HNHacker News
TopNewBestAskShowJobs

tim--

1,315 karma · joined December 21, 2016

Email: me@timg (dot) ws
submissionscomments
tim--··on Inkjet printer with DRM-free ink will be launched via a crowdfunding campaign
Why does the printer design being NC licensed mean that you won't be able to purchase one?

To me, it seems like this license makes the most sense for everyone. The designer(s) of the printer get to sell a printer that no doubt took more than a few days worth of work to go from idea to "hey look, it prints something", and everyone else gets to see how the design works, to either improve, or create a new design based on learnings from this project. Hopefully that brand new design is licensed more liberally!

But I sure as hell would love an open printer that has a less than ideal license, especially when the alternative is basically getting a new printer from one of four companies (Canon, Epson, HP... did I miss anyone?)

The world needs more open source hardware. I'm currently trying to tackle an open source washing machine and heat pump dryer in my spare time. Will it ever turn into a built project? Probably not, but I sure as hell want to make sure that every peice that I've worked on so far is released to the world if it means that the next few people can finish or fix the design.

The fact that we see __washing machines__ as something that's not worth supporting after 6 years is honestly disgusting to me. It's not a flat screen TV, I don't see the design of a washing machine improving radically in my generation.

But if it does, it should be able to be retrofitted, rather than replacing an entire machine.

tim--··on Boeing has started working on a 737 MAX replacement
Interesting times indeed. It was also just before the Nokia acquisition that Microsoft was selling their first Android phone (under the Nokia brand) so they could see the winds of change.

https://en.wikipedia.org/wiki/Nokia_X

Nokia already had Android phones released months before the Microsoft acquisition closed. Makes me wonder if Nokia would have pulled out completely from making Windows phones had Microsoft not purchased them.

Even Microsoft changed their tune, releasing Android phones themselves years later under the Surface brand.

tim--··on This blog is running on a recycled Google Pixel 5 (2024)
I am guessing a business analyst (https://en.wikipedia.org/wiki/Business_analyst). Basically, someone who facilitates creating and communicating stakeholder analysis across a business. The idea is that a BA would have a thorough understanding of everything across a business. Think of them as a product owner in scrum, except there is a bit more overlap working with different parties both internal and external to the business.

You will likely find a BA (or someone with a similar role under a different name) in most large organisations (and likely in quite a lot of medium ones, too).

tim--··on Optician Sans – A free font based on historical eye charts and optotypes
There's a mono version of the font too! https://fonts.google.com/specimen/Atkinson+Hyperlegible+Mono
tim--··on Optician Sans – A free font based on historical eye charts and optotypes
From the designer's website (https://anti.as/optiker-k) it seems that this was commissioned by ANTI Hamar for the rebranding project for Optiker-K, a Norwegian optician and optometrists store.

This is fantastic! More custom fonts like this should be open sourced.

To me the font looks pretty legible. Worth noting that the font is from 2018, so it's not really a new font, but it is still one of my favorites.

tim--··on M8.7 earthquake in Western Pacific, tsunami warning issued
This is power vs. energy.

The Richter Scale is a logarithmic scale, based on shaking measurements (think of the old pencil-based seismograph!). Power. (10^1).

The Moment Magnitude Scale (the more modern/replacement of Richter Scale) is based on energy. Geological organisations reporting on an earthquake will usually show this as "M <number>" or "Mw <number>".

Richter works well for small-to-medium earthquakes, and it's not accurate for really large or distant earthquakes.

The energy released in an earthquake increases exponentially, not just linearly.

EDIT: The Moment Magnitude Scale is where the "10^1.5" figure is coming from. https://en.wikipedia.org/wiki/Moment_magnitude_scale

tim--··on Ask HN: What Are You Working On? (June 2025)
For fun, I am building a little tool called 'domain-manager'. Basically just a binary that automates configuring a Linux host to run a bunch of WordPress/Laravel/PHP sites.

It creates all the necessary boilerplate to generate PHP Docker containers, creates all of the MySQL users, and sets up all of the directory structures to get a new website up and running. It even helps set up SFTP users and gets letsencrypt certificates set up with certbot.

It's still very early days, but I appreciate that what used to be a bunch of commands that I would run by hand and slightly change every few months is now pretty much just all self contained. Should mean the next migration to a different server is easier.

Created in frustration because I was too cheap to pay the $50/month for a cPanel license.

https://github.com/timgws/domain-manager

tim--··on Ask HN: What Are You Working On? (June 2025)
This reminds me of a project for using a receipt printer to print of physical tickets of GitHub issues. https://aschmelyun.com/blog/i-built-a-receipt-printer-for-gi...
tim--··on Ask HN: What Are You Working On? (June 2025)
Yeah! I would absolutely love to see a write up about this too!
tim--··on Microsoft Releases Classic MS-DOS Editor for Linux Written in Rust
> you both seem to be saying that you get whatever the server sends

Yes, but I am also saying that you can't verify that the script that is run on one machine with a pipe is the same script that runs on a second machine with a pipe.

The key part of the original statement is the server can choose to send different scripts based on different factors. A curl&bash script on machine 1 does not necessarily mean the same curl&bash script will be run on machine 2.

The tooling provided by a `curl | bash` pipeline provides no security at all.

With winget, there is at least tooling to be able to see that the same file (with the same hash) will be downloaded and installed.

There are ways to do this better, for example, check out https://hashbang.sh. It includes a GPG signature that is verified against the install script, before it is passed to curl.

tim--··on Microsoft Edit
Why can't I trust winget?

It's not hard to run the `show` command to see what a winget install will do. https://learn.microsoft.com/en-us/windows/package-manager/wi...

It's easy enough to view the manifests (eg, https://github.com/microsoft/winget-pkgs/blob/2ecf2187ea0bf1...) and arguably, is better then the protection for MITM that you would get using naked cURL & Bash, simply because there are file hashes for all of the installer files provided by a third party.

> They are saying curl is strictly better, not that it is impenetrable

Right. But it arguably is not strictly better.

> You can't trust winget

Again, this is not backed up by anything. I have trust in winget. I can trust that the manifest has at least been vetted by a human, and that the application that will be installed should be the one that I requested. I can not trust that this will happen with curl | bash. If the application that is installed is not the one that I requested, there is tooling a process to sort out why that did not happen, and a way to flag it so that it doesn't happen to other users. I don't have this with curl | bash.

tim--··on Microsoft Edit
> in a reasonably secure fashion

It's trivial for a remote server to hand two different versions of a script with the traditional `curl | bash` pipeline. https://lukespademan.com/blog/the-dangers-of-curlbash/

There is 0 validation that the script that you are piping into bash is the script that you expect. Even just validating the command by copying and pasting the URL in a browser -- or using curl and piping into more/less is not enough to protect you.

tim--··on Microsoft Releases Classic MS-DOS Editor for Linux Written in Rust
As a specific benchmark, no. But that wasn't the point of linking to the PR. Although the command looks like a basic editor, it is surprisingly featureful.

Fuzzy search, regular expression find & replace.

I wonder how much work is going to continue going into the new command? Will it get syntax highlighting (someone has already forked it and added Python syntax highlighting: https://github.com/gurneesh9/scriptly) and language server support? :)

tim--··on Microsoft Edit
It's for people that want to use the Windows Terminal to edit files. The old `edit` command has been unsupported on Windows since 2006, so there was no Microsoft-provided editor that could be used in the command line since then.

It's impressive to see how fast this editor is. https://github.com/microsoft/edit/pull/408

> By writing SIMD routines specific to newline seeking, we can bump that up [to 125GB/s]

tim--··on The Matrix (1999) Filming Locations – Shot-for-Shot – Sydney, Australia [video]
It's now Disney Studios (https://disneystudiosaustralia.com/) after Disney's acquisition of Fox. There's 9 large sound stages. A large amount of movies are filmed there.

The lease of the land at the time was controversial.

> The rental was $2 million, payable over 40 years. However, the payment date was not specified, and the deal proceeded with an initial $1 per annum peppercorn rental, in return for which the government was obliged to spend $75-80 million on site works for the benefit of Fox

https://archive.cpa.org.au/guardian/2004/1201fox.html

tim--··on A Dark Adtech Empire Fed by Fake CAPTCHAs
Honestly, push notifications from a news site arguably is one of the few sites that I see having a reason to send push notifications.

Communication platforms; messaging apps (Slack, Discord etc); email sites (gmail and co.) also make sense. Financial platforms (banks, Stripe etc)

Once you start getting out of these two categories, then yeah, it gets silly. No way should an airline website even be allowed to ask to send push notifications.

Google does have a way for Chrome users to not show the notification window (https://yespo.io/blog/google-chrome-will-now-block-abusive-b...) by default (https://support.google.com/webtools/answer/9799829?hl=en) but I really wish that this was flipped, so that Google would first need to approve sites to use notifications, similar to the Public Suffix List.

tim--··on Native visionOS platform support
(There's also Mythic, which I forgot the name of https://getmythic.app/)
tim--··on Native visionOS platform support
Despite the name, the GPTK isn't just a porting toolkit. It contains a version of Wine that is specifically patched to pass DirectX calls to Metal.

There is a relatively easy way for a player to use GPTK to run games from their Steam library on Mac.

Here is how to use Apple's Game Porting Toolkit to install Wine & Steam.

1. Go to https://github.com/installaware/AGPT and download & run the installer

2. Go to https://store.steampowered.com/about/ and download the installer

3. Open a Terminal, run mkdir Games && gameportingtoolkit ~/Games Downloads/SteamSetup.exe

4. Follow the instructions at https://www.applegamingwiki.com/wiki/Game_Porting_Toolkit#Sh...

tim--··on Native visionOS platform support
They have done that.

They gave some cash money to CodeWeavers, the company that created wine. It's called the Game Porting Toolkit: https://developer.apple.com/games/game-porting-toolkit/

tim--··on Atlassian announces end of support for Opsgenie
Apple with TestFlight (Burstly) comes to mind.
tim--··on Why can't we screenshot frames from DRM-protected video on Apple devices?
Double Density 1.3 GB CD-RW from Sony: https://www.dpreview.com/articles/5586166218/sonyddcddrive
tim--··on Google open-sources the Pebble OS
ThreadX was open sourced by Microsoft.
tim--··on Spotify has shut down several API endpoints
When did this stop being supported by Spotify?

https://developer.spotify.com/documentation/web-api/referenc...

https://developer.spotify.com/documentation/web-api/referenc...

https://developer.spotify.com/documentation/web-api/referenc...

I think you are talking about "Get Featured Playlists", which is more geared towards Spotify created playlists, which is under the 'Browse' tab in Spotify.

tim--··on Show HN: I built a(nother) house optimized for LAN parties
With multicast, you only need to send the image once to all 20 machines. With 10 gig Ethernet, a 1tb image should be sent in approx 15 minutes.

Also, maybe having a steam cache server and using the local disks as a game store might help with installation of games?

Definitely can see the benefits of the netboot setup, though!

tim--··on Netflix buffering issues: Boxing fans complain about Jake Paul vs. Mike Tyson
Disney Streaming has 900 employees, a large majority of which are engineers.

This is the company that supplies technology to Hotstar, Hulu, MLB Live streaming, etc.

https://en.m.wikipedia.org/wiki/Disney_Streaming

Hotstar is a completely different company.

tim--··on Show HN: I built a(nother) house optimized for LAN parties
Have you thought about using Clonezilla and broadcasting out an image using PXE boot?

Would completely bypass the iSCSI setup, and each machine would still get the latest image from your server before the lan party begins.

tim--··on Bypassing regulatory locks, hacking AirPods and Faraday cages
You don't need to modify the HTTPS traffic. You get a VPS that is in the US, and set the device up so that when it requests the domain (gspe1-ssl.ls.apple.com) that the IP address returned is not an Apple IP address, but the VPS IP.

The VPS simply forwards traffic on port 443 to gspe1-ssl.ls.apple.com.

tim--··on Australia's 3G Shutdown – Why your 4G/5G Phone is now Blocked
> There's still no travel card integration with phones

This is not 100% accurate. There is no card integration, but the Opal app does allow you too see pre-paid balances. It does usually show the tapped on/off status, but it may be delayed by a few hours (so it's not completely useful) especially outside of metro areas.

> They actually did develop a digital wallet card

Which never worked on iOS, it was Android only iirc.

> the only mobile device tap that's supported are standard credit cards

You can use Samsung Pay. Make the card inaccessible for normal NFC/touch payments, and only allow Samsung Pay Transit. On iOS I think you can use Express Mode? https://support.apple.com/en-gb/105079

We attempted smart card transport in NSW three times. TCard. There was another one that went bankrupt iirc.

Arguably there is much greater success with Opal vs. Myki.

tim--··on Linux on Apple Silicon with Alyssa Rosenzweig [audio]
In a roundabout way, Apple tried this in the x86 era with OpenDarwin, and there was no interest for an Apple led open source operating system.

Apple does not have a reason to support any other operating system.

Apple engineers do however both officially and unofficially support Asahi, so there's that.

tim--··on We need to liberate the Postcode Address File
Isn't this G-NAF? https://geoscape.com.au/solutions/g-naf/
← PreviousPage 2 of 10Next →