NotPractical

> If you're not on a rolling release distro, your version is probably older.

Ironic considering security is often advertised as a feature of rolling release distros. I suppose in most instances it does provide better security, but there are some advantages to Debian's approach (stable Debian, that is).

I doubt that Nintendo was aware of any of that, aside from maybe the Patreon, when they decided to initiate the litigation process. The Patreon was admittedly risky, but as far as I can tell the settlement states that the emulator itself is illegal as per the DMCA, regardless of whether or not they were making money off of it. If a precedent is set here, it is quite dangerous.

> Also, doesn't Yuzu itself include pre-decrypted ROM dumps from the actual Switch hardware, like for example the OS bootloader ?

As other commenters have pointed out, Yuzu did not include any Nintendo copyrighted assets, so this is wrong.

Awesome! I'd love to see a detailed writeup on how the exploit works, if someone has the time and interest to put one together.

We were incredibly lucky to get one for the Switch BootROM exploit: https://github.com/Qyriad/fusee-launcher/blob/master/report/...

It seems surprising to me that they went from shipping a vulnerable WebKit with numerous public CVEs on day 1, to producing a more or less bulletproof OS?

> Pirates will always find a way

Except it's usually not pirates who find these exploits, rather curious tinkerers that want to unlock the full capabilities of the hardware that they own. The pirates / script kiddies usually come in after the groundwork has already been laid by these true hackers. E.g. the people who hacked the Switch in fact condemn piracy and any discussion of it on within their communities will lead to an immediate ban.

I'm proud to say that I've hacked my Switch, but have never pirated anything on it. An impressive homebrew scene has formed around the console, which has produced gems such as Mission Control, allowing you to seamlessly pair third party controllers. I use it with my PS4 controllers.

https://github.com/ndeadly/MissionControl

Wouldn't the group members at least be notified that someone joined the group? And the server would only have access to messages sent after that notification, right?

It will solve all of our problems for good and after it's implemented across every ISP, everyone will live in an interconnected utopia without NAT and other obstacles getting in the way of direct P2P communications across any device. /s

It will at least address the NAT problem. Theoretically, if ISPs truly embrace it, it will also open up the possibility of direct P2P communication across most devices on the Internet. Can't remember if there's a standardized protocol for IPv6 like UPnP but if not you can just configure your firewall manually. Of course, that's assuming ISPs allow you to do so.

Tbh, I misread your OP and I somehow got the idea you were talking about NAT. Static addressing is also a problem but a smaller one. In fact, IPv6 probably does nothing to help here, and may even make the problem worse with address randomization (which is a legitimate privacy feature, but still).

True, but in my experience WireGuard + unencrypted file transfer protocols is faster, not to mention more flexible. But if you already have SSH set up, that's a good option for sure. I used to use SSH port forwarding extensively before I discovered WireGuard.

IPv6.

I would also wrap it in a WireGuard tunnel, especially if doing it over the Internet, unless you want your fellow hackers intercepting everything you're transferring.

P.S. I love WireGuard, it's easy to set up and allows you to use protocols with no encryption (or bad proprietary encryption) securely.

Bluetooth is really slow, that's the main drawback.

WiFi Direct is a really great technology but unfortunately it is as simple as its name implies: it's a peer-to-peer version of WiFi. It establishes a connection between two devices, but you need to do everything else (like figuring out how to send files over the socket) yourself.

There are plenty of cross-platform apps that implement WiFi Direct file sharing though.

Syncthing tries to send over the LAN if it's available, and only uses Internet relay servers if it can't establish LAN connectivity. This is why it's (usually) blazing fast. Not sure why the OP thinks this is a misuse of the tool. In fact, it's probably one of the intended purposes of it.

Just based on the Apple developer documentation, it appears that you're correct: https://developer.apple.com/documentation/security/notarizin...

I was actually surprised not to at least see "your app must agree to abide by some basic terms of service" on the list of requirements. It seems like a mostly automatic system.

At the same time, I would also be surprised if Apple were explicitly alerted by Hollywood lawyers of the fact that an app like Popcorn Time was endorsed in any way by them, and they didn't proceed to revoke the signature.

The "unsigned" part isn't surprising, considering Apple would never approve it. But the installer package is far from ideal. It's typically only used when a program needs to install a privileged helper service, and I don't know why Popcorn Time would need that?

Edit: It appears to be just a .app file? Unless the .pkg is bundled in there...

TPM without PIN is the default configuration, so I'd consider it to be a big deal.

More details about this feature (no paywall): https://www.patreon.com/posts/91026490

The Pixel 8 is Google's first phone since the Nexus 5 to support display output on a hardware level, afaik.

> I am concerned about letting stimulants loose on the population.

They already have been. It's not hard at all to get an Adderall prescription. Just Google "ADHD symptoms" (the main one being trouble focusing) then go to your doctor and tell them you have those.

I imagine that (thoughtfully) moderating a site as large as HN is no easy task, and though I'm all for more transparency, I think logs like that have the potential to open a whole can of worms and add much more burden on Dan. All of a sudden you get a bunch of HN posts that solely exist to criticize Dan's decisions which clog up the feed. If a rule is added against this it looks like even more censorship.

Lobsters [1] has mod logs, but it also has a much smaller community, and it's invite-only so there's less need for moderation in the first place.

[1] https://lobste.rs/moderations

Anyone know how to actually examine the contents of the request? Everyone's tossing around their own theories as to what this request is for but it looks like nobody's doing any real investigation. I'm on macOS Ventura and I tried this method that was suggested in another HN post: https://lapcatsoftware.com/articles/logging-https.html

But it doesn't seem to work. According to the aforementioned post, Apple system binaries are using cert pinning so it's difficult to intercept the network requests that they make. The suggestion was setting an environment variable to politely ask them to log their requests. I don't think mediaanalysisd respects this variable, however.

> The ideal is locally running libre software implementing open protocols

I think it's really important to protect children from this type of content. I'm not necessarily against these kinds of blocks but I don't think they'll be effective because there will always be extremely easy ways to bypass them (use a VPN, find a website that isn't beholden to US laws, etc etc etc).

IMO the best approach is to ensure parents are technically competent and knowledgeable enough to be able to configure effective parental controls on all of their children's devices that are difficult to circumvent. E.g. iOS already has iCloud Lock which has proven to be difficult to bypass even with bootROM exploits and jailbreaks. Perhaps they should expand this level of protection to parental controls (if it isn't already).

According to GitHub:

> You can use GitHub Pages to showcase some open source projects, host a blog, or even share your résumé

> GitHub Pages is not intended for or allowed to be used as a free web-hosting service to run your online business, e-commerce site, or any other website that is primarily directed at either facilitating commercial transactions or providing commercial software as a service (SaaS)

> In addition, your use of GitHub Pages is subject to the GitHub Terms of Service, including the restrictions on get-rich-quick schemes, sexually obscene content, and violent or threatening content or activity

> GitHub Pages sites have a soft bandwidth limit of 100 GB per month

https://docs.github.com/en/pages/getting-started-with-github...

There are certainly better hosting options out there that provide more freedom, but GitHub Pages is nice for someone who just wants to get a personal site up and running without much fuss.

They are effective at first, and then you become tolerant and either need to increase your dosage for the same effect, or take a break (which can be difficult to suffer through because now you're operating at less than baseline functioning until homeostasis kicks in, which can take a week or longer). And e.g. Adderall was only released in 1996, so there hasn't been much time to study the long-term effects.

This happens with most drugs, not just for ADHD. Even caffeine (another kind of CNS stimulant, but less potent). Remember your first cup of coffee, how nice and awake you felt after you drank it?

Please don't take this the wrong way, btw. This is coming from someone who was also diagnosed with ADHD but stopped taking the meds because I didn't think they were worth it in the long term. I just drink coffee and take occasional week-long coffee breaks now. But everyone's different and I'm sure these drugs are an absolute necessity for some people, despite the risks.

How do you remove the desktop-switching animation on macOS? I'd like to use the virtual desktops feature but the animation is unbearably slow, and I was unable to find a way to disable it online even after extensive searching.

Afaik "just use Linux" still isn't an option on my 2019 (Intel) MBP due to lack of support for basic stuff like Wi-Fi and keyboard :(

Domains are super cheap and easy to get. Everyone should have one (especially anyone who calls themself a hacker). Ideally you would also self-host your servers, but having your own domain is the most important thing, because you can always change your hosting provider, whereas it is impossible to go back in time and rewrite all of the links to your old (now deleted) medium.com blog. "Owning" a domain just means you get to route DNS lookups for that domain to any IP address of your choosing, which can be your own IP, Amazon's IP, GitHub's IP, or any other IP.

GitHub Pages (or GitLab Pages, if you prefer) will host your website for free. You don't even have to know HTML to make your site look fancy, just basic Markdown; GitHub will run your Markdown files through the Jekyll static site generator by default (this can be disabled by adding a blank ".nojekyll" file to the root of your repository).

Assuming you have a GitHub account and that you only need to serve static (HTML/JS/CSS) files, launching a site with your very own domain name is as easy as:

1. Buy a domain from the registrar of your choice

2. Create a repository called "<yourusername>.github.io" and a "index.md" or "index.html" at the root

3. Go to https://github.com/<yourusername>/<yourusername>.github.io/s..., select the "master" branch as the publishing source, and enter your domain (excluding the "www.") under "custom domain"

6. Go to your domain registrar's website, and find your DNS settings. Create four "A" records pointing to GitHub's IP addresses: "185.199.108.153", "185.199.109.153", "185.199.110.153", and "185.199.111.153". Create a "CNAME" record pointing "www.<yourdomain>" to "<yourusername>.github.io"

Then if GitHub decides to block/censor/ban you, all you have to do is switch to a different provider (or potentially self-host). If your registrar blocks you, you can transfer your domain to another one.

Kind of absurd that your OS (which is supposed to always be acting in your best interest) enforces these arbitrary carrier data limits -- it's objectively anti-user behavior and wouldn't exist if Android were truly FOSS (emphasis on "free").

This solution is great for permanently bootloader-locked phones (which is unfortunately, most phones).

Alternatively, if installing a custom OS is an option, most Android forks remove the tethering restrictions. I use and highly recommend GrapheneOS [1] if you have a supported phone (Pixels only as of now). DivestOS and LineageOS have much wider device support. ProtonAOSP and CalyxOS are other options for Pixels and a few others.

[1] https://github.com/GrapheneOS/os-issue-tracker/issues/70

I personally use Bromite: https://www.bromite.org/

From my (anecdotal) experience, Bromite is faster than Firefox on my phone, but your mileage may vary.

I was originally using Firefox due to its uBlock Origin support, but Bromite has ad-blocking built-in (unfortunately it's not quite up to par with uBO but it works well enough).

I would suggest that you try both and see which one you prefer.

Exactly. Brave just takes Chromium (from Google) and adds weird crypto stuff to it. None of the Chromium forks are "different browsers" in my eyes. They all depend on upstream for everything important. They couldn't develop the browser on their own.

Just use Firefox. It works just as well as Chrome (*), but it's based on a completely different engine which was built from the ground up.

(*) On desktop at least (on Android I still use a Chromium fork for now)

Reminds me of this other "covert information receiving technique for individuals being closely watched", but in this case used for cheating on a proctored exam: https://news.ycombinator.com/item?id=30675666