News for hackers. Stuff that matters.

predictabl3

Re:TPM provides zero practical security on Friday September 08, 2023 @02:16PM (#37437278)
The absolute dumbest shit here gets up voted regarding Linux.

No dang, I don't care about the spirit of the site when absolute ludicrous mindrot garbage is up voted here constantly. You'll note on the Wayland thread that, despite being the 30th Wayland thread, the only substantive reply agreed with me. It's a joke.

Don't worry, I'm changing my password to a random guid, you'll be free of me in 45 seconds.

Re:Wayland Isn't Going to Save the Linux Desktop (2022) on Thursday September 07, 2023 @12:47PM (#37421793)
As a Wayland user, I have perfectly functional screen sharing, fractional scaling, VRR, mixed DPI, mixed refresh rate, zero tearing ever, and more. Mostly for more than year (other than fractional scaling, which is new in the last few months but honestly hasn't been super noticeable other than battery life improvements due to not needing to downscale).

Y'all have a complete dead-end, whose main core developers all have said is a dead end. Enjoy, I guess.

edit: what is with these replies? my arbitrary scale support in Wayland is completely unachievable in X11, MacOS, or Windows. And certainly VRR, mixed DPI, mixed refresh rate and fractional scaling are equally impossible/unusable in X11.

People like to talk about "getting work done" on X11, and I'm like, really? Do you use a computer or monitor built in the last 5 years? God forbid mix monitors, or use a laptop with an external display? because you're almost guaranteedly compromising on X11, whether or not you're willing to admit it.

edit2: to the person saying "I get all this in x11"". You're lying, either to yourself, not me. You are NOT getting mixed DPI, which alone is a necessary feature if you (again, gasp) own a high-DPI screen and low-DPI screen.

edit3: if the anti-Wayland people want to win sympathy, hammer on accessibility, where I will absolutely agree that things are Not Good TM.

edit4: if HN can prove that downvotes change reality, think of what other things we can achieve with the power of ignorance? lol stay salty, I'm going to keep using a desktop better than what macOS or Windows can offer. xoxo

Re:Exa Is Deprecated on Thursday September 07, 2023 @12:39PM (#37421655)
Oh god, it took a whole fraction of a second to replace 'exa' with 'eza' in my nix config and redeploy. whatever will I do?

After not noticing for months, because exa kept on wokring fine and still being more pleasant than `ls`. Oh noooooo.

Re:Exa Is Deprecated on Thursday September 07, 2023 @12:37PM (#37421610)
lol, as a distro package maintainer, I've literally stopped packaging and stopped using software that uses autotools. Given me meson or give me a software compiled in a respectable language, or preferably, death. I'd take cargo and its crates.io namespace warts every day over autotools, and twice on every day of the week.
Re:Exa Is Deprecated on Thursday September 07, 2023 @12:35PM (#37421589)
Oh never stop HN. I should never use anything except 30 year old gnu tools because they've definitely never gone through development lulls, or changed ownership. Etc. "They'll still work in years", as if exa doesn't still work just fine. People here just say the stupidest shit without an ounce of consideration of how ignorant it is.
Re:Rust crate rg typosquatting/redirect to ripgrep on Wednesday September 06, 2023 @02:07AM (#37401802)
Man, HN really just can't handle harsh truths. Do I need to go dig up 6 year old issues about this? Or the half dozen times it's come up on HN over the last 5 years?

I love Rust, I'm a big fanboy, but we need to stop pretending there aren't glaring blind spots.

Re:Plastic Money on Wednesday September 06, 2023 @02:06AM (#37401796)
Thanks for at least offering something interesting. To be honest, the state of crypto is past what I can keep up with, but that gives me some concrete foot-holds to look into Phonon vs Lightning more.

thanks!

Re:Plastic Money on Wednesday September 06, 2023 @02:05AM (#37401783)
Gee, sorry I thought HN would know how to Google a payment related topic when discussing payments. Let's see "lightning payments".

Oh yeah, gee, that takes us right to it.

And fuck outta here with the self-persecution bullshit commentary. My comment mentioned crypto and received a downvote 20 seconds in and 3 within 5 minutes. This site is turning into a shithole and I'm not going to keep dancing around it.

Re:Deno KV Is in Open Beta on Wednesday September 06, 2023 @02:03AM (#37401775)
Genuine question, are there folks hyped about Deno that don't come from a nodejs background?
Re:Rust crate rg typosquatting/redirect to ripgrep on Tuesday September 05, 2023 @01:58PM (#37395400)
This issue has been pointed out so many times, it's clear it just doesn't matter, really, to anyone on the Cargo team. Meanwhile, years after this criticism was first offered, the problem remains, only more entrenched.
Re:Plastic Money on Monday September 04, 2023 @11:36AM (#37381517)
Please don't scorch me HN, this isn't an endorsement, just a question for thought -- but isn't this one of the things Lightning is sort of meant to solve?

lol, literally less than 20 seconds.

> Then, when does reconciliation happen? When either party goes online? What if it is not a closed loop system? Then, reconciliation needs to happen for both parties independently. How long can either party stay offline and continue to make transactions? Is it both send and receive or only send on one side and only receive on another side? What if one party (merchant/receiver) is more likely to be online (almost always). Does it just become online payments problem then? NFC tap and pay is exactly this scenario.

Again, literally the exact problem statement and value proposition of Lightning, but stupid, stupid me for daring to mention it here, I guess.

I absolutely love that Texas has managed to convince their citizens that the states' problems are definitely most certainly all those California transplants (that they encouraged to immigrate) and not the states own self inflicted bs.
Re:Focus: A simple and fast text editor written in Jai on Sunday September 03, 2023 @12:37PM (#37371768)
Don't they get tired of being wrong, too? I've used software from these types of people and their stuff crashes and segfaults as much or more than their equivalents, certainly than the rust equivalents I use.
Did you not see people warning against this previously?

These warnings are like "make backups", "use a password manager". Afaict, people are either going to, and have, or they're going to be lazy and assume it won't hurt them until it does.

Re: on Thursday August 31, 2023 @06:15PM (#37344349)
Hard to trust this when the conclusion is to use NFS instead of VirtioFS. I don't buy that NFS over network, to a VM is faster than 9p, and certainly isn't faster than VirtioFS. Though "share from the VM" is good advice for NFS, since you can just reboot the guest when some part of NFS inevitably hangs (not-so-distant trauma here, including learning how to force power-off when shutdown is broken by NFS).

And yes, it works with Windows: https://virtio-fs.gitlab.io/howto-windows.html

Re:Show HN: Squabblr – A Twitter/Reddit hybrid platform on Thursday August 31, 2023 @04:46PM (#37343462)
I'm getting a self-signed SSL cert and then a generic Under Construction page. :/ Mostly just fyi: https://images2.imgbox.com/59/43/iBpTIRgT_o.png
Re:OpenTF Is Disconnected from Reality on Thursday August 31, 2023 @12:27PM (#37339778)
I can't believe I bothered reading that. Luckily the discussion of the client side encryption feature request gave me enough context to immediately stop.
As with all of these types of boards, it ships with some oddball u-boot bsp version, and from what I can tell upstream efforts for u-boot are going slowly (https://lore.kernel.org/u-boot/?q=lichee). YMMV. If you want to play ball with the shipping LicheePi4A bsp u-boot, you have to specially put firmware bins in /boot so that u-boot can slurp em and load em.

Contrasted with VF2 which appears to maybe even now be bootable from upstream u-boot with NVME. Something not even yet true of Rock5B from Collabora's "hardware-enablement" repos. (https://gitlab.collabora.com/hardware-enablement/rockchip-35...)

I'm supposed to be forgetting this. Maybe passing on the trauma is my way of healing.

Something I am (why, someone stop me?) curious about is the differences in toolchains used. I've seen it reported in several places now that stock GCC produces noticeably inferior code to the optimized th1520 toolchain. Is that going to change/be upstreamed/ etc?

I personally would wait to show it until it's usable. The self-hosting docs say "forthcoming". I'm quite interested to learn more, whenever that might be.
My CC company has been happy to handle this for me. A gym in a country I no longer reside in ignored all attempts to reach them to cancel a renewing, but non-contract, gym membership. The CC did a charge back and stopped future charges. Took a few minutes on the phone.

Additionally, I've taken to using my providers throwaway card generator to make site-specific ones that I can then one-click disable whenever I feel like it.

Granted, they only have this exposed through a fairly buggy browser extension, you can't just "do it" easily on the website, so I won't bother giving them the free marketing of mentioning them.

Re:Keystroke timing obfuscation added to SSH(1) on Tuesday August 29, 2023 @03:08PM (#37312381)
Since I'm the one that said it originally, I tend to strongly agree. I really can't stand it. Its such an absolute, unnecessary respect killer.
Re:Keystroke timing obfuscation added to SSH(1) on Tuesday August 29, 2023 @10:35AM (#37308571)
Nym?
Technical details 404, nothing about what distinguishes it from other chat platforms and hosts it's own community on discord. No.
Re:Unix sockets, Cygwin, SSH agents, and sadness on Tuesday August 29, 2023 @09:59AM (#37308060)
Ggp-bridge.exe. or if you don't need gpg agent forwarding, you can just use the Unix socket support in openssh-win32 now.

I can remote into a Linux server and use my yubikey as if I were physically plugged into the Linux machine.

Could you like, just exercise on your own without it being necessitated by some time sucking commute?

Idk.

Dude. "it's okay to get ripped off, it's only 20% of the price of the car, no biggie". Elon must be a smoother ride than a Tesla.
Lol. Sure. I'm absolutely fine with that and everything else it would imply.

The entire issue of excessive CEO compensation for the sake of driving stock price, while being completely divorced from any repercussions of any knowingly harmful actions is exactly the capitalism part of "late stage capitalism" that sucks.

Let's restate your question -- Why should shareholders not get to benefit from blatant disregard for truth or safety without any liability on the line when that stance results in collateral damage?

This is why I'm just so disenfranchised with this site anymore. Just another echo chamber of people repeating whatever they think or want to be true to align with their cults of personality.

I don't ride a Telsa or an Elon and I know that's not true. SMH.

Re:Stable Linux mainline builds for Ubuntu on Friday August 25, 2023 @10:41PM (#37269473)
I mean, at the very least, I do this because after I've put time into making something usually because there was a place to improve or a scratch to itch and if I'm releasing something it's because I'm hoping it will be useful to others.

It seems like a natural conclusion to spend a fraction of the energy to author, to detail it's reason to exist.

Anyway, no one owes me anything but I trust that Determinate Systems has a grander vision than I can see, I just want to be clued in, to be honest ;).

Re:Stable Linux mainline builds for Ubuntu on Friday August 25, 2023 @04:57PM (#37266941)
Wait, wtf. There's this in addition to lanzaboote? But no mention of it? (And at one point there was another new list with bootspec support, maybe still is)

Please, people, if you release software that overlaps or competes with another existing in the space, take the 3 minutes to write a comparison note or "why this exists". Please.

Older »