cmg

The closest stop to me is between a dog park and a school - scanning it would have been an awkward situation, to say the least. And as you said, for rewards that aren't worth it. I got used to having that "Scan" task just sitting at the top of my list, never to be touched. But I noticed earlier this week that it's gone - and scanning stops doesn't give a new scan task.

That’s very possible. I switch between Cursor and VS Code, don’t remember which it was that day.

A few days ago I saw I had an update to the Twig extension. The UI flagged it as having new executable code in the update bundle, so I didn't install the update, disabled the extension as I wasn't working on Drupal views that day, and went about my work. I didn't have time to investigate the new update's contents. When I went back to the extension page, it was taken down: https://open-vsx.org/extension/whatwedo/twig

I'm not saying it was whatwedo.twig, but I'm not saying it wasn't, either.

Edit: If anyone's got a good recommendation for a twig formatter for Cursor / VS Code, please let me know.

This is correct, and interestingly enough in one of the screenshots, the OpenFirmware prompt says "To continue booting the MacOS" too.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh...

My mind immediately went to chaining this with another recent vulnerability in the Ninja Forms - File Upload plugin [0]

This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

So, upload and execute a script that loads Copy Fail and even if you're only executing as www-data or another restricted user that "can't" sudo -- suddenly, uid=0!

To repeat the refrain... I'm so tired.

[0] https://www.wordfence.com/blog/2026/04/attackers-actively-ex...

The fact that in the miniplayer you can't display both the album art and the track information at the same time unless the cursor is hovering over the window absolutely boggles my mind. If I'm listening to a station, I want to glance over and see what I'm listening to. And I like the album art showing. This worked until Tahoe.

View menu > Hide Large Artwork will show the track info, but you of course lose the album art.

Of course it's not a major issue, it doesn't make the system unusable, but it was a nice little experience thing.

From the FAQ:

You can try to find Wally (Waldo), as in the well-known game Where's Wally. He is partially visible, but if you click on him, he will appear in full and wave at you.

I once bought one of those alarms that brighten along with the pattern of natural sunlight in the morning (and dim in the evening), as I don’t get much natural light in my bedroom. The time display on it was so unbelievably bright at its lowest setting that my sleep was worse until I piled stuff up in front of it. I don’t even bother with it anymore.

Of 60-something Linodes in Newark across a few accounts (we don't use LKE, Node Balancers, etc)

- Many came back up yesterday. Most of the rest came back up this morning.

- All but two are back online. One of those is "Powered off" but can't be turned on because "Linode busy". The other is online but unreachable, same behavior as most of them during the outage.

- Three required me to put them in Rescue Mode and run fsck.ext4 -F /dev/sda to get them back online.

I woke up to a few hundred messages from Icinga - thankfully my phone is on do-not-disturb overnight. Some of my servers in Newark are up and responding, some are not.

Happy Sunday! Cleaning up the automatically-created maintenance/alert tickets generated by this is going to be a fun time.

Archive link: https://archive.ph/ARnyu

This isn't obvious at all but you can click the star next to an item that's "Linked" on DF (where the title goes to another site) to get a permalink to the item on DF itself! https://daringfireball.net/linked/2025/02/18/hp-buys-humane

For anyone else trying this, the password is hackernews - without an exclamation point. Tripped me up.

Thanks for setting this up adenta!

From the article:

The new law doesn’t apply to classified code, national security systems or code that would post privacy risks if shared.

With Icinga, for webservers:

- apt status (for security/critical updates that haven't been run yet)

- reboot needed (presence of /var/run/reboot-required)

- fail2ban jail status (how many are in each of our defined jails)

- CPU usage

- MySQL active, long-running processes, number of queries

- iostat numbers

- disk space

- SSL cert expiration date

- domain expiration date

- reachability (ping, domain resolution, specific string in an HTTP request)

- Application-specific checks (WordPress, Drupal, CRM, etc)

- postfix queue size

The comment I’m replying to says they’re “the only impartial observers who were in Venezuela for the election,” so I think the point stands - given their funding and connection to the US government and international capital, they can’t be considered impartial in this situation.

[flagged]

Even in messenger-type apps there's a weird setup. With iMessage, if you're in a group chat with yourself and other people (B and C): if C sends a message and B reacts to it, you still get a message about B's reaction to C. Drives me crazy in certain group chats I'm in.

Signal, for some reason, notifies of reactions to your message on desktop but not on mobile (at least iOS).

HN hug of death? I sent an email to the address provided and over time, the page showed:

  Waiting for incoming email...  
  You don't have to write us an entire love letter :-). 
  Still waiting... 
  It's pretty quiet here... ¯\(°_o)/¯. 
  Waiting...  
  I'm giving up, reload the page to start over. (︶︹︶).

Texting also became expensive once the carriers figured out people wanted to use it. I remember being pissed off in the mid-2000s when I posted an item for sale on Craigslist and someone texted me about it instead of calling - that text probably cost me a quarter!

(Now, of course, I can't imagine calling a random person or putting my phone number on an item listing.)

My service came back around 1:30PM in Connecticut. Data and calls are working fine. I requested a 2FA code at 2:30 from a service that only offers SMS. An hour and a half later, I still haven't gotten it.

And somehow I still get regular “H0ME_DEPOT Order CONFRIMATION” junk landing at the top of my Gmail inbox.

Looks like a VAX 11 thing: https://documentation.help/VAX11/op_POLY.htm

See also http://simh.trailing-edge.com/docs/vax_poly.pdf# and some HN discussion from 2015: http://simh.trailing-edge.com/docs/vax_poly.pdf#

With the right hardware combinations, the only break you'd theoretically have in the System/MacOS/macOS history from 1984's System 1 to 2023's macOS Sonoma 14.1 is from MacOS 9 to MacOS X 10.0. OS X was actually a completely new operating system and oftentimes you had both OSes side-by-side on the same disk to either dual boot or to run OS 9 stuff in Classic mode under OS X.

(With full disk encryption, T2 chips and other various low-level hardware changes this might not actually be feasible under Apple Silicon chips, but at least through the Intel days you could have upgraded a system with hardware changes in the same way.)

Hey Siri re-enabled itself on my iPhone 12 Pro Max after I installed the iOS 17.0 update. It's one of the first things I turn off when I get a new phone and I would not have knowingly turned it back on.

Could it have been an installer fluke? Sure. But it's concerning enough.

This was also me as a kid with the Mac - we got our first home computer in 1993. Pascal? WindowPtr? Compilers? Yikes - I'm only 9 years old! I'd done some QBasic and Logo at school but couldn't wrap my head around the 'abstract' GUI stuff: If I tell the turtle to go Forward, it goes forward...

Then I discovered HTML - much easier to wrap my head around at the time.

I'm also @cmg on Twitter, which used to get plenty of Instagram mentions of this type, as well as people thinking I'm CheckMate Gaming, Canadian Media Guild, Cocaine Muzik Group, Chipotle Mexican Grill and all sorts of wild stuff.

Because 1 !== true and 0 !== false in JavaScript:

  const index = "Hello HN".indexOf("H")
  console.log(index);
  >> 0
  index == false
  >> TRUE
  index === false
  >> FALSE

For me, the "magic word" is my WWDC 2007 bag. Pretty much the only reason I keep it around these days.

If you're not rebuilding the desktop every other day you're really missing out!