HNHacker News
TopNewBestAskShowJobs

no_time

3,089 karma · joined May 7, 2021

Break up big tech
submissionscomments
no_time··on Around a dozen banking apps began specifically permitting GrapheneOS
I'm not logged in to any google account and get apps through aurora. I read somewhere that could be the reason.
no_time··on Around a dozen banking apps began specifically permitting GrapheneOS
Mine (KH bank) does perform a safetynet attestation that fails, as I don't even pass basicintegrity, then proceeds to completely ignore the result and still let me in on GOS.

I wonder if it's intentional.

no_time··on Eight Bits of Trust: eMudhra's CA keys cracked in milliseconds
>yandex-station-lite

At last, russians got better at installing wiretaps. Reminds me of the old joke that goes "How do you know there is a soviet made bug installed in your home?

There is an extra wardrobe."

no_time··on The game industry is broken – can we fix it?
>And they had to code on the VERY FIRST home computers and consoles, in assembly language, before many people could master that hardware and explain all its tricks in a consolidated knowledge base like we have on the internet now.

I find it unlikely that we will have another once-in-a-century opportunity to be there at the opening of a new frontier like the home computer boom was or the internet revolution that closely followed it.

Maybe it's my pessimism speaking, but the AI boom most definitely doesn't feel the same opportunity wise.

no_time··on Ask HN: My recent show HN post got flagged need guidance
It just looks like slop. Now, I wouldn't flag because of this, but someone else might.
no_time··on I added a non-wi-fi Mitsubishi AC to Home Assistant
>Mapping out your own PID correction algorithm

I want to do this but I'm worried about stressing the compressor with extra start/stop cycles would shorten its lifespan. Maybe they are programmed to overshoot/undershoot the set temp to prolong lifespan?

Disclaimer: I know next to nothing about how ACs work beyond the very basics.

no_time··on iPhone 18 Pro and iPhone 18 Pro Max
Feels like the only ones who'd benefit from this are AI companies that are afraid of tainting their post 2023 datasets with their own slop.

On the other hand if this becomes mandated by law I can see it become treacherous for endusers.

no_time··on I was on Ubuntu's first design team in 2009 London
>He hired real designers

This is indeed pretty obvious when you look at Unity era ubuntu screenshots. The typeface and text rendering is unmatched to this day. And to this day nobody pulled off purple-orange like they did.

But I always had the feeling that even at their peak, they were spread too thin to go through with their vision. The DE looks stunning but the rest of the system apps carry too much gnome-isms that would've gone through extra 1-2-3 design passes if they had the means.

Now I use KDE, it's extremely functional, and broadly looks like how I'd design a desktop. But when I select ubuntu as the typeface, a part of me longs for that purple-orange.

no_time··on Nostr is an inclusive communication commons
>full of male tech nerds with a STEM background and a taste in SciFi/Fantasy culture.

Anything like this in 2026?

no_time··on The lost joy of music piracy
Not doubting you but there are people with a quarter of a petabyte shared on slsk. I have a modest share of ~200GB, a good chunk of that from trigger happy record labels and never got banned. My client serves and average of 50-100 downloads a day no problem. So idk whats going wrong on your end.
no_time··on The largest available Minecraft world, totalling 15 TB
MS really hates minecraft's inherited self hosted server model. You can actually get a global ban for wrongthink commited on your own private server. (granted, someone needs to report you but still)

Also not really a censorship issue but I'm kinda bummed that the new version will default to having the server whitelist on. Going on an ip scanning site and joining random minecraft servers accindentally left on for years is an experience like no other. Some of the longer running ones are full of signs left by other explorers, or just griefed to shit. One of the few remaining wild wests on the internet.

no_time··on Nokia’s years of mobile-phone supremacy ended in an afternoon
>Nokia could have dominated and we wouldn't be stuck with mostly proprietary phones.

In an alternative timeline with Nokia winning, linux would still have GPLv2 which has no answer for proprietary drivers and tivoization. Also, the desire to dominate enduser devices by corporations/governments would still be there.

no_time··on GhostLock, a stack-UAF that has existed in all Linux distributions for 15 years
Severity score of 4.3 seems low considering the click2pwn in this thread. Though Firefox on Android is uniquely bad because of the lack of sandboxing.
no_time··on Hardware Attestation as Monopoly Enabler
>biometrics booths that generate private keys from normalized biometric inputs

Isn't this basically worldcoin? Aside from the fact that worldcoin is run by people I wouldn't trust to watch my cats for an afternoon, the core principle with well thought out ZK crypto could work well.

no_time··on Man finds $1M worth of Yu-Gi-Oh cards in a dumpster
Oh yes, massively so. In the last few years we got quite a few cards/archetypes that can do so called "turn 0 plays", meaning you can perform a lot of actions even on your opponent's first turn.

This adds even more complexity with the upside of preventing players from playing solitaire on their own for 10 minutes before passing an unwinnable boardstate to you.

Also most floodgates that grind the game to a halt (Gozen,Vanity's emptyness etc) are either banned or limited.

I'd say the game overall is very fun nowadays, but the original "design space" is starting to hit a ceiling with absolutely bonkers effects being printed that literally cannot be one-upped with the current rules. Read the text of Forbidden Crown to get what I mean.

no_time··on Tell HN: Archive.is has enabled QR code Google Captchas
Do you have the eye/headphone icon in the popup or is the QR verification the only option?
no_time··on Man finds $1M worth of Yu-Gi-Oh cards in a dumpster
>Yu-Gi-Oh cards are still a thing?

Yes, culturally not as relevant but gameplay wise it is very fun. The current structure decks on offer are great if you have a shop nearby or a friend to play with. Though depending on where you quit, you'd have to get used to a vastly different speed and complexity of gameplay.

no_time··on Denuvo has been cracked in all single-player games it previously protected
well, right now Denuvo "remote attests" in a Play Integrity "MEETS_BASIC_INTEGRITY" sense that it has no hardware backing and relies on checking your runtime enviroment for signs of tampering manually and obfuscating said checks.

The endgame is certainly flexing the machinery that is being built up over the last 20 years and spawning a SEV-SNP container on your machine that cannot be debugged, inspected and modified in any way. I don't think this is possible as of writing though.

no_time··on Veracrypt project update
GP refers to the practice of getting kernel level code execution using other, old vulnerable drivers and using it to run the VC driver.
no_time··on Veracrypt project update
I would also like to know why is it excluded from Archive.org

https://web.archive.org/web/20260000000000*/https://www.true...

no_time··on Microsoft terminated the account VeraCrypt used to sign Windows drivers
prediction: they are testing the waters. If there is enough outcry they will go "oopsie whoopsie, hehe :3 your account is restored".

If there isn't enough outcry they will go forward and disable more signing keys related to things like torrent clients, VPN software, eject UBO from the edge store etc etc.

Atleast now I'm a bit more certain that VC is indeed safe.

no_time··on German implementation of eIDAS will require an Apple/Google account to function
This is the original sin of modern computing. Almost all anti user features are only made possible because we didn't pass laws against "secure elements" that serve the maker and not the owner when NGSCB got announced.
no_time··on Sylve – Proxmox Alternative by FreeBSD
Well said, you get what I'm looking for. This might be the reason for me to give freebsd a go. Though my current hardware probably wouldn't play nice with it.
no_time··on Sylve – Proxmox Alternative by FreeBSD
Kind of envious of this as a Debian user.

I know we have cockpit but it never really clicked for me. Functionality wise too crashy and not so nicely intergrated, design wise it has the information density of a grandparent brick phone.

no_time··on Firefox Now Has Free VPN
I wonder how do they track usage without login credentials. Can I just make a new FF profile and get another 50GB?
no_time··on Yoghurt delivery women combatting loneliness in Japan
How neat. I'd buy some Actimel too if a sharply dressed lady would show up at my door instead of a suicidal looking grocery delivery guy who carves the local word for "tip" in the elevator every time he doesn't get any.
no_time··on Netbird – Open Source Zero Trust Networking
F-droid inclusion seems to be stalled https://gitlab.com/fdroid/rfp/-/issues/2688

Having it in F-droid, vetted by their policies is kind of my benchmark for "software that is guaranteed to be not crapware."

That being said I'm rooting for the devs, having an alternative for tailscale+headscale would be nice, because as it stands it's kind of dependant on the goodwill of a for profit company (finite).

no_time··on Lennart Poettering, Christian Brauner founded a new company
Terrible idea, I hope go bankrupt.

I can see like a 100 ways this can make computing worse for 99% people and like 1-2 scenarios where it might actually be useful.

Like if the politicians pushing for chat control/on device scanning of data come knocking again and actually go through (they can try infinitely) tech like this will really be "useful". Oops your device cannot produce a valid attestation, no internet for you.

no_time··on Ask HN: How locked down are your work machines?
My current employer (regional O&G multi) loads all laptops with the most horrid mix of itsec garbage known to man. We have both the compliance module of AnyConnect (without using the VPN part) AND Zscaler for VPN.

Upon boot this has a 50/50 chance of triggering a chicken and egg problem where AnyConnect wants to connect to the complience server but can't because of Zscaler is not yet authenticated through PingID, but PingID cannot be reached because of the aforementioned complience check not succeeding. Or atleast that is my theory. Toggling the network adapter in the Windows control panel 1-2-3 times tends to solve it. Not 100% sure about my theory of what's going on, but my tickets about this are getting ignored so theorising is the best I can do. Atleast we as IT staff get local admin, so It's not all bad.

At my previous workplace (mid size SSC) the work machines themselves were less bloated and could do anything other than change UEFI settings, but certain servers we were assigned to maintain were monitored down to the keystroke level. The itsec shift gave me a call at around 3am to chat about my choice for script filenames (suckmydick.PS1) like 30 seconds after I created it.

no_time··on SCiZE's Classic Warez Collection
I hope one day someone will make a movie about the warez scene. The only piece of media we have as far as I'm aware is The Scene (2004–2006) which I wholeheartedly recommend to anyone with a love for moving bytes around illegally.
Page 1 of 29Next →