HNHacker News
TopNewBestAskShowJobs

tripdout

1,419 karma · joined January 23, 2023

submissionscomments
tripdout··on Google will develop Android OS behind closed doors starting next week
A classic Ars story I always like linking in discussions like these: https://arstechnica.com/gadgets/2018/07/googles-iron-grip-on...
tripdout··on The Future Is Niri
Yes, Niri still supports numbered workspaces in the same was as WMs like Sway. It's just that now you can scroll them horizontally too.
tripdout··on Apple pulls data protection tool after UK government security row
The iOS screenshot displays a message saying it's no longer available for new users.
tripdout··on All Kindles can now be jailbroken
Wow, kindlemodding.org loads instantly. I know it's a simple website, but simple websites often still load slowly.
tripdout··on Persistent packages on Steam Deck using Nix
It just adds your Nix profile to your path.
tripdout··on Google Pixel 4a's old firmware is gone, trapping users on buggy battery update
Has anyone gone through that firmware update and seen what changed? What exactly are they doing to improve battery performance/reliability?

I would guess just down clocking the CPU or something.

tripdout··on Git-crypt – transparent file encryption in Git
I much prefer sops or age.
tripdout··on Git-absorb: Git commit –fixup, but automatic
How does it figure out which commit to add each change to?
tripdout··on What Is io_uring?
For some reason I always thought it had to do with storage.
tripdout··on Exploring pre-1990 versions of wc(1) (2023)
Those `goto`s between two different for loops is crazy.
tripdout··on Beyond Ctrl-C: The dark corners of Unix signal handling
If you don't know about it, sure, but I find it's kind of convenient to get a safe shutdown and then be able to easily say "I don't care, just stop this program" without needing a separate kill -9 command or something.
tripdout··on Deploying Rust in existing firmware codebases
On the same platform and browser, it displays the header line separator and my CPU fan ramps up but it does load after a few seconds.
tripdout··on Praise My GitHub Profile
All it did was roast me for having 2 followers and no readme!
tripdout··on Bcachefs, an Introduction/Exploration
Does it allow both shrinking and growing the FS? Really wish ZFS allowed shrinking.
tripdout··on Ly: Display Manager with Console UI
I've also used greetd for this: https://sr.ht/~kennylevinsen/greetd/
tripdout··on The Origins of DS_store (2006)
Why doesn't Windows need such a directory to store folder customizations in Explorer?
tripdout··on Start all of your commands with a comma (2009)
Thought this was going to be about Comma [0]

0: https://github.com/nix-community/comma

tripdout··on Brew-Nix: a flake automatically packaging all homebrew casks
I use Linux at home but when I got my work MacBook I was able to get an identical setup (shell aliases, git config, shell plugins, nvim, etc etc) with very minimal effort and not needing to understand a macOS way of installing all these programs like with e.g. homebrew.

Declarative, reproducible, and no fiddling with macOS specific stuff.

Plus, we had instructions in our wiki for dealing with homebrew package installation failures and conflicts with macOS-installed versions of required software, needing to install other programs like Ruby version manager, etc to fix these issues. but with Nix I just setup a devshell and got the exact version we needed installed with no issues.

And this can be pinned and reproduced for every developer using Nix, eliminating the hassle for everyone.

tripdout··on Xv6, a simple Unix-like teaching operating system
I used PintOS in my operating systems class last semester - wish there was a part 2 to that class where we go even more in depth!
tripdout··on An Overview of the Starlark Language
How do they guarantee both deterministic results and parallelism?
tripdout··on Attacking Android Binder
I'd love to have this in-depth level of knowledge of kernel inner workings. Super interesting writeup.
tripdout··on Telegram Combolists and 361M Email Addresses
> The questions that are harder to answer (and again, I know these will come up based on prior experience), are what the password is that was exposed, what the website it appeared next to was and, indeed, if it appeared next to a website at all or just alongside an email address. Right at the beginning of this project more than a decade ago, I made the decision not to load the data that would answer these questions due to the risk it posed to individuals and by extension, the risk to my ability to continue running HIBP. We were reminded of how important this decision was earlier in the year when a service aggregating data breaches left the whole thing exposed and put everyone in there at even more risk.

Seems it's a design decision not to.

tripdout··on AMD Unveils Ryzen 9000 CPUs for Desktop, Zen 5
7900X equivalent 9900X has 120W TDP as opposed to 170W. Is it that much more power efficient?
tripdout··on I discovered an easter egg in Android's security and didn't land a job at Google
DroidGuard is particularly relevant nowadays (article from 2019) given that Google is using it to implement hardware-backed attestations (i.e. using device TEE) of device integrity.

Current cat-and-mouse game is to spoof props to a device that doesn't support hardware attestation, but Google is somehow able to detect props used for spoofing (as opposed to using the actual device with those profs) and bans them.

Once Google decides that enough devices support hardware attestation and they get rid of software attestation, even unlocking the bootloader will trip it and you won't be able to use apps that request this level, and this level is impossible (barring exploits) to spoof.

tripdout··on All the remedial classes in one place
> “I co ming offise to day AAAAaaaa?”

--E-mail from a Vietnamese student. She got an A in my trigonometry class, dominating the other students despite not knowing much English. Yes, she did work in a nail salon, and no, she didn’t graduate the equivalent of high school in her native country.

What does a nail salon have to do with your point?

tripdout··on Sal Khan is pioneering innovation in education again
Yet Khan Academy is free.
tripdout··on Project Gameface launches on Android
With Laurence's response it doesn't sound like he stole anything at all.
tripdout··on Wprs – rootless remote desktop for Wayland (and X11, via XWayland) applications
How would this compare to a Wayland VNC server like WayVNC?
tripdout··on Recovering the master key from RAM to break Android's file-based encryption (2021)
Since the device has to be powered on, but locked, and they're using a memory dump, they're referring to the AFU state, right?

From my understanding the BFU state is much harder given that the keys are not in memory but in the TEE. Although there has been exploits for that in the past, not sure if they can extract encryption keys.

It's also interesting to consider what's possible with arbitrary code execution vulnerabilities in early boot stages - would they be able to influence the ARM TZ?

tripdout··on An analysis of the Rabbit R1 APK
> To use a device running AOSP, you'd need a launcher app or a significant amount of effort.

What is this trying to say?

← PreviousPage 4 of 9Next →