HNHacker News
TopNewBestAskShowJobs

ntauthority

558 karma · joined May 2, 2016

arbitrary development tooling.

[ my public key: https://keybase.io/ntauthority; my proof: https://keybase.io/ntauthority/sigs/J1VOtaJVZiUyjmMGs2cTOF-IpmfF3962jsZtHVtk874 ]

yep.

submissionscomments
ntauthority··on Show HN: PS2 games statically recompiled to WebAssembly
https://www.lenovo.com/us/en/p/handheld/legion-go-s/83n6000g...

there's an actual sku of one lenovo handheld that officially runs SteamOS, i assume that's what GP is referring to

ntauthority··on I paid people to try and follow my README
The 'fake error messages to thwart crackers' thing is pretty relatable - I think back in my day I went with 'early-exit trap (#23)' or the likes for this type of error condition. It does help that we didn't have any phone support - numbers would potentially be painful that way! Another common one I see is dictionary words though even something neutral like 'anteater' or 'weasel' or 'high-jig-south' can both be frustrating to see as a user as well as when trying to deal with support for the inevitable case an integrity check fails on real systems...
ntauthority··on Forgejo <=16.0.3 Critical RCE
i like how this is a side effect of a bunch of assorted changes in a commit and PR solely described as "Fix path resolving" making it hard for anyone running Gitea to even know this is a security fix
ntauthority··on Mechanical Turk shutting down September 30
warioware shows it can be fun though but i'd indeed not like to see that applied to safety-critical tasks
ntauthority··on WinPE as a stateless harness for Windows driver testing and fuzzing
for newer Windows versions, Microsoft also offers a PE-like customizable image for validation purposes explicitly: https://learn.microsoft.com/en-us/windows-hardware/manufactu...
ntauthority··on The Windows 10 emoji picker has been broken for a month
> because this policy only applies for non-security bugfixes, and almost all patches these days claim to just be security fixes, including the one which introduced this bug

There's numerous feature flags that seem to just be 'MSRC_[id]' (for the Microsoft Security Response Center), and anecdotally looking through Windows 11 a lot of actual bugfixes (various ReFS driver crashes, for example, have feature flag checks around their fixes) are feature-flagged as per usual with both global (for the whole batch of fixes) and per-feature flags, so this is a bit of an incorrect assumption.

Things breaking downlevel is pretty common anyway, and the emoji picker has been in a pretty bad state since the original picker IME (introduced I believe in RS3, ~2017) was replaced with 'Expressive Input' which also allowed adding GIFs and a few other things but relied on a new UI framework that I suspect was tied to an unrelated internal effort culminating in the '10X' product which only got canceled.. right before Windows 11 development started, and therefore pretty much bitrotted.

Windows 10 was left on a fairly 'bad' release, the 'Iron' semester which was used as a baseline for Server 2022 was still like 10 from a UX perspective (10X was only canceled between that and 'Cobalt', where the Sun Valley work which led to the Windows 11 product happened) but had a fair few bugfixes that didn't get backported to 10 'version 2004' ('Vibranium', I believe, as otherwise the codename would've been 'Chromium' which is bad).

ntauthority··on AMD Ryzen 5 8500G: A surprisingly fascinating sub-$200 CPU
The reserved memory would show up as 'dedicated' memory. Shared is just the amount of host memory that can be assigned to graphics resources, which usually equals the system memory or some amount derived from it.

If the full amount of system memory isn't showing on Windows that's likely an unrelated issue you're experiencing (for example with UEFI/BIOS memory mapping mismatching whatever else) and it working on Linux implies that either Linux gets fed different memory layouts or it parses this broken case fine unlike Windows.

If applications aren't using all the memory, and it's also not showing up as cached, that's odd as Windows usually tends to target around 80% of physical memory usage (unless you're really not using that many apps or there's another driver issue going on). Different OSes account for memory usage differently, and there's rarely one single 'memory used' indicator in modern operating systems.

ntauthority··on Beeper vs. Apple battle intensifies: Lawmakers demand DOJ investigation
Notably so, I believe Trillian was a paid product and Meebo was actually treated like a real tech startup. Interesting, indeed, how much the sentiment has shifted over the course of 10-15 years...
ntauthority··on Ask HN: Stock Android phone free of bloatware?
Qualcomm actually started offering LTS (long-term support) BSP (board support packages) to device manufacturers for a fee. This is why some vendors like Samsung and Microsoft started providing updates for phones with older SoCs for longer than usual: they're paying the additional per-product license fee for being allowed to ship updated firmware.
ntauthority··on What happened with ASUS routers this morning?
Many fiber ISPs here in Europe seem to share the backend infrastructure between DSL and FTTH subscribers and that sadly also involves PPPoE encapsulation.
ntauthority··on What happened with ASUS routers this morning?
I actually switched away from a UDM after finding out that I could only hit 500 Mbit/s uplink (out of ~930) due to a PPPoE performance bug as there's no hardware offloading and the old Cortex-A57 cores (in a SoC from a vendor now owned by Amazon, so extremely end-of-life) just couldn't handle that.

Now I'm running a Turris Omnia with the bundled OpenWRT fork for router tasks and that seems to work fine.

ntauthority··on What happened with ASUS routers this morning?
FYI: OpenWRT is just Linux and will run fine on x86 hardware as well.
ntauthority··on iOS 17 app sideloading might only be available in Europe
> I don't have much choice - it's not like there would be five competing apps serving the same purpose (connecting to the people and communities on Facebook).

The same legislation that is requiring Apple to allow sideloading also requires other large players (like Meta) to open their communication platforms up to other service or application developers.

In this hypothetical case, there actually would be five competing apps, some even still distributed on the App Store.

ntauthority··on Windows on Btrfs
It was introduced in Vista, deprecated for external use a bit later but the servicing system is still a heavy user of it.
ntauthority··on Faster LZ is not the answer to 150-250 GB video game downloads
Titanfall did work this way on the EA launcher. There was a tool that it'd run on first launch to decompress the compressed audio files.
ntauthority··on Windows on Btrfs
Unless it supports the transactional filesystem API, Windows Update won't even work in the first place. ReFS boot in fact is affected by the same issue at this time.
ntauthority··on Windows on Btrfs
On Windows, I can enumerate a directory that accidentally got millions of files perfectly fine without the system itself breaking and with results being returned incrementally.

On Linux/ext4, it takes an eternity for an enumeration to even start returning results and the entire OS gets stuck on IO while doing so.

ntauthority··on Hell Never Ends on x86: The Hyperspace Story, Continued, Sort Of
Fun thing is that laptop OEMs exposing useful 'value-added functionality' (like custom fan control) via pre-defined WMI ACPI callouts is actually the sensible choice to make.

I've seen laptop OEMs that rely on a custom kernel driver for this, and then if you want to reimplement their pile of 'overly modular everything control suite' you're stuck loading a generic read/write-memory driver which is blocklisted by every antimalware and anticheat solution in existence.

(In addition, it seems some WMI/CIM/MOF ACPI stuff is supported on Linux fine, too, as long as OEMs try to stick to standard DMTF-spec stuff I guess... so one can also just do 'generic' user-space stuff there if lucky)

ntauthority··on Hell Never Ends on x86: The Hyperspace Story, Continued, Sort Of
I was personally somewhat hoping the boot-time portion in this article somehow hijacked a UEFI runtime services[1] function called by the OS to draw to the frame buffer set up by the firmware, since this has some provisions for the OS being in charge of the MMU:

> An OS may choose to execute in a virtual addressing mode and, as a result, may prefer to call firmware services provided by UEFI Runtime Drivers in a virtual addressing mode. A UEFI Runtime Driver must not make any assumptions about the type of operating system to be booted, so the driver must always be able to switch from using physical addresses to using virtual addresses if the operating system calls SetVirtualAddressMap().

Disappointingly, it's just a 'plain' case of SMM (which is also, funnily, the main target for ACPI callouts to more 'complex' methods, and on ARM has the very fun equivalent called 'SMC/HVC callouts to EL3/EL2 firmware' although that's supposedly a bit better-defined than Intel SMM) and nothing too clever either - an ACPI method hijacking something to then write to the framebuffer?

Other than that, the writing style here feels almost.. presumptuous and might've been written for the original audience on the site it's posted on, for example I was left wondering things like 'if the author or their friends have access to a machine with this software on it, why don't they dump the firmware flash storage and decompile the actual images, wherever they might be', though it may be they indeed didn't have access to any such hardware or firmware downloads and are just piecing random puzzle parts together, and the post eventually devolved into a general rant against OEM cleverness that I somewhat skipped.

(I'm also mildly torn between 'wow, clever hack' and 'oh lord this would be terrible to diagnose OS boot issues on as you really can't trust OEMs with side effects or long-term maintenance' in this regard)

[1]: https://edk2-docs.gitbook.io/edk-ii-uefi-driver-writer-s-gui...

ntauthority··on Windows needs to stop showing tabloid news
Quite a lot of recent console FPS games just let you plug in a USB mouse/keyboard and you get matched with PC players (or other console users who use the same input method) instead.

CoD has supported this since their 2019 release, for example.

ntauthority··on Deutschlandticket for regional bus and rail services to be offered for €49/month
> talk to a driver (who usually acts annoyed on behalf of the whole bus that you are holding up)

It is still an interesting cultural observation that here in NL, even people who manually buy a ticket at the driver while struggling using the card terminal do not seem to get an annoyed response inherently even on a half-filled bus, whereas in Germany it seemed almost expected to get chewed out for not having exact change or taking more than 10 seconds to gather a pile of coins - in the pre-app era, of course.

ntauthority··on Hobby Club’s Missing Balloon Feared Shot Down by USAF
Germany solved that issue by making owning any device capable of receiving internet broadcasts part of the eligibility criteria. By that point they could just as well make it part of general tax budgets...
ntauthority··on Web Push for Web Apps on iOS and iPadOS
> But they'll have no control over what notifications from web pages you've put on your home screen show.

They own the browser. They can theoretically maintain a list of bad origins just as much as they can block an app from the App Store.

ntauthority··on Attacker with access to XML config can trigger keepass.exe to obtain passwords
There's a lot of CVE submissions lately that seem badly sourced and derived from 'disagreements' at best.

Another recent example is https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2405... which is for a purely theoretical exploit - not even a PoC - with the only 'sources' being Reddit/Twitter scaremongering, and 'support forum posts' that quote these exact same Twitter threads.

ntauthority··on Devirtualizing nike.com's bot protection
For me, running the iOS 16.3 developer beta seems to have been what made my iPhone 'unique' among the ones tested on that site.
ntauthority··on Automatic1111's GitHub account suspended for "ToS violations" [restored]
Adding my own n=1 anecdote here - a member contributing to an open source project I'm involved in, who had a few repositories on GH with extensions to that project but no other notable 'negative' activity, had gotten a permanent suspension from GitHub a few years ago for responding to a mildly abusive issue report on the main project with the well-known 'Navy SEALs copypasta'... the abuser then reported them and their account - including their helpful and invaluable extension repositories - was nuked, while the abuser then could continue to abuse under both the original account and various other aliases.

They left the community shortly after, likely in part fueled by the way an abuser got their GitHub account destroyed while the abuser pretty much remained unscathed.

ntauthority··on How Asus and a Microsoft Bug Almost Broke Remote Work
This mentality is a common one I see when people comment on Windows: people setting an override that isn't actually the intended override to 'fix' an issue without root cause analysis by disabling a component, then complaining about the 'intended override' getting reverted with a system upgrade.

(and 'impossible using normal GUI/CLI tooling' seems unlikely, for one as regedit is still 'normal tooling' as well, and secondly because I've yet to come across a service that can't be disabled with the 'sc' command line utility, discounting Windows Defender though that is rather a special case due to the chance of malware itself disabling it, so it has a very specific series of steps to first disable the tamper protection in a trusted way and only then disable the service)

In this case it seems like an environment-specific issue, as if everyone would have this specific thing be broken, it'd probably long be noticed and fixed. In fact, one could probably easily find out what is wrong using a profiling session with WPR/WPA as the main symptom here is 'uses 100% of a CPU core', a methodology recently most famously spread by Google's Bruce Dawson.

(similarly, I wonder if these same people would 'complain' a Linux distro upgrade would affect their edits to /lib/systemd/system/*.service files - I would somewhat presume that to not be the case, in fact)

ntauthority··on How Asus and a Microsoft Bug Almost Broke Remote Work
Using an issue reported (in a Linux compatibility layer, even!) with few to little root cause analysis as evidence a 'networking stack is bonkers' is a bit exaggerated - IPv6 in itself is also a bit wacky, and I've had similar issues exist in a variety of environments.

As an opposite example, here's a Wine bug report of a Windows application failing to work in some network environments, but only if it in any way touches the Linux networking stack (such as using VirtualBox's soft NAT, or if running under Wine): https://bugs.winehq.org/show_bug.cgi?id=53346

I guess, in general, software (and networking) is 'bonkers'.

ntauthority··on Twitter to employees: all office buildings closed, badge access suspended
Ah, the Winamp approach to versioning.
ntauthority··on Testing Microsoft's Windows Dev Kit 2023
> but from what I read the ACPI tables are in bad shape/incomplete. "Good enough for Windows, ship it.".

It is a bit more nuanced than this. Qualcomm ships a giant custom (mandatory, most the platform will not even work without it!) driver stack on Windows and uses ACPI definitions more than most x86 platform vendors, to the extent that it even exposed a bug in the Windows ACPI implementation when an ACPI method return buffer would exceed 64 kB so since this generation of SoC a lot of the Windows drivers instead bundle their own 'subset' of certain ACPI buffers and the main DSDT is empty as a result.

Linux on ARM still doesn't really use ACPI except where forces more influential than Qualcomm managed (e.g. SBSA?) so even downstream Linux kernels for Qualcomm still use DT.

Page 1 of 6Next →