HNHacker News
TopNewBestAskShowJobs

mid-kid

1,741 karma · joined December 10, 2014

submissionscomments
mid-kid··on Advent of Code 2025: Number of puzzles reduce from 25 to 12 for the first time
This. The best I've ever achieved is maybe 15 puzzles on one year, with gaps for the days I missed. And this was when the puzzles were incrementally building upon implementing a bytecode interpreter, which was relatively little work per day.

Once I miss my first day, playing catch up is an effort in vain, as the puzzles start taking 4+ hours to solve each, solving multiple in one day is a full-time commitment.

Most advents of code I've fallen off sharply after day 7-10, if not sooner, and I'm pretty sure I'm not alone in this. I think this is a welcome change.

mid-kid··on KDE Connect: Enabling communication between all your devices
The branding does a major disservice to this application - it works like a charm on my windows and i3wm setups, having no trouble sharing a clipboard and files. There are very few features if any that only work on KDE.

Sometimes on windows it needs a click of the refresh button to get going after connecting to a network. The discovery is wonky on some platforms.

mid-kid··on The End of Tt-Rss.org
This was the only RSS reader where I found that there were good native clients available for both mobile (TTRSS-Reader) and desktop (liferea).

As I really need the synchronization, and the offline reading capabilities of native clients, I wonder if there's any other software that does this right now.

mid-kid··on The End of Tt-Rss.org
mine is a slackware 14.2 with 1061 days. I turned off the auto-updating of the ttrss instance a few years ago as I intend to reinstall it somewhere else so this news is very disappointing.
mid-kid··on Zlib visualizer
What happened to lorem ipsum?
mid-kid··on F-Droid and Google’s developer registration decree
Those kind of concessions were likely necessary to get them to pass the law at all.
mid-kid··on A New Internet Business Model?
> Unless you believe that content creators should work for free, or that they are somehow not needed anymore — both of which are naive assumptions

Realistically, what was the benefit of the ad-driven model? From my point of view, most of the highly-valuable information came from the various forums, wikis and personal sites, on all of which people would publish the information for free. Ads were largely used to cover hosting costs of the large forums and wikis, but the content creators saw not a single dime.

Over the last 15 years, the search results have shifted from this, to instead become 100% news articles and SEO spam, all with a lot of fluff and very little substance, tons of ads, pop-ups, autoplay videos and subscription walls. All of this is well funded thanks to the business model, but for what? I can't imagine anyone sitting through all that crap to get to what they were looking for. There's a reason people would tell others to add "reddit" to the search query only a few years back, and even that's becoming less worthwhile.

Is this really what we want to preserve? Big publications and their interests?

mid-kid··on Stepping Down as Libxml2 Maintainer
*liblzma
mid-kid··on The case against social media is stronger than you think
What you're describing is an echo chamber, when people willingly share only things that they know resonate with the group.

While still somewhat detrimental, it's at least a visible problem - everyone is aware of it because everyone sees the same thing.

With filter bubbles, you create personalized echo chambers, that nobody is aware of unless they're in there.

mid-kid··on Pass: Unix Password Manager
The only use case of mine that's not solved by keepass is creating passwords on two separate machines without a direct connection, and merging them later.
mid-kid··on Pass: Unix Password Manager
"pass generate" has a -i flag to only replace the password in a file (assumed to be the first line)
mid-kid··on The case against social media is stronger than you think
Technically, yes, but at least it's not filter bubbling everyone.
mid-kid··on The case against social media is stronger than you think
You mean like how the current twitter owner tweaks the algorithm to push his narrative? This is why there was never one big forum, and there never should've been.
mid-kid··on TikTok has turned culture into a feedback loop of impulse and machine learning
Most of the 20+ minute long videos are bound to be filled to the brim with filler and bullshit. I'm not asking for much, but please stop pretending your video game review is worth an hour of introductions, personal anecdotes, comedy sketches and 3 sponsor ads.
mid-kid··on Windows 10 resists its end: usage share climbs while Windows 11's falls
If this is not a statcounter anomaly, the explanation seems obvious: more people are dropping windows in general (both 10 and 11), mostly in favor of phones and tablets (as has been a trend for years now), or in the niche cases, linux. Meanwhile 10 stays strong thanks to all the offices and old machines that won't be upgrading for a while.
mid-kid··on Jeena's Hyprland Demo
> Tearing (graphical glitches) is terrible, especially if you’re doing screen sharing.

Download and run "picom" (its default configuration is good), or any other compositor. This is the way to get graphical acceleration for regular windows on X11, and fix tearing.

> Scaling stuff is a total mess, a mess that you can mostly get to work, but you’ll need to set four different environment variables and run a gsettings daemon and set these three properties and add this file to this location and that one to that and modify your Chromium flags and I probably even forgot a couple of steps.

I just modify ~/.Xresources with the "Xft.dpi: 120" for 1.25x scaling. All apps I care about pick this value to scale the UI with (chrome, firefox, telegram, Qt as a whole, etc). Notable exceptions being java apps.

See: https://wiki.archlinux.org/title/HiDPI#X_Resources https://wiki.archlinux.org/title/Xorg#Setting_DPI_manually

mid-kid··on Half an year on Alpine: just musl aside
> I really wish, though, that package managers were more capable of differentiating between security and feature upgrades. If they were, we could run a rolling distro in “Debian mode” at will.

This is exactly the sweet spot that Gentoo hits for me. The default configuration will install only "stable" packages, which are bumped ASAP for security reasons, but you're always free to switch a selection of (or all packages) to their "unstable" variants. Thanks to its source compiled nature, doing this is never a "partial upgrade", and is very well supported. Even if you use Gentoo as a binary distribution, portage is extremely meticulous in ensuring version compatibility.

mid-kid··on For all that's holy, can you just leverage the web, please?
On the one hand what you're saying seems somewhat fair, but on the other hand, I prefer encouraging the attempt. A portion of the people who do this will never have to call you, having managed to solve the issue, and any experience gained with the attempt will go into doing it better next time.

In a world where people know less and less about how to solve problems themselves, I think repair skills are incredibly important for people to have.

Personally, I would happily pay more if you show me what you're doing and/or explain what I did wrong :)

mid-kid··on De-Googling TOTP Authenticator Codes
You're right, gpg does asymmetric encryption. Don't know how I got that wrong, lol. But yeah the asymmetric part isn't really used in this context.
mid-kid··on De-Googling TOTP Authenticator Codes
At work we use OneLogin, set to require the app. However, it stores a regular TOTP code in the app, it's just encrypted with the android keystore. I had to hook the base64 decoding function on my rooted phone to extract it, and put it in my password manager instead. I've been unable to figure out how to decrypt keystore-encrypted secrets in any other way.
mid-kid··on De-Googling TOTP Authenticator Codes
I've been storing OTP secrets using `pass`[0] with `pass-otp`[1]. This does the whole symmetric encryption for me using `gpg`, decodes the URL for me to pass it into oathtool, and allows me to share the codes with my phone using Android Password Store[2]. This is all deceptively simple to set up, assuming you have a git server you trust to synchronize the codes with, or some kind of other method using maybe tailscale or syncthing? As long as you don't need the codes on Windows, where the QtPass app is unmaintained and can't generate OTP codes on Windows, you're mostly good.

Oh and I use `zbarimg` to decode the QR, as I've integrated it with my screenshot script and it can decode more than just QR codes.

[0]: https://www.passwordstore.org/

[1]: https://github.com/tadfisher/pass-otp

[2]: https://f-droid.org/packages/app.passwordstore.agrahn/

mid-kid··on Tell HN: Use "-f**k" to kill Google AI Overview
Sources which themselves are often AI generated now
mid-kid··on SDS: Simple Dynamic Strings library for C
The only thing the SDS metadata holds is the string's length. Just like how you'd have to realloc() a regular string before using strcat(), you have to sdsgrowzero() an sds string before using strcat(). Basically, standard libc functions that tamper with the string have the same constraints as malloc()ed strings in terms of safety, only you might want to call sdsupdatelen() after truncating a string.
mid-kid··on Ask HN: How can I recover and run my old mobile game from the 2010s?
This sort of protection is rather rare for android apps.
mid-kid··on Google will allow only apps from verified developers to be installed on Android
They're also the best equipped to tell if you've done so, and restrict access from critical functionality needed by many in their day-to-day lives if you've done so.

The intentions behind all the security hardware they introduced in pixel phones first, and is now required by play integrity to function might've been well-meaning, but that doesn't really matter in the end. Security features that the user can't control and bypass aren't security features - they're digital handcuffs.

mid-kid··on Google will allow only apps from verified developers to be installed on Android
They have the ecosystem by the balls. Phone manufacturers in recent years have been making unlocking & modifying their devices more and more difficult, google and app developers have been cracking down harder on modded devices by implementing TPM equivalents in the hardware to sign and verify that your system is a google-appproved one, and alternatives still are decades behind in terms of app ecosystem.

I think they might just get away with it.

mid-kid··on People stuck using ancient Windows computers
Glibc is one of the few userspace libraries with backwards compatibility in the form of symbol versioning. Any program compiled for glibc 2.1 (1999!) and later, using the publically exposed parts of the ABI, will run on modern glibc.

The trouble is usually with other dynamically linked libraries not being available anymore on modern distributions.

mid-kid··on It’s not wrong that "\u{1F926}\u{1F3FC}\u200D\u2642\uFE0F".length == 7 (2019)
> If I write [str] I want the inut string to be Unicode.

No, nothing about the "string" type in python implies unicode. It's, for all intents and purposes, its own encoding, and should be treated as such. Not all encodings it can convert to are representable as unicode, and vice versa, so it makes no sense to think of it as unicode.

mid-kid··on It’s not wrong that "\u{1F926}\u{1F3FC}\u200D\u2642\uFE0F".length == 7 (2019)
Yeah I have no idea what is wrong with that. Python simply operates on arrays of codepoints, which are a stable representation that can be converted to a bunch of encodings including "proper" utf-8, as long as all codepoints are representable in that encoding. This also allows you to work with strings that contain arbitrary data falling outside of the unicode spectrum.
mid-kid··on Phrack 72
I imagine they might be counting actual applications and not libraries/dependencies. Lots of things on the web are closed source.
← PreviousPage 4 of 18Next →