HNHacker News
TopNewBestAskShowJobs

saint_yossarian

281 karma · joined April 2, 2022

submissionscomments
saint_yossarian··on CVE-2024-9956 – PassKey Account Takeover in All Mobile Browsers
Oh nice, I guess that's the rule using `cap_ipaddress` I see in there.
saint_yossarian··on OpenAI Audio Models
The site just crashes with service workers disabled. First time I ran into a problem with that setting, which I set over two years ago.
saint_yossarian··on CVE-2024-9956 – PassKey Account Takeover in All Mobile Browsers
For reference, uBO has a filter list called "Block Outsider Intrusion into LAN" which you can enable. That blocks all cross-site requests to local IP addresses, "localhost", and some other well-known locally-resolved hostnames.

Another attack vector is public DNS names that resolve to local IPs as well, like "lvh.me". I block these with a local dnsmasq instance and the "stop-dns-rebind" setting.

Still not sure if this catches everything, probably not. I really wish browsers would just block all of this by default and ask for permission.

saint_yossarian··on A look at Firefox forks
Check `browser.zoom.siteSpecific` in `about:config`, in Firefox it defaults to true.
saint_yossarian··on I-cant-believe-its-not-webusb: Hacking around lack of WebUSB support in Firefox
That is/was a Chrome problem, Firefox only allows WebMIDI after granting permission. Unfortunately its implementation is also incomplete/buggy so I still often end up using Chrome for those use cases anyway.
saint_yossarian··on I-cant-believe-its-not-webusb: Hacking around lack of WebUSB support in Firefox
As a Linux user I love WebMIDI, because it means I don't have to open a Windows VM anymore to run firmware updates / utility tools for audio gear manufacturers that embrace it (e.g. Novation).

WebUSB should enable the same for more types of devices, but of course there should be appropriate permission mechanisms.

saint_yossarian··on Microsoft is plotting a future without OpenAI
Creativity, tastes, desires?

All the LLM tech so far still requires a human to actually prompt them.

saint_yossarian··on Certificate Transparency in Firefox
I'm on Debian sid / Firefox 135.0.1-1 and do get the warning.
saint_yossarian··on Solitaire
The soundtrack was also commissioned.
saint_yossarian··on How to add a directory to your PATH
That GUI has been there since at least XP.
saint_yossarian··on In Defense of Text Labels
Switch to a high-contrast theme then?
saint_yossarian··on Matrix Foundation to shut down bridges if it doesn't raise $100K
Thanks! But still not sure why Element X isn't featured more prominently on matrix.org then.

And surprised to hear Dendrite is now just experimental and not the future anymore. The README and FAQ on GitHub give no indication of that at all, maybe start there?

saint_yossarian··on Matrix Foundation to shut down bridges if it doesn't raise $100K
So what exactly is the status of Element X? I was under the impression it's still in development, lacking some features of the old app, and will fully replace it when it's ready.

If I search for Element on app stores I still get the old app first (with millions of installs, vs. tens of thousands with Element X), and https://matrix.org/try-matrix also still points people to the old app. So I'm confused what "past" you're talking about :)

Similar situation with Dendrite BTW, it's been in beta forever, and the only private Matrix community I ever was a part of ditched it because Synapse was too much of a resource hog, and there's no clear migration path.

saint_yossarian··on OpenEuroLLM
The US is a joke when it comes to things like health care, or labour protections.
saint_yossarian··on I helped fix sleep-wake hangs on Linux with AMD GPUs
I had a similar issue recently and at some point realized it was because systemd started freezing all processes before suspend, and didn't always succeed (either with the freeze, or with the unfreezing after resume).

Check your logs if you have a message "Freezing user space processes failed". You can disable this behaviour with the instructions at https://github.com/systemd/systemd/issues/33626#issuecomment...

saint_yossarian··on Why is Warner Bros. Discovery putting old movies on YouTube?
Thanks, I hate it. Can you point me to any examples of AI-generated content that's actually worth reading/watching/listening to?
saint_yossarian··on Ask HN: Recommendations for a Linux Distro and Laptop?
Not sure how it compares to Arch, but Debian sid/unstable is pretty stable most of the time too (been using it on my desktops for over a decade). But both are probably bad for beginners unless you're prepared to learn and tinker.
saint_yossarian··on Add "fucking" to your Google searches to neutralize AI summaries
Go to settings and disable Smart Features?
saint_yossarian··on Add "fucking" to your Google searches to neutralize AI summaries
TIL, thanks! The corresponding query parameter seems to be "tbs=li:1", if anybody wants to make this the default.
saint_yossarian··on The AI Fad Just Burned to the Waterline
I guess https://www.krikey.ai/ is close enough :)
saint_yossarian··on I've been advocating for RSS support, and you should too
Nobody's forcing them to put the full text into the feed, for me the main benefit is not having to check the site manually.
saint_yossarian··on How we used GPT-4o for image detection with 350 similar illustrations
I mean, cool tech, but why not just print a QR code next to each illustration?
saint_yossarian··on VLC tops 6B downloads, previews AI-generated subtitles
I don't think anybody's talking about translations.
saint_yossarian··on Optimizing Ruby's JSON, Part 4
There was also the recent Rails 8 release, which had some really nice improvements: https://rubyonrails.org/2024/11/7/rails-8-no-paas-required
saint_yossarian··on The Ugly Truth About Spotify Is Finally Revealed
You can't self-publish on Spotify, you have to go through a distributor like DistroKid. Not sure how this works with YouTube Music though, I guess for actual music (sans video) you have to use a distributor as well.
saint_yossarian··on Dumb TVs deserve a comeback
Also depends on the model, my Samsung TV from 2022 hasn't bugged me about anything yet when offline.
saint_yossarian··on "Rules" that terminal programs follow
There's also the `ZZ` / `ZQ` alternatives, so you just have to find those letters :)
saint_yossarian··on MagiskSSH – SSH server on Android without Termux
Make sure the notification is visible (you can minimize it though), and also switch to syncthing-fork if you haven't yet.
saint_yossarian··on We all took the DVD boom era for granted
Vimeo does offer downloadable DRM-free paid videos, I used it a couple of times for crowd-funded movies and comedians releasing their shows. But yeah, it's pretty rarely used unfortunately.
saint_yossarian··on Show HN: Draw.Audio – A musical sketchpad using the Web Audio API
Nice work! You should tune the control sensitivities though, like with the filter cutoffs the usable range is concentrated in a few pixels on the left.

I guess synths usually use some kind of logarithmic scales?

← PreviousPage 4 of 6Next →