Hacker News Reader

chedabobon Ask HN: Anyone Using MacBook Air M2 24GB for Developement?

What's your dev stack?

I have the M1 Air 16GB, and if I'm bimbling around in NodeJS and VSCode it runs fine, but if I need to do mobile work, the Xcode UI previews and Jetbrains IDEs cause it to run warm and throttle.

It's not slowing me down, but it does make it a bit uncomfortable to use on my lap.

chedabobon MyPowerbank hacks Santander bikes so London's homeless can charge their phones

They're powered by a dynamo, so probably only have the tiniest of batteries or capacitors necessary to keep the low-power lights on when not moving.

chedabobon Skip the API, ship your database

Yeah this is my gripe with things like Firebase Realtime Database.

Don't get me wrong, the amount of time it saves is massive compared to rolling your own equivalent, but it doesn't take long before you've dug yourself a big hole that would conventionally be solved with a thin API layer.

chedabobon Email Authentication: A Developer's Guide

While there's multiple competing standards I'm ignoring it. At least with MTA-STS and DANE you didn't have to fork out $1000+ to support both.

There was also this which showed up a month after Google started their rollout of the BIMI checkmark: https://twitter.com/chrisplummer/status/1664075886545575941

chedabobon Sennheiser HD 555 to HD 595 Mod

They started soldering the RAM to the logic board on the mid-2012 MBP.

chedabobon Swarm M138 Modem

Based off the kit SparkFun sells, I don't think it needs an amp: https://www.sparkfun.com/products/21287

chedabobon Ongoing Incident in Google Cloud

Currently being tracked here: https://github.com/GoogleCloudPlatform/gcsfuse/issues/961

chedabobon Hermes: An open-source document management system

GDocs is rolling out code blocks now, albeit with a limited number of supported languages

https://workspaceupdates.googleblog.com/2022/12/format-displ...

chedabobon I still have an old-school cert on my HTTPS site

https://letsencrypt.org/docs/certificate-compatibility/

Support goes back pretty far.

chedabobon Show HN: Self-hosted CMS on serverless Cloudflare

Forestry has been on my radar for a long time but never had a need to use it https://forestry.io/

The big draw for me is it's just Hugo/Gatsby/Jekyll underneath, and the output files can be delivered anywhere that will host static files (CloudFlare pages does this really well, as does Netlify).

chedabobon WPA3: No go on Raspberry Pi (plus some Mac gotchas)

I wonder if that issue with no Ethernet during internet recovery can be solved by using an adapter with a chip that doesn't require drivers on Mac.

I have 2 that work on M1 Macs without installing anything

* Anker 3x USB + Ethernet with an RTL8153 chip (they don't make the hub anymore, but there's others still using that chip)

* Anker USB-C Ethernet (model A7613) with AX88179A chip

We bought a load of Anker USB-A Ethernet adapters for our new office, and with Big Sur they all stopped working. At the time I think Anker didn't provide the new drivers, and the chipset manufacturer themselves required you to also install an app to enable the adapter. Really not a good experience for our users, and we're slowly trying to get rid of the adapters.

chedabobon ExtensionKit

That's a different API https://developer.apple.com/documentation/activitykit

chedabobon TikTok privacy policy says they monitor names of other installed apps

It's also getting more and more locked down on Android too.

Not sure if there's other mechanisms, but from 11 onwards, apps have to declare which other apps they will query through PackageManager https://developer.android.com/training/package-visibility/de...

chedabobon Shortest URLs on the Internet

There was a post recently about some of these TLDs: https://news.ycombinator.com/item?id=32094645

chedabobon Why don’t we do email verification in reverse?

Hopefully this should change over the next few years with both iOS and Android adding support for FIDO Passkeys.

It's not new tech, but now that two huge players have put it in the hands of millions of users, it should pick up speed.

chedabobon Resolving an unusual WiFi issue

Reminds of the issue on Mac OS where Location Services would cause ping spikes https://news.ycombinator.com/item?id=31356730

chedabobon The Zoom installer let a researcher hack his way to root access on macOS

The browser version tends to lag behind the native one by quite a bit, and has some really annoying restrictions.

For a long time you couldn't use your microphone in Firefox.

chedabobon Counterfeits, fraud, and theft: Why Silca changed its return policy

Scroll down a bit.

There's a space for adverts that is set to take up the whole height of the window, and only gets resized when the advert loads in. If you've got an adblocker on, it never gets resized.

chedabobon Logitech MX Products are incompatible with AirPods

I thought communication between the tower and the device was encrypted?

That's not to say it's not using some archaic weak encryption scheme left in for backwards compatability though.

chedabobon Show HN: Web page that parses and explains the label on a bike tire

Are you using self-adhesive patches or something that uses a tube of glue? I never got on with anything other than Rema's patches.

chedabobon Should you use Let's Encrypt for internal hostnames?

For the project I'm working on currently, I use Charles Proxy's "Map Remote" function to map our UAT server's HTTPS url to my local machines HTTP URL.

Also ngrok.com works really well if you need to give other people access to your dev environment.

chedabobon Man Creates a 128 GB Floppy Disk (2016)

The original article is from 2016. I think 128GB was the biggest you could buy before the $/GB started to get silly.

chedabobon Apple Maps' Acceleration (2020)

I think Google's correction workflow helps massively with keeping the data up to date.

I can submit a correction for a misplaced business or wrong opening hours, and it's live on the map within hours, but more often minutes. Recently I had to submit a correction to a typo in a business name to Apple Maps and it took over a week.

chedabobon Hacking YouTube with a MP4

I think they might've meant xqcow https://en.wikipedia.org/wiki/XQc

chedabobon Phrack Issue 70

Ye was hoping to use that to get around our Sonicwall appliance blocking it for "Radicalization and Extremism"

chedabobon Apple’s crackdown on multicast

Yep, you have a Developer certificate that signs the binary before it gets sent to the device.

If you're just using the free developer program (by signing into Xcode with your Apple ID), this is all automated and you don't have to get into the nitty-gritty of certificate and profile management (but it's all still accessible if you want to).

There's some big restrictions on the free program though, not least being unable to use certain capabilities in your apps (e.g. multicast mentioned in the OP, but also background modes, push notifications, etc.) Most of these are self-service and don't require asking Apple nicely, but you don't have access to the developer portal so cannot add them to your app.

chedabobon Apple’s crackdown on multicast

You need the permission granting before you can run it locally. It gets added to the provisioning profile that is used as part of the signing process, even when run through Xcode.

It's to prevent people bypassing this approval and distributing their app through other methods.

chedabobon Kerberos: Open-Source Video Surveillance

Already taken by this Android app though https://www.cerberusapp.com/

chedabobon Circling–or cycling–the track at F1’s famous Circuit of the Americas

Oulton Park has opened up to cyclists in the past, but doesn't look like there's anything except a duathlon scheduled for this year.

chedabobon Temporal: Getting started with JavaScript's new date time API

Date.parse returning a number always trips me up.