HNHacker News
TopNewBestAskShowJobs

IceWreck

2,822 karma · joined September 19, 2017

submissionscomments
IceWreck··on There’s No Algorithms
Tumblr is adding activitypub integration which means you will be able to follow and interact with Tumblr users from Mastodon and vice-versa.
IceWreck··on Microsoft is turning Windows 11's Start Menu into an ad delivery system
iOS has been adding more and more ads slowly - app store, news, etc.
IceWreck··on Ask HN: Is there editors and IDE crisis?
I think VSCode really ensured long time persistance for themselves when they refactored into a client-server model. Is there even a usecase for Theia now that Vscode Server is OSS and exists.
IceWreck··on Tailscale Funnel
I did and the CPU usage on the clients is much higher compared to kernel wireguard or even nebula (userspace, written in go).

Add the fact that it has no advantage over nebula and I stopped using it in a heartbeat.

IceWreck··on Tailscale Funnel
Why depend on Tailscale when you can go 100% open source and use slack's nebula or plain old wireguard or one of those open source wireguard manager apps.
IceWreck··on Why Evernote failed to realize its potential (2021)
> Any worthy apps to look at besides those?

Bookstack if you dont mind the lack of clients

IceWreck··on Crypto exchange AAX suspends withdrawals
7-10 days for a so called "system upgrade" lol
IceWreck··on I decided to stop working on Mighty
From their description: We write code primarily in C++/JavaScript/TypeScript. Our application is a desktop Electron app where the front-end is in JS while the bits that need to be fast are written in C++.
IceWreck··on I decided to stop working on Mighty
Can you send a link please ?
IceWreck··on I decided to stop working on Mighty
Called it here back when it launched. Streaming video of a slightly more powerful browser in a browser (electron) never made sense to me.

And the few people who really had that usecase could just use a lightweight container running chromium + guacamole on a nearby server. Okay I'm sure Mighty used cool tech to make it faster than just that (idk how it worked but maybe they were transmitting changed HTML) but at its core the idea was not something normal people and 99% engineers would ever consider. Anyone rich enough to pay for it would just pay for a more powerful machine.

Anyways, they said they have 50% of VC money left and will be using it to create an online stable diffusion thingy which atleast fifteen startups are doing already including stability AI themselves. How can they differentiate ? Can they just use leftover VC money to make a completely different thing ?

IceWreck··on Tell HN: Siri provides Apple Music link when sharing current song on Spotify
If Apple allowed it, Spotify (or any other app) could easily send more metadata about whatever media is playing on the lockscreen.
IceWreck··on Accidental Google Pixel Lock Screen Bypass
Bugs happen in iOS too.

> all you need to do is find a pixel 4 or older and you’re golden

Its worse, it works on most Android phones without the latest security patch, not just Google phones.

IceWreck··on Accidental Google Pixel Lock Screen Bypass
Google could not reproduce it the first time so presumably they didnt pay up.
IceWreck··on Stretch iPhone to its limit: 2GiB Stable Diffusion model runs locally on device
I dont think the Steam Deck is powerful enough. It might be possible but it will take hours.
IceWreck··on Microsoft is phoning home the content of PowerPoint slides
> You also don't want to add self-signed certificates, but grab the traffic _before_ it gets encrypted IMHO.

that would be ideal but self signed + added to trusted store works

> Additionally there are quite a bunch of use-cases where the encryption is not TLS, like e.g. with some WebRTC applications it's not uncommon to have an encrypted channel we could access to a broker server but in that channel E2E encrypted messages are send e.g. using libsodium statically compiled in.

yeah youre right.

In other cases the only options we have are ld_preload to catch encryption lib. If that doesnt work we can still use ptrace to capture syscalls but encryption will be done in userspace so capturing network activity wont help us with encryption.

Like the other guy said, the info we can gather is still useful.

Reverse engineering + modyfing the binary is a possibility too but it gets complicated fast, especially if they intentionally try to protect it. I feel this isnt really an issue with jvm or interpreted langauges but with the others its hard especially if theyre statically linked. C/C++ have good enough decompilers that its still possible, I don't know about Go/Rust tho.

IceWreck··on Microsoft is phoning home the content of PowerPoint slides
> What I want is Little Snitch on steroids built into the OS where every process, including all native ones, including UI apps, are blocked from network connectivity by default, and the user gets an easy monitor of outgoing traffic with TLS/SSL inspection built in (you'd need some OS API to enable that).

If you want to you can do that with Linux.

Sure you'd need to use the CLI, and a combination of tools but you can pinpoint every packet to an associated process and if you add your self made cert to trusted certs, then you can decrypt TLS as well in most cases.

IceWreck··on Show HN: Feep! search, an independent search engine for programmers
Great idea, but search is pretty bad right now.

Searching for "django signals" got unofficial search results on the first page and all the links on the second page (1) are broken.

Searching for "go cobra" gets no official docs at all.

(1) https://search.feep.dev/search?q=django%20signal&p=2

Some suggestions:

- Prioritize github, gitlab, readthedocs, go.dev, docs.rust links

- In github, only parse readme and wiki links. Avoid parsing links that are related to a specific commit hash.

- Python, Rust docs have versions in the url. Can you link them to the latest version instead ?

IceWreck··on eBPF – Adding functionality to OS at runtime
What is the advantage of eBPF hooks over the ptrace system call ? Can't I do most of the same stuff with it ?
IceWreck··on Soul, SQLite REST server is realtime now. WebSockets added
This looks like pocketbase (written in Go) but more resource intensive because it requires the entire node runtime.

But anyways, good job !

IceWreck··on Ask HN: Working in a VR Headset?
With the quest 2, no. With the pro, I'm inclined to say yes. I have the Q2 at home but I've only used the Quest pro for about an hour.
IceWreck··on Ask HN: Working in a VR Headset?
I have used both and I can say that the Quest Pro is so much more comfortable than the Quest 2.
IceWreck··on Companies like HP must split to survive, is like the evolution of new species
Give them twenty more years. Chances are some of them devolve into what IBM and HP were before breaking up.
IceWreck··on ZLibrary domains have been seized by the United States Postal Inspection Service
Hey, why not push the collection (the extra books) back to libgen
IceWreck··on We've filed a lawsuit against GitHub Copilot
I am not against this lawsuit but I'm against the implications of this because it can lead to disastrous laws.

A programmer can read available but not oss licensed code and learn from it. Thats fair use. If a machine does it, is it wrong ? What is the line between copying and machine learning ? Where does overfitting come in ?

Today they're filing a lawsuit against copilot.

Tomorrow it will be against stable diffusion or (dall-e, gpt-3 whatever)

And then eventually against Wine/Proton and emulators (are APIs copyrightable)

IceWreck··on Next C compiler is a D compiler: Introducing DMD's ImportC
You can use C libraries in Rust, even compiled .so files where you dont have the corresponding C headers.
IceWreck··on Rakuten Mobile is replacing Red Hat as its Linux OS supplier
Every fourth version of Fedora gets forked into the new version of CentOS Stream. Then for these rest of its lifecycle it will be developed independently. Every change in this version will go into the corresponding RHEL version after existing for afew months.
IceWreck··on Has Rakuten made a Rocky-er road for Red Hat?
First, you won't use arch on production servers. Second what you said is incorrect. Arch Wiki has info on a lot of topics, but mostly for desktop or casual server usecase and certain aspects are completely ignored. Arch's Wiki is excellent but its also about the quality of documentation and how its structured.

RHEL's docs are simply unparalleled in the Linux world. I only wish search was better, but if required I can download them and use my own search anyways.

IceWreck··on Has Rakuten made a Rocky-er road for Red Hat?
I personally use Rocky/Alma over Debian for servers. Nothing beats Red Hat's documentation and its free even without a Red Hat subscription.
IceWreck··on Protobuf-ES: Protocol Buffers TypeScript/JavaScript runtime
Thrift (both fbthrift and apache thrift) has required fields
IceWreck··on Tell HN: WhatsApp appears to be censoring references to Signal
I think its a phishing detection algorithm blocking this.
← PreviousPage 6 of 21Next →