HNHacker News
TopNewBestAskShowJobs

mqus

1,317 karma · joined September 8, 2017

https://github.com/mqus
submissionscomments
mqus··on Nothing left to solve
How does Arc handle the line of death[1]?

[1] https://textslashplain.com/2017/01/14/the-line-of-death/ (Though I realise after reading this that this concept isn't really all that relevant anymore)

mqus··on Rider is now free for non-commercial use
Not entirely. E.g. IntelliJ has a "project environment" modal (not sure about the exact name rn), in pycharm its part of the settings and a bit different. There are a few more things like this between the IDEs.
mqus··on Cloudflare's new marketplace lets websites charge AI bots for scraping
As soon as I notice that I got this slow-fade-captcha, I will intentionally click all the wrong fields until I get a reasonable captcha. Not sure this makes a difference but it kinda works
mqus··on Large-Scale Generation of Transit Maps from OpenStreetMap Data
I was kinda expecting a reference to https://blog.transitapp.com/how-we-built-the-worlds-pretties... but I didn't find any while skimming it, even though the content seems to be very similar
mqus··on OpenBSD 7.5 via QEMU on Hetzner physical machine (no phys. access / KVM console)
There is also Hedgedoc, which seems to be another fork of the original hackmd (https://hedgedoc.org/history/)
mqus··on AMD's Strix Point: Zen 5 Hits Mobile
> add support for a "max fan speed" slider somewhere prominent in the Windows UI.

Isn't that what the "power settings" do? It's a slider at the bottom right, hidden in a tray icon. Sure, it only has three positions and also influences battery consumption but it pretty much does what you want. (Not sure if windows 11 kept this though)

mqus··on Crooks Bypassed Google's Email Verification to Create Workspace Accounts, Acces
But but but... Google is so secure! We can trust them to safekeep the data they collect about us! Pinky swear!
mqus··on 77% of employees report AI has increased workloads and hampered productivity
So the AI-generated Recruiter Spam I have to deal with comes because "I" pressed a button?

I'm not that surprised by the findings. Someone has to deal with the generated crap people produce, and usually they don't get to decide.

mqus··on Commission opens additional DMA investigation against Apple
If you get big enough to be an "infrastructure" then yes, you did it (congrats!), but you are so important that your company should have some democratic controls on it. Take it as a badge of honor!
mqus··on Roman Roads (2017)
I know of https://blog.transitapp.com/how-we-built-the-worlds-pretties... because it was on hn
mqus··on Things the guys who stole my phone have texted me to try to get me to unlock it
just noticed: re-pair-ability is basically all we want (pun intended)
mqus··on Things the guys who stole my phone have texted me to try to get me to unlock it
fine, pair the parts, but also: let the owners unpair them, same as you can lock/unlock your phone. Voila! both repairability and anti-theft gained!

Pairing is just anti-repair atm.

if you want to know how: put the part ids (which are used for pairing) into the apple id account and verify them when switching on the phone.

mqus··on Nintendo blitzes GitHub with over 8k emulator-related DMCA takedowns
Of course the goal for the lawyers then is different, it's just extracting money instead of preventing distribution
mqus··on Nintendo blitzes GitHub with over 8k emulator-related DMCA takedowns
Isn't radicle then the easy way to argue that participants actually distribute the program themselves, including an easily trackable IP, so lawyers can just add a client themselves and then sue all IPs that transfer a byte of the (illegal) program?

The same happens to media sharing via bittorrent in germany right now. Having some site which gets closed instead seems to be preferable to me.

Of course copyright infringement is different from whatever emulators are doing but I imagine the effect might be the same

mqus··on Apple announces ability to download apps directly from websites in EU
I mean, "unlocked" iPhones can be worth more money than regular ones, at least in theory. In practice, Apple can probably raise prices by 50% even if they would release the same phone just with an incremented number and people will still buy their stuff.
mqus··on Go run
I don't think it's simple. Just `go run` would be far more simple. Right now I first have to figure out if its `go run .` or `go run cmd/main.go` or some other thing.
mqus··on AMD funded a drop-in CUDA implementation built on ROCm: It's now open-source
If their primary objective is to sell cards, then they should make it as easy as possible to switch cards.

If their primary objective is to break the CUDA monopoly, they should up their game in software, which means going as far as implementing support for their hardware in the most popular user apps themselves, if necessary. But since they don't seem to want to do that, they should really go for option one, especially if a single engineer already got so far.

Let's say AMD sold a lot of cards with CUDA support. Now nvidia tries to cut them off. What will happen next? A lot of people will replace their cards with nvidia ones. But a lot of the rest will try to make their expensive AMD cards work regardless. And if AMD provides a platform for that, they will get that work for free.

mqus··on Critical Gitlab vulnerability exposes 2FA-less users to account takeovers
And a captcha... stops this? Even if it did, how about adding a captcha on the second try or just when entering the backup codes?
mqus··on Rabbit: LLM-First Mobile Phone
"operates apps so you don't have to" -> "to use, use a different PC, open the browser app and log into spotify"

so... you also still have to have another PC and operate apps on it.

mqus··on Go: What we got right, what we got wrong
no unsigned integers gave us signed bytes. Not sure if that made things simpler.
mqus··on EU Cyber Resilience Act: What does it mean for open source?
> 2. This won't change anything except forcing projects to waste money in legal BS, when the responsibility should be uniquely on the commercial entities USING and providing a service (and therefore making money) with the OSS software

First of all, most of the software companies do SaaS, meaning they also provide the service. And then, even if they don't, the users will just hand down the paperwork to the companies developing the software. Because those know what was put in, security and components, and want to have this in legal writing.

Secondly, imagine your average IoT seller. They should not be liable for their bad product because they don't run it themselves? "The user" is liable? In most cases the "user" can't even do anything about their insecure device.

I think developers are rightly responsible here. It's pretty comparable to other industries where the products have to be safe when getting sold, think pharma, food, toys, cars, etcpp.

> Will it actually improve security? I don't think so.

Think B2C. It will improve things there, and massively so. Software in B2B was already somewhat regulated via audits and certifications.

mqus··on VW is putting buttons back in cars
I think in VWs case there was the additional circumstance that their touch screen was just abysmal.
mqus··on The worst thing about Jenkins is that it works (2019)
> oh, we were resource constraint at that one second, retry and it'll probably work

Had the same issues with (self-managed) gitlab CI. This is not jenkins-specific and usually something you can fix much easier in jenkins (other than just retrying)

> oh, we can't replicate that error message from a tool that you have no visibility over, retry and it'll probably work

This could maybe be better in other, more declarative CIs but honestly, its pretty much the same. The only thing some of them have is a local runner.

> oh, we have no idea why something timed out, retry and it will probably work

Jenkins has this, yes. But use another CI with docker and you can get the same and much worse.

But in essence, yes, at our company too, jenkins is a pet. But this means that someone knows it from the inside and outside and knows which things to fix in your pipeline. Good luck with trying to extend gitlab CI (or others) to fix things you need and/or opening an issue with them.

Gitlab has quite some high-profile issues sitting around for years with customer requests piling up. In jenkins, you'll find an extension that will do exactly what you want, or you could roll your own.

mqus··on Advent of Code 2023 is nigh
Thanks! I thought I had the most straight-forward code there is and there were no edge cases that I hit. But I didn't use regex or something, just manual pattern matching like gp.

Imho regexes are overused for such stuff, precisely because they might do a lot of things you don't think about and are usually a lot slower than manually implementing what you want.

mqus··on HHKB Studio: The New Happy Hacking Keyboard with TrackPoint
Looked at the UHK Trackpoint module just now and I can't imagine buying this. It can't be used with index finger+thumb (without moving your hand) and does not have a third mouse button which is crucial for jumping between scrolling and moving the mouse.

They also can't easily fix the first issue, because they expect their modules to be attached at certain places and the trackpoint should be way up there.

Maybe I'm just prejudiced from my thinkpad keyboards. Haven't used an ergonomic or split keyboard yet, no clue if this would make a difference on how to use a trackpoint.

mqus··on Google sues two men who weaponized DMCA notices to crush competition
only in this case it mostly google which makes matters worse. They don't or badly check DMCA claims, don't monitor or publish the filers that are most frequently counterfiled against and to top it off: mostly use their own contentid system anyway which heavily favors ip holders.
mqus··on Linux and TPMs with systemd measured boot [video]
Do you have an example for stuff that the audience is expected to know? Or the other talks that do a better job? What kind of background do you have? Assuming an average full stack dev, of course he addresses a different audience, since this is a talk addressed to Linux OS developers at a conference with the description:

"All Systems Go! is a conference focused on foundational user-space Linux technologies. Its goal is to provide a gathering place for both contributors and users of projects that make up the foundation of modern Linux systems."

So, summing up: maybe you are not part of the target audience?

mqus··on Joint statement of scientists and NGOs on the EU’s proposed eIDAS reform
Well, for now most people do trust the states and don't know the implications of this. The EU could have just as well modified e-commerce and other pages before everything was encrypted.

I also don't know how certificate pinning is impacted by this (which would mean that simply creating another cert from a EU root cert would at the very least be noticable)

mqus··on Excel will allow certain auto data conversions to be turned off
thos os the excel version, displayed under file->account (i had the same issue)
mqus··on GnuCash Tutorial and Concepts Guide
Actually https://github.com/dpaetzel/buchhaltung could fit your needs. Just found it because I thought that someone must have built this already.
← PreviousPage 4 of 14Next →