HNHacker News
TopNewBestAskShowJobs

lathiat

4,395 karma · joined November 23, 2015

e9d97d2d4a137fcf296c2fb30e80f4e5aa0af50b8197ac37a429e5fe35cf3611
submissionscomments
lathiat··on Yesterday the FBI signed its first public contract with Clearview AI
Here in Australia we are continually passing laws removing judicial/court/judge oversight for things and replacing it with whimsical oversight you’re lucky if someone outside of the requesting organisation looks at it. It’s pissing me off :(
lathiat··on iPhone camera app replaces person’s head with a leaf in photo
Lots of phones have a selfie beautification mode now.

Even Apple had appeared to add one in the iPhone XS/iOS12 but was apparently an issue with Smart HDR and was rolled back. But many Android phones advertise it as a feature and it's something many filters etc do.

It's also possible some HDR type functionality causes this on other implementations.

lathiat··on LastPass users warned their master passwords are compromised
Maybe look at BitWarden
lathiat··on Teller Reveals His Secrets (2012)
If you’re a fan of Penn & Teller (or magic) but haven’t seen their TV show “Fool Us” you should try a few episodes :) now in its 8th season!
lathiat··on Show HN: IR stove thermometer, firmware in Rust
In Australia this has only been legally required since 2017. My 2014 new house stove doesn't have it. Likely country dependent (I think more commonly it restarts the igniters instead of cutting the gas)
lathiat··on A brief history of code search at GitHub
Yes this seems like a bad move to me too. Plenty of repos still useful may not change in a year. But still be relevant.
lathiat··on Apple charges 2X more to fix a Steel Watch as the same aluminium one
The glass is intentionally different. The sports one is supposed to be more shatterproof but scratches easier. The stainless model is much more scratch resistant but shatters easier.

My wifes Series 2 lasted a few years with minimal scratching, she got a Series 5 and the face is basically ruined after a year and a bit. It is SO bad.

lathiat··on Actual CVE-2021-44228 payloads captured in the wild
Yep

"However, enabling these system property requires access to the vulnerable servers as well as a restart. The Cybereason research team has developed the following code that exploits the same vulnerability and the payload therein forces the logger to reconfigure itself with the vulnerable setting disabled - this effectively blocks any further attempt to exploit Log4Shell on this server"

https://github.com/Cybereason/Logout4Shell

lathiat··on Demystifying USB-C and Thunderbolt Docks (2017)
The problem is that on the one hand they want to enable USB-c to be low cost and universal for all devices. But on the other hand you want USB-C to support 100W and 240W charging but it’s not cost effective to put enough copper to carry 100-240W in your average low cost phone cable.

So the cable needs something active to indicate it’s capability. So you don’t melt it.

lathiat··on Demystifying USB-C and Thunderbolt Docks (2017)
The single monitor thing is because apple doesn’t support DisplayPort MultiStream. It has long been confusing why because pre apple silicon it worked fine on their GPUs in windows but macOS has no support. Given their thunderbolt drive it seems silly.
lathiat··on DNS doesn't “propagate”
caches are hierachical. Even your local machine most of the time now with recent OS releases will cache records, then your home router or some other DNS server on your network will often cache things before then referring to your ISPs or Googles DNS server.

Invalidating the cache at one doesn't invalidate the cache downstream of them if they already looked the record up recently. But it does mean that anyone who hadn't looked up the record will get the correct result straight away.

lathiat··on OS X-KVM: Run macOS on QEMU/KVM
See also quickemu which has support for launching macOS using information largely taken from this and similar repositories as well as Windows with TPM and enables all the good features: https://github.com/quickemu-project/quickemu

There is also another promising project called docker-osx which has the best documentation around doing the serial number generation to make iMessage etc work (you can use it in combo with most other methods but the docs are often confusing when I looked about a year ago): https://github.com/sickcodes/Docker-OSX

lathiat··on Movie dialogue has gotten more difficult to understand
I used to use an AV receiver and then ramp up the volume on the center channel. Didn't need to even be 5.1 audio as the processing that plucks the speech out based on frequencies worked good enough.

Having said that, it turns out that I'm reasonably deaf in one ear. It's considered "Mild" hearing loss but wow is the effect substantial. My wife listens on videos on her phone at the same volume level that is literally me being able to JUST hear it. Moderate-Severe hearing loss must be impossible. And one of my ears is totally normal... only one ear has "mild" hearing loss.

Anyway long story short, consider getting a hearing test :)

lathiat··on Microsoft Edge will now warn users about the dangers of downloading Chrome
Given that edge is now basically chrome this seems so disingenuous. They even say it.
lathiat··on T-Mobile CDMA network shutting down soon
Telstra in Australia already have their 3G shutdown planned for less than 3 years from now: https://www.telstra.com.au/business-enterprise/support/3g-se...
lathiat··on Saintcon: Lock Picking Lawyer Keynote
Time to watch this one

“Locksmith says my videos are BS… Loses $75 (Maybe)”

https://youtu.be/NSuaUok-wTY

Also if you actually watch this keynote half the problem isn’t locks you can actually pick but stuff you can just open with very basic tools that don’t even require the skill he has. Like combs, rakes, hammers, slithers of metal, etc.

lathiat··on I wish systemd logged information about the source of “transactions”
I can do one better for exit. The Solaris kernel debugger KDB can be used at runtime for inspecting some stats and also to change some global configurable variables.

For whatever reason if you type a variable/symbol it assigns it the value 0. If you type exit nothing happens immediately but as soon as the next process exits usually a few seconds to 10s of seconds later the entire system kernel panics on a null pointer de-reference.

Kernel paniced our production ZFS filer twice before I cottoned on. Newer releases special cased “exit” not to do that.

lathiat··on Ask HN: Why drive users away from the login button?
THIS DRIVES ME CRAZY. Honestly I have attributed it not so much to any intention but basically the website is designed by the marketing/sales side and all the users you already got is an afterthought. They didn't so much de-empasise it as forget to emphasise it.

Man it annoys me.

lathiat··on Elfshaker: Version control system fine-tuned for binaries
Borg has been working great for me with zstd.
lathiat··on Amazon not accepting VISA credit cards issued in UK
They have also started charging a 0.5% surcharge on australian visa (credit) transactions a few weeks ago and they very heavily publicised it. Lots of warnings. Banners everywhere. Emails. So that’s almost certain.
lathiat··on Hop: Faster than unzip and tar at reading individual files
I've recently been looking into this same issue because I analyse a lot of data like sosreports or other tar/compressed data from customer systems. Currently I untar these onto my zfs filesystem which works out OK because it has zstd compression enabled but I end up decompressing and recompressing which is quite expensive as often the files are GBs or more compressed.

But I've started using a tool called "ratarmount" (https://github.com/mxmlnkn/ratarmount) which creates an index once (and something I could automate our upload system to generate in advance, but you can also just process it lcoally) and then lets you fuse mount the file. This works pretty great with the only exception that I can't create scratch files inside the directory layout which in the past I'd wanted to do.

I was surprised how hard a problem to solve it is to get a bundle file format that is indexable and compressed with a good and fast compression algorithm which mostly boils down to zstd at this point.

While it works quite well, especially with gzip and bzip2, sadly the zstd and xz (and some other compression formats) don't allow for decompressing only parts of a file by default, even though it's possible the default tools aren't doing it. The nitty gritty details are summarised here: https://github.com/mxmlnkn/ratarmount#xz-and-zst-files

The other main options I found was squashfs which recently grew zstd support and there is some preliminary zip file support for zstd but there are multiple standards which is not helpful!

lathiat··on Why Python needs to be paused during profiling – but Ruby doesn't always
Interesting I’ve had this happen with strace and/or gdb before when hitting control-c a few times.
lathiat··on Hacking group says it has found encryption keys needed to unlock the PS5
The key is on the console (not server side). Historically either they made some silly choices or there was a hardware bug or glitch that let you read out the key that the processor has to be able to access to decrypt the firmware.

Search YouTube for fail0verflow and there are some great CCC talks very approachable and understandable about how it was done on other consoles historically.

PS4: https://youtu.be/QMiubC6LdTA Wii U: https://youtu.be/oss_dwj-IkE

lathiat··on Why time “speeds up” as we get older (2019)
I've seen a different explanation. When you are 10 years old, a year of your life is 1/10th of your life. Relatively, it's a large portion. When you are 50 years old, a year of your life is a much smaller 1/50th portion of total memory, experiences, etc.
lathiat··on Linux x86 program start up – How the heck do we get to main()? (2011)
I wonder how you get those 16 random bytes. I had no idea so much info was in AUx. uid. Program name etc. TIL.
lathiat··on Zillow to stop flipping homes, loses more than $550M, lays off 25% of staff
Though drive-by-wire throttles absolutely do modify and potentially hold back your throttle input for reasons of both economy, comfort and enforced driveline sympathy, there is also an inherent response difference between petrol and electric engines and also slop in the driveline system. That difference varies on the engine and transmission type.

Unfortunately I cannot find an easy good reference on what exactly that difference is quantifiably. Also many of the Electric cars right now are higher end even sporty vehicles, and more likely to have a throttle mapping that is more direct.

lathiat··on SSH alternatives for mobile, low-latency or unreliable connections
FWIW sftp vs scp is more about the protocol. Apparently new OpenSSH has an “scp” command that uses the sftp protocol.

But yeah Rsync is a good choice.

lathiat··on Ask HN: Linux users, which Steam game would you recommend and why?
Poly Bridge (1 and 2). It’s really great.
lathiat··on Trojan Source: Invisible Vulnerabilities
This is a really good write-up of the issue. I found the example simpler than the one the original paper showed.
lathiat··on Where have all the insects gone?
Not necessarily a co-incidence.

“Small birds are always vulnerable to predation from larger species. ... One reason that the larger birds do well in cities is that they are more likely to benefit from human-created foods (petfood, garbage, foodscraps and carrion) than small birds, which mostly eat insects.”

https://www.birdsinbackyards.net/birds/featured/Small-insect...

← PreviousPage 17 of 34Next →