Hacker News Reader

ytchon Setting Up 1.1.1.1 for Families on a Pi-Hole

I'd like use self-hosted dnscrypt-proxy, point pi-hole's upstream to it.

Then dnscrypt-proxy will choose the servers that has lowest RTT and meet your requirement ( if DNSSEC, no log, family filter available) for you.

ytchon Ask HN: What does one look for in a laptop these days?

physical front camera cover

ytchon Old iPhones become faster if you change the region to France

Yes, the Chinese news says someone in Weibo posts about this, then the reporter tests:

1. at first the score is lower after switch region, they guess the reason is thermal throttling because they tested multiple times, after cooling down, the score is only improved a little.

2. they thought the battery capacity is 100%, so there is no throttling. Therefore doing the test on a 80% phone, but there is also no significant difference.

3. Finally they come out an assumption, iPhone will do a soft restart and kill a background process after changing region, so the performance is improved.

Therefore the title from gizchina is a little misleading.

ytchon Convert Apple NeuralHash model for CSAM Detection to ONNX

IIRC, Apple will only scans if iCloud photo is enabled:

https://www.apple.com/child-safety/pdf/Expanded_Protections_...

> This feature only impacts users who have chosen to use iCloud Photos to store their photos.

ytchon Convert Apple NeuralHash model for CSAM Detection to ONNX

Is this counts?

https://www.cbsnews.com/news/tip-from-google-leads-to-texas-...

ytchon Intel C/C++ compilers complete adoption of LLVM

Yeah, I guess LLVM is preferred mostly because license.

Companies can keep their optimizations in secrets. Just like why Playststion's OS is based on BSD.

ytchon Ask HN: What are you using to replace shared iCloud Photos albums?

Google photos scans and report to police for photos in CSAM too.

ytchon Please log in with router's password

Web server itself could be an attack vector too.

Although not specified to TP-Link, There are many exploits on other brands that can bypass the Authentication. For example this one:

https://medium.com/tenable-techblog/bypassing-authentication...

Even allowing access the web server from internet could be dangerous.

ytchon Why is Git so popular and frequently used?

Before Github, many OSS are hosted at Sourceforge. but IIRC, you need Sourceforge's approve to open a new project. Unlike Github, which you can open a public repository by yourself.

Then Ruby (and ruby gems?) is hosted at Github, as Ruby/RoR gets more attention, Github and Git become popular too.

ytchon Ask HN: At this point, are PUT and PATCH helpful?

My company uses a lot PHP, the problem that prevent me uploading file via PUT is PHP didn't parse `multipart` to `$_FILES` in PUT request:

https://bugs.php.net/bug.php?id=55815

ytchon You won’t live to see a 128bit CPU (2019)

Just like Bill Gates says "640K ought to be enough for anybody." in 1981.

ytchon Is Sony's 140MB MiniDisc Drive the Next Betamax? (1996)

I am doubt will blu-ray fall into the same problem.

Producers add a lot limits for copy-protect (HDCP and others on UHD-BD). But will the popularity/convenience of streaming repeat how USB stick/MP3 replace MiniDisc?

ytchon Did a weak WiFi password lead police to our door?

On the other hand, what if I setup a password-less Wifi without logging, encrypt all my devices, then do malicious with my home network.

Can I claim they cannot arrest me since everyone might use my Wifi?

ytchon How M1 Macs feel faster than Intel models: it’s about QoS

Maybe like the big.little cores of many ARM CPU in Android phone?

I'm not familiar with Android APP, maybe there are similar APIs in Android?

ytchon Benchmarking division and libdivide on Apple M1 and Intel AVX512

Maybe these:

https://gist.github.com/dougallj/7a75a3be1ec69ca550e7c36dc75...

https://medium.com/swlh/apples-m1-secret-coprocessor-6599492...

ytchon FBI subpoenaed Apple for data of Sci-Hub founder

That's why I decided dropping iCloud backup and enable locally iPhone encrypted backup.

ytchon Apple is removing Rosetta from Macs during updates in certain countries

IIRC, Sony has lawsuit after remove boot to Linux in PS3.

Is it possible to file a lawsuit against Apple if consumer buy a product for Rosetta, but it is removed?

ytchon Intel Fires Back at Apple's M1 Processors with Benchmarks

Maybe we can also compare Visual studio and Xcode on compiling XNU and mark VS as infinite time, since VS cannot compile XNU?

ytchon Tell HN: Dropbox now requires access to contacts for Google login

Facebook AD can target user by email /phone number:

https://www.facebook.com/business/help/170456843145568?id=24...

Container is not work in this case. But I use it too, it is useful on prevent me being tracked on random website.

ytchon Tell HN: Dropbox now requires access to contacts for Google login

Me too. I buy a domain and setup a forward-all email server.

For example, github@mydomain.dev for github. With a password manager, I won't confused at login.

And most importantly, use fb@mydomain.dev at Facebook since I will see AD on Facebook about what I just browsed on another shopping site with the same email account.

ytchon macOS Big Sur 11.2 beta 2 adds full custom kernel support

oops, thanks

ytchon macOS Big Sur 11.2 beta 2 adds full custom kernel support

Thanks for the command. I found this by searching " kmutil configure-boot":

https://twitter.com/never_released/status/133975317062974669...

the MBA of @marcan42 seems l̵i̵k̵e̵ ̵I̵n̵t̵e̵l̵ ̵b̵a̵s̵e̵d̵,̵ ̵i̵f̵ ̵M̵1̵ ̵i̵s̵ ̵a̵v̵a̵i̵l̵a̵b̵l̵e̵ ̵t̵o̵o̵ (it's M1 acturally) it means we can boot other OS on M1?

ytchon Telegram surpassed 500M active users. 25 mil new users in the last 3days

but full text search of Telegram is still buggy, especially on CJK character:

https://superuser.com/questions/1374761/telegram-message-sea...

https://github.com/telegramdesktop/tdesktop/issues/7096

https://github.com/telegramdesktop/tdesktop/issues/7022

ytchon Malware on My Android Phone

> How can one app alter the behavior of another?

In Defcon 2, author finds a log with intent:

{act=android.intent.action.VIEW

Android will handle The URI with default app. The malware sends HTTP url, so it will be opened by default browser.

ytchon Ask HN: Why aren't one-time sign in links more popular for authentication?

> Send an email to every customer (domain, so pick a single customer at every domain)

Greylist is allow/block based on sender IP, not receiving metadata, so I guess pre-send mail from the IP might help, but yes, other rules might slow down.

ytchon Bringing civic tech to Taiwan's coronavirus pandemic response [audio]

Yes, also many perl modules:

https://metacpan.org/author/AUDREYT

ytchon Ask HN: Why aren't one-time sign in links more popular for authentication?

How about scan QR code on login screen by authenticated APP on phone.

Many companies in China use this way. does there have any possible exploit/disadvantage of this method?

ytchon Ask HN: Why aren't one-time sign in links more popular for authentication?

Is it possible to solve by some kinds of warming up? AFAIK greylist is IP-based. We can send email at regular time so all the sender IP can keep in list.

But email does has many uncertainty like spam detection and others to slow the process after SMTP server receive it.

ytchon Undocumented arm64 ISA extension present on the Apple M1

Thanks for your explanation, I didn't take this into account

ytchon Undocumented arm64 ISA extension present on the Apple M1

Theoretically we can find out why M1 is fast by instructions. But there is no instruction manual, we can only reverse engineering it