News for hackers. Stuff that matters.

yx827ha

Re:Bugs Rust Won't Catch on Wednesday April 29, 2026 @09:29AM (#47948164)
The nix crate provides the safe wrappers. https://docs.rs/nix/latest/nix/fcntl/fn.openat2.html
Re:Win32 is the stable Linux ABI on Wednesday December 31, 2025 @09:32AM (#46444349)
Check out `zig cc`. It let's you target specific glibc versions. It's a pretty amazing C toolchain.

https://andrewkelley.me/post/zig-cc-powerful-drop-in-replace...

Re:Using Git add -p for fun (and profit) on Sunday December 14, 2025 @10:20AM (#46263659)
I've been using this UI git diff add script for years: https://github.com/ismell/diffadd I think it works better then the TUI. Surprised something like it hasn't landed in upstream git.
Re:The Invisible Light That's Harming Our Health on Thursday June 19, 2025 @08:27PM (#44323770)
If you are sensitive, I would recommend getting an Opple Light Master. It's a tiny and cheap flicker meter.
Re:The Invisible Light That's Harming Our Health on Thursday June 19, 2025 @08:17PM (#44323724)
I tried their healthy bulbs years ago and they were terrible. I've avoided the brand since then. I think they have done discontinued the healthy line.
Re:The Invisible Light That's Harming Our Health on Thursday June 19, 2025 @08:11PM (#44323692)
Thanks for the link! I bought a moto g power 5G - 2024. It has an LED screen. I've been using this line of phone for years. It's morning fancy, but at least I can actually look at it.
Just to add some more context. Zig cc is a wrapper around clang. It can handle cross compiling to specific glibc versions. See https://andrewkelley.me/post/zig-cc-powerful-drop-in-replace... I imagine it would help with the glibc problems they are taking about. Glibc tries to provide a backwards compatible abi.
Fastmail's masked emails are great! I honestly very rarely give out my "real" email. Usually when I sign up for something I create a masked email, or if I need an email on the spot I use a wildcard alias ([email protected]). Since most of my emails are random, it serves as an authentication additional factor.
Re:Bringing SerenityOS to real hardware, one driver at a time on Thursday January 09, 2025 @12:10AM (#42641829)
Depthcharge (the bootloader) also supports net boot via tftp. You would need to build it yourself and flash it to the SPI. It's a great feature when iterating on the kernel.

https://chromium.googlesource.com/chromiumos/platform/depthc...

Re:Bringing SerenityOS to real hardware, one driver at a time on Wednesday January 08, 2025 @11:59PM (#42641766)
If you ever need help hacking on your Chromebook ask on the chromium-os-dev mailing list. I'm sure someone could help you get CCD working.

https://groups.google.com/a/chromium.org/g/chromium-os-dev?p...

Re:A story on home server security on Sunday January 05, 2025 @09:59AM (#42602157)
I agree, Tailscale FTW! You didn't even need to integrate it with docker. Just add a subnet route and evening just works. It's a great product.
Why does the site hijack the back button!? It wouldn't let me get back to hn.
Re:Dumping Memory to Bypass BitLocker on Windows 11 on Monday December 30, 2024 @08:23PM (#42555454)
It's in the works. https://opentitan.org/
I bought a CURB Energy monitor about 6 years ago. Does anyone know if it's possible to flash open source firmware on it? It only has a cloud integration, but I would really like to hook it to to home assistant.
Re:Oasis – a small, statically-linked Linux system on Friday January 26, 2024 @09:42PM (#39151890)
You should check out the ChromeOS Bazelification project[1]. It has those exact same goals. Not all packages are reproducible though because they embed timestamps.

[1]: https://chromium.googlesource.com/chromiumos/bazel/+/HEAD/do...

Re:Gentoo Linux Goes Binary on Friday December 29, 2023 @10:53AM (#38806227)
> Coincidentally, I just published a tool to manage unprivileged chroots for testing ebuilds.

You should check out what ChromeOS is doing. They are using bazel to execute ebuilds inside an ephemeral chroot: https://chromium.googlesource.com/chromiumos/bazel/+/refs/he...

This way it's guaranteed that no undeclared dependencies get used.

If you want something similar, check out Gerrit: https://www.gerritcodereview.com/ It's open source and used by Android and Chrome.
This sounds like something the Keywords Generic Initiative could help with. Maybe create a ?sleep keyword. https://blog.rust-lang.org/inside-rust/2023/02/23/keyword-ge...
Re:Bash Retry Function with Exponential Backoff on Thursday December 29, 2022 @11:39PM (#34181845)
Don't forget about ``` declare -i i i+=1 ```
Re:How food powers your body's metabolism on Friday October 28, 2022 @11:20AM (#33372507)
I would recommend you read: PEMF - The Fifth Element of Health - https://www.amazon.com/PEMF-The-Fifth-Element-of-Health-audi...

It talks about how our cells are little capacitors and the earth's pulsed EMFs actually help energize your cells. I recommend skipping the first chapter though.

Re:Unboxing a $100 Chromebook on Saturday July 23, 2022 @10:41AM (#32203748)
Some devices do have soldered down eMMC storage, but others have M.2 slots for NVMe storage. The later can be easily upgraded. Some of the newer AMD Chromebooks have an eMMC to NVMe bridge in M.2 form factor, so these can be upgraded as well.
You should check out https://sowilodesign.com/blogs/blog/how-to-use-bifrost-with-...

They offer a high current adapter for the Phillips Hue Light Strip so you can have large and bright light strip installations. Their LEDs are also top notch. I installed some as my pandemic lighting and it's been great.

Re:Another Vulnerability in the LPC55S69 ROM on Thursday March 24, 2022 @12:07AM (#30786290)
On ChromeOS, our root of trust is actually the SPI ROM. We allocate a RO section of the SPI ROM that is controlled with the write protect pin. This RO section contains a full copy of the BIOS including vboot and the keys used to verify the RW-A/RW-B sections. We use this to build a chain of trust. RO FW verifies RW FW, RW FW verifies the payload (depthcharge), depthcharge verifies the kernel, the kernel verifies the rootfs using dm-verity.

Here is a great video by Duncan explaining the whole processes in detail: https://youtu.be/HwsTRThChn0

All the components are open source too. You can read more about it here: https://doc.coreboot.org/security/vboot/index.html

As for the security chip, all current Chromebooks ship with a CR50. This is a Google designed chip. The boot rom is closed source unfortunately, but it essentially just verifies and jumps to RW. You can find the RW code here if anyone is curious: https://source.chromium.org/chromiumos/chromiumos/codesearch...

The security chip gives us TPM2 functionality and some ChromeOS specific features like CCD: https://chromium.googlesource.com/chromiumos/platform/ec/+/c...

You should be able to use vboot with a different TPM. Reach out if you want to chat!

Re:Rooms can be as bright as the outdoors on Thursday November 28, 2019 @11:14PM (#21661992)
It might be the flicker. Most LED lights I've found have pretty bad flicker: https://youtu.be/eWut5Qx6mkM?t=285

Phones are pretty bad too. Check out the Nexus 5x vs Pixel 3: https://drive.google.com/drive/folders/1f7-ChF4zFiisFdmEZVEz...

I found that Phillips non dimmable bulbs are the cheap and don't flicker.