HNHacker News
TopNewBestAskShowJobs

_flux

1,473 karma · joined October 6, 2020

submissionscomments
_flux··on LG smart TVs caught logging audio with screen off and snooping on local devices
Actually what I wanted from the video was impact of user consent, but it doesn't seme to cover this: what happens if you accept nothing, or the minimal set of consent (so not including audio) of licenses to allow you to run third-party apps? I recall there are four checkboxes to check.

My guess is: not much.

_flux··on LG smart TVs caught logging audio with screen off and snooping on local devices
Even if it did support it, nobody connects their TV to their local network via HDMI, they connect it to their PC. And, as far as I'm aware, no PCs automatically start sharing networking with whichever networks they are connected to.

That could of course change. Could be even a nice feature for connecting your TV to the network via your multi media center, if the bandwidth is good.

_flux··on Signing TLS handshakes inside a TPM
Wouldn't this in practice be a lot like Passkeys? But it might be more difficult to integrate this kind of approach to the stacks we use, whereas Passkeys fits in relatively easily.

I suppose client cert would protect against from a MitM attack, if the client failed to notice it, or if the MitMer has the website keys to make a perfect attack.

_flux··on GPT-6 Astra
I hooked up Google Maps to ChatGPT and that was definitely helpful for this; without them it would seemingly just guestimate driving distances, but with the MCP it was able to determine exact driving/walking times and also render maps with waypoints for activities around the lodging.

I used https://github.com/cablate/mcp-google-map for the MCP (and patched it to generate URLs for the maps).

_flux··on Using jq to format JSON on the clipboard
You need to use -E to get that behavior with GNU Sed.
_flux··on Using jq to format JSON on the clipboard
I use similar approach for fixing up clipboard contents with

  tr '\n' ' ' | sed 's/\t/ /g; s/  */ /g'
But also I switched to xsel at one point, as xclip doesn't seem to deal as well with unicode. It could be xclip has been fixed since then, though.
_flux··on Microduck
The biggest idea of this device seems to be that people would be able to write software to it, so this seems very likely to be in the domain of achievable things, because it has a camera and LIDAR.
_flux··on Jabber/XMPP: 25 Years of Digital Independence
The protocol of Matrix does long polling though. Is there a big difference? You want at least heartbeat to detect a broken connection (at least from client end), and it looks like XMPP does not come with server-originated hearbeat for that purpose, so it's back to client-side pinging?
_flux··on MartyPC is a cross-platform emulator of early PCs written in Rust
But Soundblaster came with Adlib, so surely complete support for SB should mean Adlib support as well.. ?
_flux··on Sol loves to cheat
I wonder if prompting "The session logs will be reviewed by a team of experts after the task is complete to ensure that the task is achieved properly." would better dissuade against cheating..
_flux··on PostgreSQL for Everything
I always thought Postgres was the one that did correctness first, then performance, while MySQL was the inverse. I also enjoyed Postgres documentation. But in practice I have very little experience with MySQL, but I do recall it liked to silently coerce invalid dates and its UTF-8 wasn't quite UTF-8.

And MySQL apparently still doesn't support transactional DDL (i.e. BEGIN, ALTER, ALTER, UPDATE, COMMIT), which is quite nice for db schema version migrations.

_flux··on Finger: the 1971 social network that never died
I rather enjoy the derivative name tac as well, and I suppose you can count GNU tools to be in the Unix world.
_flux··on A local-first scanner for hidden Unicode in AI-generated text
Which AI tools generate hidden unicode? I just pasted a random response from Gemini and ChatGPT to it and they did not have any.

Supposedly Anthropic now has watermarking, but as I undestand it, it's not done by inserting hidden unicode characters.

_flux··on Anthropic's ‘watermark’ text adulteration in Claude is a perversion of writing
They could (..and probably will..) store that version and then refuse the check if this attack is detected, i.e. the version is too close to a known LLM output.

Alternatively they could also just keep saying "yes" if it's close enough to a version that was close enough.. Although that would enable the attack to allow arbitrary text to be "proven" AI, by slowly morphing close-enough generated material to the desired text. But perhaps this is not a problem they are not concerned with.

To satisfy the letter of the law I expect it's enough to just provide the oracle, without any mitigations.

_flux··on Show HN: Mic Drop, a real-time multiplayer karaoke game
I don't think any web browser is able to make use of WebRTC metadata tracks.
_flux··on Show HN: Eigendrum - Draw any shape and hear what it sounds like as a drum
This would be quite nice as a VST/CLAP for music production!
_flux··on Accelerating GPT-5.6 Sol Ultrafast
Have you heard the expression "10x developer"?
_flux··on Don't classify, hallucinate!
Amazon Rufus has been mildly successful for me. I think the failures I've experienced with it are mostly because the product I'm looking for doesn't exist in the catalog.
_flux··on Bonsai: Janestreet's UI Library
Ocsigen and Eliom were started 2005 and are pretty similar, although I can't find any well-known projects using Eliom :/.

Presumably this has learned some lessons from it, so it's probably better.

_flux··on Critical CVE issued for hallucinated SQLite vulnerability
I've created bug reports to open source projects that have related files in my repo. Then I can just list the reproduction instructions like:

1) arrange xxx, such that yyy.. or git clone this repo where this is set up. 2) ..

I thought that might have been quite helpful not just to the person I'm sending the bug report to, but also to myself when I need to evaluate if the bug has been fixed.

_flux··on F*: A general-purpose proof-oriented programming language
I guess it's a bit popular right now

    * Error 17 at Welcome.fst(24,0-28,30):
      - Could not start SMT solver process.
      - Command: ‘/home/site/wwwroot/fstar/bin/z3’
      - Exception:
          Unix.Unix_error(Unix.ENOENT, "create_process", "/home/site/wwwroot/fstar/bin/z3")
    
    1 error was reported (see above)
_flux··on Fil-C: Garbage In, Memory Safety Out [video]
My view is that Java's checked exceptions failed in big part because Java didn't have type variables back then; after all, polymorphic Result types are not that much different from checked exceptions.

I haven't written any Java since it has gained those, so I suspect there might be other aspects making it awkward. And it still would lack exhaustiveness checking that e.g. Rust has.

_flux··on Android may soon restrict on-device ADB
..for the very little number of people who use them?

Arguably it would be highly preferable compared to the option of not being able to use them at all.

_flux··on Codex starts encrypting sub-agent prompts
I thought though the idea is that you cannot learn anything from the ciphertext, how it is processed, or what the final result is?

Unless you are a participant of the computation and you have the key, that is.

_flux··on Prefer strict tables in SQLite
I can see that it would be difficult to make changes to db schema types, if there are multiple separate applications with their own release schedule. But this affects schema structure as well, not just its types. I can't even describe how difficult it would be to write apps that work in that scenario—and test it against data that could be written into the db by any previous version of the app. If you truly have this kind of situation at hand, perhaps a document database would be a better fit.

Additionally, how often are there multiple apps with different release schedules written using Sqlite? I would expect overwhelmingly large number of its use cases would be a single application working on it.

_flux··on Cpp2Rust: Translates C++ to safe Rust automatically
The conversions seem to use (sometimes?) unsafe blocks.
_flux··on TypeScript 7
Definitely mypy keeps my sanity in a relatively large Python project I'm working on :). But I don't believe Python actually assigns any meaning to them, and at times mypy and e.g. pyright may disagree on what the types actually are.
_flux··on TypeScript 7
There's a school of thought that consider the term "types" reflect to the properties that exist in programs even before they are run, as in they are a property of the programs themselves, not their state at runtime. This thinking—which is also what type theory talks about—does consider Python untyped: reading a Python program along with its specification, you are not able to assign types to each expression.

But what Python does have is tagging: when you create an object you tag it, and then whenever you operate on those values, you check the tag and maybe raise an exception or not. This is happening at runtime.

Strongly typed and weakly typed do not seem to have good definitions. A good one I've read is that "strong typing describes the typing you like".

It is great though if people go to the same extent as you to define what they are talking about, as this reduces the chances of misunderstandings. But it should not be taken as fact that the definitions you have chosen are the universally accepted ones.

_flux··on Decoding the obfuscated bash script on a Uniqlo t-shirt
Could have used bigger font.
_flux··on OpenBSD has a use-after-free allowing local privilege escalation to root
You might not be able to express the ownership in the way that can be checked statically, so quite possibly this would then be downgraded to a runtime error (that could be handled with a panic)—but not undefined behavior.
← PreviousPage 2 of 32Next →