HNHacker News
TopNewBestAskShowJobs

riolu

39 karma · joined March 3, 2018

submissionscomments
riolu··on Ethernet Is Still Going Strong After 50 Years
The built in port has DMA. USB to Ethernet adapters don’t and have to go through the CPU first. You’re stressing the CPU for bandwidth you aren’t actually using.
riolu··on Ethernet Is Still Going Strong After 50 Years
Exactly. Streaming a 4K Dolby vision blue ray remux that I legally own on my NAS uses 60-80mbps.
riolu··on Making macOS Apps Uninstallable
> Note that if I am trying to fix an app that I want to keep using I sure as hell may want to keep the preferences.

Of course, `man defaults`. You can modify the preferences and potentially fix it, backup preferences, etc. Again I must stress that you use `defaults`, the .plist on disk isn't always accurate even if you terminate the app and reboot the machine.

> The case where I want it to auto clean up is where it is repeatedly broken and I never really got to using and configuring it yet. It's pretty rare.

There isn't really a one size fits all perfect automatic solution. Not all apps are good macOS citizens.

riolu··on Making macOS Apps Uninstallable
"right" click the app and select "Open" creates the same exception without the need to open settings. There's also an equivalent terminal command for the exception I can't remember.

If either of those aren't satisfying, you can always drop the check entirely which I can't personally recommend.

riolu··on Making macOS Apps Uninstallable
Apps that install persistent services typically check if the .app bundle exists in applications so in most cases just trashing the .app is enough to stop any errant left overs from executing.
riolu··on Making macOS Apps Uninstallable
> 1) app is buggy and I'm trying to fix it by reinstalling from scratch

You don't specify and it's highly dependent but in most cases when an app is misbehaving it's an issue with preferences. You can reset most apps with `defaults` without blowing away all its data. There are some intricacies with how macOS handles preferences, so you should avoid manually editing related .plist.

riolu··on Microsoft to support Windows 11 on M1 and M2 Macs through Parallels partnership
I used WSL2 on Windows 10 to compile the WSL2 kernel with additional flags supporting wireguard. So I'm pretty sure compiling works, maybe it was an issue with WSL1?
riolu··on OpenSSH Pre-Auth Double Free – Writeup and Proof-of-Concept
That isn't even remotely related the post and Monterey is over a year old.

The systems you are trying to SSH to are using outdated host keys, you need to actually update to get security fixes, it will regenerate host keys.

You shouldn't be worried about this CVE, it sounds like you have quite a few years of CVE's you've neglected to patch anyways.

riolu··on On the joy of podman and auto-updates (2022)
Podman’s unofficial answer to compose is “podman compose”. The official answer is kubernetes.

Podman supports generating systemd units for “Pods” (groups of containers).

The unit files podman generates are portable. Rather than version controlling your compose.yml, you would version control your unit defining your pod.

Using a makefile you could handle installing/updating/etc your unit file.

It is an equally convenient way to manage your containers, but it does require learning and understanding how everything fits together, compose is nice because it abstracts a lot.

riolu··on About the security content of iOS 16.2 and iPadOS 16.2
For someone with luks2 in the username you sure have a lack of understanding about encryption.

Why would it be so hard to believe that your recovery key is hashed and salted like every other password? You can't view your key after creation, you have to regenerate it. Do I really need to pull out Wireshark to verify this for you?

Advanced data protection is explicitly removing Apple as a holder of your keys, it's not re encrypting anything, it's not new encryption. The entire process is just deleting the key that was already stored on their servers anyway. How would it be in Apple's interest to keep your recovery key after press releases and multiple warnings saying you're on your own for recovery.

riolu··on The State of AV1 Playback Support
This "Safari is IE" is getting tired and has never been true. Apple is quite literally on governing members for Alliance for Open Media.

Safari existing has never held anyone back. The "plausible solution" is to be patient for Apple to implement AV1.

riolu··on Ask HN: Apps that are built with Git as the back end?
brew.sh backend is git.

This is not a good idea however. Anything you install that has thousands of files will slow down brew substantially during updates. GitHub has had issues specifically with brew.sh misusing their service.

Git should not be a backend for any application, it was not designed for such purpose...and you will be violating GitHub or any source host TOS.

riolu··on Help people in Iran reconnect to Signal – a request to our community
> Not that person above but the install flow for docker is obnoxious on windows and Mac.

On windows it's `winget install docker`. Mac is more of the same, just drag and drop docker desktop into your Applications. You can skip the tutorials on first launch for desktop.

> Having to create an account for open source software isn't reasonable, there's ways around that but not easily for most people.

Creating an account is entirely optional, it doesn't even prompt you to sign in.

> there's ways around that but not easily for most people.

Please explain. It never requires an account at any point of the install. It never prompts for a sign in. It's entirely optional. How much easier can "not clicking the sign in button" be?

You don't even need to install docker desktop, you can just use docker CLI. It doesn't even have to be docker, you can use podman.

I believe OP comment is just struggling with adapting to containerized workflows. An account is not a requirement, nor is the install process difficult. If you're still wanting to do it without a container, you can just inspect the image to see what the steps are for configuring your environment yourself. It is more work to not use a container.

riolu··on Brew Is a Bad Neighbor
Rather than trying to force macOS to support package management, developers should be containerizing their environments where possible with docker/podman.

The best package manager for macOS is Docker with an Alpine container. Not ruby scripts with git as a backend and questionable permissions.

riolu··on How to access Reddit without ads and tracking
> The value you get from a good Reddit conversation is like a good Wikipedia page

Reddit cannot be compared to wikipedia. It's social media vs an internet encyclopedia. Wikipedia does not allow opinions.

riolu··on How to access Reddit without ads and tracking
Apollo can have analytics disabled. Any 3rd party client defeats ad engagement tracking. You can curl their API yourself and you have defeated tracking. If the client isn't serving ads, like Apollo and Tweetbot, there isn't any engagement to track. It's limited to what you interact with while logged in. This is how every service works. The analytics for 3rd party clients are purely for the developer to improve their app, they don't care about what you do on it, that information isn't relevant to building a 3rd party client.

Security/Privacy all depends on your threat model and what compromises you are willing to make.

riolu··on My take on how DuckDuckGo can outperform Google
> under the hood duck duck go queries "X reddit".

Both Google and DDG already do that, you just format the query correctly. Once you are an expert in a field you will begin to understand how bad reddit is for information.

riolu··on GNOME to Warn Users If Secure Boot Disabled
It's very easy to enable secure boot with Nvidia now, at least on fedora with kmods.

https://rpmfusion.org/Howto/Secure%20Boot?highlight=%28%5CbC...

I have personally set up secure boot with Nvidia on RHEL 8 and Fedora 36, it survives driver updates as well. Fedora also makes it simple to use a TPM for drive decryption.

riolu··on More Privacy and Transparency for DuckDuckGo Web Tracking Protections
It really is unfortunate, but I applaud yegg for responding regardless. Freedom and privacy are unfortunately a polarizing topic. You can't make everyone happy, and people are more likely to comment a negative experience than a positive one.
riolu··on More Privacy and Transparency for DuckDuckGo Web Tracking Protections
Could you extrapolate on what you mean by "games"? I don't believe search engine bias is something that is an issue for Google or DDG. There is a lot of misinformation, it shouldn't be ranked near factual information, because humans are still bad at determining what is good information. Medical advice is a good example; this is a hyperbole, but if someone was choking and you needed to know the Heimlich, you probably don't want a result at the top for essential oils.

Politically speaking, lots of people switched to DDG not for privacy, but because it never down ranked politically biased news like Google. I don't believe DDG's mission statement is to be the bastion of misinformation.

riolu··on Windows HEVC video codec from Microsoft costs $0.99
Why? It's the successor to h264. The link in the OP is a hardware entitlement, since GPUs/CPUs now have h265 hardware encoder/decoders, so you already legally purchased rights when you bought a compatible device.

I prefer having a newer codec with superior quality/size. The only reason you wouldn't use HEVC is if your hardware lacks support, the $0.99 version is for the ability to use the codec in software. It's illegal to use it without licensing, but like most things, hard to enforce. Mostly for company compliance.

riolu··on Wayland Core Protocol Is Tailored Only for Gnome and That’s Not a Good Thing
No one wants to. Wayland is the successor to X11, X devs now work on Wayland. Gnome has first party support for Wayland because the same devs also work on Gnome and Red hat.

The inconvenient truth is they are working towards a cohesive desktop experience, even supporting mobile. X11 will still be here, but you can't blame the devs for wanting to move on.

Operating systems should be designed for all humans, not just programmers. Gnome seems to be the only DE that cares about accessibility. All of your settings and extensions mean nothing to someone who needs all of their apps to work with a screen reader.

This article and these comments suck. No one wants to contribute code, just opinions. Reminds me of the systemd FUD.

You can fork, hack, make your case with Wayland, maybe it gets merged, maybe you just maintain your own fork. These criticisms by people who aren't going to contribute anyway are getting tired.

riolu··on The 13-Inch MacBook Air
As a university student it really is quite unfortunate. So many students use MacBooks that come pre installed with a word editor capable of collaborative editing, but choose word regardless! Luckily I seldom had professors who required submission in .docx, but even for that, Pages has an option to export as .docx.
riolu··on Ask HN: M1 Pro 14' still worth it for development?
I will argue that M1 Pro 14 is not necessary for development. M2 MacBook Air is enough though if you're using docker I recommend upgrading ram to at least 16gb for the qemu VM alone.
riolu··on Ask HN: M1 Pro 14' still worth it for development?
I cannot recommend brew for react development (NPM). Installing NPM packages through brew is not supported by projects that require global packages. NPM installed through brew frequently runs into issues by projects that expect packages via NPM to be in /usr/local but are not symlinked. This is not even mentioning all other flaws of brew, such as owning /opt or /usr/local to your user breaking multi user support, being based on git and subsequently very slow, brew breaking on even point releases of macOS.

I recently started a job that requires react and docker so here's what works for me. Install node.js from their website, use npm to install typescript language server globally, docker binaries like Minikube suggest using `sudo install minikube`, reading the manual for `install` says it simply copies the binary over to /usr/local/bin (already in path! security issue for brew owning this to your user??). You can then use `install` for any CLI tools you need (jq!).

macOS was never designed for package managers, brew does an exceptionally poor job at being a package manager while also fighting against macOS to stay functioning. I highly recommend avoiding brew, it is certainly not a necessity nor supported by packages it hosts.

riolu··on Ask HN: Is it possible to get an 18-year-old to spend less time on the computer?
My parents took a more hands on approach of destroying my desktop that I paid for and built at 16, broke my bedroom door and subsequently splintered the frame so it couldn't be put back on, constantly disabling my phone service, taking my phone. I don't believe I am capable of making friends, my parents always chose my friends for me and we never had anything in common. The moment I moved out to university I built another machine and did nothing but play games resulting in failing multiple classes. While it was my fault, I did not learn moderation through constant repression. The only thing I got out of this experience is cPTSD, Prazosin, social isolation, panic attacks at footsteps, no identity since I never had the opportunity to understand myself or my emotions. I am however good at picking locks, manipulation, never showing emotion, weaponizing an arsenal of personalities, staying calm and diffusing stressful situations.

My relationship with my parents is fine, I am good at telling them exactly what they want to hear to avoid conflict. I have tried to be open to them numerous times, it only made things worse.

I've grown to enjoy being alone, no longer feel lonely most days. Sometimes I do try to make some semblance of a relationship through games or other activities outside of the computer, but my social skills are lacking not for lack of trying or improving. There are many things I try to change and improve about myself, many sleepless nights reading wikipedia and studies trying to figure out what exactly is wrong with me and what I can do to fix it. I've hit a dead end with BPD, I try not to let it discourage me. I have overcome self harming mostly but the urges are still there. I am very tired and am falling into misanthropy, though I try my best to be the change I would like to see.

I do not blame my parents, my decisions have been my own and I try to be informed. They are human and have made mistakes. It is unfortunate that those mistakes have caused extensive damage to my mental. The things I want most in life are simply unobtainable due to my broken perception of relationships and emotional dysregulation. It is unfair to burden another human with my existence, for what I need they could never hope to provide, though many have tried and walked away hurt, all my fault.

I doubt OP could possibly do worse than this, but the ramifications of such actions should not be taken without heavy consideration. I want to do my best for the next generation and hopefully die soon so no more could be asked of me.

riolu··on Mozilla Launches VPN Service
Wireguard and Mullvad is very nice! My guess was they were going to partner with ProtonVPN. Still waiting for their Wireguard support.