News for hackers. Stuff that matters.

wesamco

Re:Google dropping continuous scroll in search results on Wednesday June 26, 2024 @05:47AM (#40798183)
I can't find it in the settings for Google Search, has it been removed?
I've been seeing this specific type of sock puppet spam on YouTube for years, the same exact modus operandi, my earliest distinct memory of seeing this specific kind of sock puppet spam comments promoting a financial scam is from early 2020, just before the breakout of COVID19.

The screenshots shows how they are the top comment on the video, as a result of manipulating YouTube's comment ranking algorithm, with the sock puppet comments. (note: it's a big screenshot, you might need to zoom in)

How is it that Google has not fixed this yet? How can spam email classification in Gmail be so good while this is allowed to go on?

I believe a small finetuned LLM can easily identify this kind of sock puppeting spam.

Google should do something about this specific kind of sock puppeting comment spam that promotes financial scams and shadow ban them.

Can somebody who knows someone that works at Google ask them to raise this internally?

It infuriates me and makes my blood boil how they specifically target old people. and they intentionally target YouTube videos that old people are more likely to watch.

Re:Telegram Stars: Pay for Digital Goods and More on Thursday June 06, 2024 @06:39PM (#40603206)
> Soon, developers will be able to withdraw the stars earned by their bots in Toncoins via Fragment.

So it's backed by Telegram's own cryptocurrency, or at least soon gonna be. reading this killed the little excitement I had.

I guess the accuracy really depends on your location or ISP.

I believe my ISP rarely or never rotates IP addresses, and on top of that I think my ISP provided router is assigned an IPv6 address and it prioritizes using it, because when I visit whatismyipaddress.com with JS disabled, it can only show my IPv6 address, but if I enable JS it can show an IPv4 address too (I assume through the WebRTC IP leak method, which requires JS)

How the heck did it automatically pan the map to my current location, my small town, in an Incognito window, on page load?

Is IP geolocation this accurate and accessible to every website nowadays?

If this website can do this I assume every website I visit can do it too?

Re:Notepad Tab on Monday May 27, 2024 @08:30PM (#40496183)
While you can't save to localStorage as my sibling commenters have shown, greyface- down below in the thread posted a version that saves to the hash fragment of the URI. Saving to the (Data) URI has a benefit over localStorage of allowing you to save by bookmarking, which also enables you to save many notes, not just one.

I code-golfed greyface-'s code and made the text cursor autofocus on page load:

  data:text/html,<body contenteditable autofocus oninput="history.replaceState(0,0,'%23'+btoa(this.outerHTML))" onload="location.hash&& document.write(atob(location.hash.slice(1)))">#
Re:Notepad Tab on Monday May 27, 2024 @06:50PM (#40495525)
Nice! I bookmarked it and I'm gonna start using it, thank you.

For a quick and dirty save, you can press Ctrl+P to open the print window/dialog and select "Save as PDF", or you can press Ctrl+S and save as a single HTML file.

Edit: to make the text cursor focus automatically when the page loads, you can add the autofocus attribute to the body tag.

Re:Chromium jpegxl issue closed as won't fix on Monday May 20, 2024 @01:10PM (#40417636)
Google, (the Google Chrome team), have stated before that "[JPEG XL] doesn't provide significant benefits over existing image formats" [1] and have been vocal in there disinterest in shipping support for it (they deprecated experimental support) [1]

My guess is that the newest/latest JPEG encoder developed by Google researchers, Jpegli[2], has a lot to do with this. Jpegli has been described in a Reddit comment as "a JPEG encoder that was developed by the JXL [JPEG XL] folks and the libjxl psychovisual model" and described to have superior performance to WebP (lossy WebP) [3]. that whole reddit thread has comments relevant to this discussion, specifically about the tradeoffs of supporting extra formats in browsers.

[1] https://www.techspot.com/news/101764-google-once-again-accus...

[2] https://opensource.googleblog.com/2024/04/introducing-jpegli...

[3] https://www.reddit.com/r/programming/comments/1ajq7bj/commen...

Re:Chromium jpegxl issue closed as won't fix on Monday May 20, 2024 @12:42PM (#40417326)
and using one image format (or fewer number of them) increases the CDN's cache hit rate, so it decreases latencies and makes your site load faster.
I just realized that the PNG file for the logo hosted on wikimedia, is 232KB! That is a lot, that's unnecessarily large for such a simple logo, so I used vtracer, a raster image to SVG vectorizer, written in Rust, and SVGO, a SVG optimizer, to create the SVG file version of the logo, it is 16KB. a 93.1% improvement in size! (and they look the same)

The 2 commands used:

  > wget 'https://upload.wikimedia.org/wikipedia/commons/d/d5/SUN_microsystems_logo_ambigram.png'
  --2024-05-14 17:33:31--  https://upload.wikimedia.org/wikipedia/commons/d/d5/SUN_microsystems_logo_ambigram.png
  Loaded CA certificate '/etc/ssl/certs/ca-certificates.crt'
  Resolving upload.wikimedia.org (upload.wikimedia.org)... 185.15.59.240, 2a02:ec80:300:ed1a::2:b
  Connecting to upload.wikimedia.org (upload.wikimedia.org)|185.15.59.240|:443... connected.
  HTTP request sent, awaiting response... 200 OK
  Length: 237484 (232K) [image/png]
  Saving to: ‘SUN_microsystems_logo_ambigram.png’
  
  SUN_microsystems_logo_ambigr 100%[=============================================>] 231.92K   821KB/s    in 0.3s
  
  2024-05-14 17:33:32 (821 KB/s) - ‘SUN_microsystems_logo_ambigram.png’ saved [237484/237484]
  
  > vtracer --input SUN_microsystems_logo_ambigram.png --output SUN_microsystems_logo_ambigram.png.svg
  Conversion successful.
  > svgo --precision 1 -o SUN_microsystems_logo_ambigram.png-opt2.svg -i SUN_microsystems_logo_ambigram.png.svg
  Done in 73 ms!
  63.162 KiB - 76% = 15.148 KiB
  >  ls -lah
  total 114M
  drwxr-xr-x 2 wis wis 4.0K May 14 17:34 .
  drwxr-xr-x 4 wis wis 4.0K May 14 17:29 ..
  -rw-r--r-- 1 wis wis 232K Jan 12  2019 SUN_microsystems_logo_ambigram.png
  -rw-r--r-- 1 wis wis  16K May 14 17:34 SUN_microsystems_logo_ambigram.png-opt2.svg
  -rw-r--r-- 1 wis wis  64K May 14 17:33 SUN_microsystems_logo_ambigram.png.svg

Makes you think how much the Wikimedia Foundation can improve the loading experience for users and save in bandwidth costs, if they optimize all the PNG raster images that can/should be optimized, which this file is a prime example of.
Oh wow, this book cover art-piece has the same concept, but even more impressive; the Sun logo has 3 "sun" words in the logo not 4 (I know I also thought they were 4 initially), but this art piece has the word "Al-Khwarizmi" 4 times, one for each edge of the square.

Edit: I can't count, both have 4 words, one word for each edge.

The logo SUN Microsystems had is a 4-way ambigram with rotational symmetries. Designed by Professor Vaughan Pratt of Stanford, the logo features 4 interleaved copies of the word "sun", forming a rotationally symmetric ambigram, with the letters U and N in each word forming the letter S for the next word. You can read the word "sun" if you rotate your head by 45°, 135°, 225°, or 315°.

* Objectively according to me. :P

> For the threat model of most users, where hardware-based targeted attacks aren't a big concern, this is a bad tradeoff.

> hardware-based targeted attacks

You mean physical-access attacks, correct? Is it really just these kinds of attacks that a T2 chip protects against?

AFAIK if malware has super user privilege, it can access the RAM of other processes, and therefore it can access the encryption keys stored in RAM by other processes.

If those processes could have used an encryption API that does the encryption on the chip, and therefore not need to store encryption keys in RAM, they'd be protected against this kind of attack, a kind of attack that is not hardware-based.

Re:Chat.openai.com now redirects (me) to chatgpt.com on Friday May 03, 2024 @09:12PM (#40254006)
I think they're migrating to this domain; I don't think it's a temporary change from an outage or something like a fallback on a second domain.
Re:Piccolo – A Stackless Lua Interpreter on Thursday May 02, 2024 @03:53PM (#40240708)
I love how there there many Piccolo REPLs embedded in the article and interleaved with the paragraphs.

Piccolo looks amazing, I got a perfect use case for it, and I'm excited for when I get the chance to use it, thank you for working on it.

Show HN: A tiny Userscript that sets the browser-tab/window's title on ChatGPT

https://openuserjs.org/scripts/Wis/ChatGPT_browser_tabwindow_title_updater

For as long as I can remember, probably since ChatGPt has launched, the ChatGPT website does not set the title of the tab/window to the title of the current chat/thread, the title is static and is set to just "ChatGPT".It has been irritating me for a long time, so I scratched that itch and wrote that Userscript to fix it.Now I am able to organize my tabs better in the tab manager browser...

( Read More... | no comments | on HN )
Re:Supreme Court Declines to Block Texas Porn Restriction on Tuesday April 30, 2024 @04:52PM (#40216191)
It's fun to think about a technical solution that if implemented by the state and porn websites it would be privacy preserving, I have a hunch some form of cryptography can be part of this solution. some form of cryptography that would allow the website to check if something like a hash of a state identification number is of a real ID number, but this hash-like thing would not allow the website nor the state to know to what ID number it belongs to (e.g. with a database lookup of the hash), it would allow them only to know that it belongs to some real/actual ID number.

does anybody know of any form of cryptography that would allow anything like this?

Re:Making a Flute-Controlled Mouse on Sunday April 28, 2024 @04:45PM (#40191688)
This is the future!

  :)

Ask HN: Are there wrapper/runner programs that encrypt writes and decrypt reads?

Are there any wrapper programs that run a program and make the program transparently encrypt its writes and decrypt its reads?i.e. with the program launched being oblivious to the fact that the file it is reading from and writing to, is in fact encrypted on disk (on top of a file system, what could be an unencrypted file system)I'm specifically interested in being able to run a program with a...

( Read More... | 10 comments | 2 points | on HN )
Re:Apple Watch Ultra 2 Hacked on Sunday February 18, 2024 @05:06AM (#39417763)
Hoaxers hoping to drum up enough news stories to impact Apple's share price to make money on shorting it?
probably with the help of AI, as I think they are otherwise very unimaginative people

this is the most amount of likes that I've ever seen on a spam comment that is this recent, it was the second most top comment.

I see these types of comments on almost every video that is finance related, e.g by CNBC or Business Insider but rarely see them on a video like this, which was titled "Rainy Jazz Cafe - Slow Jazz Music..."

I must admit, at first I was like aww this is a sweet comment, until I read "I was introduced to a woman named ____ _____ _____ info@___.com"

Re:Ask HN: How to sell apps on Linux? on Saturday April 03, 2021 @12:48PM (#26682516)
Sublime HQ Pty Ltd, developers of Sublime Text and Sublime Merge sell licenses and use the package managers of each distro and host their own package mirror.

> Sublime Text 3 includes an auto-upgrade mechanism on Windows and OS X to make upgrades a snap. Instead of going against the grain of the Linux ecosystem, packages and package repositories are provided for most of the major distributions.

https://www.sublimetext.com/docs/3/linux_repositories.html

checkout how conformant QuickJS is with the modern ES standards https://test262.report/ (especially compared with other engines developed by big teams and companies behind them)

Fabrice Bellard is a genius, and I really don't like using this word.

thanks a lot, now I see how 2FA saved me two weeks ago, the moment I got the SMS, I immediately went on my first security ritual, changed all passwords with my pass manager, and removed the original/primary email address that haveibeenpwned.com, which I already knew about, changed its pass and stopped using it but forgot to remove from GH. 2 IPs are Turkish, 2 Tunisian and 2 Indonesian, some ips had multiple attempts.

Older »