HNHacker News
TopNewBestAskShowJobs

lashkari

92 karma · joined December 11, 2012

I <3 code

[ my public key: https://keybase.io/shahab; my proof: https://keybase.io/shahab/sigs/qrHyHO4irQf4e2t1UmyJX2rtNZF4IdTvD_NE_H_3GsI ]

submissionscomments
lashkari··on [dead]
https://archive.is/20260820161429/https://www.economist.com/...
lashkari··on Researcher tricks Apple's Find My into sharing location data with Linux
For anyone else that's interested, the researcher's own blog post (linked to in the article) gives a lot more detail: https://zerotistic.blog/posts/find-my-people-linux

I was curious if this used rustpush (https://github.com/OpenBubbles/rustpush) to do the heavy lifting and it looks like Zerotistic referenced rustpush/PyPush/FindMy.py in addition to their own reverse engineering to create their own implementation.

lashkari··on Linux 7.2
It doesn't give any specifics about what changed on the HDMI Forum side, but this article [0] from June indicates that Valve worked closely with AMD to get it pushed through prior to the release of the Steam Machine (which supports HDMI 2.1 VRR).

[0] https://www.digitalfoundry.net/news/2026/06/valves-hdmi-2-1-...

lashkari··on Ask HN: What are you working on? (June 2026)
I built Update My Address Book (https://updatemyaddressbook.com) more than a decade ago to make it easier to collect addresses from family and friends so that we could send out Christmas cards. It's been the app that I've rewritten every few years when I want to test out a new tech stack.

After getting laid off a few weeks ago, I decided to give it a complete rewrite with some new features (offline support, lists, passkeys) and a new UI.

It's still very much a work in progress, but I'd really appreciate any feedback that could help make it useful for others as well.

lashkari··on Google Chrome has an API accesible only from *.google.com
If it's really accessible from *.google.com, wouldn't this be simple to verify/exploit by using Google Sites (they publish your site to sites.google.com/view/<sitename>)?
lashkari··on Ask HN: Is accessibility worth it?
I can't share the work I referred to above, but it was very similar to the last example on this page: https://salesforce-ux.github.io/dnd-a11y-patterns

Disclaimer: I have no affiliation with Salesforce or the creation of that example page. I just found it in a web search.

lashkari··on Ask HN: Is accessibility worth it?
We made drag-and-drop interfaces accessible by allowing users to TAB through the original list, press ENTER on the item they want to move, then use the arrow keys to move the item and press ENTER again when done (or ESC to cancel). After each move, the item's current position, and any necessary local context, was announced via `aria-live` region.

There are other ways that this can be accomplished with even fewer keystrokes, so I can't imagine a scenario where drag-and-drop interfaces would have to be avoided because they couldn't be made meaningfully accessible.

lashkari··on Ask HN: Is accessibility worth it?
It helps to reframe your thoughts on accessibility as a subset of user experience (UX). Putting aside any potential moral argument, how important is UX to your business/project?

When accessibility is thought about and incorporated ahead of time, your overall user experience tends to be better. This is sometimes referred to as Universal Design.

I managed a project where we implemented a UI redesign for our existing enterprise SaaS software and we "went the extra mile" to not just make the experience accessible but to make that experience pleasant for our users with disabilities. In the end, some of the features -- especially around keyboard navigation -- that came out of that accessibility work were considered the best part of the redesign to our users.

lashkari··on Monkey Island PC-speaker music player
Heads up: I opened this link in a new tab and it immediately started playing a very loud, constant tone.

If you're wearing headphones or have your speakers turned up, be careful!

lashkari··on Amazon is filled with fake reviews and it’s getting harder to spot them
I've taken the approach of only reading the 3-star reviews.

In most cases, a 3-star review will provide a pretty thorough assessment of the pros and cons, and it's generally easier to determine the authenticity of the review.

lashkari··on First Apple Silicon Benchmarks Destroy Surface Pro X
It's worth noting that this is comparing the Apple Developer Transition Kit (with the A12Z SoC from the March 2020 iPad Pro) to the Surface Pro X (with the MS/Qualcomm SQ1 from October 2019).

It'll be interesting to see what Apple actually ships in production hardware.

lashkari··on Encoding your WiFi access point password into a QR code
Pretty much any Android device from the past 4-5 years should support connecting to WiFi via NFC (assuming the device actually supports NFC).
lashkari··on NSO hacked WhatsApp to spy on top government officials at U.S. allies
I get your point that a highly-motivated attacker has other, less sophisticated, ways of getting to your data.

However, if we're playing poker and I learn your tell, it's in my best interest that you are naive to that fact. While not the best analogy, I would think that the same concept would apply to state actors.

lashkari··on Ask HN: Why can’t I block all incoming calls that aren’t in my contact list?
An "unknown caller" is typically one that has no caller ID information provided (e.g., unlisted number). However, getting a random telemarketing call from a VoIP-provided (or spoofed) local number would still come through since the caller ID information is provided, even though the number is not in your contacts list.
lashkari··on I Can No Longer Recommend Google Fi
Except that many services (e.g., Family Libraries, Family Link, etc.) don't work with G Suite accounts.
lashkari··on Is Neuroscience a Bigger Threat than Artificial Intelligence?
I read once that the answer to any article whose title is a question is always "no."

In my own anecdotal experience over the past couple years, this no hypothesis has been right about 90% of the time.

lashkari··on Show HN: A simple GUI app to make Linux touchpad gestures easier
As silly as it may sound, three-finger drag is the primary reason why I will likely be purchasing a MacBook Pro instead of a Surface Book as my next laptop.
lashkari··on MacOS 10.14 Wishlist
I get your point, and somewhat agree, but I think it's important to remember that the two (feature updates to Terminal and Notes vs. stability/performance/etc.) aren't typically mutually exclusive; the developer that would implement Markdown support in Notes isn't likely the same developer that would be implementing performance/stability enhancements to the core of the OS.
lashkari··on Gusto launches a free HR product for small businesses
Took me a while to find it too, even though it's linked in the article. The product is called HR Basics and includes onboarding, employee directory/resource lists, and PTO management: https://gusto.com/free-hr
lashkari··on CSS Grid for UI Layouts
It's not as simple as using auto-prefixer, since IE10 and IE11 use the older syntax. However, it's surprisingly not that bad for simple layouts.

Here's a great resource covering the hows and whys: https://rachelandrew.co.uk/archives/2016/11/26/should-i-try-...

And here's a simplified example I threw together recently to demonstrate it in action: https://codepen.io/shahab/pen/ypWmZG

Basically, you lose auto-placement, named grid areas, and simple grid gaps, so you have to manually place items in the specific row/column for IE. But, I've found that it's still easier than the alternative in many cases.

lashkari··on Ask HN: What are the books you wish your colleagues had read?
Here's a link for anyone else that wants it: https://www.youtube.com/playlist?list=PL8FE88AA54363BC46
lashkari··on Show HN: Ready-to-use API to convert any web page to PDF using headless Chrome
Looks like it prints automatically once Page.loadEventFired is triggered.

Alternatively, you can run Chrome headless with the remote debugging API (--remote-debugging-port=9222) and send a Page.printToPDF (https://chromedevtools.github.io/devtools-protocol/tot/Page/...) after some delay.

lashkari··on Signal Desktop beta now publicly available
The Android app also supports standard SMS with non-Signal users. Those messages are not encrypted, so they show the lock to indicate whether the message was sent via Signal or SMS.

Think Apple Messages blue versus green.

lashkari··on Another Dell root certificate discovered
I just went through this with a new Dell XPS for my dad.

I performed a wipe/reinstall (with media created directly from a Microsoft download) and Windows 10 never asked me for a key after reinstalling it, and it reports as being activated.

Seems like they've moved away from requiring an OEM key in addition to the SLIC BIOS signature.