HNHacker News
TopNewBestAskShowJobs

smileybarry

1,831 karma · joined August 21, 2015

submissionscomments
smileybarry··on Dropbox Paper mobile App Discontinuation
Google Drive added delta sync this year, while OneDrive added it in 2020 apparently.

I also overstayed with Dropbox for that reason, and now I don't see a real reason for their higher $/GB. Though their client is more stable than Google Drive from my experience (which randomly stops working on Windows often enough), OneDrive has been rock solid for me on both Windows and macOS.

smileybarry··on Dropbox Paper mobile App Discontinuation
> Incredibly, Vault was discontinued by automatically turning PIN-protected folders into regular unprotected ones!

Oh that's great! I currently use OneDrive because of Personal Vault (and other smaller reasons), because no one else offered something like it. I didn't even know about Vault, but I guess that's for the better because I wouldn't want the folder holding my ID etc. becoming accessible to every single app connected to my Dropbox.

There had to have been a better way to discontinue it. Even making the folder require migration on next access would've been better than silently worsening it.

smileybarry··on Digg.com is back
That post is very outdated and was in the pre-alpha stage. At the time you paid (once) to join a sort of staging ground where they also discussed features with users, and asking what they'd prefer. And that buy-in pre-alpha period also ended when the alpha app launched.

They didn't really "sell usernames", unless you also call buying a paid app with social features "buying a username".

And as far as "Gems", looks like bragging rights. This is what clicking (?) currently says:

> Gems are earned by being amongst the very first to Digg a post that trends across the platform. The earlier you are to discovering and Digging the post, the more Gems you’ll earn.

smileybarry··on Digg.com is back
Gems is deceptively named but it's essentially just for posting interesting things that gets discussions or Diggs, or being early to post something. It has nothing to do with crypto etc.

Source: I've been using the app since the alpha started.

smileybarry··on Microsoft's latest Windows 11 24H2 update breaks SSDs/HDDs, may corrupt data
I can't find mentions of any enterprise SSDs in the linked Twitter thread, just consumer SSDs ranging from "budget" to "pro" from various brands. The Twitter author later did some basic testing on a list of SSDs and it looks like it's mostly to do with very budget QLC models: https://twitter.com/Necoru_cat/status/1956949132066898080

This feels like an extrapolation by the article author based on the fact Phison microcontrollers are also used in enterprise models.

smileybarry··on Sign in with Google in Chrome
The irony of getting that popup on Stack Overflow when I clicked that link
smileybarry··on Bypassing Google's big anti-adblock update
Microsoft supposedly aligned with deprecating MV2 back when Google announced it but they've indefinitely postponed it. The KB about it still says "TBD", and there's zero mention of it around the actual browser. IMO it's a good alternative, if you trust Microsoft (I do).
smileybarry··on Intel's Lion Cove P-Core and Gaming Workloads
It’s also a relatively “old” Call of Duty entry (2020-2021), in a series that famously ditched its older yearly entries quickly. The newer ones probably work fine with E-cores.
smileybarry··on I made my VM think it has a CPU fan
It's mentioned in some ASUS docs, but it's not available on their support anywhere. Probably reserved for big OEMs, yeah.
smileybarry··on I made my VM think it has a CPU fan
I would care if I could change it, but you need a proprietary tool that you can't obtain. (Every other way I found involved patching the UEFI and turning off Secure Boot)
smileybarry··on I made my VM think it has a CPU fan
I get that, but I'd expect it to be a setting I can change in BIOS, or at least default to the motherboard's model number. Instead, if I build my own, I just can't change it ever because ASUS refuse to release it publicly. Hell, even the shop I used for the previous PC didn't have such a tool. (And if you change it in Windows, it's rewritten from SMBIOS every boot)
smileybarry··on Abusing copyright strings to trick SW into thinking it's running competitor's PC
Betas at the time were physical and tightly controlled, not a download or a toggle. I wouldn’t really call it “shipped”.
smileybarry··on I made my VM think it has a CPU fan
I’m fairly sure my expensive ASUS ROG motherboard (ergo: not even their budget line) also had a “to be filled in by OEM” string that I couldn’t even override. (ASUS have a utility but it’s not publicly available, probably just for computer shops)
smileybarry··on Windows 11 Start Menu Revealed as Resource-Heavy React Native App
No, it's supposed to refute the title & assumption of the article linked here.
smileybarry··on Negotiating PoE+ Power in the Pre‑Boot Environment
They’re usually IoT editions of Windows 10, I.e. still the same kernel but with a lot less bundled apps etc. and a LTS support cycle.

I’m also not sure how much of modern Windows is that big of an attack surface, given that most things are just firewalled off automatically.

smileybarry··on Negotiating PoE+ Power in the Pre‑Boot Environment
Wait until you find out OEMs now make UEFI applications that NetBoot off the internet. Lenovo have a recovery app implemented this way
smileybarry··on Negotiating PoE+ Power in the Pre‑Boot Environment
I assume it’s probably because the baseboard management thing (iDRAC and the like) boot beforehand and can do various USB & ISO manipulation.
smileybarry··on Run a C# file directly using dotnet run app.cs
That’s probably just a non-Visual Studio version of what VS already does with reusing .NET-hosting processes when you run an app in debug mode.
smileybarry··on Windows 11 Start Menu Revealed as Resource-Heavy React Native App
This has been making the rounds on Twitter and the story never dies despite being essentially false. (Backed by “I hit Start and got a CPU spike”)

Just the “Recommended” section - the lower frame showing M365 files & frequent apps - is built with React Native[1]. And, AFAIK, it uses Microsoft’s React Native for Windows that renders real XAML components, so it’s not just a masquerading WebView or something.

The Start Menu itself is still C++ and XAML. (And I think WinUI 2, i.e. the system-included variation of WinUI) It’s not just all a web thing or a JS-backed React Native app.

1: https://youtu.be/kMJNEFHj8b8?t=4m47s

smileybarry··on By default, Signal doesn't recall
If Signal uses the Windows Data Protection API for saving/encrypting the key (and some data online suggests that it does), then it’s trivial to fetch it back with the same APIs if you’re running as the same user. (I use `keyring` on Windows to access the key(s) VMware Workstation uses to encrypt Windows 11 VM vTPMs)

It’s kept secure by a chain of keys that may be backed by the TPM, but the security boundary is the user, not the app identity. IIRC Store/UWP apps may get their own boundary for credentials (due to how .appx is implemented).

smileybarry··on Gemini figured out my nephew’s name
Zooming out to 50% on mobile Safari seems to fix this (probably because it loads the desktop/tablet view at that zoom level).
smileybarry··on Discord Unveiled: A Comprehensive Dataset of Public Communication (2015-2024)
IIRC data slurping (for exporting) is also not allowed bot usage.

> B. API Data Sharing & Retention

> You will not share API Data with any third party, except in the following circumstances, subject to compliance with the Terms and applicable laws and regulations: (i) with a Service Provider; (ii) to the extent required under applicable laws or regulations; and (iii) when a user of your Application expressly directs you to share their API Data with the third party (and you will provide us proof thereof upon request).

https://support-dev.discord.com/hc/en-us/articles/8562894815...

smileybarry··on Discord Unveiled: A Comprehensive Dataset of Public Communication (2015-2024)
But “publicly posted” discord invites can mean links in streamers profiles, project websites, etc. While anyone can type that website’s URL, it’s generally expected a group of the public would see & follow that invite, e.g. a streamer’s viewers. It’s not a public space like how a shop on the street is a public space.

Plus, even if the server is in Discovery (and thus really publicly advertised), they’re still mostly sorted into 10+ rooms. Just because a library is public, doesn’t mean I should expect Study Room B will be recorded by John Jameson and entered into a public dataset.

smileybarry··on Apple Blocks Fortnite's Return to iOS App Store, Epic Claims
I suspect they just put their eggs in one basket and used the same package identifier for the DMA version of Fortnite and the App Store version, and the app’s state in review limbo messed with the iOS notarization process (which is a minimal review and not an automated CLI like macOS).

That’s something they could’ve avoided by using different IDs for different stores, like everyone else does on e.g. Amazon AppStore. (Maybe even Samsung and Play Store use different IDs)

But that’s assuming they’re not just refusing to release anywhere until Apple relents in the US.

smileybarry··on I ruined my vacation by reverse engineering WSC
Which itself gets repaired by Windows Update Repair.
smileybarry··on I ruined my vacation by reverse engineering WSC
Maybe, but with good old Windows PKI you’re bound to still have a working chain of trust with Mozilla/Google.

…either that or the machine cheated and updated root CAs in the background (which isn’t Windows Update-controlled anymore).

smileybarry··on I ruined my vacation by reverse engineering WSC
…until Windows Update Repair or the like undo your changes.
smileybarry··on I ruined my vacation by reverse engineering WSC
I thought so too, but if you switch everything off (including Tamper Protection) in the UI, then turn it off via (local!) Group Policy, it sticks. I’ve set up a few Windows 10 22H2 & 11 24H2 test VMs this way and they still have Defender disabled.

(I think you need to disable Tamper Protection first, otherwise you later get a threat detected of “WinDefendDisable”, but if you allow/unquarantine it doesn’t auto-enable again)

smileybarry··on One-Click RCE in Asus's Preinstalled Driver Software
Can you still publicly apply for a “*.*.mydomain.com” certificate? IIRC a wildcard cert starting with “*.*.” allows you to chain 2+ names with that cert, I think? (E.g.: “*.*.example.com” cert would match “hello.world.and.hi.com.example.com”)
smileybarry··on One-Click RCE in Asus's Preinstalled Driver Software
I like ASUS products but I disable the UEFI-installed support app every single time. IIRC it used to be a full ROG Armory Crate installation, which is really annoying to uninstall.

When ASUS acquired the NUC business from Intel, they kept BIOS updates going but at some point a “MyASUS” setup app got added to the UEFI like with their other motherboards. Thankfully, it also had an option to disable and IIRC it defaults to disabled, at least if you updated the BIOS from an Intel NUC version.

← PreviousPage 4 of 30Next →