Hacker News Reader

phsauon What is the size of Yemen? (2024)

Does that basic literacy include reading their flag? Or is that unrelated?

Would you care to educate us?

phsauon US criticises Australia's proposed algorithm opt-out laws as 'censorship'

Thank you.

phsauon US criticises Australia's proposed algorithm opt-out laws as 'censorship'

You say draft bill, but can you link to it? I can only find descriptions from the PM: https://www.pm.gov.au/media/my-feed-my-way

What you've described isn't part of this?

"The draft laws provide eSafety with the power to issue removal notices for nudify apps or websites, and streamline the child cyber-bulling and adult cyber abuse schemes to enable eSafety to deal more quickly with this harmful material."

phsauon Gemini 3.8 Flash and 3.8 Flash Cyber

https://aistudio.google.com/prompts/new_chat?model=gemini-3....

phsauon Jellyfin founder Andrew leaves team

It's already significantly better than Jellyfin, Plex, and Emby. Give it a try. The development team is active on their Discord. A lot of users are testing it.

It's currently running a PB+ media library (which neither Jellyfin nor Emby can run) with native clients across multiple platforms. It will unseat Jellyfin.

phsauon Monetization Gateway: Charge for any resource behind Cloudflare via x402

Why is it worse? This seems like a good alternative to large monthly fees, where you can pay per use.

5c to read an article? Sure. $20/month subscription? No way.

phsauon Intel's make-or-break 18A process node debuts for data center with 288-core Xeon

Could you provide an article that explores this difference? I'd like to understand the mechanics of this and see how this conclusion is reached.

phsauon Most parked domains now serving malicious content

Port 25 is only uncommon for client submission, but prevalent for MTA>MTA traffic.

phsauon Datacenters in space aren't going to work

>Almost every single objection to data centers in space has already been overcome at a smaller scale with Starlink

Did you not read the article? It had many objections that make it clear datacenters in space are unworkable...

phsauon Kurt Got Got

And if you read the story, it's because he ignored the fact that the password manager didn't prompt auto-fill.

"I went to the link which is on mailchimp-sso.com and entered my credentials which - crucially - did not auto-complete from 1Password. I then entered the OTP and the page hung. Moments later, the penny dropped, and I logged onto the official website, which Mailchimp confirmed via a notification email which showed my London IP address:"

phsauon Reverse engineering Call of Duty anti-cheat

It's cheaper and more accessible than ever to use DMA/hardware cheats from cheat vendors.

phsauon Syrian government falls in end to 50-year rule of Assad family

https://www.defense.gov/News/News-Stories/Article/Article/39...

The DoD says North Korean soldiers are already in Kursk and preparing? News of NK armament deliveries and use is old at this point and not debatable.

Is the DoD spreading fake news? Just because they haven't seen front-line combat _in Ukraine_ doesn't mean Russia isn't using NK assets.

phsauon How French Drains Work

Wouldn't it be better to keep the tree and its roots away from the drain? That growth might come at significant cost!

phsauon What You Get After Running an SSH Honeypot for 30 Days

Malicious traffic is not limited to ssh and comes from the same usual suspects. Automated attacks against web applications is constant. I wouldn't say it's indiscriminate, it's practical.

phsauon XFS online filesystem check and repair

It's workload dependent; XFS performs better for our database needs.

phsauon Diablo Immortal brought $100M to developers in less than two months

The source for this article is SensorTower Store Intelligence, which claims to have "download and revenue data for nearly all mobile apps available in the App Store and GooglePlay". How are they getting revenue data when it's not publicly available (to my knowledge)?

phsauon OpenSMTPD

We run Postfix at a large, high-volume scale and I can confirm OpenSMTPD does not have the feature/configuration set to work as a replacement. Postfix is great in this regard because it has near endless configurability, but it comes at the cost of complexity.

phsauon Faking Twitter unfurling to phish you

Isnt't that what CORS/same-origin policies prevent? The attacker domain can be prevented from loading the bank resources within the same context by the browser. If the request is made by the attacker domain instead and proxied to you, then it doesn't have your cookies to display the private identification.

In either case, the "correct profile picture" would not load.

phsauon A man spent a year in jail on murder charge that hinged on disputed AI evidence

Where in source [1] does it show that it's common for police to make over $450k a year?

The 'Avg Total pay & benefits' sorted by title has Chief Information Officer/Registrar of Voters as the entry into that level of remuneration. Police specific above that you only have the Sherrif, which is an elected official.

Police pay for the vast majority of roles is significantly below $450k.

phsauon Google says geofence warrants make up one-quarter of all US demands

Not all crime is premeditated and most people aren't described as criminals.

phsauon 38% of remote workers work from bed

The list formatting was not preserved...

phsauon 38% of remote workers work from bed

There are lots of good options. The higher end brands include: Herman Miller Humanscale Steelcase Ergohuman

Style, material preferences, and budget will guide the best pick. You can't really go wrong so long as your choice is an adjustable chair.

phsauon Hastening Linux process cleanup with process_mrelease

I've also found that under these conditions kswapd will effectively consume all your CPU time. The time it spends running is probably proportional to your maximum memory too - in our case it parses through 500+GB of LRU. The blocking writeback behaviour can be managed effectively with dirty page writeback ratio tuning. You don't want to block trying to write 50GB to disk at once when you hit the high dirty page watermark.

phsauon I Was Robbed in San Francisco While the Cameras Rolled

Which policies?

phsauon Netmask NPM package, used by 270k+ projects, vulnerable to octal input data

Thanks, that makes sense. I was thinking along the lines of applications interpreting HTTP headers like X-Forwarded-For, but trusting the client (instead of re-writing).

phsauon Netmask NPM package, used by 270k+ projects, vulnerable to octal input data

Can anyone explain a scenario where this is exploitable? I don't understand how this is likely to result in SSRF, file inclusion, etc. What applications are taking user supplied IP addresses?

phsauon Treasure hunter in jail for 5 years

I'm not sure you read the entire article. It's not simply being in contempt of the court for failing to provide information on the asset location, but for refusing to uphold the plea bargain in which he provides limited power of attorney to investigate the trust held in Belize. You can't in good faith claim you can't remember and also refuse to assist in any capacity.

He would be free if he provided the power of attorney.