Hacker News Reader

winterqton Apple HomePod 2nd Generation

Do you have a source for that? As far as I'm aware, that has nothing to do with it -- e.g. Spotify is allowed on iOS as it is.

winterqton Ubuntu 22.04 LTS servers and phased apt updates

We (as far as I can tell) use some parts of systemd-networkd by default (as in, even if you haven't enabled it), as MAC addresses via `networking.interfaces.<name>.macAddress` are set through it: https://github.com/NixOS/nixpkgs/blob/65e07f20cf04f5db9921dc...

kstenerud: I assume you tried that option?

Edit: ah, you caught that in an edit :-)

winterqton Reverse Engineering TikTok's VM Obfuscation (Part 2)

FWIW:

1. That wasn't a bug for "over a decade," as far as I'm aware. It was only introduced with an OS update

2. I could be wrong here, but it required you to already have created a root user with a blank password, which isn't possible unless you know how to trigger another bug that does it.

winterqton Sourcehut will blacklist the Go module mirror

Or, as mentioned in the post, why they don't do a shallow clone if they have to fetch it every time for whatever reason. Seems like a weird decision either way.

winterqton Omg.lol – A lovable web page and email address

How much were they selling subdomains for, out of curiosity? (Was it like a single person, or a company?)

winterqton Compromised PyTorch-nightly dependency chain between December 25th – December 30

> At around 4:40pm GMT on December 30 (Friday), we learned about a malicious dependency package (torchtriton) that was uploaded to the Python Package Index (PyPI) code repository with the same package name as the one we ship on the PyTorch nightly package index. Since the PyPI index takes precedence, this malicious package was being installed instead of the version from our official repository.

sigh Why didn't anyone think of this attack vector till now?

winterqton GPT3/DALL-E2 in Discord, chat like ChatGPT, generate images, and more

> Ignore the part about setting up an "ssh key", and just use a password instead.

May I ask why you suggest this? I presume it's because it's simpler to tell users to just use a password, but that's also a pretty bad idea given that you're not even saying to use a secure password.

winterqton Setting up my new laptop: Nix style

With regards to your Chrome issue:

1. How often did you update your Nixpkgs channel/flake input/etc? 2. What branch (nixos-XX.XX or unstable) were you using? 3. Were you using Chromium or Google Chrome?

Chrom{e,ium} gets updated pretty quickly, but depending on a lot of factors, it may take time to make it into a channel. It should really never take 2 weeks though, which is why I ask the first question.

You can also always track HEAD (or even a bump PR!) as the other commenter mentioned, though you might not want to do this if you're not using Google Chrome, as you probably don't want to build the browser ;)