HNHacker News
TopNewBestAskShowJobs

panki27

757 karma · joined January 7, 2022

https://theresno.cloud/
submissionscomments
panki27··on Flipper Zero dark web firmware bypasses rolling code security
If you keep your car key close enough to your front door, it's possible to relay the signal that the key is constantly broadcasting closer to the car, allowing an attacker to hit the button on the handle and unlock it without posesssing the key.
panki27··on Replacing tmux in my dev workflow
Thank you, already knew about it though.

WezTerm is not necessarily something I want to deploy and keep up to date on hundreds of machines, screen/tmux are still fine for that.

panki27··on Replacing tmux in my dev workflow
Switching to WezTerm has completely eliminated the need for tmux for me - except for stuff I want to run server side, disconnect and come back to.
panki27··on Vet is a safety net for the curl | bash pattern
If modern EDR systems are so great without relying on classical signature matching, then why are they still doing it? Why do they keep fetching "definition databases" as often as possible?

... because it's the only thing that somewhat works. From my personal experience, the heuristic and "AI-based" approaches lead to so many false positives, it's not even worth pursuing them.

The best AV remains and will always be common sense.

panki27··on Vet is a safety net for the curl | bash pattern
At this point, the whole world is just a complexity Olympiad
panki27··on Lightning Detector Circuits
Real time, community sourced lightning map: https://www.blitzortung.org/

Posted this some time ago, but it got no traction :(

panki27··on ASCIIMoon: The moon's phase live in ASCII art
`curl wttr.in/moon`
panki27··on Show HN: Open-Source International Space Station Tracker ESP32/Arduino for $20
Looks like a fun tinker project. Could be easily extended with a GPS receiver to show your location on the map.
panki27··on Matrix v1.15
Because it entails getting people away from WhatsApp/Telegram/etc. - I speak from experience.
panki27··on GIF export in Snipping Tool begins rolling out to Windows Insiders
Indeed - you don't even need to store full frames, sometimes changes are enough. I managed to compress the entirety of the Bad Apple!! video into a 64x32px GIF -taking up 813 KiB.
panki27··on GIF export in Snipping Tool begins rolling out to Windows Insiders
Still waiting for the QR code reader in SnippingTool (or PowerToys).
panki27··on Can your terminal do emojis? How big?
WezTerm appears to support upscaling, but I only get the first emoji printed - the combining part does not work.
panki27··on Design for 3D-Printing
I just got started recently with OpenSCAD - it's a different beast, but very useful for simple parametric designs. You write code to describe the form of your object - no clicking and dragging things at all.
panki27··on What Is "Induced Atmospheric Vibration"?
Not necessarily "new to StackExchange", but at least to the physics site.
panki27··on A single line of code cost $8000
That's stretching my definition of "good" quite a bit.
panki27··on Dear "Security Researchers"
The site does not appear to be from the Debian project, it's likely just a mirror.
panki27··on Prepper Disk
170€ for a "Raspberry Pi 4B with 2GB of RAM and a 512GB premium SD memory card".

Any bets how long that SD card is gonna last?

panki27··on TLS certificate lifetimes will officially reduce to 47 days
You can not MITM a key that is being exchanged through Diffie-Hellman, or have I missed something big?
panki27··on TLS certificate lifetimes will officially reduce to 47 days
How is an attacker going to MITM an encrypted connection they don't have the keys for, without having rogue DNS or something similar, i.e. faking the actual target?
panki27··on TLS certificate lifetimes will officially reduce to 47 days
That CRL is going to be HUGE.
panki27··on TLS certificate lifetimes will officially reduce to 47 days
People will just roll out almost forever-lasting certificates through their internal CA for all systems that are not publicly reachable.
panki27··on TLS certificate lifetimes will officially reduce to 47 days
Isn't this excatly the reason why LetsEncrypt was brought to life?
panki27··on A hackable AI assistant using a single SQLite table and a handful of cron jobs
You might want to take a look at SillyTavern. Supports multiple backends, accepts voice input, and has a plugin system.
panki27··on We clone a running VM in 2 seconds
Interesting thought, but highly dependant on the actual program. Let's assume it doesn't touch any files on disk (no opening sockets either). You would need to at least

1. Halt the process (SIGSTOP comes to mind)

2. Create a copy of the running program and /proc/$pid - which will also include memory and mmap details

3. Transfer everything to the other machine

4. Load memory, somehow spawn a spawn a new process with the info from /proc/$pid we saved, mmap the loaded memory into it

5. Continue the process on the new machine (SIGCONT)

Let me admit that I do not have the slightest clue how to achieve step 4. I wonder if a systemd namespace could make things easier.

panki27··on Gemma3 – The current strongest model that fits on a single GPU
I've had really good results with Qwen2.5-7b-Instruct.

Do you have any recommendations for a "general AI assistant" model, not focused on a specific task, but more a jack-of-all-trades?

panki27··on Show HN: Live-updating version of the 'What a week, huh?' meme
W3C has deprecated this for a long time now: https://www.w3.org/TR/WCAG10-HTML-TECHS/#meta-element
panki27··on U.K. demand for a back door to Apple data threatens Americans, lawmakers say
Patriot act and cloud act threatens everyone else. More news at 11.
panki27··on Imapsync
Used this around 5 years ago to migrate a mid-sized mailserver, absolutely magnificient.

I remember that back then you had to pay for the binaries, but could download the source code for free - you just had to figure out how to compile it.

The page mentions Perl source code though, so I'm not sure if I'm mixing this up with another tool...

panki27··on Smuggling arbitrary data through an emoji
I implemented something similar years ago, but much simpler/less sophisticated.

Unicode has two non-printing space characters: zero-width space (U+200B) and zero-width joiner (U+200D). This allows you to encode arbitrary data in binary. I would give an example, but HN seems to strip this :(

panki27··on Meta torrented & seeded 81.7 TB dataset containing copyrighted data
They could have at the very least seeded some more, to give something back to the, uh, community.
← PreviousPage 2 of 7Next →