HNHacker News
TopNewBestAskShowJobs

mqus

1,317 karma · joined September 8, 2017

https://github.com/mqus
submissionscomments
mqus··on Google details new 24-hour process to sideload unverified Android apps
Why can't stores take over the "verification" process (like they do already)? Why do app developers have to be verified themselves, why does the verification have to be done by google? There are so many options, why choose google of all companies? Just laziness?
mqus··on Google details new 24-hour process to sideload unverified Android apps
At what point will you draw the line between "the user wants to do this because of his/her free will" and "the user wants to do this because someone else told them to"? Where will you stop?

All of this is just a bandaid, so why not stop at the state we are at _right now_, without some kind of 24h-long process to enable sideloading and let people be people? Yes, people make mistakes. But that is not your responsibility, especially if it comes at the cost of freedom. The most secure android device would probably be a brick, but you won't sell these, right?

Please instead take these resources and invest them into the app verification process in the play store. Way too many scams are right under your nose, no need to search in places where people are happy with the status quo.

mqus··on Google ends its 30 percent app store fee and welcomes third-party app stores
I only trust this once they have finally detailed how they will allow "easy sideloading" (See one of the last fdroid news on this, currently google is on track to basically ban sideloading as it exists) and what exactly means "registered app store program".
mqus··on Amsterdam Compiler Kit
Re your last paragraphs: I think RMS really meant just the Linux kernel when he wrote that(the topic is drivers, after all), not GNU/Linux, the OS or GNU/Linux, "the system". So it can be argued that he isn't really contradicting himself
mqus··on The EU moves to kill infinite scrolling
Ok, then I don't pay you for advertising. On an entirely unrelated note, could I buy a spot on your website(e.g. at the top) to put a piece of my own website on it? You have a news website, right? And I also have some news to share.
mqus··on The EU moves to kill infinite scrolling
But what if I rent a space on your website that I can fill however I want? And then, coincidentally, I praise my products on that rented space. How is that different from... other hosting offers?
mqus··on End of an era for me: no more self-hosted git
In fact, I did not have any significant traffic coming from AWS, Azure, GCP, or any of the other big cloud providers. Its only the chinese ones.
mqus··on End of an era for me: no more self-hosted git
I "solved" this by adding a fail2ban rule for everyone accessing specific commits (no one does that 3 times in a row) and then blocking the following ASs completely (just too many IPs coming from those, feel free to look them up yourself): 136907 23724 9808 4808 37963 45102. And after that: sweet silence.

How to block ASs? Just write a small script that queries all of their subnets once (even if it changes, its not so much to have an impact) and add them to a nft set (nft will take care of aggregating these into continouus blocks). Then just make nft reject requests from this set.

mqus··on A shortage of tenors
As the article states, its usually 2:1 women to men so there is also a kind of shortage of basses, its just not as severe.
mqus··on Show HN: Artifact Keeper – Open-Source Artifactory/Nexus Alternative in Rust
I just counted the list of supported formats and landed at 35. This is still impressive, but if even this simple fact is wrong in the project description("40+ formats!!!"), I have no faith at all that any of this actually works.
mqus··on I dumped Windows 11 for Linux, and you should too
> using mostly unpaid volunteer developers.

I'm not even sure this is true. Isn't there some company (or more) like Collabora behind most of the dev work right now?

mqus··on A Year of Work on the Arch Linux Package Management (ALPM) Project
Its not "building a new package management system", "alpm" is literally the foundation of the pacman ecosystem. They are improving this so they _can_ catch up on packaging tasks.

I'm the same as the sibling commenter, I don't want to have another deb or rpm distro. The AUR wouldn't exist without pacman&makepkg.

mqus··on A Year of Work on the Arch Linux Package Management (ALPM) Project
But this _is_ improving the pacman ecosystem? Afaict its aiming to be a drop-in replacement of existing tools, but with proper libraries so systems like buildbtw can be built around it.
mqus··on Linux kernel security work
Integrity. TLS does prevent man-in-the-middle attacks. For a personal blog, that may not be important but you _do_ get a benefit, even if the encryption is not necessary.
mqus··on EU investigates Google over AI-generated summaries in search results
Yeah, everyone in the EU is just working on this one law case. The guy next to me just cooked the meals for the guy that made the paper the case was filed on and now has to take an extended break. /s

People can and will do many things at once, like actually pursuing monopoly issues AND trying to improve the situation for everyone else. Its almost like there is only limited amount of one thing: space on page 1 of media outlets.

mqus··on Bikeshedding, or why I want to build a laptop
Great, now I can compare it with other Zsomethings. But as the post shows, thats just one branch of many naming schemes HP employs. Also: This already is a workstation, how could it _not_ be "ultra"? Why the doubling? Or does "workstation" just mean "something I can work with", including office stuff? In that case, I am very interested what other letters they use and what they're for.
mqus··on Acme, a brief history of one of the protocols which has changed the Internet
TLS is not just for encryption, but also for integrity. The content you are seeing is exactly as intended by the owner of the domain or webservice (for whatever that is worth). No easy way to mitm or inject content on the way.
mqus··on Self-hosting a NAT Gateway
> which is done for IPv4-NAT, and for IPv6 firewalls

Are internet routers that do ipv4 NAT usually also doing an IPv6 firewall (meaning they only let incoming connections in if they are explicitly allowed by some configuration)? Maybe thats the point where the insecurity comes from. A Home NAT cannot work any other way(it fails "safely"), a firewall being absent usually means everything just gets through.

mqus··on UK's first small nuclear power station to be built in north Wales
Could you share your numbers as well? According to [1], the UK currently needs about 300TWh per year. Lets say we go entirely solar+wind+battery(whatever that means) and assume that battery has to bridge a gap of at most 7 days (meaning no wind and no solar at all during this time, which is at most a few days at a time). This adds up to 300/365*7= 5,8TWh of max capacity. Lets take it safe, round up and say we need 10TWh (which is already not "tens of TWH", but "ten"). [2] Says that grid-scale batteries come at around 350$ per kWh right now. kWh -> TWh is factor 1 billion (10^9), meaning if we want to build 10TWh of storage, it will cost 3,5 Trillion Dollars. Impressive number indeed. But there are multiple asterisks here.

1. This calculation takes into account that there is no exchange with mainland europe and no gas power plants or other sources of power (e.g. hydro or hydro storage). This sharply reduces the need for batteries. 2. Battery costs will fall in the next decades, compared to nuclear, which will take a long time (if ever) until costs will fall.

[1] https://www.statista.com/statistics/322874/electricity-consu... [2] https://docs.nrel.gov/docs/fy25osti/93281.pdf

mqus··on ChatControl update: blocking minority held but Denmark is moving forward anyway
This just does not work and it has been tested in practice. I can't link studies right now, but as a simple example: How many of these horrible things were said by publicly known people (e.g. politicians, celebrities,...) and there were little to no actual consequences?
mqus··on EU court rules nuclear energy is clean energy
> For more comparison, France produces about 2kg of radioactive waste per year,

... per capita. Sure, all other waste is bigger than that, but it is still a whole lot and still, usually, power companies do not have to pay for it, the country does. I wonder why.

mqus··on Why language models hallucinate
I think one of the main problems is the dataset it is trained on, which is written text. How much answers with statements are in a given text, compared to a "I don't know"? I think the "I don't know"s are much less represented. Now go anywhere on the internet where someone asks a question (the typical kind of content LLMs are trained on) and the problem is even bigger. You either get no textual answer or someone that gives some answer (that might even be false). You never get an answer like "I don't know", especially for questions that are shouted into the void (compared to asking a certain person). And it makes sense. I wouldn't start to answer every stackoverflow question with "I don't know" tomorrow, it would just be spam.

For me, as a layman (with no experience at all about how this actually works), this seems to be the cause. Can we work around this? Maybe.

mqus··on Why language models hallucinate
Well, no. The article pretty much says that any arbitrary statement can be mapped to {true, false, I don't know}. This is still not 100% accurate, but at least something that seems reachable. The model should just be able to tell unknowns, not be able to verify every single fact.
mqus··on GMP damaging Zen 5 CPUs?
Aren't they at least useful for ruling out any anomalies there? Like the die temp being 110°C constantly? Imho the die temperature is very important here, even if not interesting.
mqus··on Java is still worth learning
Yeah, they are "jakarta EE" now. Or what do you mean?
mqus··on Matrix v1.15
> synapse — ...and discover that it's a resource hog.

I thought that, too, but at the very least it probably grows with usage. On my single-user-server, synapse currently needs ~100MB of RAM and does not consume CPU at all. It's not "slim" but I wouldn't call it a resource hog either.

mqus··on Matrix v1.15
I don't see this, since the complaint is about things that used to work and not things that are still missing.
mqus··on The German automotive industry wants to develop open-source software together
> If the car sells

But it doesn't[1]. And people agree, the main reason is: the cars (esp. the lower price ranges) are too expensive.

[1] https://www.politico.eu/article/brutal-financial-results-vol...

mqus··on The German automotive industry wants to develop open-source software together
Volkswagen _is_ there as well, just not a quote from them. Source: the MoU PDF
mqus··on KiCad and Wayland Support
I counter with Pipewire. Supports all of the previous linux audio systems out of the box, and almost right from the start (and is drop-in replacable), has less bugs, less problems than their previous options. Runs stable as hell.

Sometimes I wonder how this even happened, like, it seems impossible.

← PreviousPage 2 of 14Next →