. Or even make sure to integrate Patreon (or other donation applications) to any privacy-friendly video application.

I have a Twitch account just to have a paid subscription for the Critical Role channel, despite the fact that I never open Twitch and download their videos from Youtube using youtube-dl. It kind of feels ridiculous (especially knowing Twitch will put me in metrics of "their users").

Peertube comes to mind for discoverability. For ensuring content creators revenue, the best way would probably be to host their own website and put videos behind paywall or accept donations, as they see fit.
Here goes all the privacy-friendly ways to watch Youtube.

Well, I guess it's a good thing : now we'll have to campaign to let content creators know how terrible their choice of platform is.

Re:Nutcracker Challenge: Blob-Free WiFi and BLE on Wednesday October 28, 2020 @10:45AM (#24919292)
I would be very funny to discover they lose their source code :)

A more serious reason I could think of : maybe pine64 is trying to convince them to do just that, and this contest is to show them there is public interest (pure speculation from me, of course).

Re:Nutcracker Challenge: Blob-Free WiFi and BLE on Wednesday October 28, 2020 @05:02AM (#24916709)
This is also very efficient guerrilla marketing. Instead of asking users to tell their friends about your brand, you can make a lottery making them win t-shirts with your logo on it. They will be so happy to have won something they will wear it.

In this link's case, if pine64 want to get people excited about that EVB and start hacking with it, it sounds like an efficient strategy. Whatever the real value of the commits are, it's the users who are committed :)

At least, in this case, they ask for contributions on a repos they own.

Re:A Youtube video downloader written in Go on Tuesday October 27, 2020 @05:06AM (#24905612)
It's only a cosmetic change from a tech point of view of course, but from non-tech point of view, maybe it would be safer to say it's a youtube offline player than a youtube video downloader.

It would require to pipe downloaded video to vlc or something by default for this to be true, of course.

Agree with other comments here, as well : youtube-dl reference should probably be removed. It will be added back by those who link to the project.

Oh yes, I'm not saying those are bad projects. What they have in common is that migrating from previous version to them was especially difficult and painful.

The few symfony developers I know indeed loved symfony-2 very much. But migrating their projects from symfony-1 to symfony-2 was felt basically as a rewrite.

Thanks, I'll have a look at it.
After 9 years of ruby, I finally switched to Go as my professional language 3 years ago, after a couple years of side projects with it.

My feelings after building for that long : safety and productivity.

I initially thought it was because of moving to compiler and type checking, but then I learned C for my personal use (an other thing passing through Go allowed for me), and was surprised to realize my C compiler was not allowing me close to the same peace of mind than my Go one. Go is just a well-designed language that makes everything straightforward.

The main reason I started learning and building with C is that I'm not confident the code I write in Go will age well. The discussions around Go-2 make me extremely nervous (it has something that reminds me of angular-2, python-3, symfony-2, bootstrap-3, and others major redesigns who left developers in a lot of troubles, I hope time will prove me incorrect).

So basically, I'm enjoying it, but I worry if it will last. I guess that means I really love it.

Re:The X.Org Server Is Abandonware? on Sunday October 25, 2020 @09:27AM (#24886098)
It sounds like a good idea, but I'm afraid it may be a nightmare for packagers (like the ones providing packages on GNU/linux distros), as they see updates to upstream only to realize they are just pings and don't need to be repackaged.

It wouldn't be that often, though. And maybe they would actually love to have such heartbeat. I would love to hear a packager on that.

Re:The X.Org Server Is Abandonware? on Sunday October 25, 2020 @08:40AM (#24885861)
This sounds like a bad case of Cult of Release.

X works perfectly for me, and there is nothing I would want it to do that it doesn't do now. Why should it change?

I have many programs I wrote years ago that I don't change and I use every day. Constant changes are not a measure of utility.

But again and again, you'll find users looking at repositories and deciding that something is "dead" because there isn't any recent commit, often blaming developers for not doing more free work for them. This is a toxic attitude. When we have a software that works well and solves our problems, we should celebrate it, not complain it doesn't find new problems to solve.

Older »