HNHacker News
TopNewBestAskShowJobs

LocalH

4,353 karma · joined November 3, 2016

localhbci at gmail.com
submissionscomments
LocalH··on Don't let anyone take away your big box of cables
Throwing away proprietary cables is a sin. Throwing away standard commodity USB cables is not so much
LocalH··on Who Dung It? (Turdle.fun)
what the shit
LocalH··on “Tweet” and the bird logo apparently enter the public domain
Musk probably came across the shape as a child and drew it on a napkin to carry it with him, like he did with the Cybertruck design after "beating" Car Designer on either the Apple II or PC
LocalH··on “Tweet” and the bird logo apparently enter the public domain
It's confusingly similar (by the "average person" metric( but I don't think it's identical
LocalH··on A bizarre Commodore 64 peripheral, a mime, and some pretty bad ads
Commodore was very protective of their DOS. Perhaps the Spartan DOS Board was a means to sidestep that by requiring users own a legitimate 1541
LocalH··on Student teacher arrested for private Snapchat message
That's a really generous presumption. The direction this industry is moving towards is to use AI to avoid human involvement.

At best, their algorithm flagged it, and a human rubber-stamped it.

LocalH··on Study reveals UnitedHealth's profit margins four times what it claimed [pdf]
Luigi intensifies
LocalH··on YouTube Format IDs
12/15fps is way too low even for talking heads. 20fps would be the minimum for me, and 24fps fits better with the standards (30fps fits better with most displays).
LocalH··on Windows 95 released August 24, 1995
The wording you're thinking of is "using MS-DOS compatibility mode"
LocalH··on YouTube will now count a view as soon as a video starts playing
They've already been doing this for Shorts since last year. Now it will also apply to all other forms of content on YouTube.
LocalH··on The Origin of Consciousness (2008)
Sleep is very subjectively different from anesthesia, in my personal experience. Sleep still carries a feeling of the passage of time, and in fact dreams can feel "more real than real" (I remember my dreams to varying degrees, most often when I drink alcohol, although I don't like to use that as a specific method to remember dreams on demand). Anesthesia, for me, resulted in the absolute cessation of time experience during the process. From my perspective, I went out in the OR and was immediately in the recovery room, even though it had in reality been about an hour.
LocalH··on Unearthing a 31 year old Easter egg in Ecco the Dolphin
The fun ones are the studios who are really good at stubbing debug stuff out. Guitar Hero II for PS2 was released in November 2006. it took 14 and a half years before someone stumbled on a prototype GH80s disc that just happened to be a debug-enabled build of the game, that also just happened to contain a debug-enabled executable for GH2 sitting in the root of the disc (which kind of makes sense, GH80s was a slightly modified and bugfixed version of GH2, so earlier versions of GH80s were probably built as GH2 discs before the executable was finalized). But there are certain key routines in GH2 that are completely stubbed out in the retail builds, such as the routines to read USB keyboard input, or display the actual debug traces. They're present by name, and the rest of the code will call them when needed, but then they just return without doing anything (and thus if a true exception was thrown the game will then halt in retail versions where the debug version would print a data and code stack trace before halting). Harmonix did this continuously throughout Rock Band development as well, even as far as stubbing out routines only needed on a single platform unless the build is for that platform (Rock Band 3 on PS3 makes use of the hdd1: cache, but all code for that is completely stubbed out with return-only funcs in the 360 build). We wouldn't have any knowledge of Rock Band 3 debug if it weren't for a dev Wii we found with five builds of RB3 (including a slightly post-final build, but all debug-enabled).

But then they were sloppy enough to use the 360-based audio encryption path (which had an extra step versus the PS3) on later non-360 consoles and include the needed HvKeys to decrypt the keymask in cleartext, even though they could have successfully decrypted every single audio file that wasn't RB1 on-disc or early DLC by using the PS3 path and not revealing those keys. I don't care about public discussion of this at this point because there are a dozen tools that can decrypt every single Rock Band audio file ever created (and even audio for games that aren't RB but used "mogg" format which is just multichannel Ogg Vorbis with a Harmonix-specific header with security values and an OggMap to aid in seeking). There's even one tool that can decrypt audio that uses the "red" keys which have never been seen to be used publicly. Game dev is fun.

If you've ever heard of Guitar Hero II Deluxe, that debug ELF made that possible. Also if you've played it, you're welcome.

LocalH··on Corgi kills short-lived website that ranked its female employees
That's honestly just an expression of how the "base level" of corporate ethics and morality has sunk so low that it is fully believable that such a site could have been spun up by an employee of Corgi, so many of us are conditioned to take the worst possible interpretation of any such headline. I did the same, actually, until I clicked through and skimmed it.

However, the headline itself does not say anything like that. It simply says they "killed" the website. Which they did, via legal threat. I think the specific wording they used was more engagement bait than anything, and honestly a quite mild version of it compared to many. Might even have been completely unintentional.

LocalH··on People Are 'Marrying' Chatbots. These Lawmakers Want to Stop Them
I agree. All public offices should be held by atheists.
LocalH··on When online commenters detect my art as AI
Incorrect. This is no better than people who claim writing is AI just because the author uses emdashes
LocalH··on Cops Used Flock to Track a Man Across State Lines for a Pretextual Weed Search
You spelled "heroes" incorrectly.
LocalH··on The sale of Electronic Arts has been finalized
Shit. I had a feeling I was fucking up on one of those. The other three are still massive franchises, though.
LocalH··on The sale of Electronic Arts has been finalized
I disagree. They're not gonna give up the brand recognition to rename it. They specifically wanted "Electronic Arts". EA has Battlefield, FIFA, The Sims, and Madden. Those four alone are probably responsible for 90% of the company's revenue.

If anything, now you can say that EA is doubly the worst company, especially in gaming.

LocalH··on We finally learned to center a div, then browsers added sidebars
Stop giving them ideas! :(
LocalH··on We finally learned to center a div, then browsers added sidebars
Stop worrying about what's happening outside the viewport. Your website has no right to care or even know what's happening outside the viewport.

Anyone got a Tampermonkey script or tiny extension to re-override this to make such sites actually center in the viewport, like I prefer?

LocalH··on We finally learned to center a div, then browsers added sidebars
Nah, I'd rather not. I want sites to center within the viewport, not the browser window. I keep my tabs in a vertical sidebar, and I treat the viewport as "the browser". I want things that should be centered to be centered within that viewport.
LocalH··on Web Security is Too Hard
Clearly you have a vested interest in the status quo of today, instead of understanding why the whole network was created in the first place.

Your viewpoint enables billions of dollars of fraud every year, worldwide. Mine doesn't.

Email has similarly been destroyed by HTML email, at least partially.

It's like there is a coordinated effort to destroy every single legacy protocol and replace it with something centrally controlled. No fucking thank you.

LocalH··on AI fuels more than half of cybercrime in Africa as scams surge – Interpol
The main fuel is the "need" to have browsers that can execute code, coupled with the ability to transfer money via the internet. JavaScript was a mistake, e-commerce was a mistake, and so is everything else that came after.

Let's ask Vint Cerf whether the web was meant to run logic, or just be a document format. I bet no matter what he answers, the world would be like the GIF pronunciation "I don't care if the original creator said it's pronounced like giraffe, I'm gonna say it like gift because I KnOw BeTtEr"

Internet 3 when (because I know that academia does already have an "Internet 2", although I bet due to Internet 1 security issues, Internet 2 is already compromised too)

LocalH··on Web Security is Too Hard
Bad actors have been social engineering passwords for years even before a single line of JS was written. Restricting the backend is a way of heavily reducing the attack surface. The expansion of hardware access to browsers is the largest scam enabler of the 21st century. The only reason it's happening in the long term is because companies like Google (DoubleClick) wish to use hardware attestation to tie people to hardware for advertisement purposes, and that requires complete vertical attestation.

We're losing general-purpose computing like frogs in a slow cooker, and millions of people don't even notice. Fuck TPM, fuck hardware attestation, no internet company should get a single bit from me that I don't authorize. Any site that requires hardware attestation will be a hard "no" for me to ever visit again.

I maintain this all started when commerce was introduced to the internet. Things were better before money was transferred digitally. Allowing that was a major fuckup.

LocalH··on Web Security is Too Hard
I think someone should ask Vint Cerf whether he ever intended the web to run executable code, and enforce that answer on the existing web.

I bet the world would crumble. Good.

LocalH··on It's not a fear of "AI communism"; it's a fear of competitive market capitalism
"Communism" is a weasel word in this context. Nothing about modern AI industry is anywhere close to what makes communism communism. Modern non-local AI is all about the highest values of capitalism.
LocalH··on Web Security is Too Hard
JavaScript (and other forms of executing logic within the browser) have made the situation worse, though.

To me, there's a big difference between a domain misread and actively malicious code running in the browser context as a design point.

LocalH··on Why some people mow a lawn better than others
> and you miss a part of the 'square' when you are turning (the arc of the curve is not a straight line)

This can heavily be mitigated through technique. If you walk straight and just turn? Yeah, the corner is missed. If you explicitly come to a stop and do your best to do a full 90-degree turn before moving? The only curve there is going to come from the shape of the blade, and is almost guaranteed to be a tighter curve than just walking and turning without stopping.

Yes, it takes longer. But if it's worth doing, it's worth doing right, even if it takes twice as long, no?

LocalH··on Web Security is Too Hard
Web security wasn't hard before we started trying to make the web a platform for full executable software.

I never got hacked through the web before JavaScript (never got hacked after either, yet, but it wasn't really possible in the same way to hack someone through the web without some way to execute program logic, which in the old days would have required a much more specific browser exploit to gain RCE).

JavaScript was a mistake. Everything else after that involves "running code in the browser" was a mistake.

Program execution needs to be completely separate from "the web". I don't want any code of any sort running in my browser, at least not any that I don't fully control. "The web" was never designed to be an application platform. It was only designed to be a document platform.

LocalH··on Just because a game is on disc doesn't mean it will work in the future
I know it's "against HN etiquette" to ask about downvotes, but may I ask why I got downvoted? If it's clear that ownership changed from the original hacker to someone else, why should there not be an unban? I'd be fine if they required an "extra" check to make sure that the console is unmodded going forward. Otherwise, this contributes more to e-waste than a good chunk of Apple's iOS shenanigans.
← PreviousPage 2 of 34Next →