HNHacker News
TopNewBestAskShowJobs

semi

85 karma · joined November 14, 2012

submissionscomments
semi··on Forget subtitles: YouTube now dubs videos with AI-generated voices
I saw a video on coffee tasting that had a second audio track without slurping sounds. so I don't know how widely available the feature is but YouTube does have some version of uploading alternative audio tracks
semi··on If PEP 703 is accepted, Meta can commit three engineer-years to no-GIL CPython
would a fork be so bad? maybe I'm off but I feel like most people have no real need for GILless and would leave it off if they were even aware it existed. Those who would need it the most are the most equipped to handle the cost of adoption.
semi··on Web servers should refuse requests for random, unnecessary URLs
I think that's still somewhat beside the point though. in the case of Prometheus yes it should return a 404. but what if it was nginx routing all paths to some app? or even just some actual file being served on that path? in either case the vuln scanner says you have an exposed home directory, and that's a false positive.
semi··on IRS tests free e-filing system that could compete with tax prep giants
Imagine if all you had to do at tax time was enumerate those deductions, instead of that and the rest of doing your taxes
semi··on Ask HN: Use RAM sticks as SATA drives?
> If a switch is tripped, everything on the computer is truly gone.

Eventually at least. Ram loses its contents slowly, and temperature influences the rate it happens at, hence cold boot attacks where you can super-chill ram with some compressed air, move it out of a secured machine and into one you control, and extract in memory secrets.

semi··on Imaging a Hard Drive with Non-ECC Memory – What Could Go Wrong?
Or aim for extremely high FPS (>250+) on games that are not GPU bound - counterstrike being the typical example here.
semi··on Imaging a Hard Drive with Non-ECC Memory – What Could Go Wrong?
How do you protect/ensure the integrity of your par2 files?
semi··on John Carmack Leaves Meta
As someone that had stadia and a good enough connection for it, the technology was honestly really impressive.

The problem for me was that it was yet another platform. I already have many games I'd like to keep playing, I don't want to buy another copy that can only be used on stadia. I don't want to buy anything on stadia and then only be able to stream it while I still have a gaming pc.

semi··on EasyList is in trouble and so are many ad blockers
Whats wrong with storing and delivering the intended content type as metadata, whether thats headers or filesystem metadata like in Mac OS X?
semi··on How much faster is making a tar archive without gzip?
In the age of cloud computing, compression can easily be offloaded to another layer. CDNs can do brotli compression for you for example.
semi··on Seriously, stop using RSA: comments
Most programmers haven't studied those notes, may not have a reasonable math background, etc.

I say that just to point out that your confidence is probably not false, and neither is everyone elses lack of confidence in touching crypto.

semi··on Open-source RGB lighting control for keyboards, fans, etc
Be careful aiming for sound isolation, it can be counterproductive.

Generally speaking "sound isolation" means reducing where sound can escape from the case, and putting some noise absorbing foam where you can to dampen the noise.

The counterproductive part is that having a lot of airflow would be the opposite of "sound isolating" -- anywhere air flows freely sound does as well. So by definition a sound isolating case has poor airflow. Poor airflow could require you to run your fans at higher RPMs to compensate, which is then introducing more noise than you would have had with a more open case that could run low RPM fans.

Gamers Nexus did a good piece on this https://www.gamersnexus.net/guides/3391-airflow-vs-silent-ca...

(as he points out, there are still reasons to prefer sound isolating cases, it's just not as much of a clear win as it might sound at first)

semi··on Super Mario Bros. 3 in 3 Minutes – World Record Speedrun Explained [video]
But notably not in SM64, where they disabled compiler optimization for some reson. Vintage Gamer has a good video about this. https://www.youtube.com/watch?v=NKlbE2eROC0
semi··on Amazon demands we correct an article refering to an Echo as a “microphone”
Not to be a shill but you should look into Mazdas. They feel similar to you and have removed touch screens, and the since you don't need to reach it they then moved the infotainment screen further back and higher up so you don't have to take your eyes off the road as much.
semi··on Samsung TVs May Upload Screenshots for Automatic Content Recognition
"License check failed. Please contact an authorized service center. Shutting down.."
semi··on Backdoor in event-stream library dependency
I don't follow your comparison. What parts of the Linux ecosystem have a single person maintaining a large multitude of packages?

Looking at the kernel itself you see a hierarchy where people are only responsible for small segments of the kernel.

Looking at a standard distro like Debian, which makes this easily available at https://www.debian.org/devel/people you'll see that most individuals are only responsible for a handfull of packages, with the bulk having a team responsible for them.

semi··on How to steal a developer's local database
Sort of. It solves this specific attack.

If you were attacking a local webapp interface instead of a non-http daemon like redis, you would need your browser to be able to access the web service. At that point, this kind of attack would still allow an attacker to also access that web service.

semi··on How to steal a developer's local database
I don't think that is true, though maybe I'm misunderstanding.

The DNS rebinding is a workaround so that you can read the reply of a message.

Enumerating a list of services that are running is something you could do as a precursor to using the dns rebinding attack to attack it. I am not familiar with javascript networking enough to say what kind of rate limiting you would incur, but in theory at least you should be able to probe many IPs at once.

semi··on “An ISP in Asia is leaking routes to a Tier 1 transit provider”
Should the complete cost of the accident include monetary losses from people who had no plans for dealing with unexpected delays? Or to put it another way; Lets say you're driving across a bridge with your laptop in your car and you get hit causing you to drive through the rail and into the ocean. Should the 'complete cost of the accident' change based on whether or not you were smart enough to make backups?
semi··on Git client vulnerability announced
I think it's a distro's job to deal with it. The cli tool shouldn't phone home, but the distro should be able to be notified of a critical update and strongly warn you the next time you try to launch it.

Maybe even a push update you can subscribe to.

semi··on Netflix Open Source
If Microsoft Studios released the sourcecode to any modifications they used, or even just documented the setup they used for that compilefarm, I'd be grateful for the contribution. Yeah, it's not as good as opensourcing the game and porting it to linux, bsd, solaris et all.. but it's still a contribution to the community that they had no need to make.

For the record, I was a netflix subscriber and canceled a long time ago because of inaccessibility of their instant video service--If it won't run on xbmc, I'm better off getting it somewhere else like amazon Prime. I even told them as much. I still appreciate them releasing all of this stuff though.

semi··on Rampant Abuse of Push Notifications Is Ruining Them For All Developers
The caveat there is you also have the drawbacks of google voice, most notably that MMS messages get silently dropped so neither you nor the sender know that you never received them. There are also the privacy implications of going through google, if you care about such things.
← PreviousPage 4 of 4