HNHacker News
TopNewBestAskShowJobs

esdf

71 karma · joined September 17, 2020

submissionscomments
esdf··on CVE-2024-54471: Leaking Passwords (and More!) on macOS
And more!

https://bugzilla.gnome.org/show_bug.cgi?id=758032

https://github.com/linuxmint/cinnamon-screensaver/issues/354

esdf··on Interview with gwern
Hosting large datasets can be expensive but the hosting for the danbooru datasets was not. It's "only" a few terabytes in size. A previous release was 3.4TB, so the latest is probably some hundreds of GB, to a TB~, in size larger. The download was hosted on a hetzner IP, which is a provider known for cheap servers. You can pay them $50/m for a server with "unmetered" 1gigabit up/down network + 16TB of disks. $600 a year would not be difficult.
esdf··on WordPress Plugin Mirror Downloader (Proof of Concept)
Cloudflare does allow R2 (& some other "Developer Platform" services) for non-HTML content. They made some TOS changes in the past to be more explicit about it.
esdf··on What to do when someone clones your site?
And DMCA takedowns to the webserver's hosting provider
esdf··on Safe curves for Elliptic Curve Cryptography [pdf]
Windows had an ICMP CVE last year and also just released a patch for an IPv6 CVE. OpenSSH on Linux had a CVE recently too. Security in depth is reasonable and not baseless.
esdf··on How WASD became the standard PC control scheme (2016)
I've got to agree with you on this
esdf··on C Isn't a Programming Language Anymore (2022)
You can issue syscalls directly on Windows too but updates often change the syscall numbers so you never see them used legitimate software.
esdf··on Understanding HTTP/3 – Features, Benefits and Impact
Probably about the protocol being more complex with less implementations or the forced encryption which means acquiring certificates for TLS. Spoofed IPs for DDoS is a bit more troublesome for UDP protocols, though smaller players will get smacked down by any DDoS anyway. I hope to see more applications and games wrap their traffic in QUIC/HTTP3 to "defeat" firewall filtering.
esdf··on What's the deal with the blue "robins" in gacha games?
There is actually a blue/green language quirk in Japanese and they even have blue traffic lights because of this
esdf··on You can help Anna's Archive by seeding torrents
They did deny involvement so it'll be interesting to see what happens (you probably know this though) https://torrentfreak.com/key-defendant-in-annas-archive-laws...

>It’s weird, because it feels like important work, rather than criminal — someone should put into words exactly what the distinction is.

Important work can be criminal

esdf··on You can help Anna's Archive by seeding torrents
A lot of english-advertising hosts from the regions in my comment are going to advertise DMCA-ignore, freedom of speech, and/or privacy. And you basically can't go wrong with any of them. Seedbox-as-a-service providers specifically are going to be generally be fine too although many of those are hosted in Netherlands which is slowly becoming less copyright-infringement -friendly.

One specific host I'll mention is vsys.host (UA) (which anna's archive uses too) but they're not going to be the cheapest option.

esdf··on You can help Anna's Archive by seeding torrents
I think Turkey would be fine but I don't know or have anything to base it off of
esdf··on You can help Anna's Archive by seeding torrents
Ukraine, Russia, Moldova, Romania, Vietnam, Africa. Often anywhere near those too
esdf··on Show HN: I created a reverse search engine to find the source of anime clips.
For reference another site that does this with images is https://trace.moe/
esdf··on Scandal at America's top science fair
Also a (not south park) movie! https://en.wikipedia.org/wiki/Down_and_Derby
esdf··on Vanguard just went live and LoL players are claiming it's bricking their PCs
I've never heard of a kernel-based anti-cheat from Valve. Can you provide a source for that
esdf··on Akiya houses: why Japan has nine million empty homes
I'm not looking to buy property but I wanted to let you know that it seems hard to look you up. You don't have an email or name on your profile and the username isn't very unique online.
esdf··on World's Smallest CSV Parser (C#)
Where are they implying this and why would the strings not have the same length? Is there normalization implied somewhere?
esdf··on Cory Doctorow on Kagi Search
1000, not 10000
esdf··on More than 2M research papers have disappeared from the Internet
A lawsuit is underway with a named defendant for Anna's Archive https://torrentfreak.com/lawsuit-accuses-annas-archive-of-ha...
esdf··on Don't Use Discord for FOSS (2021)
(and only unencrypted rooms from the webapp)
esdf··on Don't Use Discord for FOSS (2021)
Being DDoS'd because you joined IRC and didn't read a manual on how to use it so you didn't know all the cool kids have bouncers or that the server may or may not have "cloaks" that you had to opt-in to. Discord is/was definitely a much better nicer experience than this.
esdf··on Don't Use Discord for FOSS (2021)
Here's some of my pet-peeves and experiences from the webapp, the webapp wrapping desktop app, and the iPhone app. Maybe they'll qualify for awful usability, maybe they won't.

There's been an issue open for Push-to-talk in element for 6 years. Insane.

The voice and video calls/conferences aren't very good interface-wise. You could defer to this Jitsi being bad though. Screen-sharing is just broken so your alternative is to use OBS and its Virtual Camera, which means audio-sharing doesn't work. You won't actually see the video until you find the quality option somewhere to slide it all the way up.

The whole screen-sharing or conference thing remaining visible, after everyone has disconnected, until the "starter" closes it? I'm not sure.

Element X is mobile only (correct me if I'm wrong) so it's irrelevant to many users.

You can't reorder your "favourites", only sort by Activity or A-Z (and showing recent first). "Favourites" being non-American English was something I noticed right now which doesn't matter but is worth noting for i18n.

The lines after a `>quote` also get swallowed up into a quote block which I'm not a fan of and requires you to have an empty line after. Github does something similar afair.

The inexplicable Unable to decrypt messages that happen sometimes. Can likely be deferred as user-error.

Trying to sync or transfer keys across devices and not knowing if it worked so you just sit there and wait to see if the Unable to decrypt messages resolve.

>"Use the Desktop app to search encrypted messages" (from the webapp)

And finally, one of the most annoying things: shit scrollback for messages. It loves to jump to the very bottom/latest messages.

>folks who refuse to use a system which doesn’t have total parity with every feature Discord has”, or who are annoyed at having to run more than one chat app; Discord is where my friends are.

Well, they are on Discord. And Discord has PTT(LOL!!!) and working screen-sharing (very important!). And Element has a bunch of these random things that make it annoying to use in comparison that makes everyone call it shit and then only use it for text chat and maybe Mumble for voice, when not using Discord of course.

One more bug: some combination of right-clicking on the Element tray icon causes it to be covered by Windows' task-bar right-click menu.

esdf··on Privacy focused platform Skiff is joining Notion, Skiff to be sunset
Yea that sure was fast. It's probably not sustainable/profitable to provide email for free
esdf··on How to defend your website with ZIP bombs (2017)
I wouldn’t try it in Japan https://github.com/hamukazu/lets-get-arrested
esdf··on How to defend your website with ZIP bombs (2017)
It is fun to pitch it as defending a website. Now it’s fine
esdf··on Cloudflare API Down
That's interesting. Cloudflare tunnels do a few things that I expected to to make it perform better in general: obviously TLS termination on CF's side where they likely have faster hardware doing that (at least faster than many customers), then the keep-alive sockets for tunnel<->CF, and I think they use UDP/QUIC for the tunnel<->CF connection[0] which I figure could remove some latency.

[0]: `lsof -i | grep cloudfl` shows me 4 UDP connections & 1 TCP

esdf··on Free Speech Is in Trouble
Perhaps not as extremely as that statement may imply but I wouldn't say it is inaccurate with this in consideration:

https://news.ycombinator.com/item?id=34142030

https://www.thefp.com/p/how-twitter-rigged-the-covid-debate

esdf··on Email.radio – Free Email Domain for Licensed Ham Radio Operators
You can google their username which looks like a pretty discernible attachment to a real-world identity to me.
esdf··on Up to tenth of Amazon shoppers in GB 'bribed' by sellers to offer good review
they know where you live
Page 1 of 2Next →