HNHacker News
TopNewBestAskShowJobs

matoro

341 karma · joined April 23, 2018

I run the ISA Sandbox, where you can experiment with CPUs of niche or forgotten architectures. See more at https://static.matoro.cc/isa-sandbox-faq.html
submissionscomments
matoro··on Linux gamers on Steam cross over the 3% mark
Just want to say that a decade ago Warframe was the first game I ever played on WINE when I was first learning Linux in school. If it hadn't been so friendly and easy to keep playing I wouldn't have the skills and job I do today. Thank you!
matoro··on F-Droid and Google’s developer registration decree
For me at least I just use the prebuilt MicroG-flavor ROMs at https://lineage.microg.org/

This comes preloaded with the MicroG settings app, so no need to install the extra FDroid repo. But otherwise yes, Aurora Store gets you access to all necessary proprietary apps.

matoro··on Jemalloc Postmortem
That was me that filed the Itanium test suite failure. :)
matoro··on TUI for Managing WiFi on Linux
iwd does not wrap wpa_supplicant, it's a from-scratch implementation and a much nicer one at that.
matoro··on Gentoo goes Binary
Can you please share the tool in question? I have been desperately looking for something like this for my sandbox project.
matoro··on Phishing domains tanked after Meta sued Freenom
This is the real answer, I have a paid domain and am still unable to get contact or transfer off (I have attempted this with all known registrars that support .tk, Freenom simply fails to respond to the transfer request)
matoro··on So this guy is now S3. All of S3
Google Translate recently moved translated web pages to domains like this. If you plug a webpage into GT it will put the translated content under <domain>-<tld>.translate.goog. This user's actual domain is https://retr0.id
matoro··on Large scale Internet SSH brute force attacks seem to have stopped here
With nginx I also set the return code to 444 on the default virtual host, this is not a real status code but instead tells nginx to kill any connections to this vhost at the TCP level.
matoro··on Ask HN: Neutral DNS servers?
I use dnscrypt-proxy[0] which round-robins to a bunch of upstream servers, plus encryption.

[0] https://github.com/DNSCrypt/dnscrypt-proxy

matoro··on Clever uses of pass, the Unix password manager
I also use this for OTP tokens instead of my phone!

https://github.com/tadfisher/pass-otp

matoro··on SuperH
Is there any sh4 or m68k hardware available that is capable of self-hosting?
matoro··on Microsoft Edge’s new ‘Buy now, pay later’ feature is the definition of bloatware
Does Gsuite not count as competition? It even fills the MS Office role with Gdocs.
matoro··on The Ampere Altra Max Review: Pushing It to 128 Cores per Socket
I bought one of these. Unfortunately due to supply-chain holdup the order is pending indefinitely. The primary use-case is as a core router for high-throughput networks like ISP backbones, hence the focus on built-in SFP+ which would usually need an array of PCIe cards to accomplish on a standard box. But you can also use it as a NAS which is how I intend to because of the 4x SATA. Both of these use cases require only moderate CPU power and benefit from the ECC support.
matoro··on Btop++ is a power resource monitor for Linux
I use atool (https://www.nongnu.org/atool/) for unpacking random archives - it abstracts away all formats including zip/rar/7z, compression and also guarantees that nothing is ever extracted into $CWD.
matoro··on My mouse driver is asking for a firewall exemption (2019)
I have this same mouse. It works perfectly fine as an HID-compliant mouse on Linux, including the forward/back buttons. You only need all that crap if you want to control the rainbow RGB lighting. And if you really that, there's a reverse-engineered driver here: http://roccat.sourceforge.net/
matoro··on The Ransomware Problem Is a Bitcoin Problem
While this is true, the overwhelming majority of these incidents do not use or require zero-days. The attack vector is nearly always basic phishing/social engineering, or wildly misconfigured/unpatched systems exposed to the internet. Implementing a bare-bones security program, or giving an existing security program the tools & authority to enforce policies, would cut down on ransomware incidents by a factor of 5-10, easily, without touching cryptocurrency in the slightest.
matoro··on Google have declared Droidscript is malware
It's closed-source and paid. Not allowed on F-Droid.
matoro··on Codecov Bash Uploader compromised
> How did Codecov learn of this event?

> A customer reported this to us on the morning of April 1, 2021. This customer was using the shasum that is available on our Bash Uploader to confirm the integrity of the uploader fetched from https://codecov.io/bash.

> Once the customer saw a discrepancy between the shasum on Github and the shasum calculated from the downloaded Bash Uploader, they reported the issue to us, which prompted our investigation.

Just goes to show that checking published hashes is not as useless as it may seem.

matoro··on When Your ISP Won't Give You a Static IP
Dynamic DNS does not help when you are behind CGNAT.
matoro··on Signal Adds Cryptocurrency Support
WeChat has been extremely successful by virtue of being the only app the government allows you to use in a country of a billion people.
matoro··on Twitter locks out Irish Bishop after he criticized euthanasia
Tumblr's tagging system is quite similar to this - you can "follow" tags or "blacklist" them and most people do tag pretty extensively - and it allows people to get away with some things that would be banned on twitter, like gore blogs. On the other hand, Twitter allows nudity, while Tumblr does not, and they both still ban for "hate speech."
matoro··on CompilerGym: A toolkit for reinforcement learning for compiler optimization
This is really cool - I understand how the reinforcement loop works for improving performance, but how does it verify that the optimizations applied don't change the semantics/correctness of the code?
matoro··on Drawbacks of P2P and a defense of Signal
I run a non-federated instance on a tiny 2GB RAM ARM SOC. About 4-5 active users. Extremely light (under 80MB RAM usage) as long as you don't federate. Attempted enabling federation once - maxed out all cores, all mem/swap, and basically blew up the entire machine. Had to wipe away the database and start without federation.

Encryption UI is a mess. I have actively tried and failed to set up E2E encryption with at least one other technical user. Recommend disabling encryption unless you want non-technical users to abandon ship immediately.

matoro··on Maps.me is gone, and we must bring it back
It is true, take it from the FSF themselves [0]. Or the VLC devs [1]. However, you're right that Maps.me is not GPL; I misread the question as asking about F-Droid itself which is GPL.

[0]: https://www.fsf.org/blogs/licensing/more-about-the-app-store...

[1]: https://www.zdnet.com/article/no-gpl-apps-for-apples-app-sto...

matoro··on Maps.me is gone, and we must bring it back
No, and they won't because it's against Apple's terms of service to license your app as GPL.
matoro··on VPNs might finally be dead thanks to Twingate, startup built by Dropbox alums
Isn't this just split-tunneling?
matoro··on Microsoft: No Driver Updates Allowed for Win7 and Win8
Yes? RHEL 6 uses kernel 2.6 and RHEL 7 uses kernel 3.10. Both are actively maintained and supported.
matoro··on Your Phone Is Your Castle
I have been using this service for about a year and a half now and I have to say the cost is great but you get what you pay for. It's very unreliable (drops incoming calls, and incoming texts are delayed very frequently) and there are lots of places my friends will have coverage that I will simply have no network at all. So it's servicable, and I would recommend for e.g. a hobby project that needs a cell data connection like a Pinephone/Librem 5, but not for critical cell lines that you need to guarantee won't miss calls.
matoro··on Ask HN: Dealing with monitoring software on work computers and transparency
The Linux version of Crowdstrike is severely gimped compared to the Windows one though. No way you could reconstruct somebody's activity with the same detail you could from a Windows session.
matoro··on Windows 10: HOSTS file blocking telemetry is now flagged as a risk
They already do that. If you block these domains at the DNS level it will just skip the DNS lookup and talk to them directly by IP.
Page 1 of 2Next →