HNHacker News
TopNewBestAskShowJobs

X-Cubed

403 karma · joined May 5, 2010

[ my public key: https://keybase.io/xcubed; my proof: https://keybase.io/xcubed/sigs/FfeEQFBtUL2ynBucd9Q-uUZBM9KXzGjvFB-KaLwOss8 ]
submissionscomments
X-Cubed··on Remote Code Execution in Marvel Rivals Game
> Just build a JSON API! It's not that hard!

I agree that a JSON API is a better approach, but it's possible for AAA game developers to screw that up too: https://arstechnica.com/gaming/2021/03/developers-to-update-...

X-Cubed··on Programming a CH32v003 with light
There was also the Timex Datalink series of watches: https://en.wikipedia.org/wiki/Timex_Datalink
X-Cubed··on YouTube embeds are heavy and it’s fixable
Likewise, the Save to Watch Later button is also missing from lite-youtube-embed, which is a feature I use a lot.

Yes, you can get to it by playing the video, but that defeats the point. I don't want to play the video, I don't want to wait for the video to load only to pause it and click the Save to Watch Later button.

X-Cubed··on I turned my ThinkPad into a programmable USB device
One approach is to copy the data to a location that you control first (eg: RAM) and perform both the check and the use of that data from the trusted location. That can be difficult though on embedded devices with constrained resources.
X-Cubed··on The Windows Context Menu – Is It a Lost Cause?
In regard to the limitations of the command line syntax, Raymond Chen discussed this recently: https://devblogs.microsoft.com/oldnewthing/20240215-00/?p=10...
X-Cubed··on Apple iPod Shuffle USB interface pinout
No, this one had a central Play/Pause button surrounded by a D-Pad ring for prev/next track and volume. No display though.
X-Cubed··on Gmail using too much RAM: 1-2GB per tab in Safari
A number of the Gmail features are unique to the web app, not standard email filters so while Mail.app will get you the core features you'll still need the ability to run the web app from time to time (eg: updating mail filters)
X-Cubed··on Show HN: WebSession, a Secure Replacement for Cookies
I don't get why WebSession proposes to use authentication headers like WWW-Authenticate, when it calls out at the start that it's not a replacement for authentication protocols. If that's the case, surely it should just be using it's own headers to avoid confusion.
X-Cubed··on Windows feature that resets system clocks based on random data is wreaking havoc
Not all PCs are on the internet or have access to time.microsoft.com
X-Cubed··on An Update on the Lock Icon
That researcher was Ian Carroll, who created a new "Stripe, Inc" company in Kentucky, a clone of the one registered in Delaware, and was therefore able to get an EV certificate issued for his new company that looked very similar to one issued for the Delaware company.

His original research site appears to no longer be online (https://stripe.ian.sh/), but you can read more about it in these articles:

https://www.bleepingcomputer.com/news/security/extended-vali...

https://arstechnica.com/information-technology/2017/12/nope-...

X-Cubed··on Linux 6.2: The first mainstream Linux kernel for Apple M1 chips arrives
That's why Asahi Linux has a custom installer. Amongst other tasks, it installs a stub macOS partition that contains known supported Apple firmware versions. See "Whats with all the disk space?" under the FAQ at https://asahilinux.org/2022/03/asahi-linux-alpha-release/
X-Cubed··on Git archive generation meets Hyrum's law
You might be thinking of GREASE for TLS: https://chromestatus.com/feature/6475903378915328
X-Cubed··on Software horror show: SAP Concur
Even Google Calendar does this. If I'm adding an event an hour from now, why does the Location auto-complete list show locations that are impossible to reach in time at the top of the list? Is it not more likely that I would be booking an event near to my either my current location or my home?
X-Cubed··on Front end developers: stop moving things that I’m about to click on
You can turn it off on Netflix too: https://help.netflix.com/en/node/2102
X-Cubed··on November 2022 Progress Report
They mentioned that the display output is currently using a framebuffer provided by the boot loader. I suspect when the DCP is initialized, the screen starts displaying a different framebuffer provided by the DCP, so if it was just used for brightness the screen would go blank.
X-Cubed··on The HTTP crash course nobody asked for
I suspect you're missing the subjectAltName field from your certificate(s).

https://developer.chrome.com/blog/chrome-58-deprecations/#re...

X-Cubed··on Difftastic, the fantastic diff
SemanticMerge is an existing commercial product that works in a similar fashion. I've found it much nicer to use than text-based diff tools.

https://www.plasticscm.com/semanticmerge/documentation/intro...

X-Cubed··on The largest model airport and railway
I'm not sure if you've seen it, but there's a game called Rolling Line that works the same way, but with a virtual model railway.

https://store.steampowered.com/app/754150/Rolling_Line/

X-Cubed··on What's the most portable way to include binary blobs in an executable?
> However, perhaps surprisingly, xxd is part of Vim (but not Neovim?), which is a rather heavyweight (and odd) dependency to require just to include a binary blob
X-Cubed··on Ask HN: Which protocols and data formats are used for space communication?
Daniel Estévez (https://destevez.net/) has lots of interesting blog posts on using tools like GNU Radio and Jupiter to decode transmissions from various objects in space. He's recently also been looking at LTE.

I would also recommend CuriousMarc who has done a lot of work with his friends on restoring some radio equipment from the Apollo missions: https://www.youtube.com/watch?v=v49ucdZcx9s&list=PL-_93BVApb... There are lots of good explanations of the how and why in those videos.

X-Cubed··on FCC proposes record $34k fine for unauthorized transmissions during wildfire
> when normal communication systems are not available.

I think that would be the key point to the exemption. He likely could have contacted the fire service by telephone or other "normal communication systems".

X-Cubed··on It's 2022, and Windows 11's ISO lacks drivers for 2020 laptops Linux and BSD has
You should probably be asking Intel to lobby for the inclusion of the drivers in Windows, as those drivers will be Intel's IP not Microsoft's.
X-Cubed··on Tailscale’s human-scale networks are still controlled by Google and Microsoft
There are alternative solutions available for those that don't like the Tailscale authentication model, including using Wireguard directly.

Tailscale does not need to be all things to all people, and especially not at the free tier for personal use. Adding extra complexity to the product would mean that it would no longer be the easy to use tool that it currently is.

X-Cubed··on .NET 7 Preview 2
.Net source generators can't modify existing code, they can only add additional code files, so your first example wouldn't be able to be rewritten by the source generator.

You can read the development discussion and syntax reasoning in the GitHub issue: https://github.com/dotnet/runtime/issues/44676

X-Cubed··on InstaNFC – Access Control Hardware for Developers
It's not a good idea to have the decision making happening on the outside of the door you want to protect. Ideally, the outside component should just be the antenna and the microcontroller should be on the inside of the door.

As they demonstrate in the video, you can open their example case with a screwdriver, so then you could either short some connections to release the door lock (if it's self-contained), or connect to the ESP to grab a copy of its firmware and configuration to connect directly back to whatever controller it talks to over wifi (if it's part of a larger system).

X-Cubed··on I hacked SONOS and YouTube the same day
Hacking doesn't just refer to security vulnerabilities and unauthorized access.

"A hacker is a person skilled in information technology who uses their technical knowledge to achieve a goal or overcome an obstacle, within a computerized system by non-standard means."

https://en.wikipedia.org/wiki/Hacker

X-Cubed··on I hacked SONOS and YouTube the same day
I'm not sure it would, as the article seems to say that Sonos requires an ADTS container for the AAC audio, which YouTube doesn't offer. So the app takes an MP4 container, filters its contents to find the AAC audio blocks, then repacks them in an ADTS container.
X-Cubed··on When HDMI 2.1 isn't HDMI 2.1 – the confusing world of the standard
3.5mm is an analogue signal that can only output stereo. Its quality will be limited by the device it comes out of.

SPDIF (both optical and coaxial) support sending multiple audio channels in their original encoding, to support surround sound. The receiving device needs to support decoding of the audio, which is why there is often an option to force the SPDIF output to use PCM stereo instead of surround sound.

If you have a cheap TV and a good hifi, you'll want to use SPDIF or HDMI so that your audio isn't ruined by poor quality of the audio chipset in the TV.

X-Cubed··on Redesigned Notepad for Windows 11
Word Wrap has been in Notepad for some time, in the Format menu.
X-Cubed··on Tesla owner manages to install regular steering wheel on Model S Plaid
In most vehicles, airbag wiring is quite separate from other controls and just requires power to trigger. No CAN buses or higher levels of abstraction are involved.

In this case, I expect the air bag module plugs straight in to the existing connector, even if the other controls on the wheel don't. It may even be the same airbag model between the yoke and the wheel.

Page 1 of 5Next →