HNHacker News
TopNewBestAskShowJobs

praseodym

2,533 karma · joined June 18, 2013

submissionscomments
praseodym··on The hijacking of rare Japanese KitKats
YC already invested in several companies in this domains: https://www.ycombinator.com/companies/?industry=Supply%20Cha...
praseodym··on My 2023 all-flash ZFS NAS (Network Storage) build
I noticed that the author is using ZFS-native encryption, which in my experience is not particularly stable. I've even managed to corrupt an entire pool with ZFS send/receives when trying to make backups. I'd strongly recommend using ZFS-on-LUKS instead if encryption is required.

The list of open issues on GitHub in the native encryption component is quite telling: https://github.com/openzfs/zfs/issues?q=is%3Aopen+is%3Aissue...

praseodym··on Apple's use of Swift and SwiftUI in iOS 17
Does anyone happen to know what the `HomeEnergyUI` mentioned in the article does? As far as I know the Home app doesn't have any energy UI at this point.
praseodym··on ZFS for Dummies
Fully agree on using tools such as Restic! The `--exclude-caches` is really helpful in keeping backups small, it makes Restic skip directories with a CACHEDIR.TAG file and that includes Rust compile target directories. Combined with a small exclude list for browser caches and other temporary storage this makes backup deltas way smaller than in the average ZFS setup. (And no, creating a new ZFS filesystem for every cache directory and excluding each of them from snapshots is not really a solution)
praseodym··on I only lost 10 minutes of data, thanks to ZFS
When backing up to an APFS Time Machine volume it does work a bit like that, at least no hard links are used any more:

- https://eclecticlight.co/2021/03/11/time-machine-to-apfs-und...

- https://eclecticlight.co/2021/04/16/time-machine-to-apfs-usi...

praseodym··on WD refused to answer our questions about its self-wiping SanDisk SSDs
Could be defect RAM, unstable power supply or other problem than the disks themselves.
praseodym··on The Future of the Vim Project
Call the deceased person's bank to cancel all credit cards in their name and that's taken care of.
praseodym··on [dead]
"SteamOS is our Linux-based operating system. The base system draws from Debian 8, code named Debian Jessie."

Debian Jessie is terribly out of date and hasn't seen regular security updates for five years now, from https://www.debian.org/releases/jessie/:

> Debian “jessie” Release Information

> Debian 8.11 was released June 23rd, 2018. Debian 8.0 was initially released on April 26th, 2015. The release included many major changes, described in our press release and the Release Notes.

> Debian 8 has been superseded by Debian 9 (stretch). Regular security support updates have been discontinued as of June 17th, 2018.

edit: it looks like the SteamOS build for custom hardware is no longer available for download, as the download link now leads to a "Download SteamOS: Steam Deck Image" page.

praseodym··on Microsoft to Offer Some Cybersecurity Tools Free After Suspected China Hack
Without paywall: https://archive.ph/lERWe

And the CISA announcement: https://www.cisa.gov/news-events/news/when-tech-vendors-make...

praseodym··on UK retail electricity prices hit -19p/kWh today
Charging an electric car will earn you €10-€15 and you get to drive your car a nice distance too.

Battery storage could earn you more if you discharge at the right moment, but energy prices aren’t negative often enough to warrant the expenses on a battery pack. You could also trade on intra-day pricing differences (buy low, sell high) but I doubt this will be an interesting business case for the average consumer.

Of course large scale battery parks work the same way, but they will have contracts with the grid provider to balance capacity, a more lucrative market.

Large scale electrolysis has the same problem as home batteries: big investment, so you won’t recoup the investment unless you can run the electrolyser often enough. Another issue is that electrolysers can’t scale up or down very quickly, so you can’t respond to capacity issues and get lucrative deals in that market.

praseodym··on Every Signature Is Broken: Insecurity of Microsoft Office’s Ooxml Signatures
Would this also affect macro signatures so that this can be used to make malware documents, or do macro signatures use a different signing mechanism?
praseodym··on JPEG XL against AVIF tested on ImageEngine
For me, the most interesting property of JPEG XL is that it allows lossless recompression of JPEG images. This seems a great way to save storage in a photo library without any loss of quality.
praseodym··on Flipper Zero Self Destructs an Electricity Smart Meter
In The Netherlands, functionality to remotely disable smart meters is forbidden by law to protect from (large scale) cyber attacks. Seeing how poor the security on this specific meter is, it only confirms that this was a great decision.
praseodym··on Last update of Safari has problems displaying JPEGs
Safari 16.5 was released yesterday, so Safari 16.4.1 is no longer the latest update.
praseodym··on Into Thin AirPods
AppleCare+ doesn't cover theft, there is AppleCare+ with Theft and Loss for iPhone in the US but afaik it is not available for AirPods.
praseodym··on I've had bad luck with transparent hugepages on my Linux machines
Besides ZFS, VMware Workstation on Linux also interacts badly with transparent huge pages: https://unix.stackexchange.com/questions/679706/kcompacd0-us...
praseodym··on Why big tech shreds millions of storage devices it could reuse
Interestingly the server diagram highlights the two power supplies as being the hard drive, instead of the many hard drives in the front bays.
praseodym··on Facebook Pay
By relying on Adyen to accept payments (https://www.adyen.com/press-and-media/2022/adyen-publishes-h... and search for Facebook)
praseodym··on Apple unveils contactless payments via Tap to Pay on iPhone
Apple Pay only tokenizes card information once when the card is added to the Apple Wallet on a device, not for every transaction. This means that usage for an on-device tokenized card can still be tracked until the card is removed and re-added.
praseodym··on Show HN: Create-rust-app: now supports poem-web back end
Mostly opaqueness, i.e. it makes debugging and IDE/language server features harder to use. Macros generally also lead to longer compile times.

Also, unrelated to its use of macros, Rocket development seems to have stalled after August of last year.

praseodym··on Show HN: Create-rust-app: now supports poem-web back end
Axum leverages the Tokio ecosystem which makes it an interesting contender. I personally find it easy to use, without the large amount of macros that Rocket uses nor the very long and complex types that Warp creates.

The introductory blog post is helpful: https://tokio.rs/blog/2021-07-announcing-axum

praseodym··on Netflix’s Prices Are Rising Faster Than Cable
I've also seen this issue on regular LCD TVs with HD streams. It can get really pronounced in scenes with slow camera movement where a static dark background turns into a blocky, jumpy mess of compression artifacts.
praseodym··on Tell HN: AWS appears to be down again
OP is talking about the DC power feed, not a single server PSU.
praseodym··on America Online Exploits Bug in Own Software (1999)
“This page was created on 22nd August 1999 and was last modified on 7th November 2008.”
praseodym··on macOS Monterey
It will show your contact that you have notifications silenced, not which Focus mode you activated.
praseodym··on Intel’s Thread Director: Assisting the OS to make task placement decisions
Alder Lake fixes this issue by including all features on the efficiency cores, so a thread should be able to move between performance and efficiency cores seamlessly.

It also drops AVX-512 support entirely, presumably because the efficiency cores don’t support it and the problem you mention isn’t easily solvable.

praseodym··on India is leading IPv6 migration with 61.67% adoption
github.com doesn't support IPv6 either, which is annoying because a lot of software uses GitHub for artifact distribution.
praseodym··on In internal memo, Apple addresses concerns around new Photo scanning features
Apple doesn't currently have end-to-end encryption for iCloud Photos either: https://support.apple.com/en-us/HT202303
praseodym··on About the security content of iOS 14.7.1 and iPadOS 14.7.1
Agreed. What makes this worse is that apparently a single component is responsible for so many vulnerabilities over the past ten years. One would hope that over the years this component would’ve gotten thorough reviewing and have hardening added to make it less exploitable.
praseodym··on About the security content of iOS 14.7.1 and iPadOS 14.7.1
IOMobileFrameBuffer has seen a lot of vulnerabilities over the years:

https://nvd.nist.gov/vuln/detail/CVE-2011-0227

https://nvd.nist.gov/vuln/detail/CVE-2015-1097

https://nvd.nist.gov/vuln/detail/CVE-2015-5843

https://nvd.nist.gov/vuln/detail/CVE-2016-4654

https://nvd.nist.gov/vuln/detail/CVE-2017-13879

https://nvd.nist.gov/vuln/detail/CVE-2018-4335

← PreviousPage 3 of 14Next →