Hacker News Reader

ArchOversighton Why is Apple so bad at marketing its TV shows?

The Morning Show, Severance, Silo, Tehran, Presumed Innocent, Ted Lasso, Slow Horses, Disclaimer, Shrinking, Loot, Severance, Where's Wanda?, Foundation, Cowboy Cartel (short documentary), Midnight Family, The Last Thing He Told Me, Invasion, Mythic Quest, Bad Monkey, Dickinson...

There's so many good shows on Apple TV.

ArchOversighton TSMC told US of chip in Huawei product after TechInsights finding, source says

It's not only the UK that considers cryptography to be a munition. It is also classified as munitions in the US:

> Encryption items specifically designed, developed, configured, adapted or modified for military applications (including command, control and intelligence applications) are controlled by the Department of State on the United States Munitions List.

It was part of the whole crypto wars, and the lawsuit brought by Bernstein vs the United States.

See more:

- https://en.wikipedia.org/wiki/Bernstein_v._United_States - https://en.wikipedia.org/wiki/Crypto_Wars - https://en.wikipedia.org/wiki/Export_of_cryptography_from_th...

ArchOversighton Intel and AMD form advisory group to reshape x86 ISA

Docker on Mac is running a VM in a hypervisor to run Linux.

ArchOversighton Intel and AMD form advisory group to reshape x86 ISA

It doesn't implement some x86 in hardware, it implements some memory ordering guarantees in hardware to match what x86 requires.

However that is a very minor implementation, there is no actual x86 in Apple's ARM.

https://www.sciencedirect.com/science/article/pii/S138376212...

TSO could be implemented by other ARM processors easily as well, to provide the same memory ordering guarantees. Besides that the x86 code is translated by Rosetta to ARM instructions.

ArchOversighton Mullenweg threatens corporate takeover of WP Engine

I have used WordPress in the past for various projects, and have upgraded it for customers far more than I would like to recount, but all of this is making me not want to use WordPress for anything moving forward.

This does not feel like a stable foundation/platform to build a future on.

ArchOversighton NIST Interoperable Randomness Beacons

That is why I continue to use hunter2 as my password.

ArchOversighton Why bother with argv[0]?

There's the `setproctitle` in FreeBSD that is designed exactly for a process to update the information that is presented to tools such as ps.

https://man.freebsd.org/cgi/man.cgi?query=setproctitle&aprop...

ArchOversighton Airlines are running out of 4-digit flight numbers

By that same token the general public is also not using IPv4. The general public doesn't care, so long as TikTok and Facebook appear on their mobile devices.

ArchOversighton Apple Maps on the web launches in beta

https://www.apple.com/legal/privacy/data/en/apple-maps/

  > Additionally, when you use Maps to make a navigation or directions request, details about your route are sent to Apple, including:
  > [...]
  > A random identifier, which is created when you ask for directions and exists for the duration of your navigation session

ArchOversighton Radxa X4 low-cost, credit card-sized Intel N100 SBC goes for $60 and up

If you scroll down to the Buy Now you will see that Radxa also links to Aliexpress as the only distributor.

ArchOversighton Radxa X4 low-cost, credit card-sized Intel N100 SBC goes for $60 and up

Unfortunately it seems like it is already sold out.

ArchOversighton Reading my electric meter with RTLSDR

Ah, alright! Thank you!

ArchOversighton Reading my electric meter with RTLSDR

I believe the description is wrong. There is no RS-485 serial port on these devices, at least not what I can find in the manual/wiring diagrams. There's just the isolated pulse output.

ArchOversighton Reading my electric meter with RTLSDR

Mine is an Itron, and it uses the encrypted mesh to communicate.

ArchOversighton Reading my electric meter with RTLSDR

My old house had a meter that could be read by rtlamr but the new one has a newer meter that sends encrypted data back over some proprietary mesh network, and no longer provides that data in cleartext.

I wish there was an open standard and one I could easily plug in to. Even just a flashing LED on the side of the meter would work for me.

ArchOversighton Why SMBs Don't Deploy SSO

There likely is an off the shelf OIDC SP provider you can use for the actual "hard parts".

If you already use something like "Sign in with {Google,Facebook,Twitter,Apple}" you are already doing part of it.

I have built several products now with OIDC support for authentication (not authorization) and it has never taken more than a day or two to wire it up.

ArchOversighton Why SMBs Don't Deploy SSO

Google Sign-In is locking people to using Google's infrastructure. If an SMB has already deployed using Azure you don't get access using SSO, instead you have to fall back to username/password?

Adding support for OIDC is not that difficult. I prefer OIDC over SAML anyway, but neither is that difficult.

ArchOversighton Why SMBs Don't Deploy SSO

That shouldn't mean that you lock the feature out for customers that do have someone that can troubleshoot it/get it up and running without help.

Lock support for SSO up behind a paywall, not the actual feature.

ArchOversighton Why SMBs Don't Deploy SSO

SMB's are the customers of products that offer SSO but only at the enterprise level. CISA is arguing that the enterprise level of the software SMB's need to operate is too expensive and thus SMB's don't end up buying a license tier that includes the ability to hook into their already existing SSO (likely Azure Entra ID or Google Workspaces, sometimes Okta).

The SMB's already have SSO, they just don't enable it for the SaaS products they buy because of the price.

ArchOversighton Why SMBs Don't Deploy SSO

They aren't conflating anything. OIDC or SAML should not be "taxed" extra.

I do work for a number of small businesses and they can't afford the "enterprise cost" for things, so there is a shared password vault instead because there is no centralized management of users.

The small businesses all have some form of SSO available, whether they are using Azure Entra ID or Google Workspaces, they have a central location for users, but the cost is prohibitive for most products to get the upgrade to get access to SAML or OIDC for SSO.

ArchOversighton Why SMBs Don't Deploy SSO

The SMB is the customer, they should already have a single place for all their users and for authentication.

SSO doesn't have to be Google, Azure, Okta, PingFederate, you can run a stand-alone instance of Keycloak for instance and have OIDC and SAML available to provide SSO functionality.

ArchOversighton Why SMBs Don't Deploy SSO

I feel like a lot of the issues are also due to Azure making it vastly more difficult than necessary to configure OIDC/SAML and get the right information over to the SP.

ArchOversighton SSH agent extensions as an arbitrary RPC mechanism

Does the code for this exist somewhere?

ArchOversighton Apple Intelligence for iPhone, iPad, and Mac

"execute" and "well" in the same sentence when referring to Azure is a bit weird to see.

ArchOversighton Hertz Charged Member $277 for Not Filling Gas Tank on a Tesla, Won't Remove Fees

  > This customer actually returned the car with a 96% charge, the same as they’d picked it up at.

It specifically states that the customer returned the vehicle with the same "fuel" level as when they rented it.

ArchOversighton USB hubs, printers, Java, and more seemingly broken by macOS 14.4 update

That would be unnecessary for almost every single last macOS user, you are an outlier.

If you go against the grain or the way the OS is built and explicitly disable SIP and do things the OS would normally not allow, you are expected to understand the OS enough to know where things have disappeared to when they disappear.

I don't think Apple should protect the very small minority from themselves.

ArchOversighton USB hubs, printers, Java, and more seemingly broken by macOS 14.4 update

The root (/) is a disk image/APFS snapshot. Apple didn't delete anything... their update replaced that image that you are booting from, which is supposed to be read-only.

  /dev/disk3s3s1 on / (apfs, sealed, local, read-only, journaled)
  devfs on /dev (devfs, local, nobrowse)
  /dev/disk3s6 on /System/Volumes/VM (apfs, local, noexec, journaled, noatime, nobrowse)
  /dev/disk3s4 on /System/Volumes/Preboot (apfs, local, journaled, nobrowse)
  /dev/disk3s2 on /System/Volumes/Update (apfs, local, journaled, nobrowse)
  /dev/disk1s2 on /System/Volumes/xarts (apfs, local, noexec, journaled, noatime, nobrowse)
  /dev/disk1s1 on /System/Volumes/iSCPreboot (apfs, local, journaled, nobrowse)
  /dev/disk1s3 on /System/Volumes/Hardware (apfs, local, journaled, nobrowse)
  /dev/disk3s1 on /System/Volumes/Data (apfs, local, journaled, nobrowse, protect, root data)
  map auto_home on /System/Volumes/Data/home (autofs, automounted, nobrowse)

Stuff that is located on /System/Volumes/Data is on a non-readonly disk and will not be touched by any updates. You can see folders in /System/Volumes/Data that are also in / and there is some magic overlay that maps certain folders to /System/Volumes/Data automatically. So that files in /usr/local/ are actually stored in /System/Volumes/Data/usr/local.

ArchOversighton .well-known/avatar

You'd have to also specify a normalization procedure to make sure that email addresses are provided in the same format each time.

ArchOversighton Intel Continues Prepping the Linux Kernel for X86S

EFI only spins up a single core/thread. Starting up the other cores/threads is different than it is now.

ArchOversighton Intel Continues Prepping the Linux Kernel for X86S

No, because it is still x86-64, it just bypasses the bootstrapping process that exists right now going from 16 bit to 32 bit to 64 bit by starting the CPU in 64 bit mode.

However 32 bit registers and everything will continue to exist, and it will act like todays CPU's that went through the multiple bootstrap rounds to get into 64 bit mode.