HNHacker News
TopNewBestAskShowJobs

ndiddy

10,398 karma · joined April 1, 2019

submissionscomments
ndiddy··on Cisco is letting a 27-year-old rewrite 98% of its legacy code with AI: 'Go nuts'
https://archive.is/JrY5v
ndiddy··on After 28 years walking across the globe, he's almost home
I imagine the conversation went something like:

"Hey dad, what's this trip I hear you talking about?"

"Well son, even though you're 8 years old, I've decided to spend the next 28 years walking around the world."

"Gee dad, that sure seems like a long walk. Are you sure about this?"

"Well of course I'll be taking breaks rather than doing the whole thing at once."

"Great, so you'll be able to visit me, your 8 year old son, right?"

"Nope! I've decided to add my own self-imposed rule that I can't visit the UK until I've completed my walk. Instead, whenever I don't feel like walking, I'm going to fly to Mexico and hang out there. Then when I do feel like walking again, I'll fly back to where I was and resume my walk."

"So you're leaving me, your 8 year old son, to go on a 28 year long, non-contiguous walk around the world where you'll rarely see me? And by the time I grow up we'll barely know each other? And you'll end up missing the birth of your granddaughter?"

"That's right, son! I hope you're excited for the first of 4 times we'll see each other, 6 years from now! Aren't you proud of your dad for being such a great explorer?"

"..."

ndiddy··on MacBook Pro with PROLED XDR Display and Touch
Windows 10 reversed a lot of the controversial UI changes from Windows 8, but the mouse/keyboard UX was still largely a regression from Windows 7 due to the introduction of giant padding regions on any new/redesigned software so people could use their fingers. Maybe people haven't noticed this as much because the economics have worked out such that most software is now designed for web/mobile first, so having giant padding regions on desktop is more normal.

Macs had managed to avoid this degradation for a while because they didn't have touchscreens, but Apple put in the giant finger-friendly padding regions as part of the UI changes in Tahoe, which got a lot of negative feedback. Now that they're introducing touchscreen laptops, it's unlikely that they'll ever fully revert those changes since it will make the touch experience worse.

ndiddy··on MacBook Pro with PROLED XDR Display and Touch
It already has, see the massive increase in UI padding in Tahoe and later. Windows and GNOME both sacrificed their UX to support touchscreen laptops years ago, Apple was one of the holdouts before that point.
ndiddy··on MacBook Pro with PROLED XDR Display and Touch
The Macbook Pro with M5 Pro/Max came out in March, while the Macbook Pro with M6 came out yesterday.
ndiddy··on MacBook Pro with PROLED XDR Display and Touch
It's interesting that they've decided to release a new high-end model this year even though they aren't coming out with new high-end M6 chips. Apparently they have decided to not make Pro/Max versions of the M6 in favor of accelerating development of the M7 series, which will have improved support for on-device AI. https://www.macrumors.com/2026/06/25/2027-macs-m7-chips/
ndiddy··on Code-execution flaw in UEFI firmware threatens most servers on planet Earth
> Lenovo's business/prosumer line is one of the best in terms of firmware that I've seen so far

A few years ago Lenovo put out a buggy firmware update for the Thunderbolt controllers in a couple generations of Thinkpads (the list is here: https://pcsupport.lenovo.com/ca/en/solutions/ht508988 ) that caused excessive writes to the controller's EEPROM. This would eventually wear out the EEPROM, which would stop the controller from functioning. You would then have issues like USB-C devices not working, display over USB-C not working, and charging over USB-C not working. Lenovo released a firmware update to fix the issue, but everyone whose controller had already broken needed a motherboard replacement. If your device was out of warranty, Lenovo made you pay full price for the new motherboard even though it had broken because of their firmware update.

ndiddy··on Software may be getting worse, but it used to be horrible
They didn't start from "everything is in the Start menu" for no reason. The initial Windows 95 design had different buttons for different functionality. They ended up combining the buttons into a single "Start" button because during user testing, they saw that users found multiple buttons hard to use. They had to learn which button did what, and it was often confusing because sometimes the functionality overlapped between buttons. To find something in Help, do you click the "Find" button or the "Help" button?

Because of how much of a radical departure Windows 95 was from previous UI designs, and because of how driven the design was by user testing, there's a lot of information available going over why the design is the way it is. For example, there's an article going over the iterative design process here: https://socket3.wordpress.com/2018/02/03/designing-windows-9... and there's a detailed document explaining the UI for reviewers here: https://web.archive.org/web/20260209083725/https://tech-insi...

ndiddy··on New 14‑inch MacBook Pro with M6
I imagine that the UI changes since Sequoia regarding the giant buttons and whitespace are because Apple plans to release a touchscreen laptop (most rumors say it will be announced tomorrow) so they've decided to make the UI touch friendly at the expense of bloating the UI for everyone who doesn't have a touchscreen. Microsoft made this same decision with the Windows releases after 7.
ndiddy··on Software may be getting worse, but it used to be horrible
The turbo button came out of "turbo XT" PC clones, rather than being some sort of defined standard. Whether or not "turbo enabled" meant "runs at normal speed" or "runs at 4.77 mhz" was entirely dependent on how your case and motherboard happened to be wired, as there was no industry-wide standardization effort at that point. There's a great video on how PC clones evolved over time here if you're interested: https://www.youtube.com/watch?v=LGoM3Sqr2-w
ndiddy··on Software may be getting worse, but it used to be horrible
> Being gray and having small buttons doesn’t make it automatically more powerful or functional.

If you read through old HIGs, they generally have actual concrete reasoning behind the choices they made. They're pretty interesting to read because back then they did scientific user studies to try to make computers more usable.

For example, Microsoft didn't make the UI gray because of some aesthetic preference. They chose gray because black-on-gray text is easy to read, and because it makes it immediately obvious what's UI vs. what's content (vs. if they made the background white or something). They made all the buttons three-dimensional because it makes it immediately obvious that something is clickable. Getting rid of stuff like this makes the UI prettier, but it also gets rid of hints for how to use the software.

ndiddy··on Oldest GUI application that still runs on Windows 11
From the article, the time to beat is November 16, 1992. This might be possible on one of the BSDs, as FreeBSD and NetBSD both document support for running a.out executables with the 4.3BSD ABI. I guess it would depend on whether anyone had ported X11 to run on a BSD on i386 before then. Alternatively, maybe you'd be able to get something running on SCO OpenServer (if you count that as a current OS, it IS still getting security patches). It documents support for XENIX x.out binaries ( https://www.scosales.com/ta/kb/126704.html ) so you might be able to run software compiled in the late 1980s for XENIX/386.
ndiddy··on Microsoft offers mass buyouts for roughly a quarter of its workforce
Someone posted the terms on Reddit: https://www.reddit.com/r/microsoft/comments/1xg0c5o/microsof...

> 1–2 weeks’ pay per semester of tenure, based on level; six months of fully covered COBRA (remaining 12 months paid by you) and two vesting events in February and May.

> L65-L67 get 4w of pay per year of service, while L64 and below get 2w per year. I’ve been with MS for 10 years, so I qualify for the max payout of 39w.

> Eligibility this time is up to L70, not sure what the package is for L68-70.

ndiddy··on Microsoft offers mass buyouts for roughly a quarter of its workforce
Someone posted the terms on Reddit: https://www.reddit.com/r/microsoft/comments/1xg0c5o/microsof...

> 1–2 weeks’ pay per semester of tenure, based on level; six months of fully covered COBRA (remaining 12 months paid by you) and two vesting events in February and May.

> L65-L67 get 4w of pay per year of service, while L64 and below get 2w per year. I’ve been with MS for 10 years, so I qualify for the max payout of 39w.

> Eligibility this time is up to L70, not sure what the package is for L68-70.

ndiddy··on Reverse engineer of PC-98 Touhou games retires
Due to how Touhou is liberally licensed, there absolutely are people who are fans of the characters/story/music/fangames but have never played any of the actual shoot-em-up games. Within the community they're referred to as "secondary fans" since they only engage with the franchise through derivative works. I haven't heard of people who are hostile to the idea that Touhou is a shoot-em-up franchise though.
ndiddy··on Reverse engineer of PC-98 Touhou games retires
To add some further context, all the Touhou games have been playable by Westerners for years due to fan translation patches. Even for the PC-98 games, the community has made preconfigured emulators packaged with all the games pre-patched to English so it's easy to play them without any technical knowledge. The reverse engineering project is orthogonal to this and is mainly intended to document the games' behavior as well as make them easier to mod. Having the source code available would make it possible to port the games to modern platforms, but they are pixel art 2D shooters so from a gameplay perspective there's not much of a benefit over playing them in an emulator.
ndiddy··on Reverse engineer of PC-98 Touhou games retires
I've been following this project off and on for a while, frankly this post is bizarre. It seems like he'd been burning out for a long time and AI was the last straw. He goes over how he doesn't like the Touhou games, he doesn't like the Touhou characters, and he doesn't like the Touhou community. His motivation for working on the project seems to some combination of be wanting to seen as a pillar of the community (which he has no respect for), and the financial incentive because his decompilation work is funded by donors who choose what he works on.

There's one part where he goes over how he felt scorned because a remake of a different Touhou game that he wasn't decompiling came out, and people in the Western Touhou community worked on it, but nobody told him about it prior to its public announcement. There's a different part where he's complaining about how some FreeBSD user submitted a PR to fix his Seihou port to build on FreeBSD since the niche build system he uses doesn't have good support for *BSD. He spends a paragraph ranting about how he would never support FreeBSD, then the next paragraph is about how he would have loved to get it working on FreeBSD if the person went about asking for the feature the "correct way", then he says he'd rather quit programming entirely than support FreeBSD on desktop.

I think he saw the project as an obligation that he couldn't get rid of rather than something he did out of passion. There's a section at the end where he goes over how his life will improve now that he doesn't have to work on the project. Notably, throughout the post he calls out by name various people in the Touhou community that he doesn't like, but he never calls out any of the vibecoders. I hope that he can now spend his time doing something that he actually enjoys.

ndiddy··on Sony Retires Its Last 4K Blu-ray Player in Japan, PS5 Is All That's Left
> The end of Sony standalone players (in Japan) isn't necessarily the end of the bluray format. There are other manufacturers.

I think it's just Panasonic at this point?

It's strange that Sony are retiring their current player so soon after they introduced it. As the article mentions, that model was introduced last year. It's the exact same as Sony's previous model from 8 years ago except they took out the streaming functionality and raised the price. It's the sort of thing you'd expect them to do if they were going to keep the product on the market for a long time, since they wouldn't have to invest in firmware development to keep the streaming functionality working.

ndiddy··on Sony Retires Its Last 4K Blu-ray Player in Japan, PS5 Is All That's Left
It won't play 4K blu-rays, only the PS5 will.
ndiddy··on Jailbreaking the Switch 2
Emulation was getting to be a pretty big problem by the end of the Switch's life. People would get a hold of a game, dump it, and get it running in emulators prior to the game's release date. IIRC Super Mario Bros Wonder leaked around a week early, and Zelda Tears of the Kingdom leaked around two weeks early. Obviously you can't quantify how much of an impact this had on game sales because time travel doesn't exist, but I imagine that there's some impact on sales when a highly anticipated game is playable for free prior to its launch date.

Besides the issue of games leaking early, piracy groups would also use Switch emulation as a workaround for the PC version of a multiplatform game having Denuvo DRM. They would make an installer that bundled the Switch version of a game with a preconfigured emulator, so people could run the game by double-clicking an icon without having any knowledge of how to set up a Switch emulator. This isn't really relevant anymore because of hypervisor cracks making it far easier to bypass Denuvo, but I think it demonstrates how widespread Switch piracy was.

I agree that this won't have any sort of major impact on Nintendo's bottom line, but I imagine it'll have some impact. I doubt this will lead Nintendo to change their exclusivity policies. They didn't change anything when the GBA was emulated during its commercial life, when DS piracy was rampant during its commercial life, when Wii piracy was rampant during its commercial life, when 3DS piracy was rampant during its commercial life, or when the Switch was emulated during its commercial life.

ndiddy··on Jailbreaking the Switch 2
It's currently still on the US and Japanese e-shops, so you can get it by making a new Nintendo account for either of those regions and buying it there. The Japanese region also has a free demo, although AFAIK it doesn't support saving so you'd have to type in the exploit code every time. https://www.nintendo.com/us/store/products/smilebasic-4-swit... https://store-jp.nintendo.com/item/software/D70010000010547
ndiddy··on PHP 8.2.35
After the HN post came up, one security firm included "session.upload_progress.enabled", "session.use_strict_mode", and "php-fpm" in the SEO tags for their initial disclosure that a vulnerability existed. I imagine this was a good hint. https://web.archive.org/web/20261021005246/https://sansec.io... https://x.com/its5q/status/2112700519261032497
ndiddy··on Security advisory: Critical remote code execution vulnerabilities, update now
Two bullet points down from where you’re quoting:

> Given the severity of these vulnerabilities, the PHP security team provided minimal source-backports for PHP 7.4, PHP 8.0, and PHP 8.1 to help people building from source or without access to an LTS vendor.

ndiddy··on Security advisory: Critical remote code execution vulnerabilities, update now
One security provider put "session.upload_progress.enabled, session.use_strict_mode" in the SEO keywords for their initial announcement, which was probably a good enough clue to feed to an LLM. https://web.archive.org/web/20261021005246/https://sansec.io... (go to page source, search for session.upload_progress). At least one person on Twitter saw this: https://x.com/its5q/status/2112700519261032497 Of course there's enough people who knew about this that the exploit vector may have leaked out to the general public through a different source as well.
ndiddy··on Security advisory: Critical remote code execution vulnerabilities, update now
The URL is to show the effects of the exploit. The person's running a python script that runs the exploit and then makes the PHP installation execute an arbitrary shell command. The proof of concept involves writing "pwned" to a publicly accessible location on the web server, then they refresh the browser pointing at the URL to show it's been written.
ndiddy··on My Friend Bob Cringely
I like the idea of slowly downloading content in the background over a dial-up connection, but using it to print out a full magazine seems kind of silly. You'd probably end up paying more for the digital copy plus ink than you would for a print subscription. I remember one of my old printers came with "apps" that would allow you to print out the top news stories from various wire services every day, meaning that the startup idea was similar to a feature cooked up by a printer company to try to get the user to buy more ink.

> I always thought he should start a Youtube channel interviewing Silicon Valley celebrities. I sent him a few emails along those lines, but Bob would mostly just ignore me. He was usually too excited about his new/current startup idea.

He did do a series of video interviews with tech people that got distributed online in the early 2000s. They're a good watch: https://archive.org/search?query=subject%3A%22nerdtv%22 . I agree that it's a shame that he didn't keep going with that idea during the rise of Youtube. He wrote a blog post where he basically says that the economics of Youtube didn't allow for the scale and spectacle of content he wanted to put out: https://www.cringely.com/2012/06/28/why-youtube-isnt-future-... . He did try to return to being a TV presenter by making a show about traveling around the US to interview various company founders, but for whatever reason PBS chose to pick up a similar show rather than his. The production company uploaded some clips from the project if anyone's interested: https://boondogglemedia.com/project/startup-america/

ndiddy··on Verisign .com Domain Name Registry Consumer Class Action
I'm curious how this will go in practice. Verisign's monopoly over the .com domain is granted by an agreement between Verisign and the US National Telecommunications and Information Administration (NTIA). The agreement regulates pricing of .com domains, but the price controls determine how quickly Verisign can raise its prices rather than requiring prices to reflect the actual cost of operating the domain registry. The wholesale .com price was frozen at $7.85 for years, but in 2018 the NTIA decided to let Verisign start raising the prices. When the agreement was signed, the NTIA released this statement https://www.ntia.gov/press-release/2018/ntia-statement-amend... :

> NTIA and Verisign have agreed to extend and modify the Cooperative Agreement. These modifications are in line with policy priorities of the Trump Administration. The changes create a new commitment to content neutrality in the Domain Name System (DNS), provide market-based pricing flexibility, and reduce the regulatory burden on Verisign.

> Amendment 35 confirms that Verisign will operate the .com registry in a content neutral manner with a commitment to participate in ICANN processes. To that end, NTIA looks forward to working with Verisign and other ICANN stakeholders in the coming year on trusted notifier programs to provide transparency and accountability in the .com top level domain.

> The amendment repeals Obama-era price controls and provides Verisign the pricing flexibility to change its .com Registry Agreement with ICANN to increase wholesale .com prices. Specifically, the flexibility permits Verisign to pursue with ICANN an up to 7 percent increase in the prices for .com domain names, in each of the last four years of the six-year term of the .com Registry Agreement. The changes also affirm that Verisign may not vertically integrate or operate as a registrar in the .com top level domain.

In 2024, the NTIA announced that it had renewed its agreement with Verisign. Their statement said that the NTIA believed that lower .com prices would be in the public interest, but were unable to reach an agreement with Verisign on pricing https://www.ntia.gov/blog/2024/com-cooperative-agreement-ens... .

The reason why the NTIA were no longer able to limit wholesale .com pricing was due to the 2018 amendment to the .com contract basically removing all negotiating leverage the NTIA had over Verisign. The amendment included provisions that made the agreement automatically renew every six years unless the NTIA gave timely notice of nonrenewal (so if the two sides couldn't reach an agreement it would continue in its current form), and allowing Verisign to continue operating the .com TLD even if the agreement was terminated.

The plaintiffs will have to prove that Verisign was acting unlawfully despite its prices being explicitly permitted by its arrangements with the US government. They'll also have to prove that they even have grounds to sue, when the Illinois Brick doctrine establishes that indirect purchasers of goods/services can't seek damages for antitrust violations. In this case, this means that the end domain purchasers may be unable to sue because they purchased their domains from registrars rather than directly from Verisign.

ndiddy··on Laptop Based on 6502 CPU
> This didn't happen for Pac-Man because Atari rushed it to release in too short a timeframe to implement that, and also the code wouldn't have fit into a standard 4k cartridge and would have needed more expensive hardware with bankswitching logic chips. 2600 Pac-Man's terribleness was a business decision, not a technical limitation.

There's a lot of myths around 2600 Pac-Man. The game was made in around 5 months, which was a normal amount of dev time for a 2600 game. The ghosts flickering was due to insufficient RAM, not insufficient ROM. Tod Frye, the game's programmer, had a kernel that would reposition the sprites as the screen drew, but it needed additional RAM. Frye really wanted Pac-Man to have a 2-player mode, as the arcade version did and he felt that having a 2-player mode gave the consumer more value. This meant that there wasn't enough RAM to get rid of the flicker, since the game had to keep track of the game state for each player. The 2600 version of Ms. Pac-Man was 1-player only, which is how they avoided the flickering.

ndiddy··on Claude reveals ECDSA curve origins
I recently read a good Voynich paper that makes me pretty sure that it was an ancient hoax. https://journals.openedition.org/digitalmedievalist/2331 The pages are more linguistically similar when read as flat sheets than when read as bound, and there's illustrations that stretch across the "gutter" between flat sheets that are cut off when looking at the bound manuscript. The manuscript was only bound once, in the fifteenth century (around when the pages have been carbon dated to). This means that whoever bound the manuscript was unable to "read" it, and the pages were likely written sheet by sheet before being bound in an arbitrary order.
ndiddy··on Desire to Move Permanently to U.S. at New Low
> Why do you think that doesn't apply to the situation he was in? He was suddenly arrested (detained anyway, so his freedom was taken from him) and he, as an activist, had contacts on his phone of other activists who would have been criminally charged, killed, or disappeared.

Because he knew in advance that he would be crossing the border. If your threat model includes ensuring that US border control does not view the contents of your phone, and you're returning to the US after an international flight, then you need to take appropriate precautions (i.e. wiping your phone beforehand rather than after they've taken it). It's not like the police suddenly raided his house in the middle of the night. Obviously I feel bad for the guy, but if he had acted differently he would not have been criminally charged.

← PreviousPage 2 of 34Next →