HNHacker News
TopNewBestAskShowJobs

cstdr

16 karma · joined January 27, 2018

submissionscomments
cstdr··on Discord is ditching Electron and its new app uses less RAM
You don't need a full browser-engine just to render some text with images. The majority of the web api sprawl browsers implement is just baggage for that.
cstdr··on eMudhra intermediate CA compromise
Of course it's not required, as we see here. The question is why not? Getting a simple code-signing cert seems to have more stringent requirements in that it either requires attestation or CA-issued hardware.
cstdr··on EMudhra Intermediate CA Compromise
But shouldn't such a HSM support key attestation (and the parent require such attestation)? Attestation would also track whether a key was imported or generated on the HSM, and of sufficient length.
cstdr··on GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos
Escaping is 100% safe and for certain queries the only possible way. Prepared statements don't exist for escaping inputs but to parameterize queries. If your data is heavily skewed or you use operators like > or < they can exhibit desastrous performance.
cstdr··on Godot will no longer accept AI-authored code contributions
[3] is not openvpn, just some install script a rando not affiliated with openvpn did.
cstdr··on What was nice about the UI of Windows 2000
A puppy.jpg.vbs file would be shown as "puppy" with "VBScript" in the type column. The full name may be worse though. "puppy.gpj.vbs‬"‭ (which is actually "puppy\u202Egpj.vbs\u202C") looks like an image extension, but is a script (as the type column also shows).

Edit: Looks like HN removes those directional override characters. When present, the text looks like "puppy.sbv.jpg"

cstdr··on AI is breaking two vulnerability cultures
I don't see how that can be useful when Microsoft publishes debug symbols for almost everything.
cstdr··on OpenCiv3: Open-source, cross-platform reimagining of Civilization III
Did you even read what I wrote? It did not work. Apple even has an FAQ page for that error (without any useful solution). The suggestion to create an account via Apple Music app is useless since all it does is create an account which must be migrated via browser first (with the same problem). You can also find large threads on Reddit about the problem. Of course the availability of such a sign-up flow suggests it should be possibly, but having it broken for months is not a good look.
cstdr··on OpenCiv3: Open-source, cross-platform reimagining of Civilization III
Have you actually tried it? Because I did some months ago to setup an AppleTV and it just does not work. It just hangs at the last step without telling you anything. If you inspect the server response it just says "Your account cannot be created at this time.".

What ultimately helped after weeks of trying and tinkering was installing VMware Workstation, patching it to enable macOS support, create a VM with the specific hardware configuration of an older MacBook, install an old version of macOS and do the 2FA from in there.

cstdr··on Extensions in Firefox 59
You mean like this <https://i.imgur.com/6ZXAchD.png>? You can get the old look back via userChrome.css. Relevant styles from mine:

  #PopupAutoCompleteRichResult .ac-separator {
    page-break-before: always;
    width: 47px;
  }

  #PopupAutoCompleteRichResult .ac-separator-text {
    display: none !important;
  }

  #PopupAutoCompleteRichResult richlistitem {
    display: flex;
    flex-wrap: wrap;
    align-items: center;
    height: auto;
    padding-bottom: 5px;
  }