Hacker News Reader

llui85on Unauthenticated Object Write Vulnerability in MinIO

MinIO (a widely-used "high-performance, S3 compatible object store" published this advisory, which allows for unauthenticated overwrites of any file.

Their open-source AGPL repository is no longer maintained and no patch has been provided - you must download the closed-source binaries to get the fix.

llui85on Hacking Google Support: Leaking call logs and deanonymising agents

This is the write up from my first Google vulnerability which exposed a whole bunch of call logs. It was a fun thing to discover and a nice reminder that even Google isn't infallible to these sorts of breaches.

llui85on <Blink> and <Marquee> (2020)

I've always used the <plaintext> tag - an unclosable element that converts the rest of the document into raw HTML. It's very obvious.

https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/...

llui85on Block YouTube ads on AppleTV by decrypting and stripping ads from Profobuf

(2022)

llui85on Australia: Kids under 16 to be banned from social media after Senate passes laws

    (i) the sole purpose, or a significant purpose, of the service is to enable online social interaction between 2 or more end-users;
    (ii) the service allows end-users to link to, or interact with, some or all of the other end-users;
    (iii) the service allows end-users to post material on the service;

Linked to the legislation in another comment.

llui85on Australia: Kids under 16 to be banned from social media after Senate passes laws

https://parlinfo.aph.gov.au/parlInfo/download/legislation/bi... (explanatory memorandum here: https://parlinfo.aph.gov.au/parlInfo/download/legislation/em...)

And the amendment to the first reading which was agreed to today which has the bits about ID verification being disallowed: https://parlinfo.aph.gov.au/parlInfo/download/legislation/am... (supplementary explanatory memorandum here: https://parlinfo.aph.gov.au/parlInfo/download/legislation/em...)

llui85on Australia: Kids under 16 to be banned from social media after Senate passes laws

I believe that myID is also explicitly excluded as part of the bill.

llui85on Australia: Kids under 16 to be banned from social media after Senate passes laws

Some notes:

* It is illegal for a platform to provide children with a social media account, not for the child to create an account. Circumvention of this by the child is not illegal.

* No grandfathering - all accounts under 16 once this takes effect (which won't be until this time next year at earliest) must be deactivated.

* Maximum fine (per instance?) is 50 million AUD (about 32 million USD)

* The legislation is vague on the technical details, although it does specifically mandate that platforms cannot use government-issued ID of any kind (including digital ID).

llui85on Passkeys are now enabled by default for Google users

Google Authenticator now has an "Export QR code" function that allows exporting the 2FA secrets.

llui85on MondayDB: A new in-house data engine from monday.com

Replace medium.com with scribe.rip.

llui85on Mappedin – Instant Indoor Maps

  By making your submission now and hereinafter, you grant us a nonexclusive, perpetual, royalty-free, sublicenseable (through multiple tiers), irrevocable license to use and create derivative works of your materials submitted for any legal purposes whatsoever now known or hereinafter becomes known and you represent to us that you own or have all of the necessary licenses to grant the foregoing.

llui85on LCD, Please

Tip: In Firefox you can use Ctrl-Shift click to bypass context menu blocking.

llui85on The Anti-Ownership eBook Economy

Interestingly, Kobo and Tolino use (mostly) the same hardware.

llui85on Threads hits 5M signups in the first four hours

Looks like they're having some performance issues - loading a profile doesn't seem to work:

https://www.threads.net/@zuck

llui85on Let us serve you, but don't bring us down

They have a Google Sheets "API" which I've used and works reasonably well:

https://archive.org/services/wayback-gsheets/

llui85on Montana becomes first state to approve a full ban of TikTok

The latter:

    An entity violates this prohibition when any of the following OCCURS within the territorial jurisdiction of Montana:
        (a) the operation of tiktok by the company or users; OR
        (b) the option to download the tiktok mobile application by a mobile application store.

llui85on Montana becomes first state to approve a full ban of TikTok

The full text of the bill: https://leg.mt.gov/bills/2023/billpdf/SB0419.pdf

IANAL, but the explicit wording of part 1b seems strange. Does this allow the TikTok website to remain in operation? (or would that be covered by 1a still?)

llui85on Reverse Engineering the Facebook Messenger API

(2021)

llui85on Llama.cpp 30B runs with only 6GB of RAM now

Difference is that Meta was "publishing" the model to researchers, and one of them leaked it. I suspect OpenAI is a little less likely to share the GPT models around unfortunately...

llui85on NYT Worries Big Brother Is Not Watching You

The NYT essay this article is about: https://archive.is/ZEtfL

llui85on Ask HN: Does anybody use the HN hide button?

You might want to take a look at this Safari Extension for userscripts on iOS.

https://github.com/quoid/userscripts

llui85on Use a laptop as a 2nd display on Linux using FreeRDP

Unfortunately it still requires a Wi-Fi adapter:

    It is important to note that Miracast over Infrastructure is not a replacement for standard Miracast. Instead, the functionality is complementary, and provides an advantage to users who are part of the enterprise network.

    Discovery requests to identify Miracast receivers can only occur through the Wi-Fi adapter. Once the receivers have been identified, Windows 10 can then attempt the connection to the network.

llui85on MuseScore 4

MuseScore has two separate components:

- Musescore.com is run by Muse Group, formerly Ultimate Guitar. This is the sheet music sharing site which has a few controversies with downloading user scores, although this has improved a bit recently.

- Musescore.org is the GPLv3 notation software which they've announced the release for.

Muse is very good at keeping these two parts separated from each other. For example, the new "Muse Sounds" is installed via the closed-source "Muse Hub" (which economically makes sense as providing high-quality samples would be a fruitful business opportunity in the future) through a shared library.

Personally I think that this is a nice balance between maintaining the open-source software and providing features that practically only work with commercial backing - the reason that this could occur so quickly is because it reuses the playback engine and samples from StaffPad (https://www.staffpad.net), one of Muse's acquisitions.

llui85on Stable Diffusion 2.0

Link doesn't show any model output - it's an screenshot of photoshop refusing to edit a banknote.

llui85on So I lost my OpenBSD FDE password (2016)

(2016)

llui85on Ask HN: In Mac OS Ventura can you see the game controllers setting?

I believe they are in System Settings underneath the Trackpad settings, although they may only be visible when a controller is actually connected.

llui85on Traff: A universal format for live traffic information

See: https://traffxml.gitlab.io/ for a better summary.

llui85on iPad Pro M2

Personally, I use Vectornator, although it has a history of being a bit buggy on lower-end devices (seems to be fixed now).

llui85on Google search was giving errors when searching “how many emojis on iOS”

Interesting.