HNHacker News
TopNewBestAskShowJobs

lights0123

2,054 karma · joined May 27, 2020

he/him

https://lights0123.com/

github.com/lights0123/

submissionscomments
lights0123··on An implementation of the NTFS filesystem in a Rust crate
That's the Rust standard—Apache 2.0 for its patent license, and MIT for its GPL-2.0-only compatibility.
lights0123··on iLeakage: Browser-Based Timerless Speculative Execution Attacks on Apple Devices
They use window.open on a mouseover event listener to open another page. Even if you close it, they still are able to read from it as that memory isn't immediately zeroed or returned to the OS.
lights0123··on How does macOS manage virtual cores on Apple Silicon?
This is the case in Intel 12th gen: P cores support AVX512, E cores do not. Instead of allowing OS-level support, you could gain back AVX512 by disabling E cores. Intel ended up disabling that feature in hardware later though.
lights0123··on Nghttp3 1.0.0 – HTTP/3 library written in C
> I'm going to assume it's like all the other HTTP/3 implementations and fails to fully implement the spec... the lack of ability to use plain text or self signed certs

Really? Does trusting a self-signed cert as a root cert not work in most libraries? quiche at least lets you control the parameters of their TLS implementation (https://docs.quic.tech/quiche/struct.Config.html#method.with...), which lets you go as far as allowing you to manually verify certs yourself (https://docs.rs/boring/latest/boring/ssl/struct.SslContextBu...).

lights0123··on Nghttp3 1.0.0 – HTTP/3 library written in C
> Given the lack of any function names addressing TLS/CAs/encryption/etc

Not only in its public API, but those are missing from its source code as well. I can't see where it could be doing any encryption—it doesn't even link to e.g. OpenSSL.

lights0123··on FFmpeg-online: ffpmeg running on the browser
"Not IE": https://caniuse.com/?search=wasm

Multithreading probably requires https://caniuse.com/sharedarraybuffer

lights0123··on Not setting up Find My bricked my MacBook
You can always boot to recovery partition and clean install the OS without Find My lock
lights0123··on Desmos 3D graphing calculator
There is none, just competing products.
lights0123··on Desmos 3D graphing calculator
Desmos has a far smoother UI. Geogebra will often convert equations into its own format after clicking away from the equation editor, and if you mistyped or want to change the structure you must erase and re-type the whole thing—for example, typing f(x) will convert the equation into its own format where you can't edit parameters or the function name. Desmos leaves your input as text, allowing you to change input at the character level. From my high school experience where both were used frequently, a lot of frustration was expressed with Geogebra where missing a parenthesis forced you to re-type the entire equation since it often assumed the bulk of your equation was a parameter, and there was no way to correct it.
lights0123··on Snmalloc: A Message Passing Allocator
The memory could be freed from another thread with a classical allocator—but this one passes it back to the allocating thread, leaving the question what happens to it?
lights0123··on Valve says Counter-Strike 2 for macOS not happening, there aren't enough players
And offered full refunds for those users, even if they had bought it five years prior.
lights0123··on Google wins reprieve from $32M verdict in Sonos patent fight
> Patents should benefit small companies with actual products in the market.

Which would be great, except as the ruling states, Sonos didn't introduce the feature in the market until 5 years after Google did:

> The essence of this order is that the patents issued after an unreasonable, inexcusable, and prejudicial delay of over thirteen years by the patent holder, Sonos, Inc. Sonos filed the provisional application from which the patents in suit claim priority in 2006...Google then began introducing its own products that practiced the invention in 2015. Even so, Sonos waited until 2019 to pursue claims on the invention (and until 2020 to roll out the invention in its own product line).

lights0123··on Lenovo PC boss: 4 in 5 of our devices will be repairable by 2025
No need to reverse engineer it when it's fully documented: https://download.microsoft.com/download/8/a/2/8a2fb72d-9b96-...
lights0123··on OnlyOffice: Free open source office suite with business productivity tools
LibreOffice also offers one that's fairly decent, just not enabled by default. It has many other modes as well: https://itsfoss.com/content/images/2023/01/Enable-ribbon-tab...
lights0123··on Alleged AMD Zen 5 Specs Leak: Twice the Cores, 15% Increased IPC over Ryzen 7000
Linux has had support for cores with different capabilities for ~a decade, when arm introduced big.LITTLE. systemd puts background services in "slices", which can have properties set in bulk.

    systemctl set-property system.slice AllowedCPUs=16-19
Would set the "system" slice to certain pinned cores, but there's nothing automatic.
lights0123··on Valve releases Counter-Strike 2
Odd that this fix is necessary given that the Steam Deck uses PipeWire.
lights0123··on What it takes to pass a file path to a Windows API in C++
What do remote desktop tools do? TeamViewer allows mouse movement from even a phone touchscreen just fine, and unless they're computing the inverse of Windows's mouse acceleration, they must have another solution.
lights0123··on FindMyCat – Open-Source Pet Tracker
UWB is an open spec implemented by both iPhones and Androids, which the chip this project uses supports: https://www.qorvo.com/newsroom/news/2021/qorvo-solutions-int...
lights0123··on North Korean campaign targeting security researchers
> the threat actors sent a malicious file that contained at least one 0-day in a popular software package

i.e. not executables

lights0123··on Show HN: I automated half of my typing
r and f are usually pressed with the left index finger, which would have to move between keypresses. With r0, your right hand could align to press the 0 while the r is being pressed, saving time.
lights0123··on GCC always assumes aligned pointer accesses (2020)
> in C you kinda just have compiler flags, and maybe __attribute__-s if you can spare some verbosity

Which you can use to wrap the unaligned type as a packed struct, i.e.

   struct __attribute__((__packed__)) unaligned_int { int i; };
which has an alignment of 1.
lights0123··on Hacker mods an M1 Mac mini to receive power over Ethernet instead of AC
The article simply assumes that the creator only supports the original POE when they say "POE". There's a good chance they used a PoE+ or PoE++ adapter that supports more wattage.
lights0123··on Paperlike Color: Color E-Ink Monitor
If you're willing to hack around with a reMarkable, koreader or plato have far better reading support if you don't need annotation.
lights0123··on Understanding American Airport Security Following 9/11 (2019)
Most airports provide a water fountain, often with a dedicated water bottle filling spout, right after security.
lights0123··on A Grub theme in the style of Minecraft
That would require a full GTK installation in initramfs, which would be a bit heavy.
lights0123··on Brute-forcing a macOS user’s real name from a browser using mDNS
First of all, you could probably do a timing attack on CORS response, you'd just have to deal with how much they're cached.

Depends on the resource request. For example, <img> can be used to load remote resources without CORS, since the image data isn't shared with JS (trying to read it via a canvas marks it "tainted", and errors read requests). Meltdown/Spectre breaks this barrier down, which led to the introduction of COOP/COEP headers that require CORS on remote requests and would break this attack—except that you can ask the browser to send requests without cookies, re-introducing this timing attack.

lights0123··on Stupid alloc – What if memory allocation was annoying
Although this crate likely enforces a higher alignment (to the page boundary with mmap) regardless of what is requested, you should request a higher alignment because malloc is guaranteed to be aligned to the largest C type, which is usually either 8 or 16 bytes.
lights0123··on Ask HN: Is GitHub down?
Same. I'm in Europe and it loads slowly but it gets there.
lights0123··on Apollo’s Christian Selig explains his fight with Reddit – and why users revolted
How is 345 calls/day—much lower than the official app's usage—that much when the server indicates that 60 calls/minute is all good?
lights0123··on The QR-code menu is being shown the door
Which comes out of the bank's share, not the merchant's.
← PreviousPage 5 of 20Next →