News for hackers. Stuff that matters.

pardner

Unfortunately non-citizens probably don't have this luxury, but before entering certain countries - including returning to the USA as a citizen from a recent trip abroad, I wipe and do a fresh OS reinstall (simple new password not used anywhere else, zero user data, no email or chat or cloud accounts configured).

Right before the wipe I update my cloud backups of course, and if I've been doing a lot of work I use Carbon Copy Cloner to an SSD encrypted APFS volume and use DHL to ship the SSD to someone I can retrieve it from once home. I also have finally started traveling with a second phone (a cheap Consumer Cellular backup flip phone with only a few family in the address book).

"Password, please" - "sure, no problem: Travel1234 with a capital T."*

Restoring the devices is a bit of a pain, but is faster and easier with the SSD assuming it arrives.

But them's the times we're living in.

* I suppose if it they ever ask and login, CBP will ask "Why doesn't your device have any user data? This is suspicious." I might tell them about the time an Israeli border dude took my computer into a back room for an hour and by the time I got home someone in Israel had stolen and sold one of my better domain names. Or might just shrug and say "Citizen".

I am a little curious in that scenario (thoroughly wiped device, comply with password request) if they still impound the wiped device (after they presumably connect it to whatever digital-strip-search gadget they hide in the back room and it comes back clean).

Since the article's link is actually a Proton ad, here's the actual link: https://proton.me/flock-camera-map
Re:Memcachier: Several Clusters Down on Saturday December 20, 2025 @01:49AM (#46334130)
Aaaaand... still down a day and a half later. Moved to another provider yesterday but was curious and checked back. No acknowledgement of the issue, no status update, no blog post, no twitter post.
Re:Memcachier: Several Clusters Down on Thursday December 18, 2025 @08:08PM (#46321098)
It says "connectivity issues" but our cluster is down hard.
Re:Forth: The programming language that writes itself on Monday October 20, 2025 @02:31PM (#45647404)
In early 80s when I was a wee nerd in college a gentleman named Ray who owned Laboratory Microsystems was nice enough to give a poor college kid a copy of his excellent Forth implementation for the then-nascent IBM PC.

I breadboarded a little EPROM programmer (driven by a parallel printer port with the programming code done in Forth because I couldn't afford a real one). Then breadboarded implemented a little Z80 system with a bunch of general purpose I/O and a Forth "OS" in EPROM.

Used that little setup as the basis for a number of projects, including a home alarm system with phone-based control plus voice synthesis phone-based alert calling (which a couple silicon valley VCs were gracious enough to take a meeting about).

Forth gave me wings. Despite it's reputation as a "write-only language". Good times.

Re:AWS Multiple Services Down in us-east-1 on Monday October 20, 2025 @12:38PM (#45645874)
Darn, on Heroku even the "maintenance mode" (redirects all routes to a static url) won't kick in.
Saw your link, did your test and here's my feedback.

No "share" or "download" button in the app? Sure, "apps are cool" and all that - but what about folks who want to archive or share their health data? AFAIK literally no provision to share all those nifty biomarkers with my doctor (except many, many screenshots)?

Nowhere in the "how to get blood test" email instructions does it bother to mention a urine sample will also be needed. Kinda useful to know if you should not pee right before heading to the lab.

Can we talk about hacking, this being hackernews?

A few comments claim the sensors can be triggers by non-smoking events such as hairspray, nail polish remover, perfume...

If that is accurate it seems to me one could exploit that sensor flaw by purposefully triggering a false positives with some benign action - and video record doing so - perhaps a couple of times.

Then if and when smoking is alleged, obtain a log of the alleged event times, then provide video evidence that debunks at least one alleged smoking event.

A relatively small number of activists could probably create a viral nightmare for Hyatt and anyone else implementing this system.

Re:Apple introduces a universal design across platforms on Tuesday June 10, 2025 @05:02PM (#44241401)
Yet more glossy 'form over function' nonsense from Apple in my opinion. Was hoping '26 would be the release that tackled their massive technical debt around broken/reduced functionality. I did see a Reddit post that summarized it nicely, a screenshot of a Youtube video where the play button overlaps the name so it reads Liquid*ass
Re:Show HN: MidWord – A Word-Guessing Game on Tuesday June 10, 2025 @04:52PM (#44241326)
Nicely implemented screen layout. Curious if you've thought of reporting metrics showing how many guesses it's taking people? (I got 'volatile' in 9)

Does anyone consider DMCA notice/cure policy when selecting a hosting platform?

As discussed in quite a few HN threads, I agree with what seems to be the consensus that DMCA is a mess, ripe for bad actors. And, as discussed often, recourse against bad actors who file purposefully fraudulent takedowns is hard to attain due to the wording of 512(f) which at a superficial glance allows for damages but which requires proving in court not only that the infringement claim is...

( Read More... | no comments | 3 points | on HN )

Idrive.com (backup) blocks VPN – without any message

Backup failed and attempts to reach the website timed out. Everything else worked fine, even Google worked without popping up a captcha.Turns out iDrive is blocking certain IPs used by my VPN (Mullvad)... no message, just a timeout. I switched to a different VPN location and it worked fine.It seems to me that even if a bad actor has caused an IP address to get blocked, the right response would...

( Read More... | no comments | on HN )
Re:Rackspace (non-Exchange) hosted email down now, too on Saturday February 18, 2023 @05:55PM (#34851951)
Their hosted Exchange email has been having "issues" since December.

But today their "Rackspace Email" (hosted Webmail/IMAP/POP/SMTP) has been disrupted since 2pm ETS.

Re:Issues with upstream DNS provider on Tuesday August 23, 2022 @07:28PM (#32572960)
Yes, cant even access https://dashboard-next.heroku.com/ so the problem seems broader than what they describe on their status page which seems to imply only issues related to updating DNS settings.
Email received today: "One of our updates involves how disputes are resolved between you and Amazon. Previously, our Conditions of Use set out an arbitration process for those disputes. Our updated Conditions of Use provides for dispute resolution by the courts."

And in the conditions themselves: "We each waive any right to a jury trial."

Seems like yet more "let perfect be the enemy of the good" thinking.

If you want a cut-me-off set to $X, and some lag might allow charges to reach X+Y before the cutoff took effect, which is the customer-centric answer:

a) don't offer ANY cap, simply let the customer's out of control charges just keep racking up to catastrophic levels that put them out of business?

b) cut it off as soon as you DO detect it exceeded their cut-me-off threshold even if by that point it has reached X+Y?

There ought to be a "emergency shutoff" threshold, period. And there's just no customer-centric excuse for not implementing it after these many years.

Here's how to implement it:

"Amazon, what do you do today if my credit card fails and all the retries fail?"

Do THAT if billing hits <my emergency off switch threshold>.

Will it disrupt the heck out of all my AWS services? Of course. That's the point, if something went so seriously wrong that my billing hits an absurd level that will put me out of business, I'd rather have downtime.

Undocumented: Sendgrid now requires using a static IP if your app runs on Heroku

The past few days we started seeing a high (but intermittent) percentage of failed email sends using Sendgrid.It would be 80% fails (406 status code in our logs) for an hour or two, then OK for an hour or two, then 100% fail again.Sendgrid status page said no issues.Sendgrid support said they could not see the rejects but they'd look into it.We simply switched our traffic to our "other" ESP...

( Read More... | no comments | on HN )
Best general explanation I've seen so far, thanks for posting the link.

Unfortunately, it still completely sidesteps any discussion of the relative risk of a vaccinated person (who is protected from a severe infection themselves) still a) getting infected and b) causing a severe case in someone else who is not yet vaccinated.

So while "efficacy" may not be relevant on one dimension (MY chances of severe infection) it still seems important in another dimension (the chances of ME nonetheless getting infected then giving a severe case to someone else).

Is skipping J&J and waiting (a little while) for Pfizer/Moderna wiser?

It seems to me that the official recommendation "the best vaccine is the one they offer you first" ignores one crucial consideration that might make a better decision for some individuals to be "skip the J&amp;J if I can get Pfizer/Moderna by waiting a 'reasonably short' time".That crucial consideration is: the health of un-vaccinated people around me. If there are people around me who will not...

( Read More... | 3 comments | 2 points | on HN )
Re:State machines are wonderful tools on Friday January 01, 2021 @02:16PM (#25605833)
Great little story!

Target Disk Mode in latter-day Intel Macs finally is reasonably fast

TL;DR Formerly unusably-slow for backups a few years ago, the built-in Target Disk Mode in Macs has actually improved in latter-day Intel models (using a Thunderbolt 3 cable), now nearly 1/2 as fast as an external USB-C drive dock.My test: use Carbon Copy Cloner v5.1.22 to clone an internal SSD with 690GB of data. “Find &amp; replace corrupted files” is OFF*.Source: Macbook Pro 16″, Catalina...

( Read More... | no comments | 3 points | on HN )

Ask HN: Might Solarwinds hack scuttle US's attempt to thwart strong encyption?

Each attempt by the US government to weaken encryption with backdoors seems to teeter upon a pivotal assertion that the government can be trusted with such "keys". Forever. The Lawful Access to Encrypted Data Act introduced by Senators Graham, Blackburn, and Cotton, for example.Might the Solarwinds hack conclusively disprove any such assertions (that the US government, if entrusted with...

( Read More... | 2 comments | 4 points | on HN )
Re:Running Docker on Apple Silicon M1 (Follow-Up) on Wednesday December 09, 2020 @10:54PM (#25369481)
> It shocks me that so many people want to run Docker on a platform it was never built for.

Yet, it works, and well, your shock notwithstanding.

If your goal is a SINGLE portable, virtualized platform for your developers, which does not require a persistent internet/SSH connection, and which is "fast enough" for developers to be effective, Docker on Mac is a pretty swell solution.

Older »