HNHacker News
TopNewBestAskShowJobs

ripa

62 karma · joined February 21, 2014

submissionscomments
ripa··on Apple's new macOS Sequoia update is breaking some cybersecurity tools
Yep, a lot of these policies seem to come from some random person scrolling through a list of supported options and arbitrarily making up values that are enforced on people.

One of our policies enforce that screen savers must start after 20 minutes, and it’s not possible to reduce it (I have my personal on 3 minutes). Or the fact that it will constantly reset the UI notification volume to 100% and speaker output, even though have headphones almost always.

Infuriating.

ripa··on Sapling: A new source control system with Git-compatible client
I guess each to their own. I want to stage my commit with regular commands, and then have the staging area work with (diff, add/remove etc).

I don't care for an interactive tool, IMHO I prefer using commands that are repeatable and learnable instead of stepping through some interactive workflow all the time.

ripa··on Sapling: A new source control system with Git-compatible client
What is the argument against having a staging area? The Git staging area is crucial in my mind.
ripa··on AirPods Pro (2nd Generation)
With noise cancellation I find I never have to crank up the volume above low-medium. This is great as I also try to avoid damaging my hearing more.

The iPhone also has a widget in the control center that displays the current decibel number that the AirPods are outputting. I never go above the “green zone”. The volume is tracked in the Health app where you can see all historic data.

Finally the iPhone has an accessibility function where you can use apps to create perform a sound test, and then generate a specific frequency curve for your phone (maybe boost some frequency that you struggle to hear or increase the volume on one side etc).

ripa··on About the security content of iOS 15.2.1 and iPadOS 15.2.1
there was also the WiFi name where it would disable the iPhone's WiFi. https://www.macrumors.com/2021/06/20/ios-bug-network-name-di...
ripa··on Firefox’s Fight for the Future of the Web
Firefox for Mac has been more or less unusable up until the most recent release where they actually started using the Core Animation libraries in macOS. Now it won’t drain all the battery in no time, and it’s actually quite snappy. I’ve tried to run Firefox so many times in the past, but eventually always go back to Safari because it’s more native, fast and unobtrusive.
ripa··on WireGuard on OpenBSD
You can also run in on-demand mode and exclude your home WiFi, which is what I do. Then you'll be connected to the VPN at all times except when you're on the home WiFi.
ripa··on Barcelona Fines Landlords Who Let Buildings Sit Empty
If the value rises considerably in a few years for you to make a decent profit, then its mostly a headache (and operating costs, wear and tear etc) to have tenants .
ripa··on Ask HN: What VPN service are you currently using?
Yep, Algo uses the same approach. It's generating device configuration profiles with the necessary settings. I'm generating mine in the same way but slightly different to allow toggling Ethernet and to support the OpenIKED ciphers etc.
ripa··on Ask HN: What VPN service are you currently using?
On macOS/iOS you can configure the built-in VPN clients to use "on-demand" mode, which wont allow traffic before the VPN connection is established.

The only way to configure this however is using the Apple Configurator tool and create a custom profile.

I run this for my OpenBSD IKEv2 servers which gives me automatic on-demand VPN on cellular and all non-known Wi-Fi networks (== not home).

ripa··on Progress – A Tool to Monitor Progress for Commands in Linux (2016)
Courtesy of FreeBSD’s SIGIFO https://www.freebsd.org/cgi/man.cgi?query=siginfo&sektion=3&...
ripa··on APFS is coming soon: iOS 10.3 will automatically upgrade your filesystem
On a very high level ZFS main thing compared to APFS is currently data integrity features such as checksums of the data to detect bit rot (silent corruption) and the ability to automatically heal the data (with enough redundancy in place).

It would be good to at least have the checksum capability in place to make one aware of bit rot silently destroying data. Hopefully there has been some improvements to the capabilities since the announcement last year.

ripa··on Show HN: Noms – A new decentralized database based on ideas from Git
bup is focused on backups. Would you say that noms is useful as a backup utility?

Do you have any mechanisms for securing integrity, specifically repairing the store in case of inconsistencies?

Is there any plans to support any data retention policy/functionality?

ripa··on How to blink a light in 10 different programming languages
Similar quirks in the Python example. Opening the file should ideally be done with a "with" statement to close the file automatically at the end. But in the Ruby example the author at least closed the file instead of doing nothing as in the Python example. :)
ripa··on Ran: a simple static web server written in Go
Looks interesting for the niche purpose! I certainly can think of a couple of use cases.

But I don't understand why the build script is written in Python? I think that either you should use a simple shell script or stick to Go.

ripa··on Thunderstrike – Apple EFI firmware vulnerability
I see, thanks for the explanation! As written in the other response, hopefully we'll see an EFI upgrade fixing it soon.
ripa··on Thunderstrike – Apple EFI firmware vulnerability
I see, thanks for the explanation! Hopefully we'll see an EFI upgrade fixing it soon.
ripa··on Thunderstrike – Apple EFI firmware vulnerability
Maybe I'm missing something, but if an attacker can update the firmware without Apple's RSA key, then Apple (or you self) should be able to flash it in the same way the attacker did (even though the official update procedure is blocked) and "fix it", or?
ripa··on How I resurrected my MacBook Pro by putting it in the oven
This is a known method for fixing this type of problem where the solder has been damaged due to excess heat and/or improper cooling from the start. It's also known that this is most likely a temporary fix where it will fail again in a couple of months (depending on the usage etc.).

This is also why I would take great caution purchasing a used laptop (especially with a discrete graphics card). It's a real risk that the previous user did this trick to quickly sell it while it's "working".

As an owner of a 2011 Macbook Pro with AMD graphics (known to fail) I sure hope that Apple acknowledges this issue soon.