Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
deng
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
22 ms
·
331.
▲
by
deng
3y ago
> Why don't we trust the machines? Is it because they have bugs and are sometimes actually wrong? Or because we trust our feelings more? I can't recommend enough to read the book "Command and Control: Nuclear Weapons, the
332.
▲
by
deng
3y ago
I've bought a dictionary from Pons when that was still available many years ago, I dimly remember there was a script to convert it to StarDict. Nowadays it's a bit difficult because everything has moved to online services, you oft
333.
▲
by
deng
3y ago
I will never buy an eReader without support for koreader. It's absolutely essential to me, most importantly: * Lots of quick fixes for poorly chosen CSS properties (called "style tweaks" in koreader), just apply them on-the-f
334.
▲
by
deng
3y ago
Sorry this happened to you. It is indeed correct that the Asahi installer does not support encryption, see https://github.com/AsahiLinux/asahi-installer/issues/137 It can be done, but it's not straightfo
335.
▲
by
deng
3y ago
Yes, it was. And by that, for instance also all docker images that derive from debian:testing, which is not that uncommon.
336.
▲
by
deng
3y ago
Yes, the binary "test files" were checked in. But the code that actually decompresses and executes the shell code in that file is in this m4 script, which only exists in the tar archive: https://salsa.debian.org/de
337.
▲
by
deng
3y ago
Yes, using a niche system is a good way to not getting hacked, but then, why would you use Linux at all? Looks like you'd be happier with OpenBSD, or maybe Plan9?
338.
▲
by
deng
3y ago
Note the malicious m4 build scripts were not checked into git, but only put in the released tar balls. You can see the original content here: https://salsa.debian.org/debian/xz-utils/-/tree/debian/5.
339.
▲
by
deng
3y ago
> IIRC only the "binary" files where added secretly, right? But the build script was there for people to inspect? Yes, but it is important to note that these malicious m4 scripts were only present in the tar file. They were n
340.
▲
by
deng
3y ago
The macro defined in build_to_host.m4 is probably called on the tests subdirectory, so it gets these files as a parameter. EDIT: It is called here and will do the extraction of the backdoor when run in the 'tests' subdirectory: h
341.
▲
by
deng
3y ago
Just to be clear (and this is also said in the video): the Mac classic could of course be equipped with 4M RAM through an expansion card. What was done here though is a direct replacement of the soldered-on RAM chips on the board itself wit
342.
▲
by
deng
3y ago
Maybe. It's open to interpretation, which is the problem. If the author of Atuin maybe sees this: While this not (yet?) a commercial project, it is highly problematic to advertise your product like this. You cannot just put the logos o
343.
▲
by
deng
3y ago
I can only repeat myself: the syncing is advertised as the main feature, it's the USP. There are plenty of other tools that improve ctrl+r.
344.
▲
by
deng
3y ago
In "What you get with Atuin" the first(!) point is "Sync your shell history to all of your machines, wherever they are". That obviously cannot work with a local SQLite. Without syncing, this is a better ctrl+r, which I w
345.
▲
by
deng
3y ago
The page claims this is "trusted by engineers" at Google, MS, Apple, Amazon, you name it. Could maybe some engineer at these companies enlighten me how you could convince your security team that it is fine that all your shell comm
346.
▲
by
deng
3y ago
It's weird I have to say this, but from what I wrote it of course does NOT follow that ANYTHING that makes economic sense for a company cannot be discriminatory. That would be a dystopian rule straight out of an Ayn Rand novel.
347.
▲
by
deng
3y ago
That's actually a point worth discussing. Because here's one thing that should be obvious, but apparently many people are unaware of: if you work for a large, multi-national company, you are almost certainly affected by location-b
348.
▲
by
deng
3y ago
> Think about it: if a company pays a person less because of the color of their skin or their gender, the company would be in big trouble. But somehow it's OK to pay a person less based on their location? I'd suggest the author
349.
▲
by
deng
3y ago
I also believe it's intentional, and it fits very well with the dystopian marketing towards young singles and divorced dads. However, this alone would be a showstopper for me. The idea to buy a 3.5k$ device, which is ideal for watching
350.
▲
by
deng
3y ago
Finally, a review that talks about that it is basically impossible to share this 3499$ device with others. This is such a glaring miss on Apple's part, I can't believe all the other reviewers simply ignored this fact.
351.
▲
by
deng
3y ago
I can only say that I did it with two phones, and every time it was a hassle. On your phone, you need to login with this "Mi account" and grant pretty much every permission there is. Then you need a Windows PC and install a dubiou
352.
▲
by
deng
3y ago
True, but of course Magisk is not part of LineageOS and is yet another part of the system you need to take care of (for instance, you usually need to remember to uninstall/re-install it before/after every OTA update).
353.
▲
by
deng
3y ago
Note that this comparison is not entirely correct. For instance, LineageOS supports network-based location with UnifiedNlp. Android Auto works fine if you install GApps.
354.
▲
by
deng
3y ago
As already mentioned, OnePlus is the usual alternative. If you want it cheaper, I also have good experiences with Motorola phones. Unlocking requires you to register, but you can use a throwaway mail account and it has worked for me so far
355.
▲
by
deng
3y ago
He's not wrong, though. I've been an Emacs user for decades, I'm still using it and I don't regret the time I have invested in it. It motivated me to learn LISP and a ton of other stuff, I love orgmode, calc, Gnus, and I
356.
▲
by
deng
3y ago
You're right, I think it also can do this with directory components. I think if you'd type some like 'artic/emacs' it would actually work, but I cannot test at the moment. So no downvote from me.
357.
▲
by
deng
3y ago
I'm not downvoting you if you show me a modern IDE that out-of-the-box(!) can do filename completion in the way Martin describes ("type 'articles emacs' to get a list of any file paths that contain 'articles' a
358.
▲
by
deng
3y ago
As said, I'm fully in favor of timers for pressure cooking. I love my InstantPot. It solves an actual problem. No more turned-to-sludge potatoes! And I think we can agree that if you don't want to watch the pot, having the timer s
359.
▲
by
deng
3y ago
I'm really struggling here: aside from baking and pressure cooking, why would you ever need a timer for cooking? Is that a cultural thing? Don't you guys see and taste when things are done? (And for pressure cooking, just get
360.
▲
by
deng
3y ago
> That is to say, imagine your terminal as a floating window, but you've also got other windows arranged around your home and office, not just clustered at a desk. Reminders floating near your fridge or break room, weather forecasts
More ›