HNHacker News
TopNewBestAskShowJobs

antgiant

95 karma · joined July 22, 2010

submissionscomments
antgiant··on Pass the Passkey: A Novel Attack Surface in Passwordless Authentication
I can confirm it works on iOS 27. I haven’t tried elsewhere though
antgiant··on Pixel 10 Phones
iOS 26 fixes this with an option to only show photos not in an album.

Additionally, if you are backing up photos to a hard drive you will be much better off using an app like PhotoSync. It has a one time payment and transfers direct to whatever you want with far less errors and more control than Apple’s terrible buggy disaster that is transferring photos by wire.

antgiant··on Linear sent me down a local-first rabbit hole
I spent some more time hunting due to this conversation and I’m hopeful that yjs + y-WebRTC + PeerJS will solve this. I also see that there are a few libraries that enable QR codes to replace PeerJS as a truly offline WebRTC initialization with true p2p connectivity. Looks quite promising
antgiant··on Linear sent me down a local-first rabbit hole
I may end up doing that, but I really wish there was a true p2p option that doesn’t have me relying on someone not rug pulling their free tier sync server.
antgiant··on Linear sent me down a local-first rabbit hole
I’ve been working on a small browser app that is local first and have been trying to figure out how to pair it with static hosting. It feels like this should be possible but so far the tooling all seems stuck in the mindset of having a server somewhere.

My use case is scoring live events that may or may not have Internet connection. So normal usage is a single person but sometimes it would be nice to allow for multi person scoring without relying on centralized infrastructure.

antgiant··on Ambient Garden
This reminds me so much of what I really wanted to do after reading Piranesi by Susanna Clarke. It seems like such a perfect setting for an ambient soundscape like this with the ocean sounds crashing through the rooms, various birds passing through or collecting, you could even add drones for the statues. The rooms, ocean, and wildlife are perfect for procedural generation. Only the sculptures would be a bit tricky to infinity vary. In short thank you :-)
antgiant··on 3D-printed device splits white noise into an acoustic rainbow without power
This video? https://www.youtube.com/watch?v=y9-p4AkgVU8&pp=4gcMEgpwZXJwb...
antgiant··on Making 2.5 Flash and 2.5 Pro GA, and introducing Gemini 2.5 Flash-Lite
Enjoy yourself! Don’t let me spoil your fun :-)
antgiant··on Making 2.5 Flash and 2.5 Pro GA, and introducing Gemini 2.5 Flash-Lite
For basically that same price you could get one of these :-)

https://www.amazon.com/Cell2jack-Cellphone-Adapter-Receive-l...

antgiant··on Modifying an HDMI dummy plug's EDID using a Raspberry Pi
They make it super simple for someone on the move to do a zoom out teams call with one screen and still have access to PowerPoint’s presenter view.

Basically use the dummy plug screen for PowerPoint’s output and the laptop screen for the presenter notes. Then share the dummy plug’s screen.

Might not be the best answer for the citizens of Hacker News but so, so easy for teachers and salespeople.

antgiant··on My first attempt at iOS app development
Confusingly this does exist but is super weird to get to.

Select some photos and then select merge. The pop up that follows will let you merge only the exact duplicates.

So you can first merge all your exact duplicates, and then when that is done manually review the visually similar matches.

antgiant··on Why did Windows 7 log on slower for months if you had a solid color background?
Kind of. The default behavior is to create a new link. So when you grant someone access you are actually creating a new link. However, you can find the buried manage access settings and change the permissions on the original link. If you do that then they can use the original link.

(Teams makes this Byzantine in the extreme to accomplish as you have to go find the folder it drops all shared files in to gain access to manage access settings. But it does allow you to retro change access even for things shared in Teams)

antgiant··on Lessons in creating family photos that people want to keep (2018)
Technically, you could do this in Mylio but probably not in the way you want.

Mylio stores “Live Photos” as Photo.extension <- the “photo” it shows in the interface Photo.xmp <- all the metatdata Photo.myb <- everything else

Literally the myb is just a zip of everything else associated with the photo. So in the “Live Photo” case that would be the associated video file. If you have edited the file in Apple photos that also includes the XML Apple uses to non destructively perform the edit. As well as a copy of the original photo.

In your case you could just manually create the myb file by zipping up all the associated extra photos and changing the extension. However the interface would only show the single main photo.

antgiant··on More telcos confirm Salt Typhoon breaches as White House weighs in
Per the link. Yes. Here the specific statement.

Lessons Learned

We believe that all of the vulnerabilities we discovered have been mitigated by Threema's recent patches. This means that, at this time, the security issues we found no longer pose any threat to Threema customers, including OnPrem instances that have been kept up-to-date. On the other hand, some of the vulnerabilities we discovered may have been present in Threema for a long time.

antgiant··on Passkey technology is elegant, but it's most definitely not usable security
Beware of the hidden catch here. The account that adds the credential to the group “owns” it. So if that account goes away for any reason so does the credential.
antgiant··on Engineers do not get to make startup mistakes when they build ledgers
Could have been clearer but it is there. Here is the relevant section. In short single entry is basically the Account view and Double entry is the full ledger. (Called double because of the hard requirement that all Entries come in pairs.)

> Ledgers are conceptually a data model, represented by three entities: Accounts, Entries and Transactions.

> Most people think of money in terms of what’s theirs, and Accounts are the representation of that point of view. They are the reason why engineers naturally gravitate towards the “simplicity” of single-entry systems. Accounts are both buckets of value, and a particular point of view of how its value changes over time.

> Entries represent the flow of funds between Accounts. Crucially, they are always an exchange of value. Therefore, they always come in pairs: an Entry represents one leg of the exchange.

> The way we ensure that Entries are paired correctly is with Transactions. Ledgers shouldn’t interact with Entries directly, but through the Transaction entity.

antgiant··on Apple unveils 'Passwords' manager app at WWDC 2024
No

The backup situation is terrible - Mac only - Only Passwords (no passkeys) - Only items you created (so nothing shared with you, even if you own the shared “group”)

In short your only option is one at a time manual export

antgiant··on Ask HN: How to manage phones and PCs for elderly parents?
Sounds like (assistive access)[https://support.apple.com/guide/assistive-access-iphone/welc...] is what you want as it solves both of these. It gives full app placement control to you and an always on screen back button.
antgiant··on Show HN: Sonauto – A more controllable AI music creator
Hmm any suggestions on how to convince it to produce something like this?

I have lyrics that I want sung by a solo female voice with the background being a male chorus. Something reminiscent of a woman singing the details of a David vs Goliath type battle backed by a chorus of the victorious warriors from that battle.

So far I have completely failed to be able to generate a female lead with a male chorus backing

antgiant··on How to copy a file between devices? (2022)
Adding my favorite as it has worked more reliably than these for me

JustBeamIt

- Site: https://justbeamit.com

- Source: https://github.com/justbeamit/beam

antgiant··on How to copy a file between devices? (2022)
Adding my favorite

- https://justbeamit.com

antgiant··on Show HN: I made a website to find best bus seat to avoid the sun while traveling
To be clear I was complaining that basically everyone calculates “sunrise” and “sunset” differently. If you check half a dozen different “sunset” calculators you will get a surprisingly wide variation in the times they provide. At least where I live the error seems to average 5-10 minutes.
antgiant··on Show HN: I made a website to find best bus seat to avoid the sun while traveling
Way too late now, but to help others this fancy Excel sheet provided by NOAA is awesome! It implements all of these equations in Excel and is pretty easily portable to your programming language of choice. https://gml.noaa.gov/grad/solcalc/calcdetails.html

P.S. Using this has made it clear to me how bad most sunrise/sunset calculators actually are.

antgiant··on Getting my library cards onto my phone the hard way
Or Pass2U if you want them natively in Apple Wallet like this https://apps.apple.com/app/id1142473931
antgiant··on Bitwarden: Free, open-source password manager
You can’t backup the entire iCloud Keychain, only export to csv which doesn’t contain everything. (For instance passkey secrets)
antgiant··on Bitwarden: Free, open-source password manager
Note: This is sort of true but is highly misleading. csv export is only possible on a Mac (https://discussions.apple.com/thread/251108577). So, iPhone/iPad/PC users are pretty much out of luck Additionally, I don’t believe passkey’s are exportable at all. Lack of actual functioning backup options is the primary reason I’m not using iCloud Keychain, so I would love to have these issues fixed.
antgiant··on Self-hosted photo and video backups directly from your mobile phone
If you are willing to consider closed source, paid options there is also Mylio
antgiant··on Did Reddit just destroy mobile browser access?
Yes, the one that is “clean” has the open in Safari icon. However, as soon as that becomes common knowledge I’m guessing the malicious apps will be adding that icon
antgiant··on Ask HN: What is new in algorithms and data structures these days?
I think I am missing something obvious, but can't you just take your existing DAG and add a merge validation step to solve this?

If I'm understanding the problem right a malicious user, uses the same source id to send action a to user 1 and action b to user 2. This has started two independent (and currently indistinguishable branches in your DAG) When those branches come into contact at say user 3 weird bugs start arising.

However, user 3 is receiving a DAG of all the operations along with the operations. Can't it use that to validate the DAG chain? If it finds a conflict it could simply create a branch at the conflict point by modifying the IDs at the point of conflict. Say by appending a hash of just that operation to the id?

antgiant··on Ask HN: Most interesting tech you built for just yourself?
I live in a Hurricane/Typhoon zone and wanted a way to watch storm live status without all the panicked commentary. I had an old Chromecast laying around and discovered that it is just a web browser so I built a simple html image bouncer that auto refreshes the latest satellite image of the storm, lets you crop in, etc. It works amazingly well for days of peaceful live coverage. An unexpected side perk is my kids can now tell the category (strength) of the storm based purely on the satellite image. Turns out the code works for pretty much anything with a browser and any situation where there is an updating image at a static URL. So I’ve used it for a number of other things too. I put it all at https://github.com/antgiant/GOES-East-Big-Screen
Page 1 of 2Next →