HNHacker News
TopNewBestAskShowJobs

lexlambda

120 karma · joined July 3, 2024

submissionscomments
lexlambda··on Geolocating a random island using geometry and CUDA programming
OpenStreetMap data really is a godsend for such OSINT purposes. Works much better in populated areas too, with more features like roads, shops, electric lines that can be used to search.
lexlambda··on European "age verification" "app" forcing everyone to use Android or iOS
You must realize, age verification is for more then just Googles Android apps.

Such a strong new legal framework must consider consumer hardware actually in use:

- Android variations Like GrapheneOS, Huawei's HarmonyOS, older phones running custom ROMs - Linux phones, which are sold in the EU and by EU companies

- Desktop operating systems

All of them can run Web Apps, and thus need age verification

lexlambda··on European "age verification" "app" forcing everyone to use Android or iOS
as far as I'm aware, Adroid is not the same as the requirement here, which requires specific Google attestation.

There is GrapheneOS, HarmonyOS by Huawei, LineageOS for older phones and many more Android ROMs.

Additionally, Linux phones exist and are already sold in the EU to consumers, not just a prototype.

There's really no justification around limiting the OS selection.

There is also Linux, Windows, MacOS and many more operatint system not limited to phones.

lexlambda··on Organic Maps
Organic mentions Open Source, but I just saw that FDroid mentions the following: "This app contains non open source components - compiled binary data files (including but not limited to .mwm map files) under a non FLOSS license"

Anyone has context on the following not hidden over Git-* issues (I was left thoroughly confused trying to understand it)?

lexlambda··on Google changes its search box
Why? To sell you something. If the traditional web incentives were to disappear, the internet will become just ads, selling things & work.

The web won't die. It will just become even more commercialized than it already is. You might recognize most of the things listed.

Selling things: Restaurants, hotels, local businesses; Ads: more of the same

Work: a) Projects people collaborate on and need to share information b) Writing articles to boost a resume

And maybe sharing what people do, they do it for free, see social media.

lexlambda··on Get your passwords out of Bitwarden while you still can
I second what the other commenters have said.

There are several factors at play making conflicts almost impossible:

- A central device can be immediately synced to. For Nextcloud, it could be a server, for direct synchronization that I use (Syncthing), my phone (almost always online) is the intermediate device for all.

- You are usually online when creating accounts/password, so an sync can happen directly after a change

- And finally: How often do you actually _create_ accounts rather than just read the database? And how often do you do it on two devices in quick succession?

lexlambda··on Ubuntu 26.04
LMDE is Debian-based, I believe you meant Linux Mint itself, which also doesn't use snaps.

You get all the driver support and tools from the Ubuntu base, with some nice additons. However, not all desktop environment are supported.

lexlambda··on Cal.com is going closed source
A slight factor differentiating security systems here is involved to the advantage of defenders: Attackers have to find a whole exploit chain, while defenders only need to fix one part of it.
lexlambda··on Cloudflare targets 2029 for full post-quantum security
> news.ycombinator.com:443 is using X25519, which is not post-quantum secure.

This is the result of Cloudflare's test "Check if a host supports post-quantum TLS key exchange" offered on https://radar.cloudflare.com/post-quantum.

Hoping there is already a migration plan. Fortunately many modern tools make it easy to switch to PQ, maybe someone knows which stack HN is running and if it would be possible.

lexlambda··on Hold on to Your Hardware
This is a filter added by you (or by an overzealous list maintainer), it does not happen by default or even with the provided additional filterlists.
lexlambda··on Discord will require a face scan or ID for full access next month
Yes, it is indeed not always clear what constitutes forgery (Germany).

> A document in the classic sense requires an embodied declaration of intent that identifies an issuer and is suitable for providing proof in legal transactions. In the case of a lawyer's letter, the signature is an essential part of the standard repertoire of authenticity.

https://www.heise.de/en/news/Document-fraud-via-email-Why-th...

So removing some parts to make it _could_ make it safe, to Not create a "risk of confusion":

> Even if computer processing creates the appearance of a genuine document, the typical characteristics of the original must be present to establish a serious risk of confusion. Likewise, the BayObLG did not consider the offense of forging evidential data according to Section 269 of the German Criminal Code (StGB) to be fulfilled.

lexlambda··on “Boobs check” – Technique to verify if sites behind CDN are hosted in Iran
Like posting an archive.is link, others can actually read it. No login required for reading replays, no popups and signup nagss.
lexlambda··on Checkout.com hacked, refuses ransom payment, donates to security labs
The donation is more or less virtue signaling rather than actual insight.

The problem can not be helped by research research against cybercrime. Proper practices for protections are well established and known, they just need to be implemented.

The amount donated should've rather be invested into better protections / hiring a person responsible in the company.

(Context: The hack happened on a not properly decomissioned legacy system.)

lexlambda··on ADS-B Exposed
This is certainly missing some kind of legend explaining the colors of the lines, and what data is actually shown.

Is "red" high or low velocity? And as an example, I do not understand what the "Boeing vs. Airbus" selection is trying to represent, as well as how "Altitude & Velocity" are supposed to be displayed at the same time.

Project certainly requires a bit more care if any discussion should happen around it.

lexlambda··on Fastmail desktop app
I find it rather strange that so many email providers have to develop their own "app".

There are so many good clients out there, and I'd rather have 1. The team focus on their core offering, and 2. the existing email client is for the same reason (limited developer time, and matureness) a much better choice for security

lexlambda··on Email immutability matters more in a world with AI
Immutable as in the message won't be altered/deleted by the sender. This is. This is about user control, as opposed to chat apps or social media, where posts are frequently edited, get taken down after an outrage or links can disappear to link-rot.

From article: "An email is your copy, and the sender can’t revise it later."

lexlambda··on WhoBIRD is now deprecated on certified Android devices
I assume, since the statement specifically mentions CERTIFIED devices, that they do intend to further develop the app.

As always with Google policies, this means users will need to jump through more and more hoops (as today with custom ROMs and banking apps already). I really hope first and foremost that this policy can be reverted, and if not, that the community develops means of technological circumvention (examples mentioned by others include an "app runner" app or letting others identify the app).

It is a sad state the Android ecosystem is heading to.

lexlambda··on I replaced Animal Crossing's dialogue with a live LLM by hacking GameCube memory
So true. In such an LLM-driven game though, I would imagine the player would just ask the NPC: "I forgot what to do" or even "Can you explain it in other terms?" (if the quest description isn't clear enough).
lexlambda··on Microsoft's latest Windows 11 24H2 update breaks SSDs/HDDs, may corrupt data
Reading the article further, they do note that "A suspected memory leak in Windows’ OS-buffered cache region could be the problem.", although I concede that no source is provided for that.
lexlambda··on KDE is removing all colorful third-party app icons from its Breeze icon theme
Icon themes modifying the developer-provided icons was always a strange thing to me in many Linux distributions. Even often hard or hidden to disable this behavior.

My workaround already was using Breeze, since it does the least modification compared to other themes available by default. Glad to see it continue in this direction.

lexlambda··on Bus Bunching
Some of the proposed solutions are problematic. A public transport systems absolutely needs to be reliable for the people who use it.

Skipping stops is the worst in that regard and breaks the whole point. No schedule causes issues downstream, since now there won't be a schedule to depend on when needing to switch to trains or other busses.

But in general, the only thing to realistically improve without decreasing reliability is the amount of time spent at a stop (also mentioned in the article).

All in all, I see these suggestions as "what to do in a worst-case scenario", i.e. if the service already has major issues.

lexlambda··on Superhyperbola
I was confused by the legends between the first and second image? Both have p=2 and p=4 yet look different, I believe that this is wrong, as the sentence before the second image states "increasing p". Hope I'm not missing something
lexlambda··on Bluesky's science takeover: 70% of Nature poll respondents use platform
Important to note:

> Although the survey is not statistically representative of Nature readers or the scientific community at large

I found that the survey seems to have been advertised for with "Has Bluesky replaced X for scientists?" according to this article from Jan 14 [1]. This attracts people who switched more I think. So the 70% figure is nothing than hot air.

It is still interesting seeing the positive sentiments and reasons for switching analyzed.

[1] https://www.nature.com/articles/d41586-025-00037-y

lexlambda··on Google starts tracking all your devices in 8 weeks
> Why are we sending out all this info.

You are generalizing. Google and big providers do that, usually (US)services that need to cater to the whole world. But a huge part of the normal web still uses and _needs_ preferred language. No one wants to be forced to use geolocation.

Just one very common example are info pages for sightseeing, they are usually available in all languages that people commonly visit from and just work if you browse to them. Not to mention that geolocation would be useless anyway in that case.

lexlambda··on Show HN: Eonfall – A new third-person co-op action game built for the web
Yep. So much for "built for the web". While I know that a lot of software is only tested on Chrome and Safari, I would expect different when marketing as being web-based.
lexlambda··on Sitters and Standers
Accessible as in "better to understand", helping with bringing the idea to a more general audience.

A lot of people are uninterested in long texts or in this case parts of the expected audience might also have literacy issues.

lexlambda··on Sitters and Standers
Thought the same. It is clear that this presentation is definetely biased towards showing the problems of standing workers, as there haven't been any negative options about sitting presented.

Unfortunately, while medically known and even legislated (forced breaks), problems of sitting workers are still widely ignored (often by themselves too) until too late or trivialized.

lexlambda··on Europe's Internet resilience mitigates impact of submarine cable cuts
Can anyone explain why there wasn't any BGP activity on the Finland-Germany systems when the cable broke, while for Lithuania there was a massive spike?

Unfortunately it's been a long time since I learned about BGP, if anyone could help out here I'd be grateful.

lexlambda··on The tragedy of running an old Node project
And project specifying "requires python 3.X+" instead of Version X to Y is also a major culprit I often encounter.

Most of the times it will not work with the newest shiny python, which I only notice after already installing it and then having searched search the Github issues.

lexlambda··on Two upstart search engines are teaming up to take on Google
> “We could de-rank results from unethical or unsustainable companies and rank good companies higher,” Kroll says of the eco-minded Ecosia.

Understandable knowing Ecosias goals, but I find it rather concerning their vision of a better search involves deciding what is good and bad.

Ranking by quality (against spam & SEO sites) is fine, but it should be applied equally to all Websites, and not target specific companies.

Page 1 of 2Next →