Hacker News Reader

Nice, thank you.

But do such nodes exist in practice (in the current network). It would be interesting to research what clients connect to multiple bootstrap servers.

jesprenjon Unshackle: A tool to bypass Windows and Linux password logins

A trick I used that still worked after this Defender update (tested some months ago) is replacing Magnify.exe with ftp.exe. This does not make Defender suspicipus, but one can open Magnify.exe from the lock screen and one can execute commands from within the ftp.exe shell by prefixing them with !. This is great, because ftp.exe binary is signed by Microsoft and is a completely legit binary (:

jesprenjon Unshackle: A tool to bypass Windows and Linux password logins

You couldn't, the case cover is hot-glued to the case. Hot-glue is the epitome of Windows security.

jesprenjon A technical look at ZeroNet

One question on this topic interests me: In BitTorrent, do nodes that bootstrap using different bootstrap servers, ever see themselves in one single connected graph?

Since there are many different bootstrap servers for mainline DHT in BT, how is it ensured that nodes from two or more different bootstrap servers know about each other?

Is it possible (and how often does it happen) that a node that boostraps using server A will never find nodes that bootstrap using server B?

jesprenjon A technical look at ZeroNet

> To eliminate the reliance on a central server, ZeroNet provides an internal plugin called BootStrapper, which allows peers to function as trackers.

Why use this concept of trackers when we have better (more distributed) alternatives in the form of distributed hash tables (DHTs), such as Kademlia, the one BitTorrent itself uses for trackerless torrents?

jesprenjon Discord is not documentation

IIRC you do not have to sign up to use discord. When clicking an invite link without being logged in, a temporary account is created without having to register with an email address/phone number/password.

jesprenjon Commercial interests petition FCC for high power allocation on shortwave

www.arrl.org does not resolve

arrl.org does

jesprenjon Ask HN: Could you share your personal blog here?

http://splet.4a.si./

There is, however, no content here in English.

Google translate:

https://splet-4a-si.translate.goog/?_x_tr_sch=http&_x_tr_sl=...

jesprenjon We are wasting up to 20% of our time on computer problems, says study

Perhaps you are describing Erlang?

https://en.wikipedia.org/wiki/Erlang_(programming_language)#...

jesprenjon CSS-Only Chat

You can send content of typed data of an input field with CSS to a webserver, as you can use a selector that matches the end of the input field's value.

https://css-tricks.com/css-keylogger/ (2018)

jesprenjon Milk-V Duo: A $9 RISC-V Computer

I know of one personally. Though the LTE modem is still running very proprietary software.

jesprenjon Milk-V Duo: A $9 RISC-V Computer

I ordered two boards when a bunch of friends made a group order "in bulk" from them. We split up the shipping costs to 5 so it was $6 shipping per person.

The EU store has considerably more expensive stock, I assume they have to make sone product guarantees to comply with stricter laws. A Pinecil I bought was almost two times as expensive, though it came without additional shipping costs, from Poland I think.

jesprenjon Milk-V Duo: A $9 RISC-V Computer

For $8, Pine64 sells their similar looking Ox64 -- risc-V core, bluetooth, 64 MB SRAM, wifi, usb, 16 MB flash ...

They also have a $6 model with only 16 MB SRAM version, but that one, unline the 64 MB, can't run linux.

https://wiki.pine64.org/wiki/Ox64

jesprenjon UTF-21, a toy character encoding

Thanks for the examples, your point makes sense to me now. Combining characters or modifier characters and all other weird aspects of unicode really call for a separate library for parsing unicode, since even with relying on 1 UTF-8 codepoint == 1 text unit, one doesn't get much advantage, because 1 character isn't always 1 UTF-8 codepoint.

jesprenjon UTF-21, a toy character encoding

Isn't this similar to what modern languages did? They abstracted away the underlying encoding so that the programmer deals with characters instead of bytes. Two examples are Python and Javascript strings. They kept ASCII-like code ergonomics (iterating and random access).

That of course required that they separated strings and byte-like objects -- like uint8_t and wchar_t.

Isn't signed char actually the culprit in modern C and therefore useless? It's main use is ASCII and that's obsolete.

jesprenjon UTF-21, a toy character encoding

That's why in C you have wchar_t.

https://en.wikipedia.org/wiki/Wide_character

jesprenjon The Linux kernel will fix some peculiar argv usage in execve(2)

Isn't Linux severely breaking the userspace with this change? What about programs that expect argc to be 0 or argv or argv[0] to be NULL?

jesprenjon Show HN: Rarbg on IPFS

How do IPFS HTTP mirrors deal with javascript origins? The origin here is always https://ipfs.io/, right? Or can a http server send a custom origin in the response headers?

jesprenjon Some models of Gigabyte motherboards download firmware updates insecurely

By not using Windows or somehow instructing your Windows not to run this file at startup.

jesprenjon Some models of Gigabyte motherboards download firmware updates insecurely

As far as I understand, this only affects Windows installations. The update process is executed from Windows and not from motherboard's code itself. The motherboard's code only installs a Windows executable on your hard drive.

jesprenjon An open-source alternative to QuickBooks

Given that it's AGPL, are there contributor licence agreements that give bigcapitalhq any exclusive rights over your contributions?

If that's the case (if bigcapitalhq gets full IP ownership rights to your contributions), bigcapitalhq can dual licence the software other contributors made and profit of them.

jesprenjon 300ms Faster: Reducing Wikipedia's total blocking time

The link hower popups were incredibly slow on my older laptop on palemoon. I just disabled javascript on wikipedia because it's written quite poorly performance wise in my opinion.

jesprenjon Wind is main source of UK electricity for first time

Could it be possible that they are talking about energy production instead of energy use and conveniently writing "UK's electricity" to add ambiguity?

https://www.bbc.com/news/business-63976805

jesprenjon Android's Private DNS not operational with servers using Let's Encrypt (2021)

Is your server sending the signature by an expired CA certificate (DSA)? If not, there is no problem (article author explained the fix).

I followed his fix and only after removing DSA from my certs Private DNS started working.

jesprenjon Pixel phones are sold with bootloader unlocking disabled

You don't need an account, but it's still terrible. I experienced this yesterday: https://news.ycombinator.com/item?id=35854287

jesprenjon Pixel phones are sold with bootloader unlocking disabled

I got a Samsung S21 FE 5G as an award on a programming competition.

OEM unlocking wasn't even an option in the developer settings until I connected the phone to the internet and set the date to one month in the past (I assume this has something to do with the warranty -- you can't even unlock the bootloader right away).

An internet connection was required before even using the phone on the Android initial setup screen.

Apart from that, developer settings can't even be enabled before agreeing with Samsung EULA. Initial setup screen can be weirdly manipulated into opening settings (Accessibility, Additional apps, Live transcribe, Connectivity settings (only shows if there's no inet connection), back), but spamming the Build number does not enable developer settings.

Granted that I did not buy the phone, but it's still disgusting that such devices are being sold.

jesprenjon So this guy is now S3. All of S3

Any sufficiently complicated C or Fortran program contains an ad hoc, informally-specified, bug-ridden, slow implementation of half of Common Lisp.

http://en.wikipedia.org/wiki/Greenspun%27s_tenth_rule

jesprenjon So this guy is now S3. All of S3

So server software is not written with high performance in mind?

I've read somewhere that federation is done via regular HTTP requests which ends up really hogging down servers if someone has a lot of followers.

jesprenjon C Library for Fourier Transforms

I sent an email a minute ago.

Thank you for this coordination! I'll make sure to add my email to my user description for future contacts.