News for hackers. Stuff that matters.

tayiorrobinson

Re:Backing Up Spotify on Tuesday December 23, 2025 @02:42PM (#46368632)
to use this method of scraping, logging in with a premium account is required.

so either they found a way around that lock, but not the quality lock, or they just decided 160k is good enough (it generally is), and decided to stick with that for filesize & bandwidth savings

Re:How I discovered a hidden microphone on a Chinese NanoKVM on Saturday December 06, 2025 @09:54AM (#46173784)
To be fair, the microphone _is_ listed on the specsheet of the LicheeRV Nano

https://wiki.sipeed.com/hardware/en/lichee/RV_Nano/1_intro.h...

I assume they didn't intend to put a mic on the KVM product, but they wanted to make a KVM product, already had this SBC product, which reusing their existing stock of helped keep cost low.

Should they have been more up front about it it? Sure, and it's not great that they had a bunch of security issues in the FW anyway, so not exactly great, but "hidden microphone in a Chinese KVM" lets the mind wander

Re:A Vibe Coded SaaS Killed My Team on Wednesday November 26, 2025 @09:06PM (#46064695)
not sure, but i'm getting the sense that they're annoyed that someone is expressing themself on their own personal blog and not being Professional enough
> That's why there is such a thing as a React compiler - a good sign that you're not writing JS, which doesn't have compilers.

You say that like it's a bad thing - but it didn't stop Babel or TypeScript from being popular, both of which need a compiler. And being honest, I don't like extra tools in my chain, which is probably why I don't use React proper, but that proves you don't need anything React specific for anything other than optimisation

The only syntax you really want for React is JSX. Which is just because writing React.createElement("div" ...) every time is unergomomic. JSX isn't specific to React. It could easily be a language feature, in fact it is an OOTB language feature of TypeScript.

> React is full of magic syntax that looks like functions, but e.g. you can't call them inside an if statement

They look like function calls, because they are. They're not "magic syntax", and in fact, those rules are explicitly because theres no way around that without implementing special syntax

Re:Silo – Private AI on your phone on Tuesday September 09, 2025 @06:50PM (#45190509)
how do we trust you?

afaik the app isn't open source, i'm required to login with Google/Apple, and theres very little information in the app about security, and plus, running models like DeepSeekR1 and Llama70B aren't cheap, so you've gotta be getting money from somewhere, right?

Re:macOS Tahoe brings a new disk image format on Thursday June 12, 2025 @05:42PM (#44263509)
The benchmarks are weird to me - the ASIF tests were done on M3/4, but for everything else it was done on an M1?
Re:Frequent reauth doesn't make you more secure on Thursday June 12, 2025 @05:38PM (#44263477)
and also requires you to relogin every so often (to be fair it's 90 days not 24h)

and you can just use a custom OIDC IDP with tailscale, for all 15 of us that have custom OIDC IDPs

Re:Get Out of My Head on Wednesday April 16, 2025 @06:26PM (#43711037)
> A single .ico file can contain multiple icons with different dimensions.

and as far as I know, no browser will download partial ico files. So the bytes saved by not including a link tag is immediately reversed by the browser having to download your 16x, 32x, 64x, 128x and 256x ico when it only wants the 16x

Re:Breaking the 4Chan CAPTCHA on Monday December 02, 2024 @08:52AM (#42296186)
Cool, sure, good, probably not. I've never played Halo so I didn't entirely know what I was doing (do I shoot the blue guys too? it's not letting me through so I guess I do), and I don't doubt people couldn't even get what it meant by shoot. And god forbid anyone with disabilities that affects their mouse accuracy, or needs a screen reader tries to use it

Haven't looked at the devconsole but it'd probably be easily bypassed by someone dedicated.

Re:Spotify has shut down several API endpoints on Friday November 29, 2024 @09:46AM (#42274214)
Apple Music have an API, by technicality. It's mostly read only, only really works in client side JS, uses their own proprietary authentication rather than OAuth, mostly readonly with the only exception of being able to create playlists for a user, and then add songs to a playlist
Re:Hetzner cuts traffic from 20 TB –> 1..5 TB on US VPSs on Thursday November 28, 2024 @12:40PM (#42267168)
To be fair, given how cheap a lot of Hetzners products (especially Server Auction, my beloved) are compared to the competition, not wanting to have loss leaders seems reasonable to me
Re:SSH Artwork on Wednesday November 27, 2024 @09:23AM (#42256309)
so the exact same as any other crypto key?
Re:SSH Artwork on Wednesday November 27, 2024 @09:21AM (#42256293)
It's probably still more secure than trying to compare the regular old string representations (who checks more than the last 5 characters from the end?)

And plus, you still have to brute force it to get one that looks close

Re:Oasis: A Universe in a Transformer on Saturday November 02, 2024 @03:14PM (#42028493)

  // ==UserScript==
  // @name         oasis.decart.ai
  // @match        https://oasis.decart.ai/*
  // @run-at       document-start
  // ==/UserScript==
  
  chrome = true;
Re:Cloudflare Fonts: enhancing website font privacy and speed on Tuesday September 26, 2023 @01:53PM (#37663178)
I mean, if you're using this, you're already using Cloudflare. So would you rather traffic hit CF & Goog, or just CF?
Re:Uninstall the NightOwl macOS app now on Tuesday August 08, 2023 @03:33PM (#37054337)
Their TOS essentially just says "Don't use the app"

> NightOwl app cannot be held responsible in any circumstances for Shared traffic fees or any other costs the User may incur in accordance with agreements with their internet service provider. The Application use might be prohibited or restricted by the User's service provider or applicable laws. The Application may not be compatible with all service providers' policies and regulations. The User should confirm the ability to use the Application with their service provider.

Re:Uninstall the NightOwl macOS app now on Tuesday August 08, 2023 @03:08PM (#37054005)
Yes.
Re:Uninstall the NightOwl macOS app now on Tuesday August 08, 2023 @03:07PM (#37053981)
The app isn't on the App Store. (switching light/dark is a private API so it wouldn't be allowed on the store anyway)
I did training provided by a large email security firm, and one thing the presenter said was along the lines of "this spam filter defaults to block the senders domain & IP, you can set an expiration on that block butI don't see a reason why you would". One misconfigured server sending out a single email and I assume by extension someone impersonating your domain could get you perma-blocked from sending emails to that company, and I assume it'd reduce your trust rating for other orgs using that provider.
Re:The Future of discord.py on Saturday August 28, 2021 @10:54AM (#28338535)
+ AFAIK Discord said they aren't going to completely remove message access, just lock it behind a privilileged intent. What's stopping malicious developers from adding features such as bad link detection, chat activity leveling system, thus giving them a reason to say to Discord, hey, we need message access, and then using the message access for these malicious reasons.