untitaker_
Re:Show HN: Hacking a $20 4G wireless hotspot into a texting device
on Tuesday September 15, 2026 @08:45PM (#49720800)
it's most likely UZ801 (mentioned in the article)
Re:ICE Is Using Fake Cell Towers to Spy on People's Phones
on Wednesday September 10, 2025 @06:21AM (#45195633)
like I said, if you assume your adversary is the US government then they might as well start issuing rogue TLS certs to target individuals.
Re:ICE Is Using Fake Cell Towers to Spy on People's Phones
on Tuesday September 09, 2025 @05:08PM (#45189166)
I don't think there are many options to host sourcecode and binaries in a way that is safe against an adversary like the US, and especially in such a way that technically illiterate users are protected. Because you'd have to assume that CAs are not off-limits either then.
Re:ICE Is Using Fake Cell Towers to Spy on People's Phones
on Tuesday September 09, 2025 @04:53PM (#45188913)
I think GP is talking about a scenario where Microsoft would serve either malicious source tree or binaries to just one user, not all of them. that would be fairly hard to detect. but in such scenarios we'd also have to start asking questions about the state of the entire CA ecosystem.
Re:You too can run malware from NPM (I mean without consequences)
on Tuesday September 09, 2025 @07:56AM (#45180709)
i can guarantee you npm will externalize the cost of false-positive malware scans to package authors.
Re:Building a BitTorrent client from the ground up in Go
on Monday February 24, 2025 @07:29AM (#43158754)
the answer to this problem in general is NAT hole punching, but BitTorrent doesn't actually have an answer to your problem. if you are behind a NAT, you can only connect to peers that are not behind a NAT or have port forwarding set up. for popular torrents this is good enough because you don't have to connect to all peers.
> This is possible with port forwarding. But that's a niche set of peers, who have the power to configure port forwarding on a NAT proxy.
yes it's niche but I guess this means BitTorrent isn't as P2P in practice as one wants it to be, but held up by seedboxes.
Re:AI companies cause most of traffic on forums
on Monday December 30, 2024 @01:38PM (#42552177)
Presumably they switch UA to Mozilla/something but tell on themselves by still using the same IP range or ASN. Unfortunately this has become common practice for feed readers as well.
Re:JavaScript dos and donts Mu-An Chiou
on Sunday November 17, 2024 @07:51AM (#42163944)
browsing code is one usecase. opening issues (and having many tabs of issues open), discussing pull requests is another one. I don't think an SPA would be suited for that kind of content. Discourse might be a counter-example, but they had to do strange things for SEO, and some of its UX choices are also controversial.
I was mildly intrigued when github.dev launched and I could just open vscode in my browser. best of both worlds in a sense, just not very well integrated into each other.
Re:PyPI now supports digital attestations
on Thursday November 14, 2024 @12:51PM (#42138937)
I'm just here to say that this is a shit reply unworthy of even HN. if you want to vent like that, do it in private. anyway, green comment moment
Re:GRC SpinRite
on Sunday June 02, 2024 @10:47AM (#40554629)
lmao
Re:GRC SpinRite
on Sunday May 26, 2024 @09:09AM (#40481885)
people complain about character assassination in this thread, but then, what is this supposed to be?
Re:HTML Web Components: An Example
on Friday November 17, 2023 @07:58AM (#38302870)
> If we're not doing any state manipulation and are just using static props I don't see why we even need any abstraction at all.
People are using React outside of SPAs just because they're already used to it, and because it's got a rich ecosystem of reusable components.
I don't know how to implement setShowTooltip in vanilla js and webcomponents. It is probably really ugly. But also, making your web components work with progressive enhancement does not necessarily mean you have to get rid of React. You can still use React to define a custom HTML element, and combine the state management of React with the progressive enhancement of web components.
Re:HTML Web Components: An Example
on Friday November 17, 2023 @07:53AM (#38302822)
the problem is that react is being used outside of SPAs, for any sort of interactivity, because it is easy to hire for at this point and because there are a lot of existing components to choose from. so yeah, progressive enhancement doesn't work if the actual component is state-heavy, or the entire site is state-heavy. When React came out, its tutorial was very centered around being embeddable on existing web pages, and it was framed as more of a "jQuery replacement". IIRC the term SPA didn't even exist yet. The other commenter already pointed out what the end result is.
if you don't do it for accessibility, do it for SEO. yeah a lot of commenters here already pointed out that SSR is a thing now, but the concerns you had still apply then. There's two paths to test now, one with JS and one without. This kind of always was the case though.
Re:A four year plan for async Rust
on Tuesday November 07, 2023 @12:59PM (#38180372)
All of this would be correct in an alternative reality where everybody in the Rust community, including every person ever involved in the language's evolvement isn't aware of these complaints.
Re:A four year plan for async Rust
on Tuesday November 07, 2023 @12:24PM (#38179782)
This is a popular sentiment that I share to some degree, but I really wish we could just move on from this discussion. It happens in every post that is even just vaguely about Rust or async. It's like reading complaints about the GIL on a post that is loosely connected to Python! At some point it just gets boring.
"I will forever argue that [...]" -- Why are you forever arguing?
"I feel like I am alone with [...]" -- No, I read it every day on here.
Re:FFmpeg-online: ffpmeg running on the browser
on Sunday October 15, 2023 @03:36PM (#37892712)
[delayed]
Re:Austria rail operator OeBB unveils new night trains
on Sunday October 08, 2023 @12:05PM (#37811668)
ideally yes but i don't think it can be done with the current organizational structure of the european rail network. not consistently, only bilaterally
Re:Austria rail operator OeBB unveils new night trains
on Sunday October 08, 2023 @11:16AM (#37811213)
> There is already a bottleneck on these trains because the staff need to bring you to the compartments.
No, that's just not how it works most of the time with ÖBB, not even in Nightjet. I walk in and the ticket inspection happens later. Yes there's staff outside with NJ to sort you in, but you can walk around them. At no point are they a real bottleneck.
Re:Austria rail operator OeBB unveils new night trains
on Sunday October 08, 2023 @10:02AM (#37810518)
> Additionally from Amsterdam to Zürich 3 people got robbed while still in the Netherlands. This train is reservation only, they could at least lock the doors or something to prevent criminals from boarding.
compartments can be locked, locking up the entire train and having the entire boarding process be bottlenecked on ticket inspectors seems highly impractical
Re:Ask HN: What is nitter and why does it still work?
on Friday September 29, 2023 @10:21AM (#37704693)
other instances are working. they are denoted at https://github.com/zedeus/nitter/wiki/Instances and more readably at https://status.d420.de/
Re:Misinformation Should be Refuted, not Censored
on Sunday September 24, 2023 @09:43AM (#37633042)
https://en.wikipedia.org/wiki/Brandolini%27s_law
> The amount of energy needed to refute bullshit is an order of magnitude bigger than that needed to produce it.
Re:U.K. Abandons, for Now, Legislation That Would Have Banned End-to-E...
on Wednesday September 06, 2023 @06:31PM (#37412312)
brilliant idea. let those governments know who really rules the world. we already have a bunch of dictatorships censoring the internet on purpose, so let's do their job for countries whose democratic processes can't do it for them.
Re:Vitalik Buterin on Twitter Community Notes
on Monday August 28, 2023 @12:27PM (#37296623)
this is not what vitalik is saying. he is saying that the output of the algorithm has not been modified after the fact. he explicitly mentions the possibility of vote brigading and fake accounts, both of which are well within elon's capabilities.
Re:Chromium JPEG XL just changed to “Untriaged” for evaluation
on Monday August 07, 2023 @01:24PM (#37037577)
this has nothing to do with what i am talking about. the issue is legitimate but there are no news or interesting insights here.
Re:Chromium JPEG XL just changed to “Untriaged” for evaluation
on Monday August 07, 2023 @11:10AM (#37035546)
this is a rando spamming the chromium issue tracker. what is newsworthy about this?
Re:A Guide to Closures in Rust
on Wednesday May 24, 2023 @04:04PM (#36063229)
I agreed with your original comment but this insistence on "functions never capture environments" is not useful when a really large portion of programmers come from those kinids of languages and are trying to learn Rust.
You can insist on correct terminology or adapt to your surroundings and try to speak the language of your target audience. I assume somebody who calls closures "anonymous functions" is speaking as a JavaScript developer to JavaScript developers. Even if not, it's not unreasonable to adopt the terminology of such a popular language.
Re:AWS’s Anti-Competitive Move Hidden in Plain Sight
on Saturday March 18, 2023 @01:42PM (#35211314)
I have a suspicion that cloud vendors are using bandwidth pricing as a way to deter abuse. Can't use them for ddos, tunneling, file sharing or mass scraping that easily anymore. The lock-in is a nice side effect.
Though Corey is talking about internal network use and I am talking about bandwidth to internet
Re:How do you quickly search databases that are hundreds of millions o...
on Sunday February 05, 2023 @01:25PM (#34667329)
Try just using ripgrep, sed, cut, etc. I found it is good enough for most data analytics I want to do on dumps like these. Particularly replacing grep with ripgrep makes a big difference.
If that isn't fast enough, perhaps try feeding them into clickhouse. There is a recent talk on fosdem about how to load dumps easily into it: https://fosdem.org/2023/schedule/event/fast_data_analytical_...
Re:Google to remove all VPN ad blockers that don’t comply with their p...
on Friday November 04, 2022 @12:15PM (#33469128)
Which content-blocking APIs are you talking about? Blockada just started hosting a DNS server. Google just made it so that blocking decisions can't be made locally anymore and all my used domain names are sent to a third-party server. Given deployment of SSL and even cert pinning in almost all apps I know of, I doubt the local VPN API allowed them to gather much more info than hostnames either.
EDIT: I see you're affiliated with Google Play. You should've lead with that.