News for hackers. Stuff that matters.

rvanlaar

It looks like brotli <= 1.2.0 is vulnerable.

The python package has already been updated to 1.2.1. https://pypi.org/project/brotli/1.2.1/

Re:See a Fish? Ring the Bell on Monday March 25, 2024 @06:07PM (#39821778)
Never expected this from my hometown to hit hackernews.

For some context, here's the lock in streetview: https://www.google.com/maps/@52.0974077,5.1152216,3a,75y,277...

Re:Nintendo Switch Emulator: Progress Report December 2023 on Wednesday January 17, 2024 @10:06AM (#39028685)
If it can be performant depends on the tasks it need to full fill.

The Switch uses the X1. A chip from 2015. The CPU has a clock rate of 1GZ, the GPU 307-768 MHz. [1]

[1] https://en.wikipedia.org/wiki/Nintendo_Switch#Technical_spec...

Re:The weirdest bug I've seen yet on Thursday November 30, 2023 @04:13PM (#38479186)
Ah, Chrome and slow spinners.

Python tests were taking ages on VSCode due to an SVG spinner:

https://bugs.chromium.org/p/chromium/issues/detail?id=103626...

https://github.com/microsoft/vscode-python/issues/9216

Re:Progress on No-GIL CPython on Friday October 20, 2023 @05:20PM (#37961690)
There's a GIL presentation [1] from 2010 which shows Python 3.2 on a 1 CPU machine was faster than on a dual core.

In all, there might be reason to expect GILless python to be faster single core in certain scenario's.

[1] https://youtu.be/Obt-vMVdM8s?t=2047

Re:Some Reasons to Avoid Cython on Friday September 22, 2023 @11:05AM (#37613017)
I'm working on a project to revive old QTVR movies[1].

After writing a couple of python decoders [2] for movie encodings from the 90's it got old quickly.

As luck would have it, FFmpeg has support for almost all video encodings under the sun. For my usecase I wanted to send one frame per time to FFmpeg to decode.

Luckily I found PyAV[3]. It's a Cython project which binds to FFmpeg.

Which brings me to the article. It reads more like a C bad, rust good. Cythons tag line is: 'Cython gives you the combined power of Python and C`

Just wanting speed and less memory bugs, then rust will fare better. If you want to have the combined power of Python and C then Cython is pretty cool.

[1] https://github.com/rvanlaar/QTVR [2] https://github.com/rvanlaar/QTVR/tree/master/qtvr/decoders [3] https://github.com/PyAV-Org/PyAV

Here's Arjen Lubach, the Dutch Jon Stewart, about phones in classrooms.

https://www.youtube.com/watch?v=cclEuSxFd_M

Note: The autogenerated (english) subtitles are a pretty decent.

Re:Analyzing multi-gigabyte JSON files locally on Saturday March 18, 2023 @06:00PM (#35213523)
Recently had 28GB json of IOT data with no guarantees on the data structure inside.

Used simdjson [1] together with python bindings [2]. Achieved massive speedups for analyzing the data. Before it was in the order of minutes, then it became fast enough to not leave my desk. Reading from disk became the bottleneck, not cpu power and memory.

[1] https://github.com/simdjson/simdjson [2] https://pysimdjson.tkte.ch/

While I agree with the sentiment, in practice I haven't seen it go over well. I find the tooling around SQL to be severely lacking.
Re:Ask HN: Freelancer? Seeking freelancer? (November 2022) on Tuesday November 01, 2022 @11:33AM (#33422600)
SEEKING WORK | Europe | Remote preferred ========================================

Get projects unstuck

Roland van Laar is an independent IT consultant who helps businesses use IT. Be it unstucking a project or building software and bringing ideas into reality. He started 16 years ago in IT and has since gotten experience in various roles such as, sysadmin, devops, teaching, coder, project lead, architect and advisor. Now he's working on helping companies by focusing on process.

Re:Show HN: I may have created a new type of puzzle on Sunday September 18, 2022 @06:12AM (#32886141)
Thanks for sharing. That was a fun game.
Thanks for the responses, much appreciated.
A top developer leaving also functions as a signal to others in the company.

I once left a company quickly after a senior leader had left. That proved to be a good move since the company was going under and sold a few months after.

What an interesting story. It made me look up how medal of honor started.

Could you clarify a few things? I don't think the story adds up.

Wikipedia has the followin information. Medal of Honor was made by DreamWorks interactive. [..] Filmmaker Steven Spielberg Spielberg founded DreamWorks Interactive in 1995. [1] And: Danger Close Games (formerly DreamWorks Interactive LLC and EA Los Angeles) was an American video game developer based in Los Angeles. [2]

This doesn't sound like 'a small game studio in Oklahoma'.

[1]https://en.wikipedia.org/wiki/Medal_of_Honor_(1999_video_gam...

[2]https://en.wikipedia.org/wiki/Danger_Close_Games

Edit: It seems you were talking about the acclaimed: Medal of Honor: Allied Assault.

Made by: 2015, inc[3] https://en.wikipedia.org/wiki/2015_Games

Edit 2: Spelling

Re:Ask HN: What are some of the best documentaries you've seen? on Sunday September 11, 2022 @04:25PM (#32802964)
Secret History of silicon valley, more a presentation. It gave insight into the collaboration of astrophysics and the military.

Shoah: An documentary about the holocaust 11 hours long, but without any archive footage. The maker interviews all kinds of people. Farmers living next to train emplacements used, train drivers, perpetrators and more.

Re:Covid: Summary of lab-origin hypothesis on Tuesday September 06, 2022 @07:27AM (#32735601)
I've read the paper. What got my senses tingling, is that: - there has been no investigation on which strains were in the lab - if the data is to be trusted, given it's in China.

Till those questions have been answered I remain skeptical about the origin.

Re:Show HN: Zelda Breath of The Wild Street View on Sunday September 04, 2022 @04:24PM (#32717323)
This brings back nice memories.
It will catch random webmasters.

In short, Dutch hoster TransIP had to pause their scanning service. They got hashes that included default images from WordPress.

"Waar het misging, is volgens TransIP-woordvoerder Marco Edelman dat per ongeluk hashes van standaardafbeeldingen van WordPress-installaties en plug-ins zijn toegevoegd." [1] https://tweakers.net/nieuws/182766/transip-pauzeert-hashchec...

Re: Altered Carbon. How come the first season was awesome and got me to read the books. The second season was so bad I stopped watching it after a few episodes.

And yes, I just checked and I had the Premium plan. Just downgraded to standard.

Indeed, well done netflix.

X1 owner checking in. I use it and I'm happy with it. It hit the sweet spot when I bought it a couple of years ago.

I don't recommend it for the given price point. I included all extra options such as insurance and the extra disk space.

I found it isn't fast enough in general usage. Had problems running a serverless javascript project. External monitors with scaling will bring the iGPU to its knees. The display itself is too small to effectively program on it, and the CPU is not powerful enough to run a multitude of unittests or compile more complicated programs on.

I use my X1 with an eGPU and two 4K monitors. Webdevelopment happens in VSCode with heavy usage of the VSCode remote docker plugin. This enables me to run unittests and development tasks on a beefy PC.

Taken all together this raises the price quite a bit.

Re:Framework Laptop Mainboard on Wednesday April 20, 2022 @06:03AM (#31094688)
Re:Why the WHO took two years to say Covid is airborne on Thursday April 07, 2022 @05:10AM (#30942277)
It what happens when people see the media and their government lying.

They start asking, what else have they been hiding and lying about. After that it's hard to keep it grounded in reality. It's the proverbial "and see how deep the rabbit hole goes".

Re:Why the WHO took two years to say Covid is airborne on Thursday April 07, 2022 @04:56AM (#30942203)
The case with Mauride de Hond is different. His expertise is statistics. He is well known in the Netherlands for gathering election polling data.

He really looked at a few superspread events and drilled down in how it could've spread.

Re:Why the WHO took two years to say Covid is airborne on Thursday April 07, 2022 @04:49AM (#30942161)
Respectfully disagree.

A lot of people who looked into COVID were saying this doesn't add up. They were were framed to be in the 'small vocal minorities that say all sorts of crap'.

"the system" was all pointing and looking at each other. Big tech censored content that was deemed misinformation by the standards du jour.

"the system" failed what it said it would do, follow the science. And the WHO has been a major part of that system.

Re:One Year with R on Tuesday March 22, 2022 @11:10AM (#30767013)
I'm not OP.

To me, it's the tooling around it. Everything is done in R-studio and it's focus is to generate statistical documents.

The result is a sub optimum solution. It lacks good tooling around installing and running R programs. R programs don't import, they include. It doesn't make it more readable. R-studio is very Emacs like in the sense that it just lacks a decent editor. Due to R-studio being the default, there's not much support for other editors.

I don't think it's really necessary. $ 4000 is relatively cheap.

The review in the verge hits this point. The verge previously bought a $16,599 model from apple, which performs worse than the current $4,000 model.

https://www.theverge.com/22981815/apple-mac-studio-m1-ultra-...

Re:Google Tag Manager, the new anti-adblock weapon (2020) on Monday February 21, 2022 @05:01AM (#30413852)
You're hitting the nail on the head. I'm not against the website owners seeing what I do on their website.

What I am against is what other parties are able to do with the data when sold. They're able to correlate website visits with specific businesses and linkedin profiles.

Re:Reddit can't build a better search engine on Thursday February 17, 2022 @04:15AM (#30371078)
Thank you for sharing this view. There are a few nails in reddit's coffin and this is certainly one of them.

I used to be able to gauge real world opinions on reddit pretty accurately, i.e. be aware what was happening before the curve. That is gone now.

Re:Cloudpilot, a PalmOS Emulator for the Web on Wednesday February 09, 2022 @04:05AM (#30270570)
I really enjoyed mine as well.

Sometimes it would just drain the battery, and gone was all my data. As a young adult, all my appointments would be gone and I was left wondering if I was forgetting an appointment.

I've noticed this in the educational sector. It's technically not that hard to produce good software for it.

It has mainly settled at a local maximum. The software is good enough, money is tight, the priorities are different and procedures are bureaucratic.

Switching to new and better software means, first making it a priority. The procedure for larger schools also mean getting legal on board, writing an invitation to tender, etc.

Older »