HNHacker News
TopNewBestAskShowJobs

asojfdowgh

280 karma · joined January 16, 2022

submissionscomments
asojfdowgh··on Login with a Public Ed25519 Key
An easier, more secure approach, would be

    authviassh://authviassh@auth.server/origin.domain/nonce
parsed restrictively

    authviassh:\/\/authviassh@(${domain_regex})/(${domain_regex})/([0-9a-zA-Z]+)
prompting the user:

    "Would you like to log into origin.domain (via auth.server) using ~/.ssh/your_key?"
and then finally running

    ssh "authviassh@auth.server" -- authviassh "origin.domain" "nonce"
with the appropriate additional flags to turn off forwarding et al

Only problem is, only 1 language has decent bindings for ssh interactives server-side, so one is somewhat forced to learn Go to implement this easily

asojfdowgh··on “The NYT ruined Wordle ” – a great case study in confirmation bias
> But here's the really interesting part: even when you show these people the evidence that Wordle isn't actually harder, some of them don't believe it. Why? Because it doesn't feel true. Their feelings about Wordle are so strong that even factual evidence can't overcome them.

Seemingly didn't actually go and show people though? (semi) Confirmation bias about confirmation bias?

asojfdowgh··on Pat Sajak Walks Off ‘Wheel of Fortune’ After Unprecedented Grand Prize Win
for those who would rather not click on a daily wire article

https://twitter.com/WheelofFortune/status/149157725460157645...

asojfdowgh··on A nice story about Unix processes “infecting” each other
Gotta start as root to start as any other user, as only root can setuid etc

And since a lot of stuff is on lower ports, and there wasn't the complicated firewalls of today to dynamically flick around port routing depending on processes and the such, most programs grabbed the requested ports, and then setuid to the relevant daemon user, all by themselves (also forking, going into background, etc)

Thankfully these days its all unneeded, yes

asojfdowgh··on Code execution as root via AT commands on the Quectel EG25-G modem (2021)
I guess the proper takeaway is each time you load a new booty to the phone, make a point of reflashing the modem as well?
asojfdowgh··on Why the World Needs China’s Covid-Zero Policy
there is zero approaches between "open everything up no restrictions ever again" and "everything must be completely locked down on first sign of anything, no exceptions"

And then to reference australia, which would have taken a much more moderate approach to re-opening if the federal side of things wasn't keen on kamikaze'ing their reputations by trying to kill everyone

or in shorter words, it feels misleading to pick a country that intentionally messed up its reopening, as an example of what could happen to a much more orderly nation

asojfdowgh··on The Biggest Missing Piece in Web3 – Decentralized Databases
Kinda find it (un)funny that "web2" has this somewhat solved already? Never really took off much, but there are already multiple options

off the top of my head, webdav, https://remotestorage.io/, no doubt there are others

asojfdowgh··on /r/antiwork: A tragedy of sanewashing and social gentrification
> You’ve come across the gentrifiers before, I’m sure. They browse the front page of reddit and the trending tab of YouTube, buy Ruth Bader Ginsberg figurines and wear Che Guevara T-shirts.

So, gentrifiers are generally made out of straw is the take-away?

likewise, "no one wants to mine coal" me, I do, I wanna do that, I wanna work out the refining process, I want to lathe 1000 of the same thing. Not every personality is what the author can come up with in his head, other kinds of people exist too

- - -

Moderators are meant to keep their subreddits on track, the moderators found it benificial to themselves to not do so, for number-go-up reasons, at that point, the moderators' views no longer represent the community's views, this is decided by the moderators' actions or rather intentional inaction

asojfdowgh··on “Now apps from both the App Store and the internet can be installed worry-free.”
sounds like a whitelist? I wonder how much it costs to be added to it
asojfdowgh··on Last Call to Voluntarily Migrate Minecraft: Java Edition Accounts
It was a weird feeling, migrating my license to a fresh Microsoft account

And then microsoft instantly locking the account for suspicious behaviour

That's what? a 40 dollar license they tried to scam me out of?

(Of course, "your account has been locked for suspicious behaviour" translates to "we want your mobile phone number", except they allow you to sign up without number, just to lock 10-30 minutes later for a sunken cost effect, if you dare not give it voluntarily, which is plenty of time to migrate within)

I am so sick of gaslighty abusive business practices

asojfdowgh··on Woman says she was ‘virtually gang-raped’ in Facebook's metaverse
Facebook doesn't have a released product called Metaverse, though, right?

https://youtu.be/zVWC1tnClSw?t=283 also I don't know how one would play this and lead to the statement

> Virtual reality has essentially been designed so the mind and body can’t differentiate virtual/digital experiences from real. In some capacity, my physiological and psychological response was as though it happened in reality.

Unless you think humans are jiggly wiggly jellys held together with duct tape

asojfdowgh··on Ask HN: Why didn't Microsoft use C# to rewrite Minecraft?
MS has had a lot of game design experience, so I'd assume their choice is valid. Within any of their development setups, C++ has been a first class citizen along-side C#

Also, iirc Bedrock integrates a JS engine, plus an websocket server, both for the sake of scripting (with WS, pretty much allowing any practical language)

For hytale

26 posts in 2019 13 posts in 2020 2 posts in 2021

And they spend a significant amount of the last blog telling about their experiments like, "climbing a 2 block high wall" and "climbing a 1 block high incline"

I don't think MS has much to worry about from HS encroaching on the king

I think MS bought it just for the IP, the sheer amount of pull MC has as a brand, with collabs with lego, netflix, book authors, their own official books, MC dungeons, etc etc, that's just pure power

And IMO they are still leading it in the right direction, trying to fill out a lot of areas without complicating the base system (e.g. only adding cosmetic blocks pretty much, there isn't much that needs improving of the wood, stone, iron, (gold), diamon, tiers)

asojfdowgh··on Twitter doesn't care about spam?
in the thread, someone links PG's filtering method, which claims 99.5% effectiveness? that would still be getting me 20+ spam emails a day at that rate

further, if you are trying to block, lets say, crypto scams, on a platform which allows strong positive discussion about crypto, which allows people to talk about stuff they are selling for crypto, etc etc etc, you easily start losing points to differentiate

the defender needs to classify every message on the site, in a way that allows detecting spam well after classification, while maintaining over a 99.8% rate these days, while aiming for a 0% false positive rate

the attacker just needs to type random messages at their keyboard and use reused passwords / buy client id/secrets from shitty devs, to get access to verified accounts

asojfdowgh··on No, Ethereum Name Service is still a clown show
> You “own” your domain, but you do not own your ownership of that domain.

I was having trouble forming examples of why I felt it important to be able to have full participation (e.g. running a full node for a given thing, or whatever else) before I involved myself in a "decentralized" thing

This is a well noted example of investigating how far someone can partake, and finding it woefully short, so thanks for this

asojfdowgh··on Faster CPython (2021) [pdf]
can't wait for this to be rather successful in hitting goals but then do nothing and languish like everything else

It seems absurd to not mention the API upstreamed by the Pyjion attempt, especially in the context of optimizing bytecode / touching into machine code?

I dunno, maybe I'm just perturbed by the amount of duplicated effort on this singular topic

asojfdowgh··on My co-founder wants to invest his own money but is limiting us
for each main expenditure, just note down pros, cons, risks, etc, print it off, and hand it over to him
asojfdowgh··on [dead]
Smokers have been the loudest anti-smoking people in my life, therapists also seek therapy as their clients do, etc etc

I don't want advice from someone who's never had a shit day, because a) they can't know how I feel in any capacity, b) they can't self-test in any capacity

asojfdowgh··on Pine64 should re-evaluate their community priorities
that doesn't seem correct, https://patchwork.kernel.org/project/linux-usb/patch/2021110... e.g. megi submitting patches as late as november last year

Could you cite where they refuse to upstream?

asojfdowgh··on Pine64 should re-evaluate their community priorities
I'm not fussed about the warranty so much as the "updates" period, which, if everything gets upstreamed, might be 10+ years with the pinephone, something that very very few can hold a candle to (afaik fairphone only gets there if you also include 3rd party support)

Framework is, afaik, a bunch of people who have already several long years of wrangling laptop devices and their supply chains, similarly Fairphone is on their 4th iteration, a lot of long years

And more importantly, even with all those years behind their products, I can't buy either of 'em, I however have a pinephone in my hands already

asojfdowgh··on Pine64 should re-evaluate their community priorities
https://github.com/arindas/manjarno
asojfdowgh··on Pine64 should re-evaluate their community priorities
[topic of funding aside]

for the pinephone specifically, it feels like its ignoring what does exist?

https://xnux.eu/devices/pine64-pinephone.html there is a strong kernel which is upstreaming its changes.

Now, as a time-strapped developer, who gets told "if you wait, the fixes will appear, or you can double/triple your effort to manually patch things, and then undo that when those patches go mainline anyhow" like, I would personally be happy leaving my distro broken for 6+ months for that stuff to settle, cause elsewise you are going to be building apps to support APIs that might change completely between patch and mainline, because there isn't an abstraction layer like ios or android.

Its a new approach, drop hardware and specs, and embrace community passion, I thought it was a bad idea at the start, but I'm now sure I'm wrong.

A Kickstarter phone beginning around the same time, custom hardware and OS, even with a budget and price 3x what pine goes with, would have probably far less progress than what exists now with pine devices

asojfdowgh··on Former minister to stand trial in Finland for tweeting verse from Bible
Apparently there is 3 separate statements over a long period, one of which is a tweet?

Does anyone know of the 3 and would care to translate them?

asojfdowgh··on Ask HN: Could Netflix allow you to rent a colocated DVD player that streams?
probably prohibited by most dvd licenses, plus would require actively using DRM circumvention outside of the context of making private copies

Probably no beueno

asojfdowgh··on Mozilla's Firefox Relay to be added to disposable-email-domains blacklist
I mean, if its not having a notable impact except emotionally, maybe its better to just let it be?

Missing the forest for the trees and all

asojfdowgh··on [dead]
In reference to your comment that got downvotey'd, I don't think it provided much value to anyone ("we scrapped a small ocaml project because the ocaml guy left", is very... well, expected)

And multiple people provided detailed rebuke as well against the implication that it was ocaml's fault.

I'd say your comment came off as snide more than smug

Regardless, in that case it seemed to work perfectly, you felt bad for posting snide remarks, and will less likely post such things in the future

← PreviousPage 5 of 5