HNHacker News
TopNewBestAskShowJobs

wereallterrrist

429 karma · joined December 5, 2022

submissionscomments
wereallterrrist··on Tell HN: MS forcing Edge shortcut on desktop
Well, in reality...

This is the kind of shenanigan that happens when you use an OS where the widespread norm is to run highly privileged executables with full access to your home (and desktop) dirs in order to install software. Or really uses full filesystem mutability for package/software installation.

Because I'd be willing to bet a pretty serious amount of money that someone tweaked the Edge MSI installer/updater package and accidentally re-triggered the "First Install Icon to Desktop" step on upgrades. Edge updates very, very frequently and Boom, bug.

wereallterrrist··on Suspected paedophile ring at Met Police as serving chief inspector is found dead
Let me be more clear for anyone else stumbling upon this:

if you sit and make a statement implying that every man is susceptible to blackmail via abusing children... do I really have to explain how you're telling on yourself here?

Do y'all think you're so smart that people aren't going to see through the "anti-projection"? Do y'all think we don't see the loud-outspoken pedo-hunters and [certain party] politicians that keep getting arrested for abusing their kids or spouses?

Again, to be crystal clear, NO, Not every man is susceptible to control via blackmail via enticement with child abuse. GROSS. GET A HOBBY.

And further, making this nonsense up in your head and then asserting it as "proof" if you "just think about it" is... a joke. It's just a joke.

wereallterrrist··on What happened with the substation attack in North Carolina?
That's not what I said, and I think it's a bit disingenuous.

Across the country, attacks on critical infrastructure are increasing. Attacks that are described and taught in literature that we KNOW FOR A FACT is circulated among certain types of violent-leaning groups. That's what I said, and meant. I am not making a claim that it's white supremacists.

It's starting to smell like projection. /shrug

wereallterrrist··on What happened with the substation attack in North Carolina?
>to sell lately to justify increases in domestic surveillance/police state infrastructure.

what evidence or even personal narrative do you have to back this assertion?

>But It doesn't seem like they're as organized as the narrative would have us believe

phew-boy, I don't have any inside knowledge of this because I have other things that keep my attention, but I'm quite sure that there MIGHT be a bit of a infosec/skill gap between the chuds posting on /b/ and the folks actually rolling out with assault rifles, knowledge, and intent to knock (a) power substation(s) offline.

There's all this incredulity in this thread but really, some dudes are gonna go knock out an entire power substation to rob a cash register? If I were one for Occam's Razer...

Frankly I really, really don't get this incredulity. We have numerous, fairly recent historical (in multiple senses of the word!) incidents that clearly point to both organized and unorganized groups of people who seem to fit a certain psychological profile of being motivated by fear and disgust and a very on-going, observable ability to be whipped into a violent frenzy when told its justified.

wereallterrrist··on Suspected paedophile ring at Met Police as serving chief inspector is found dead
Yall keep telling on yourselves in the silliest ways. Actively amusing.
wereallterrrist··on Tell HN: Sundar Pichai made $8M today
It's really something to watch people struggle to shrug off the cognitive dissonance and just... realize some things that some others have been preaching for a while, that's all I'll say.

Maybe 2022's unexpected doses of increased class consciousness is going to extend in 2023. (Of course it is, post-pandemic trends only show signs of increasing, strap in!)

wereallterrrist··on 🥺: the best sudo replacement
And let's ask ourselves what exactly prompts folks to need to comment their disdain for only certain types of articles and not the countless dozens of others they filter through regularly. We'll never know!
wereallterrrist··on ReactOS
I'm very curious, from a high-level, but technical level, how differently ReactOS and Wine are. And/or how much they share.

As someone who keeps playing Halo Infinite at 120FPS via Proton on a Zephyrus G14 running NixOS, I'm kind of amazed on a daily basis that this is where "Desktop Linux" is. I know that there's a bunch of HNers who used Ubuntu 6 years ago to tell me otherwise, but this is insane. As soon as the HDR kernel patches are rebased on 6.1, I'll have HDR too.

(edit: lul, to be fair, NixOS ships upstream latest kernels, so even latest Ubuntu on this laptop might be a serious step back, but that's what you get for listening to Ubuntu users's take on "Desktop Linux".)

Just bonkers. I'm getting nearly as good of perf for a DirectX 12 modern game on Linux as I am on Windows. Meanwhile, this is all on ZFS, all incrementally backed up, I can restore this entire state of this laptop in about two minutes. Wow, desktop linux haters can hate, but this is still blowing my mind.

wereallterrrist··on ReactOS
/me sitting here on a Wayland desktop, scowling.

There's sure something to be said about OSS projects and release health/hygiene. I'm not qualified to synthesize and say it, but I know which of my daily-driver projects release frequently. And I know which ones don't, and which ones my [distro] and others patch around because they can't bother to tag + publish releases, or lack the discipline to know when to ship.

I fully expect GIMP to ship gtk3 support after gtk3 is deprecated, at this point.

When wine, an entire, very functional win32 re-implementation and proprietary s***-a** discord is your brethren, it's a bad sign.

wereallterrrist··on Facebook Container Extension
I keep trying to give a discount for this, in some sense, but it's hard as time marches on and I've seen some of those deep improvements, while also seeing UX left on the table.

Don't get me wrong, afaict, Firefox will get decent wayland support, new fractional support, vaapi, etc, etc on Linux desktop before Chrome, and for that I can't say Thank You enough. All to say, thank you for this perspective. I wish I knew what to really do about it (I'm not qualified or blessed with the time for C++ contributions).

wereallterrrist··on Facebook Container Extension
I'm lazy, so I keep linking this screenshot. This is why I don't / can't leave Firefox: https://i.imgur.com/81OpEOy.png

I have so, so many tabs open. And when I need, I can reorganize in a tree structure and just collapse [other projects] tabs and leave them. Combined with "Auto Discard Tabs", I have hundreds+ of tabs open, with only a half-dozen using RAM. Works freakin' great for me, even on a laptop.

(note, this is Tree Style Tabs along with a userChrome.css hack to remove the tab bar; I'm okay with this tradeoff, normal extensions being able to hide the tab bar sounds like it would lead to issues.)

wereallterrrist··on Facebook Container Extension
Every time I try to use cool Firefox features and extensions to manage privacy, I wind up frustrated and lost in thought about just how good Firefox could be, if someone with vision and benevolent dictator status took charge.

1. Unify all of the various settings, addons, downloads, bookmark dialogs. They should all just be tabs, with consistent style. I should be able to "nav" to the others easily, and they should probably open as new tabs.

2. Multi-Account Container support baked in. This "containers are built in but borderline useless without more functionality from an addon" is... not great. It also means that no one seemingly "owns" containers to be able to do things like -- have static identifiers/ordering so that containers are actually portable.

3. There are Cookie management extensions, but the best is many years out of date and missing some obvious nice UX features. Many don't take into account containers. It's unclear what backup/restoring my settings will do here given, again, container identifiers don't map across Firefox instances, even when using Sync.

Imagine a Firefox with proper container + cookie management support built in. The same way I have this one Firefox instance tweaked, I could declaratively or Firefox-Sync-ly have the same settings for all of my Firefox instances. Even just some tab+session sync would make my life a lot easier. I've theorized about using SyncThings and "locks" to have a single Firefox profile ACTUALLY shared across machines, but that sounds like too much fighting against momentum.

I have a "money" container, my money apps open there, their cookies are whitelisted for that container, so I can start to "clear all cookies" and know that for certain sites, in certain containers, their cookies are whitelisted. This is ideal for privacy - I get to whitelist what stays, I get to isolate, I get to clear the rest of the trash at my whim.

I love Firefox, but I kinda hate it. I just don't hate it as much as I do Chrome (though, god forbid Chrome ever get proper Tree Style Tabs, it might be over). I just lament how good it COULD BE.

---

Ironically, I feel like the existence of a FB specific container extension is... exactly proof that Firefox itself left something on the table.

---

edit: to be clear, I don't fault anyone, I understand FOSS and priorities, and all of it. But, I see what could be [with inf resources] and want for better, that's all.

wereallterrrist··on Running KDE Plasma on RISC-V VisionFive-2
Don't AMD GPUs still have firmware blobs, they just happen to submit them to upstream linux-firmware?
wereallterrrist··on Conversations (XMPP Client) is now a UnifiedPush distributor
Leveraging XMPP to deliver notifications for Matrix feels like an odd matchup. Or is that just because Synapse + FluffyChat support UnifiedPush and the use of XMPP is purely coincidental/incidental?

(Trying to wrap my head around the architecture too, with the last sentence there. Presumably the service and client need to know how to talk to the UnifiedPush provider?)

wereallterrrist··on Video_to_gif.sh
Seriously, please stop. Please (explicative) ffs stop. Nothing makes me less impressed thana 45mb gif loading on some npm project readme.

Just... use the video file for a video. Amazingly it will work better.

wereallterrrist··on Ask HN: Why was Terraform created?
"Random shell script is more readable than terraform". Yeah, no. Not if you mean bash, and certainly frickin not if theres a modicum of reliability/retries/recreaet logic in them. I dont think you have a good view of the landscape.
wereallterrrist··on Linux Touchpad like MacBook Update: 2022 progress and new poll
So, for all of this posturing and dono collection for 2+ years, afaict most of what all of this has resulted in is:

- https://gitlab.gnome.org/GNOME/gimp/-/merge_requests/401

- https://cgit.freedesktop.org/libreoffice/core/commit/?id=474...

and as far as I can tell the rest is "already done for Wayland upstream" or "still not done yet" trending towards "likely to not be done as more and more folks realize why Wayland is the replacement of X11".

Every time, I arrive at this conclusion and feel like a jerk, but even just comparing this update with the Dec 2021 update, I feel like I'm not far off.

wereallterrrist··on Amazon S3 will now encrypt all new data with AES-256 by default
On the one hand, fair, I hadn't considered that eventuality. Still, I can't imagine a scenario where, "I need to be able to guard against [cloud provider] blobs being left unencrypted for the long-term" that doesn't also include "and protect against two of their internal services being co-compromised".

If I can't trust blobs in a landfill, I wouldn't trust blobs in a landfill that are decrypted by another blob in the same landfill. Just feels like smoke and mirrors that is purely about chasing CTOs and "CYA"-type decisions.

wereallterrrist··on Tell HN: A stranger is using my YouTube account and Google can't log them out
That's... interesting. I wonder if it's a hustle. Buy a Chrome extension, sell "YT views", use unsuspecting victims to siphon their YT cookie and rack up fake views. Maybe?
wereallterrrist··on On the Gnome project and “my way or the highway”
> the solution is to simply not use GNOME.

>But, currently, I prioritize ease of use and distraction-free, so I use GNOME.

Wew, there we go!. At least it's being said plainly and openly at this point. GNOME is for GNOME OS, we have plenty of other choices in its absence. Sorry to authors of GTK apps caught in the middle!

This line coming from the project that took what 10+ years to add thumbnails to the file picker? Do y'all not realize how this comes off? It's really something.

wereallterrrist··on On the Gnome project and “my way or the highway”
Great feedback, I'm just gonna throw a "gtk-layer-shell" on top of the burning pile.

I just don't care though, I've resisted the GNOME-ire until recently (hoping it was "just" drama and would blow over or be fixed by technical decisions in the future) but now, I have given up on the idea that GNOME apps are going to continue to "seemlessly" co-exist in non-GNOME environments, like in the past. Fine.

Fortunately, between various Wayland tiling WMs, KDE, Cosmic on the way, there are other options that don't require GNOME, or even GTK+. Good riddance.

wereallterrrist··on Ask HN: What is your must have browser extension?
uBlock Origin, Tree Style Tabs, Sponsorblock, Auto Tab Discard, the rest I can live without. (not an extension: userChrome.css to remove tab bar) (preview of Tree Style Tabs + userChrome = https://i.imgur.com/81OpEOy.png)
wereallterrrist··on Nintendo GBA and DS ROM hacking guide (2016)
Yeah, even just a(n automatic) "[pdf]" in these submission titles would help. Or the site could just not force download since most browsers can natively read PDFs, etc.
wereallterrrist··on Luke Jr. Hack Confirmed as Real
Why is the person in this thread talking about keeping GPG keys on a Yubikey and yet the words "Ledger" and "Trezor" don't seem to appear earlier, or later, in the same thread?

I guess maybe it's hard to talk about this publicly, from a public persona, while trying to not victim-blame or be a jerk. :|

wereallterrrist··on LastPass password vaults crackable for $100, alleges 1Password
syncthing (or private git repo on trusted server) + pass/gopass/prs (with gpg key on Yubikey or similar hardware CCID/OpenPGP hardware)

It's not for everyone, but it's trivial to conceptualize ALL of it - you decrypt/encrypt plain text files in a dir, and something else syncs them. Your "manager" then becomes a tool with a nice CLI that just does `gpg -e`/`gpg -d` under the covers.

(I'd really like to see a tool that can take a publicly-shareable config file (email, name, country, origin date, keysize, seed) + a secret BIP39 phrase and spit out a GPG secret key, or better, just provision a new Yubikey from the phrase. Then my cold storage could just be my BIP39 phrase, rather than being my BIP39 phrase and an encrypted copy of my GPG key backup.)

wereallterrrist··on Rant: Year of Linux on the desktop
Oh look, another Linux thread. It's a fucking cliche, sure enough the top N comments bagging on Linux are handwavey citing "tried a main distro years ago" which usually means "Six years ago, I tried an Ubuntu USB stick that I'd made 7 years ago, and now I'm acting that experience is indicative of Linux today".

I mean, I played Halo Infinite on NixOS the other night, and literally the only problem was one projectile from one gun appearing slightly odd when firing.

I kind of find these discussions hilarious anymore.

wereallterrrist··on “My PGP key is compromised, and at least many of my bitcoins stolen”
This all stinks. Between the bio, the vague tweets about server hacks (implying Intel ME or a physical server compromise is at fault, really?), the vague tweets about this situation... Something fishy is going on or wow, really proof that sometimes it's just about being in the right place at the right time because wow dude does not have the first clue about security. Hot wallet, compromised, unrotated servers, come on.

"My colo'd server that stores my hot wallet keeps getting compromised. <days later> Welp the wallet is emptied".

I don't know how to take this seriously?

wereallterrrist··on I am done. I give up
Yeah, some of this just feels like advice some folks are going to have to learn first-hand, the hard, raw way. "Don't fall for parasocial bs touted on social media" is the new "make backups, seriously!111".
wereallterrrist··on UnifiedPush: A decentralized, open-source push notification protocol
I'm a huge fan of Matrix and the idea of UnifiedPush, but I don't quite grok what this means (and I'm reluctant to fire up my Matrix client because I'm avoiding some things). Is there any chance you can elaborate on what "self-host the whole Matrix stack" means?
wereallterrrist··on Tell HN: Google Maps location data is used for GeoIP updates
Lol folks werent even reading my thread properly, all, before throwing out the most obvious, invalidated assumptions. All of the top replies implying I dont know what im talking about.

Sorry folks, devices that ive never, ever signed into, that have never left Seattle, now think theyre in fking Mexico anytime i use a google service. Again, not logged in, but also on browsers that clear everything on exit. The ONLY POSSIBLE EXPLANATION, PERIOD, is that Google took my location data from maps in Mexico and tainted my Seatte IP with it (as i was using my seattle-apt-server as my vpn tailscale exit node)

And to elaborate, the ONLY app on my phone with access to my location is Google Maps.

OP, I 100% believe you, sorry for the comments that clearly just tapped something out without thinking it through.

The computer this screenshot was taken from has never left Seattle. It's a naive Windows machine, no VPN, no nothing, and yet... this: https://i.imgur.com/kVgz1RD.png

← PreviousPage 2 of 4Next →