HNHacker News
TopNewBestAskShowJobs

yakkityyak

217 karma · joined April 25, 2021

submissionscomments
yakkityyak··on What no one has seen before: gravitational waveforms from warp drive collapse
Now Star Wars makes sense, thanks!
yakkityyak··on Palmer Luckey is selling pixel-perfect ultrabright magnesium Game Boys for $199
Given openFPGA on the Analogue Pocket, if you can get one at msrp, the extra $20 makes that device seem like a way better value than this.
yakkityyak··on The rev.ng decompiler goes open source
I hope collaborative workflows get a lot of attention. I haven't used IDA teams or anything, but a reverse engineering experience that felt as frictionless as Google Docs would be amazing.
yakkityyak··on Two-Thirds of U.S. Adults Would Rather Wait to Watch Movies on Streaming
Yeah. I’ll only go to theaters for something imax worthy, which is pretty much only Dune part 2 for the year.
yakkityyak··on FCC Officially Raises Minimum Broadband Metric from 25Mbps to 100Mbps
Can’t forget low bit rate “4k” saves them tons of money on storage and bandwidth costs as well.
yakkityyak··on Apple terminates Epic Games developer account, calling it a 'threat' to iOS
I don’t quite understand why they happily subscribe to this model with Xbox PlayStation and Nintendo, but are adamant about getting their way with Google and Apple.
yakkityyak··on Juno – A YouTube Client for Vision Pro
1.78 trillion dollar company could have made app, or even better, not disable the iPad version in contempt.
yakkityyak··on Navajo Nation request to delay private mission placing human remains on the moon
I wouldn’t go as far as saying it’s blackmail. They voiced their concerns peacefully, and requested a review. It will likely be ignored, as it deserves to be.
yakkityyak··on Unbricking my MacBook took an email to Tim Cook
What about a DFU restore?
yakkityyak··on Beeper Mini is back
Without Secure Enclave, remote parties (the servers) can't know where the key material came from. I'm assuming because old devices pre-SEP have to be supported, Beeper is exploiting this since there's no required residency or provenance attestation for the keys.
yakkityyak··on Uber Joins the S&P 500
I'm also not convinced uber eats will ever make money.
yakkityyak··on D.C.'s ban on cashless businesses takes effect
Everywhere should accept cash, and every place should also (try) to support tap to pay.

I’ll gladly pay an extra 5% for a donut if it means I don’t have go to an ATM, withdraw the minimum, and forget the change in my car anyway.

yakkityyak··on The Gap in the Armor of Baldur’s Gate and 5e
The problem with armor class is that it sort of blends in two concepts of completely missing an attack, and the attack simply not doing any damage.

Generally I've had DM's that understand your characters AC: if you have high AC because you're quick and nimble, it would be some sort of dodge, but if you have high AC because you're huge and wear plate armor, the attack "miss" is treated as if an arrow simply bounced off your armor.

But yeah, the system is generally broken. That's sort of why the devs of Baldurs Gate 3 had to homebrew a lot of fixes, and in general just gave up on a lot of mechanics and can't really implement anything past level 12.

yakkityyak··on Reconstructing an invalid TPM event log
This is definitely one of the most frustrating aspects of working within the TPM ecosystem. Sure the spec is messy, and doing simple things can feel needlessly complicated, but when you run into some firmware bug, it's horrible to debug, and the best you can really do is file a ticket with Intel/AMI/whoever and pray for something to change.
yakkityyak··on TPM provides zero practical security
> TPMs will happily hand you the keys when you meet a certain condition. HSMs support key migration and provides a secure way to transfer keys from one HSM to another without leaving the trust boundary.

You can create non-exportable keys on TPM's, and there are mechanisms to securely transfer keys between devices.

Granted, doing so is kind of a mess, but nonetheless possible.

yakkityyak··on TPM provides zero practical security
Zero is a stretch. I think they have largely failed to serve their purpose in the consumer device realm, beyond decent integration with BitLocker.

Despite the shortcomings, I think they are very useful devices from the perspective of running data centers. I consider it useless against evil maid attacks though.

yakkityyak··on Downfall Attacks
Not again!
yakkityyak··on Nuked-MD-FPGA – Emulating Sega Mega Drive chipset using decapped chips photos
Very cool. I suppose this means someone could wire this to MiSTer or Analogue Pocket, or are they lacking the correct fpga requirements?
yakkityyak··on Thousands of subreddits pledge to go dark after the Reddit CEO’s recent remarks
You are right, and we know this factually from YouTube premium providing more revenue than free users. I, the end user of Reddit, should be able to pay for the api access directly to Reddit the company without having to impose risk on Apollo to front massive api bill. There’s no need to funnel anywhere since there’s no ads to be sold.

Am I missing something here? It seems like a blatantly obvious compromise.

yakkityyak··on Apollo will close down on June 30th
Ugh, this is the end of reddit for me.

I didn’t think I was able to quit social media addictions, but I’ve successfully ignored Twitter since Elon took over. I’m confident I can do the same with reddit, although it will be much harder.

I suppose all I really need is like some sort of curated RSS instead.

yakkityyak··on Reddit's Recently Announced API Changes, and the future of /r/blind
I’m not so sure. Non ad-clicking/viewing users still generate a lot of content.

Official apps always struggle to balance shoving ads in your face and being an actually nice to use app.

yakkityyak··on DNSSEC failures are how you get people to disable DNSSEC
The experience around just setting up DNSSEC when I tried it on Google domains was so incredibly frustrating due to the time delays and pain points surrounding correcting mistakes.

Don't know if it has gotten any better.

yakkityyak··on OpenAI has applied for “GPT” trademark with USPTO
Will always be GUID Partition Table to me.
yakkityyak··on Raising the bar for software security: GitHub 2FA begins March 13
I interpret it as: your account publishes code bits in any capacity, as opposed to a read-only account that only pulls and participates in social discussions.
yakkityyak··on Raising the bar for software security: GitHub 2FA begins March 13
It looks like it's for accounts that contribute code. Compromised accounts can sneak malicious stuff into dependencies.
yakkityyak··on Raising the bar for software security: GitHub 2FA begins March 13
GitHub is also one of the few big sites that support Passkeys for 2FA. You can use your Trusted Platform Module, Yubikey, or any Secure Enclave equipped Mac to 2FA.
yakkityyak··on TCG TPM2.0 implementations vulnerable to memory corruption
How many implementations out there are actual just copy paste of the reference c code?
yakkityyak··on Tweetbot. April 2011 – January 2023
Has any company tried revenue sharing with 3rd party clients?

Imagine a free tier of tweetbot got a slice of ads clicked in it. Premium ad free modes could be shared too.

yakkityyak··on Apple offers $970 in trade-in value for $52,199 Mac Pro
lol, no.
yakkityyak··on Ask HN: We found a cracked version of our software on the web, now what?
People who download pirated versions will just clickthrough the trust warnings that the .exe or whatever is not signed.
Page 1 of 3Next →