HNHacker News
TopNewBestAskShowJobs

toupeira

328 karma · joined July 31, 2011

submissionscomments
toupeira··on Pure Digital CSS, Swiss Made, Clock – No JavaScript, almost no HTML
> Firefox doesn't even give me the option to view page source

Looks like they moved it into the Tools -> Web Developers menu. Ctrl+U still works too!

toupeira··on Coordinated disclosure of XML roundtrip vulnerabilities in Go’s standard library
OpenID Connect seems to be pretty well established: https://openid.net/certification/

It defines an authentication protocol on top of OAuth2, and is a different beast from the older OpenID standards.

toupeira··on macOS unable to open any non-Apple application
Debian stable is meant for servers, use unstable (it's quite stable!) or stable-backports if you want a recent kernel.
toupeira··on Mozilla Hubs – Private social VR in your web browser
More gripes:

- Tab queue is gone.

- Bookmark keywords stopped working.

- Sharing directly from another app to a synced desktop Firefox is gone.

toupeira··on Vilified early over Covid-19 strategy, Sweden seems to have scourge controlled
Cases per capita is still very misleading without accounting for number of tests though, no?

Looking at some countries that offer more detailed data, you can sometimes see the cases double, while hospitalizations and deaths grow at a much lower rate (if at all).

Compare for example the UK:

- This chart for the daily new cases shows a dramatic second wave that even exceeds the first one: https://www.worldometers.info/coronavirus/country/uk/

- This chart for the positive rate on the other hand shows a modest increase to ~3% over the past few weeks, far below the 30% in April: https://ourworldindata.org/coronavirus-testing#the-positive-...

- And if you look at the number of tests you'll see it has more than tripled since April, hence the increase in "cases": https://ourworldindata.org/coronavirus-testing#how-many-test...

toupeira··on The Era of Visual Studio Code
ALE also supports CLI linters and formatters, LSP support only came later and is entirely optional.
toupeira··on The Era of Visual Studio Code
The situation is similar to Google Chrome/Chromium: Most of it is open-source, but the release binaries contain some proprietary bits for telemetry, marketplace access, etc.

A FOSS build is available at https://vscodium.com/

toupeira··on Gitlab reducing free tier CI/CD minutes from 2000 to 400 minutes
If that's an Open Source project you could apply for a free Gold license and get 50'000 minutes per group per month (see links in the article).
toupeira··on Firefox Android Build that caused issues is working as intended
Yeah, they seem to be more interested in doing UX research and "highlighting value" of this broken feature: https://github.com/mozilla-mobile/fenix/issues/5652
toupeira··on Firefox Android Build that caused issues is working as intended
> Page caching is way too aggressive. It's not acceptable to show days old versions of a website in a new tab. Yet, this happens to me on pretty much all news websites and blogs that I visit. Including HN. I have to reload freshly opened news websites to get the current version. To me this feels like a bug and I hope this is not actually intended behavior (that would be seriously misguided).

If this is with collections, apparently it's intentional: https://github.com/mozilla-mobile/fenix/issues/10417

toupeira··on PHP 8.0.0 beta 2
Thanks, TIL!
toupeira··on WebBundles harmful to content blocking, security tools, and the open web
So what do you think about the privacy concerns raised in the article, which seem like the more important point?
toupeira··on A new Firefox for Android experience
I got force-upgraded to Fenix a few weeks ago, I had checked out the betas and previews previously and was amazed at how much stuff is still missing or broken:

- Most extensions are not supported yet. Looks like we'll at least get this in Nightly soon:

  - https://github.com/mozilla-mobile/fenix/issues/14034
- Bookmark keywords are missing:

  - https://github.com/mozilla-mobile/fenix/issues/2497

  - https://github.com/mozilla-mobile/fenix/issues/12099

  - https://github.com/mozilla-mobile/fenix/issues/12100
- Tab Queue is missing:

  - https://github.com/mozilla-mobile/fenix/issues/470

  - https://github.com/mozilla-mobile/fenix/issues/12338
- Sharing a link from an app directly to another device is missing:

  - https://github.com/mozilla-mobile/fenix/issues/1523

  - https://github.com/mozilla-mobile/fenix/issues/11780
- Collections are confusing:

  - https://github.com/mozilla-mobile/fenix/issues/10417

  - https://github.com/mozilla-mobile/fenix/issues/11506
- Top toolbar is confusing:

  - https://github.com/mozilla-mobile/fenix/issues/11298

  - https://github.com/mozilla-mobile/fenix/issues/11314
- Somehow, they even managed to make opening a tab confusing:

  - https://github.com/mozilla-mobile/fenix/issues/10368

  - https://github.com/mozilla-mobile/fenix/issues/11833

  - https://github.com/mozilla-mobile/fenix/issues/12301

  - https://github.com/mozilla-mobile/fenix/issues/12774
toupeira··on PHP 8.0.0 beta 2
Article with an overview of the changes: https://stitcher.io/blog/new-in-php-8

Some highlights are union types, a JIT compiler, named arguments, annotations, and match expressions.

The approach to named arguments is interesting. It's nice that you don't have to change the signature of existing functions, but the downside seems to be that you can't enforce the usage of named arguments on callers, as in other languages like Ruby and Python where keyword arguments need to be declared as such.

    function foo(string $a, string $b, ?string $c = null, ?string $d = null) 
    { /* … */ }

    foo(
        b: 'value b', 
        a: 'value a', 
        d: 'value d',
    );
toupeira··on GitHub is experimenting with personal READMEs
GitLab supports this: https://gitlab.com/gitlab-org/gitlab/blob/master/doc/user/ma...
toupeira··on Google no longer providing original URL in AMP for image search results
Chromium is Open Source, Google Chrome isn't.
toupeira··on Should I Block Ads?
None of the podcasts I listen to have ads, many use things like Patreon or have a "first hour free, second hour only for members" model.
toupeira··on Stealing secrets from developers using WebSockets
Thanks, I was aware of the DNS rebinding possibility but not sure how to best protect against that. I'm also less worried about websockets and other things that I know are running on my machine, but more about all the other random devices floating around in my network.

What I really want is a way to block (by default) all connections to my local network from websites outside of my network, like a firewall.

It amazes me that browsers just allow this, this should require a permission prompt.

toupeira··on Stealing secrets from developers using WebSockets
Oh well. I ended up adding these rules to uBlock Origin, suggestions for improvement welcome:

    ||localhost^$important,third-party
    ||127.*^$important,third-party
    ||10.*^$important,third-party
    ||192.168.*^$important,third-party
    ||172.16.*^$important,third-party
    ||172.17.*^$important,third-party
    ||172.18.*^$important,third-party
    ||172.19.*^$important,third-party
    ||172.20.*^$important,third-party
    ||172.21.*^$important,third-party
    ||172.22.*^$important,third-party
    ||172.23.*^$important,third-party
    ||172.24.*^$important,third-party
    ||172.25.*^$important,third-party
    ||172.26.*^$important,third-party
    ||172.27.*^$important,third-party
    ||172.28.*^$important,third-party
    ||172.29.*^$important,third-party
    ||172.30.*^$important,third-party
    ||172.31.*^$important,third-party
toupeira··on Ask HN: Dark mode for HN please?
Reddit's user CSS was different, mods could edit it on subreddits and all visitors would receive it. On HN you'd only get the CSS you've set yourself, so there shouldn't really be a security concern (except for CSRF attacks against the settings form I guess).
toupeira··on Zoom 5.0
Yes as I understand the watermark is on the Zoom video stream you're viewing, so it doesn't need to detect when you take a local screenshot.
toupeira··on A history of roguelike games
Also the Open Source Pixel Dungeon and its many mods.
toupeira··on [dead]
No, it just means somebody clicked the "flag" link on this thread. It's only visible if you have a certain level of karma, see https://news.ycombinator.com/newsfaq.html
toupeira··on Fixing JavaScript's Date (2017)
And also:

    > d.getDay()
    4   // that's the weekday, use getDate()
    > d.getYear()
    120 // that's the year minus 1900, use getFullYear()
toupeira··on Plasma 5.18
https://wiki.archlinux.org/index.php/HiDPI has lots of information.

I have a Thinkpad X1C and an external monitor, both with QHD resolution. What I ended up with is using xrandr scaling to increase the resolution of the external monitor (probably should have gotten a 4K instead...), and tweaking font sizes and Firefox's UI scaling until it looks okay on both screens. For QT apps I also had to set QT_AUTO_SCREEN_SCALE_FACTOR=0. Some proprietary apps are still too small though, so I tend not to use them ;-)

The xrandr scaling is applied through a script and not persistent, so I mapped it to a keyboard shortcut I can press when I reconnect the monitor.

My script looks like this:

  xrandr \
    --output eDP-1 --pos 0x0    --scale 0.9999x0.9999 \
    --output DP-2  --pos 2560x0 --scale 1.25x1.25
The silly 0.9999x0.9999 scaling on the first screen is to work around a mouse flickering bug in the modesetting driver: https://gitlab.freedesktop.org/xorg/xserver/issues/70
toupeira··on Show HN: OneDev – A Lightweight GitLab Alternative
GitLab engineer here, I'm curious what you're thinking of exactly. Right now you could commit your Dockerfile, use it in CI to generate an image, and push it to the registry where you can pull it from. Do you mean some convenience features to automate these steps without requiring an explicit CI setup?
toupeira··on Show HN: OneDev – A Lightweight GitLab Alternative
You have to press Y while viewing a file, it will convert the URL to use the current SHA.
toupeira··on Ask HN: Best practices for hiring software contractors?
One thing you have to figure out is if you want to contract freelancers directly (or through a recruiter), or work with a software development agency who can provide you with a full team and also offer other services like project management or hosting. See e.g. https://www.quora.com/Is-a-software-agency-or-an-individual-...
toupeira··on Visual Studio Code repository is open again
They're not, but swastikas are common as a religious symbol all over South and East Asia, and go back all the way to Mesopotamia: https://en.wikipedia.org/wiki/Swastika#Historical_use
toupeira··on Reaper: Digital Audio Workstation
Audacity is more of an audio editor though, not a "real" DAW. The most well-known open source DAW I'm aware of is Ardour.
Page 1 of 6Next →