HNHacker News
TopNewBestAskShowJobs

kogir

7,769 karma · joined April 6, 2007

Interested in computer security and privacy. Likes hardware hacking, orchids, and good sci-fi books.

Personal email is my first name (nick) at my username (kogir) .com

submissionscomments
kogir··on I don't like passkeys
It’s the passkey that should be protected with MFA (biometrics, PIN), not the account with the third party service.

My Yubikey supports passkeys and protects them with a PIN of my choosing. No services need challenge me further.

kogir··on HomeLab #1: MikroTik as a Home Router
I’ve not tried with 10gbps or faster links, but since we’re talking home use my success with 2.5 gbps links on standard amd64 hardware would suggest you’re wrong.

Modern CPUs are quite capable. The problem isn’t performance, but power use.

kogir··on EF Core 11 makes your split queries faster
I’ve always solved this with Multiple Active Result Sets and stored procedures.

Collect the data in the stored procedure with temp/in-memory tables and return minimal, non-duplicated, related result sets.

Single round trip, still accumulates results in efficient bulk batches, and allows results to be processed by the client as they stream in.

kogir··on Microsoft isn't removing Copilot from Windows 11, it's just renaming it
With secure boot, full disk encryption, and robust backups, this risk should be largely mitigated, right?

That’s what I’m personally banking on. I think anyone with the resources to bypass these would first just use a rubber hose.

kogir··on Make macOS consistently bad (unironically)
MacOS assumes you won’t full screen every app because all of them ship with large enough, high enough resolution monitors that full screening a single app is a waste of valuable space. Unlike on cheap laptops with 1080p screens.

I suppose you could splurge for a Mac desktop and then get the cheapest, smallest screen possible, but I hope it’s rare.

kogir··on Everything You Need to Know About Email Encryption in 2026
Yes, and highlighting a failing in email that cannot be fixed, but which is addressed in other services where confidentiality is desired.
kogir··on Email verification protocol
OIDC is usually limited to a small selection of providers.
kogir··on What happened to Apple's legendary attention to detail?
Any properly grounded device will do that with specifically incorrect electrical wiring and/or a shoddy charger. Did this happen with a properly wired outlet, and an undamaged Apple charger?

I have doubts that it did, as that would warrant a safety recall.

kogir··on “The Mind in the Wheel” lays out a new foundation for the science of mind

  Another example for all you computer folks out there: ultimately, all software
  engineering is just moving electrons around. But imagine how hard your job would
  be if you could only talk about electrons moving around. No arrays, stacks,
  nodes, graphs, algorithms—just those lil negatively charged bois and their 
  comings and goings.
I think this too easily skips over the fact that the abstractions are based on a knowledge of how things actually work - known with certainty. Nobody in CS is approaching the computer as an entirely black box and making up how they think or hope it works. When people don't know how the computer actually works, their code is wrong - they get bugs and vulnerabilities they don't understand and can't explain.
kogir··on Fun with Logitech MX900 Bluetooth receivers (2006)
I really miss the feature of CSR devices that allowed keyboard and mouse use before OS boot, and wish any modern Bluetooth receiver was capable of it. Is it a patent issue?
kogir··on [dead]
Am I misunderstanding this? Isn’t this just the view, rating, and comment data required to offer the service?

Building an interface to search that data is exactly how you’d evaluate a recommendation engine.

kogir··on Reverse-engineering my speakers' API to get reasonable volume control
While I’m all for physical controls, especially ones that self-adjust to reflect the state of the remote device at all times, I wonder if the author just doesn’t know you can finely adjust volume in iOS control center by force/long pressing and then dragging.
kogir··on Microsoft breached antitrust rules by bundling Teams and Office, EU says
wget begs to differ.

Kidding aside, where exactly does it end? How do you consider when you’ve hit “too much” and how many pieces must be split out when you do? Should every product in the Office suite be offered only individually?

kogir··on Serialization for C# Games
This seems to cover many common pain points, but I’ve written my fair share of .NET serializers and for anything I build now I’d just use protocol buffers. Robust support, handles versioning pretty well, and works cross platform.

I’d like to know their reasons for making yet another serializer vs just using pb or thrift.

kogir··on Australian man says border force made him hand over phone passcode
I’ve never actually been detained or questioned (but know people who have).

If I were I’d tell them the truth that I feel more vulnerable during the chaos of travel and don’t want any risk that a lost or stolen device could leak anything personal.

Would this satisfy them? No idea. Getting stopped at the border is legitimately a single small concern of many more likely scenarios.

kogir··on Australian man says border force made him hand over phone passcode
I’m probably a little odd but I wipe my devices before international travel. All my travel documents are printed. If they want to steal a device, I’ll just replace it.

When I arrive safely I restore from backup and nothing is lost except an hour or so.

kogir··on Why CockroachDB doesn't use EvalPlanQual
READ COMMITTED is great for applications that need a coherent snapshot of the database but not necessarily the absolutely most recent data, which in my experience is actually most apps.

It allows readers to see valid data (relationships are correct), while not blocking writers. It can be the difference between constant deadlocks and super-high throughput without lock contention.

kogir··on Tell HN: Reddit now blocks VPN access via browser, 'old' subdomain included
Everything works fine via iCloud private relay. No account or other mitigations required.

So perhaps it’s not VPNs that are blocked and instead the traffic you’re sharing an IP with.

kogir··on Intel Previews Sierra Forest with 288 E-Cores, Announces Granite Rapids-D
svchost.exe is literally what the name implies. It's a generic service host. You pass it a dll and an entrypoint (via command line arguments and registry keys) and it runs it.

You should look at which thing it's actually running to see what's using all your CPU.

Some articles detailing what it does and how it works: [1] https://nasbench.medium.com/demystifying-the-svchost-exe-pro... [2] https://pusha.be/index.php/2020/05/07/exploration-of-svchost... [3] https://blog.didierstevens.com/2019/10/29/quickpost-running-...

kogir··on Comcast squeezing 2Gbps internet speeds through decades-old coaxial cables
Obviously not? Where are you living where even if fiber is available in your city, it’s not just a small section you’d need to deliberately account for in your selection of housing?
kogir··on VeraCrypt: Free open-source disk encryption for Windows, Mac OS X, Linux
Bitlocker requires a Professional or greater license of Windows, but needs neither an internet connection nor a Microsoft account.

I have mine setup with TPM + PIN, and have archived the recovery keys myself, not stored them with Microsoft.

kogir··on Swedish criminal gangs using fake Spotify streams to launder money
This happened to me on one of my domains, and Spotify support was similarly useless.

I finally resolved it by resetting the passwords and deleting 5-10 accounts a day, until the spammers decided continued use of my domain wasn’t worth their time.

kogir··on Desktop Linux Hardening (2022)
Hibernate is usually used to allow the computer to shut down completely and not remain in standby, saving battery. It’s not about boot speed anymore.
kogir··on We reduced our iOS app launch time by 60%
I wish they’d name the third party library.
kogir··on Materialized View: SQL Queries on Steroids
Materialized views are a much more powerful tool when used on databases that properly support them.

When I’ve used them the database has transparently handled updating them efficiently as the source data changes.

kogir··on Ask HN: Can we delete our accounts?
Since nobody has linked it yet, there's a comprehensive document covering this and related topics, here: https://www.ycombinator.com/legal/

YC has multiple in-house lawyers. They're not going to risk their business over this. However, I'm unaware of any law that requires the process be completely automated.

kogir··on So I lost my OpenBSD FDE password (2016)
AWS is my largest annoyance in this regard.
kogir··on Lufthansa bans AirTags in checked luggage
I was able to determine that someone with the exact same bag had taken mine from baggage claim and retrieve it from them before they left the airport with it. We both had much better vacations as a result. I’m going to keep mine in my luggage, sorry.
kogir··on Hacker News Official API
It always amuses me when the API link in the footer floats up as a submission every few years.
kogir··on VPNs on iOS are a scam
I think Apple is transparent about Always on VPN (blocking traffic except over the tunnel) requiring provisioning using MDM tools. Apple Configurator is free and allows anyone to set this up.

Any other VPN is just best effort.

https://support.apple.com/guide/deployment/vpn-overview-depa...

Page 1 of 28Next →