HNHacker News
TopNewBestAskShowJobs

Graziano_M

726 karma · joined May 12, 2015

submissionscomments
Graziano_M··on Borrowing a Microsoft-signed shim to abuse Secure Boot on corporate hardware
Yeah we have break glass recovery keys and a process for resealing on firmware updates
Graziano_M··on Borrowing a Microsoft-signed shim to abuse Secure Boot on corporate hardware
What I do is seal the disk encryption key against PCR 7 (among others) so even if it secure boots up, unless it boots with grub verified with a specific key, it won’t be able to decrypt the disk.
Graziano_M··on Libghostty 1.0
I got an invite after only a few weeks
Graziano_M··on Ghostty 1.4
It’s lua like wezterm
Graziano_M··on Ghostty 1.4
Faster, shader support, better support for new terminal standards. I happened to get an invite to Rex yesterday so I am also trying that. It seems quite nice but is also missing quick select.

If wezterm adopted libghostty I would have little reason to switch.

Graziano_M··on Ghostty 1.4
BTW here is my fork: https://github.com/Grazfather/ghostty/tree/quick_select

    link = copy_to_clipboard=[0-9a-f]{7,40}
    link = open=https?://[a-zA-Z0-9.]+[-a-zA-Z0-9()@:%_\\+.~#?&//=]*
    keybind = ctrl+o>y=quick_select
Far from perfect. No way to bind to specific action:regex pair, so `ctrl+o` then `y` will show hints for both urls, which it'll try to open, and git hashes, which it'll copy to the clipboard.
Graziano_M··on Four Months of Zig
Yeah I 1. wish they were properly composable and 2. think Rust would get less flak if these 'idiomatic' crates were just pulled into the standard library to avoid some of the dependency mayhem.
Graziano_M··on Four Months of Zig
Yes, and your other part about the crate.

> There's also Zig-style composable errors with yet another library.

Graziano_M··on Four Months of Zig
I think you're proving the author's point.
Graziano_M··on Ghostty 1.4
Yeah this is what is keeping me from using ghostty. Unfortunately I think that discussion is dead and no one agrees on the design of the three or so separate parts. I maintain a fork with quick select for my own purposes but I can’t use it at work.
Graziano_M··on Ghostty 1.4
Glad for an update. It’s unfortunately still missing table-stakes features for people who use primarily keyboard driven workflows. I guess I’ll stick with wezterm for another year.
Graziano_M··on Roblox downloaded 145GB models from us (including adult content) without asking
Half their tutorials are how to rip models from games.
Graziano_M··on Cross-request KV cache exposure in the GLM-5.3 Workers AI model (155 responses)
Sounds like they are saying they tested with a long prompt and just tested for a failure, but the test likely would have seen that same KV cache leakage and just interpreted it as success.
Graziano_M··on Major ICQ security hole (1998)
So this is a buffer overflow on the server side! Could probably have been used for RCE on their infrastructure. No NX, no ASLR, etc. of course it would be difficult to work it blindly without the binary or some sort of info leak.
Graziano_M··on Git 3.0's upcoming SHA-256 default will be a costly mistake
I suspect everyone renaming their branch from master to main caused more unnecessary breakages and toil than this ever will.
Graziano_M··on Nobody Asked for a Crab Chair
“If I had asked people what they wanted, they would have said faster horses” - Henry Ford
Graziano_M··on Turning a dumb AC unit smart (without losing my security deposit)
Damn. I have wanted to do the same at my place for years (also in NYC). He beat me to it. I also can’t just use a smart plug. Unfortunately I only have one knob, it has four positions (and is open anywhere between), and requires a good amount of torque to move. I’d need to gear down the stepper and figure out a way to detect when it’s in the correct position (maybe an encoder, maybe current sense to ‘feel’ when it’s reached a close position?)
Graziano_M··on Hunter-gatherers introduced fish to a mountain lake 7000 years ago
oh god
Graziano_M··on Cooking for Engineers
The site is down, but I remember saving this site on del.icio.us way back in the day.
Graziano_M··on Hunter-gatherers introduced fish to a mountain lake 7000 years ago
I once found a recently-dead minnow in the outfield where I was playing software. That was a weird one.
Graziano_M··on I'd not buy a LG monitor
Yep. Their hardware can be good. Their software sucks. Their customer service is even worse.
Graziano_M··on Keychron announces first open-source firmware for gaming mice
QMK should be thrown away. ZMK is much, much cleaner.
Graziano_M··on Keychron announces first open-source firmware for gaming mice
It's already being done. The fanciest game hacks use a custom PCI card to DMA game memory, read it on another computer, where it can do wallhacks and such.

But also, the second computer can drive a virtual mouse and keyboard which is connected to the 'legit' PC to even aim/move/shoot for you.

Graziano_M··on Ubuntu's TPM encryption switches to snap kernel that blocks deb kernel packages
With TPM backed keys the point is that the user doesn’t know the decryption key, and he doesn’t need to enter it to boot. There can be a backup/recovery key, but being prompted for it should set off alarm bells.
Graziano_M··on I'd not buy a LG monitor
I decided I would never buy an LG monitor after mine broke and I had it shipped back three times for diag and repair. Each time it broke again soon after. They finally agreed to RMA it, but that didn’t mean a new replacement, it meant a refund, and not even for the whole price I had paid. Unfortunately the price had gone up a few hundred dollars since then, so I couldn’t even buy a replacement. This basically means they sold me a junk monitor I had to deal with for a year and then tried to get me to give them an extra $300 to roll the dice that the next one would work properly. I bought a BENQ instead, and it’s been solid.
Graziano_M··on Paged Out #9 [pdf]
It’s credited in section 3
Graziano_M··on Clever hacker fits 537,000 domains in a $5 ESP32 ad-blocking dongle
I opened the article and immediately ctrl-f'd for the word "bloom". Though the author plans to use them.
Graziano_M··on What I learned selling 2,500 MIDI recorders: Hardware is not so hard
> Have a strong anti-counterfeit strategy

What is this strategy? You're building this in China, it's already over.

Graziano_M··on Building Gin: Simple over Easy
If seeing a word written down is traumatizing, you need more help, and you’re not suited for the professional world. If coddling people like that would make you select away from a project for something beyond its technical merit, then I question your ability act as a professional.
Graziano_M··on Advanced Nintendo Entertainment System (ANES) – NES Modded to Use 2 PPUs
Should be able to fix a bunch of stuff. Slowdowns, missed frames, etc.

The game only has a limited amount of time to do all of its logic before the VSYNC interrupt forces it to draw to the screen. Game have different ways of handling this, e.g. by rolling back and abandoning the changes, drawing whatever they have, etc.

A faster clock should make it s/t games that don't always get done in time should at least have a better chance.

Page 1 of 14Next →