HNHacker News
TopNewBestAskShowJobs

alias_neo

5,386 karma · joined September 16, 2016

submissionscomments
alias_neo··on A Printer Printing onto Paper
I've long had an idea that I should get my home automation to just print _something_ every couple of weeks to stop it clogging up.

It was recently fully clogged (Epson EcoTank) and I managed to get it back to fully printing after about 10 rounds of head cleaning, so it's not a huge deal, but how many home printers are really printing regularly these days.

Ours gets used maybe once per quarter, and I actively encourage the kids to just photocopy, in colour, random stuff whenever they want to be sure it doesn't just clog up.

alias_neo··on eMudhra to exit global SSL/TLS certificate business
Maybe; if you were asleep for 13.5 of them.
alias_neo··on eMudhra to Exit Global SSL/TLS Certificate Business
Maybe it was just a mistake and they intended to generate a `--bitsize 4` thinking it was in kilobyte units.

shrug

I think they're just absolutely inept and should never be trusted with anything security related as an organisation if this is a mistake they could make.

alias_neo··on Security Disclosure
Because you have no choice. Often times you run your backend on someone else's computer (the cloud) and they need the key(s) they need in order to access the other services your application needs to do its job.
alias_neo··on Security Disclosure
Late stage capitalism at its finest; protect the profits at all costs.

Thankfully, they clarified they're in Europe, so GDPR prevents them from ignoring known leaked credentials, lest they have that to deal with, on top of the revenue loss they'll make when all of their customers eventually find out: "they ran leaked credentials knowing our data was at risk, but decided to suck it and see".

alias_neo··on An ad-free Android TV
It's not recoverable unfortunately, seems either the firmware is broken or a hardware issue. The last time it worked I factory reset it to see if that would stabilise it, but it never booted again. I contacted Amazon about replacing it, but they won't do anything because it's not registered to my account (because it was removed when I reset it).

I was also running Projectivy [sic] Launcher, but it launched a minute after the stick started which wasn't a great UX so I ended up disabling it because it annoyed the family.

Either way, I'm not worried about recovering it now; it would have been nice to use it for a few thing, but when it stopped working I just went out and bought a new TV.

alias_neo··on An ad-free Android TV
They (Android TV devices, mine was a FireStick 4K Max) also don't give a fuck about displaying things that are inappropriate; ours showed banners for horror films on several occasions, during the day when my children are about and scaring them.

It's much harder to switch out the launcher on a FireStick, but I did manage it briefly before it started boot looping right around 1yr of ownership, so it's e-waste now.

alias_neo··on Wanted to download an ISO, ended up writing a kernel exploit
Sorry, I somehow skipped over that.

I've been looking at upgrading to 10Gb myself, currently my top contenders are Mikrotik and Ubiquiti.

Mikrotik is much more reasonably priced, but I already have mostly Ubiquiti equipment so I'd probably spend the extra to keep the single-pane-of-glass for maintenance, something simple like the Flex XG / Flex 10 GbE so long as it can run my VLANs.

alias_neo··on Wanted to download an ISO, ended up writing a kernel exploit
> What kind of trouble did you have with ASUS and D-Link? Security or the lack of configuration options? Haven't bought them in a while, but I remember them being somewhat decent.

I should caveat all of my opinion with the fact that I stopped buying this stuff the best part of a decade ago when I decided to go open source, so things may very well have changed in that time.

My experience with a particular manufacturer I won't name, which provides solar panel monitoring and optimisation equipment that I have installed at home suggests otherwise though, it's bad to the point of being unsure if I should laugh or cry.

Anyway, my experience back then was that Netgear and ASUS stuff was generally overpriced, performed reasonably though not amazingly well but had support dropped within 2-3 years and were left with severe vulnerabilities.

D-Link I found lacked features, performed generally weaker than the others, and were lucky to get any updates.

I can't recommend anything these days because I haven't used any in a long while, so my old-timer advice is moot. If I had to pick a branch of off-the-shelf to buy today because I was forced to it'd probably be Ubiquiti.

That said, I'm a dev in the communications-security space, my requirements are a little different to my family and friends, I have static IPs, lots of hosted stuff, and a low risk-appetite for vulns on my network, while a typical household will have a dynamic IP, unlikely to be hosting much if anything and so their attack surface is lower.

What's likely to be my next move personally? I currently run a Protectli box with about 90% more power than I need for my 1Gb network and 1Gb/1Gb WAN, but the NICs (5 Intel NICs) are the limiting factor, I'll likely buy something similar with 10Gb when the time comes and carry on running OPNSense and hopefully Coreboot.

alias_neo··on Wanted to download an ISO, ended up writing a kernel exploit
I did that once or twice, but I got fed up of finding the correct hardware revision of a particular router that supports OpenWRT, and I much prefer OPNSense anyway, and it runs on commodity hardware that you have full control over.
alias_neo··on Wanted to download an ISO, ended up writing a kernel exploit
It really depends on what you need from it; a cheap L2 switch will do the job, but frankly, you can get a Ubiquti Flex Mini with 5x1Gb ports for £35, I have a bunch of them around the house, and they're semi-managed so I can do VLANs on them and power them over PoE; since I'm already running Unifi, don't see the point cheaping out on switches.

I also have a bunch of EdgeMAX because I use the L3 features, they were more expensive, and that range is sadly now discontinued, but the Unifi equipment have all been workhorses, and the only think I've ever had fail in the past decade was an EdgeRouter Lite, the power circuitry failed after some dodgy mains voltage issues in my previous home.

alias_neo··on Wanted to download an ISO, ended up writing a kernel exploit
Your experience seems to indicate that even their APs are a mess; while I applaud your effort to solve this, "I'm too old for this shit" is where I'm at now when it come to my home network, I (and my wife and kids) just want it to work so I've spent a fair chunk of change on it.

Uniquiti APs are fine, they've been reliable for me; I have one AP that's nearly a decade old and still going strong, and I just swap them out or extend coverage when a new generation comes along, and move the older ones to where stronger/newer wifi isn't needed. If I wasn't in the Unifi ecosystem which keeps my life simple, I'd probably look at Ruckus or maybe see whether Mikrotik have anything compelling yet.

As it stands; the Unifi Server I'm self-hosting keeps them up-to-date and optimised, so I just plug in an AP, adopt it and forget about it, it gets configured automatically and away we go; that's about the amount of involvement I want these days.

Coincidentally, I need an extra AP for my Steam Frame to use it away from the dongle in an area where I currently don't have good WiFi coverage, so I'm going to pick one (probably a 7-Pro or 7-Pro-XG) up and just plug it in to an ethernet port in the room in question, wait a couple of minutes and be ready to roll.

alias_neo··on Wanted to download an ISO, ended up writing a kernel exploit
As in the others that I _won't_ buy (which is what I meant)?

I wouldn't buy Netgear, Asus, D-Link again. My ISP gave me Eero and I've never connected it, far too much Amazon crap going on there (but I have to keep it if I want the ISP to provide support).

Gl.iNet has been OK for the price but re-flash it with vanilla OpenWRT because their OS has some dubious phone home stuff (or did last time I looked at it).

Honestly, in terms of routers, I'm never likely to use something off-the-shelf again a decent box with Intel NICs that can run OPNSense and preferably run Coreboot (or similar). If I did go with something COTS (Commercial Off The Shelf), I'd look at Mikrotik.

I'm not a massive fan of Ubiquiti but I have their APs and I've had a bunch of their EdgeMAX switches (sadly discontinued when some of their best devs left), and their APs have been solid for me for the best part of a decade.

The advantage of using dedicated components is that each can be chosen according to your requirements.

alias_neo··on Wanted to download an ISO, ended up writing a kernel exploit
Step one is not to buy TP-Link routers.

I know people have limited budgets, but having seen the code that sits on these devices and how poor quality and easily exploited it is, time and time again, I'll never buy TP-Link (amongst others) again.

For a while I collected a graveyard of routers that had been abandoned by the manufacturers (and contained serious vulnerabilities), with the intention of writing them all up one day; next thing you know I have two children rapidly reaching double-digit ages, and much better things to do with my life than write about how shitty the code is on actual products we buy every day.

I switched, about 7-8 years ago to a Protectli box running Coreboot and OPNSense and haven't looked back; I use Ubiquiti APs and switches. I'm not saying they're the best, but anything used in corporate/enterprise is going to have better support (if not better code quality).

The great thing about Ubiquiti APs for me is that each new WiFi generation (or two) I can just buy a few more, snap the existing APs off of the various ceilings they're attached to, snap on the new ones, adopt them, and away we go.

alias_neo··on Solar panels that plug into your wall
There seems to be several levels of compatibility, at least here in the UK, based on age.

My home is 1930s, it's fuse, in the black Bakelite housing typical of the era was insufficient and we were missing a incoming breaker to/from grid, those were updated. Our meter is much more recent, though still dated; allegedly it would have worked but it wasn't a smart meter, which we wanted so we had that updated.

I've also heard through my many hours of watching Solar videos on YT before our install that some breakers, RCDs(?), RCBOs(?), whichever it is, aren't always suitable for bidirectional current flow, so that's a possible issue too.

All of that is aside the "suicide cord" danger of the old generator method, but that's gone now with modern tech, the output is cut before you can get your hands on the contacts on the end of a plug.

It's just been legalised here in the UK, and I think it will help people with their bills, but the key is to keep installation costs down; if it's DIY you can look at a decent ROI time, but with the cost of trades-people these days, if you have to call out a sparky to inspect before you plug it in, you've added potentially years to your payback period.

At ~800W, I think on the whole we'll be fine; the equipment in our homes has got much more efficient over the years, and our homes were mostly built for times where we were using higher powered devices. If you can draw over a kW to power an electric heater or kettle, I don't see why feeding a mere 800W back in would be a huge risk.

Disclaimer: I'm not an Electrician, but I do have a degree in Electronic Engineering.

alias_neo··on Solar panels that plug into your wall
Maybe the issue is in the terminology? In the UK, we don't call it an "outlet", we call it a "plug socket", or just "socket"; it's a socket that takes a plug, no direction is implied.

In terms of electricity and physics, this is unremarkable, the bit that probably scares people is the fact that you have a plug connected to something that's _outputting_ AC, particularly for those of us with 240V supplies.

If it were any old AC source on the other end they'd be correct, but current technology allows the output to be cut in milliseconds, faster than the period of a single AC wave, once the plug is removed.

Tangentially; if you have solar (mine's roof-mounted) don't assume that flipping the breaker means there's no power; I live in a 1930s UK home with all sorts of interesting wiring and flipped the breaker to change a plug socket, only to be shocked; literally and figuratively when it was hot.

alias_neo··on AnyPS5: Port PS5 binaries to PC without emulation (87% system libraries mapped)
On a tangential note, I tested Pyrowave last night streaming from my CachyOS gaming PC to my ROG Ally (running CachyOS) connected to the TV; there's 2 network switches and about 50m of ethernet between them.

Lowering the stream resolution to 1440p (from 4k) I was able to get 1440p@120Hz flawlessly playing DOOM TDA, <1ms input latency according to the overlay and display latency in the ~17ms range.

It took 900Mb/s of network bandwidth to stream that, so very close to the limit of my 1Gb LAN and still not at the quality and frame rate I'd normally play.

Add WiFi or internet streaming into the mix, and we're going to have to take a significant hit in visual fidelity and frame rates on top of all of the other issues you mention with cloud gaming.

alias_neo··on Anthropic wants your thoughts on AI
I got the pop-up and had a little read and it's framed as an "Interview", presumably by some AI interviewer they've set up, and I immediately realised they're probably aiming for a two-fer, test out their AI interview thing, and slurp up ideas from users.

I draw the line at paying them for the "service" they're "providing".

alias_neo··on Upgrade your desktop: Ubuntu 26.04.1 LTS is now available
This is for the .1 release which allows you to upgrade from the previous LTS.

I had the prompt on my work machine this morning which was previously running 24.04.x and is now on 26.04.1.

alias_neo··on PS5 Relapse Exploit
Like GP, I too have been on PlayStation since 1, had all of them on day one, and still have most of them, but PS5 is likely to be my last. I haven't played anything on it since Ragnarok, only my daughter (7yo) uses it occasionally to play Astro.

With Sony's recent moves combined with a lack of games I actually want to play (Laufey might be my last on PS5), I can't see my buying a PS6, particularly with no disc drive.

I have a gaming desktop that runs CachyOS and I game on Steam as well as an ROG Ally running CachyOS and a gaming laptop for my daughter to play Minecraft running CachyOS, as well a reservation for Steam Frame, awaiting my order email.

I'm going to go back to PC gaming, buying on Steam or GOG (DRM free) where possible, and encourage my kids (at least my daughter who's into gaming) in the same direction.

Sony's PlayStation division in particular is no longer about gamers, it's been coming for a while, so I think done with them.

alias_neo··on PS5 Relapse Exploit
That's exactly how I understand it, and from further reading, it seems Sony has now patched it already so it's game over.
alias_neo··on PS5 Relapse Exploit
Unfortunately the goal here wasn't to get the bounty, it was to keep it out of the hands of Sony who'll patch it.

The issue, as I understood it in this case was that he wanted it kept quiet until GTA6 launches, because announcing it to the public also announces it to Sony, and they'll patch it; normally that's fine, everyone just doesn't update, but given GTA6 is apparently quite popular, my understanding is that he wanted to let everyone get that one last update that allows GTA6 to run before they're stuck on that version.

alias_neo··on My weird new hobby: Wandering around Tokyo on Google Maps
This absoluteness bothered me; the car clearly wasn't in the same exact place, yet it was mentioned at least twice. I think that's what tipped me off to the AI writing.

The car was further in/out of the drive in the two shots, the wheel orientation was different, the window shade was different; all of which made the commentary on it not being abandoned ridiculous; of course someone parks their car back on their own drive, and it'll be in almost the same place, give or take a meter or two.

alias_neo··on Don't let anyone take away your big box of cables
Generally no, you're far more likely to get something that DOESN'T do what's asvertised in my experience.

You can almost always tell the second it's in your hand; in order to do the high throughput stuff, 20Gb, 40Gb etc, the wire is much thicker and stiffer, it needs conductors for all of those contacts. Ive never counted but it's something like 20 of them vs 4 in a standard cable.

Of course always C to C; the A connectors with the extra contacts in between the normal USB 2 ones still aren't enough.

alias_neo··on Don't let anyone take away your big box of cables
I thought about that as I was writing, I think I might do just that!
alias_neo··on Don't let anyone take away your big box of cables
For USB, if it can carry 65W+ of power to my laptop as well as the Keyboard/Mouse inputs, 4K/60Hz display and audio back to the monitor as well as KB/Mouse and perhaps some external storage or network adapter, that's a pretty amazing cable.

I also have preferences between my cables by the quality and aesthetic, I prefer some over others because they look or feel nicer even if in testing they contain the same conductors, but that's just ... me.

I currently have 3 such cables connected to my work laptop each sending 4K/60Hz video to each of my 3 x 4k monitors, audio to my soundbar and one of them is powering the laptop at 90W and sending my keyboard, mouse and webcam inputs back.

alias_neo··on Don't let anyone take away your big box of cables
I have a cheaper version, it does basically all one needs by telling you how many conductors the cable has, if it's only got 4 lights lit up it's a simple USB2, more power LEDs is a higher power charging cable, more data pairs, higher data throughput/USB3, nearly all of the lights (usually bar 1 of the CCX) it's full DP/Thunderbot, data, charging, A/V etc.

Sometimes it even shows USB-C connectors that are only wired for one orientation!

alias_neo··on Don't let anyone take away your big box of cables
I don't group exactly, nor do I want to de-duplicate, but I've organised my boxes on the shelf and sorted and labelled them recently, in what seems the most logical way at the time; I have "networking", "USB", "power", "A/V", "PC" and some as of yet unlabelled ones with random stuff I can't place in the others.

There is some unfortunate crossover regarding where things belong because some USB are for power, some are for A/V etc, others or data...

What I realised, when going through these boxes was two things; it would cost a fortune to replace all of the cables in them, I wouldn't be surprised if replacement cost ran into the low thousands of £££ (should they be on my home insurance?!) and secondly; I'm no longer indecisive about what to do with a frayed or otherwise non-ideal cable, it goes straight in the bin; I used to retain the "nicer" ones and solder new connectors if the microUSB had worn out, or the cable was damaged near the end, that got much harder with USB-C unless I'm going for a simple +/-/D+/D-, so I just don't bother.

As for how often they're used; the USB box comes out almost daily, sometimes several times a day, if I'm charging things in my home office, or connecting something that isn't permanently plugged at my desk, I put the cables back away when I'm done. Power comes out every few weeks, and "networking" only when I need to reorganise things in the network cabinet/server rack.

For USB, the "final form" would be to create a labelling system so I can tell at a glance what each one supports, because as it stands I have to pull out my little LED cable tester thing and see how many light up to know if it'll do DP or high power charging etc.

alias_neo··on .name Termination
Off-topic, sorry, but I did a double take when I saw your name just now.
alias_neo··on Carolina Cloud pays SOFR on unused prepaid credits
> I think you are taking this a bit too far

I just find it an interesting thought experiment.

I wonder if this has anything to do with why a lot of companies convert your money into a variety of virtual currencies, "bells", "gold, "gems" etc.

I'll leave it there but nice chatting with you about it!

Page 1 of 34Next →