Hacker News Reader

Throwaway123129on Code-execution flaw in UEFI firmware threatens most servers on planet Earth

If you have network boot enabled and you’re on a recent enough uefi you’re vulnerable yes. However personal devices have uefi network boot disabled by default

Throwaway123129on Cloudflare acquires Deno

Can we rename title to "Deno is winding down" ? It's not joining cloudflare. the people are

Throwaway123129on Transit rewards

There’s barely any officers in the Berlin transit system. I get checked like 3 times per year

Throwaway123129on Single log line is 49KB+ (ext4) / 110KB+ (btrfs) of systemd-journald disk writes

I wonder if something like https://github.com/open-telemetry/otel-arrow would be a better fit instead

Throwaway123129on There were BGP anomalies during the Venezuela blackout

Russia attacks Ukrainian power grid on a weekly basis. Not only with cyber-attacks but with actual bombs. Over Christmas 750k homes in Kyiv were without power or heating. This is not a hypothetical it's daily reality for millions of people in Ukraine.

Throwaway123129on The 'S&P 493' reveals a different U.S. economy

How has the S&P 7 evolved over the past decades? Is it the most concentrated ever? Or did we have these levels of concentration before?

Throwaway123129on I'm spoiled by Apple Silicon but still love Framework

Framework outsources their BIOS to Insyde who are a terrible OEM.

https://novacustom.com is a manufacturer that does do their own firmware and BIOS and gives you full control over all these settings

Throwaway123129on I'm spoiled by Apple Silicon but still love Framework

This is not a Linux issue (Though the hibernate issues are!). It's a PC issue. Microsoft went on a crusade making hardware vendors implement S0 next to S3 but most hardware vendors now _only_ implement S0. So that the laptop can keep phoning home and download updates etc whilst closed. Which means it's impossible to turn off the CPU during suspend. it's always on.

PC as a laptop platform is a complete joke.

Throwaway123129on Poor Man's Back End-as-a-Service (BaaS), Similar to Firebase/Supabase/Pocketbase

I think adding `golang.org/x/crypto` as a second dependency is fine. It's basically stdlib at this point (though slightly less stability guarantees).

Throwaway123129on Getting ready to issue IP address certificates

AWS sets CAA records for their domains and thus you can’t issue certs for them

Throwaway123129on Privacy Pass Authentication for Kagi Search

They’re pulling it in as a dependency. it’s not a fork.

As soon as you run cargo build the source code will be fetched including the original license. That’s better than a settings menu with just a license!

Throwaway123129on Vulnerabilities in the Feeld dating app

Useful context is that they completely redid the app from scratch in 2023 using a contractor instead of in house developers and the launch was not very smooth

https://mashable.com/article/feeld-app-down