Hacker News Reader

8191on Ask HN: How bad is the xz hack?

It was somehow astonishing to me that the code which is actually shipped (tarball) is not the very same code as the one in the repo. Somehow renders code reviews useless. Seems to be a common practice anyway.

8191on Changes in Windows to Comply with the Digital Markets Act in the EEA

> Once chosen in device setup, the region used for DMA compliance can only be changed by resetting the PC.

8191on Short session expiration does not help security

Can someone associated with PayPal being that article to some decision maker’s attention, please? I believe their session timeout is fixed to 5min of inactivity, which you easily reach when doing some accounting tasks with PayPal purchases. Renders PayPal to the most annoying web app I frequently need to use…

8191on Compromised Microsoft key: More impactful than we thought

As for each purpose several keys exist, according to the article, geographic key distribution wouldn’t be necessary anyway.

8191on Starlink was down because of expired certificate

Funny that he considers certificate expiry as vulnerability.

8191on Austrian ISPs Block Cloudflare IP addresses after apparent court order

Seems to be a specific action/order by mentioned ISP. Using the biggest ISP in Austria (A1) still allows access to listed IPs.

8191on Why I built a dictionary app

How did you manage to get the dictionaries for all those languages? If I didn’t miss it, that part is left open in the article after explaining how highly priced they are…

8191on Tell HN: Apple Pay works in non-Safari browsers in iOS 16 Beta 3

I have 15.6 stable installed and when opening the Stripe test page I receive an error in Firefox (“Either your browser does not support the Payment Request API, or you do not have a saved payment method.”)

8191on Using a catch-all domain is a mistake

I also used to use catch all domains for all kind of registrations and my form was <domain>@mydomain.at (e.g. ycombinator.com@mydomain.at). That most of the time solves the management aspect, except for some special cases where several domains share a unified login (e.g. Google or Stack Exchange).

Anyway, I’ve changed to iCloud’s Hide My Email some months ago, as this is much easier to use and you have easier control on all used emails. You can even add a comment to each address in the moment of creation. Also disabling (blocking) single addresses works like a charm.

8191on Tell HN: Amazon.com is limiting purchases of Audio CDs to four-per-week

Seems to be a region specific issue; I’ve just tried to proceed to checkout with 7 CDs in the cart on Amazon.de and the only warning I got was a changed price notification.

8191on CudaText: Cross-platform code editor

Unfortunately does not have the search capabilities of Sublime Text. You need a plugin for searching through files, which is a bit awkward to control (bulky key-bindings, strange result panel, etc...). That's the reason why I finally bought Sublime Text.