HN user

cxcorp

297 karma
Posts3
Comments76
View on HN

A camera! The 2.5mm TRS remote trigger jack just needs one of the pins connected to the sleeve to trigger the camera, very easy to do with an optocoupler or even relay.

This is very important to keep in mind when implementing OAuth authentication! Not every SSO provider is the same. Even if the SSO provider tells you that the user's email is X, they might not even have confirmed that email address! Don't trust it and confirm the email yourself!

BleepingComputer's coverage[1] has this tidbit:

BleepingComputer has been told that the Akira ransomware operation is behind the attack on Tietoevry, coming soon after the Finnish government warned about their ongoing attacks against companies in the country.

"The incidents were particularly related to weakly secured Cisco VPN implementations or their unpatched vulnerabilities. Recovery is usually hard," warned the Finnish NCSC.

I wonder what the entrypoint was back in 2021 when they were attacked around the same time?

[1] https://www.bleepingcomputer.com/news/security/tietoevry-ran...

RAD Debugger 3 years ago

Thanks! Looks like this project has some high ambitions:

What's after that?

Tons of stuff. Tons and tons and tons of stuff.

Debuggers have not substantially evolved since the first Turbo Debugger in 1988!

For example, we have had GUI debuggers for 20 years now, and we can't see bitmaps! We can't hear sound buffers. We can't view vertex arrays.

We can't graph values over time. We can't even load a debugging session from yesterday and review it! We have a long way to go.

Debugging is desperate need of updating, and we see as a long term project. We'll be adding visualizers, new debugging workflows (step through code on multiple platforms at the same time for example), and new features for a long time.

RAD Debugger 3 years ago

Anyone seeing any groundbreaking features or reasons to try this over x64dbg or other existing debuggers?

What if the captive portal just had a link (or on an IFE screen, a QR code) that connected your phone to a different, WPA2/WPA3 protected, hidden WiFi SSID that was generated exclusively for you? Phones nowadays support joining a passphrase protected WiFi AP via a QR code, so I'd imagine that's doable. The hard part would be finding routers that support >300 different hidden SSIDs, but honestly I would hope that that is technically feasible nowadays.

That way you'd at least have the protection of the WPA GTK.

For the postgres config, set fsync=off and full_page_writes=false, and increase min_wal_size, max_wal_size and checkpoint interval with the hope that your tests pass before having to flush the WAL. Maybe slap in some tunings from PGTune.

If you're using docker/podman or docker-compose and your db size is small, a major speedup on linux is to just mount the entire data dir into memory with --tmpfs /var/lib/postgresql/data (or tmpfs: - /var/lib/postgresql/data in docker-compose)

Additionally, if you constantly reset your db in the tests, consider making a template db at the start and later just doing CREATE DATABASE ... TEMPLATE foo; to copy the pages from that template instead of running migrations that produce WAL log. In fact, consider making a db for every test suite from that template at the start - then you can run each suite in parallel (if your app's only state is the db and a single backend).

New in Chrome 115 3 years ago

I like that ScrollTimeline is coming, I hope to get rid of JS scroll listeners for good. Can't wait to use this in like 5 years when all browsers finally support it.

V8 11.3

The V8 engine is updated to version 11.3, which is part of Chromium 113. This version includes three new features to the JavaScript API:

...

- Methods that change Array and TypedArray by copy

...

Excited to see these in. I've been waiting for the non-mutating versions of .sort() and .splice() and now they're finally here (.toSorted and toSpliced)!

- Resizable ArrayBuffer and growable SharedArrayBuffer

Does this mean that WebAssembly memory can also now grow without making a copy of the entire buffer?

The V8 update was a contribution by Michaël Zasso in #47251.

Well done Michaël!

I have one of the Wemos C3 pico boards which rely on the C3's native USB serial controller. The experience is pretty rough for quick iterations on a devboard on Windows.

You restart the board to programming mode by holding down the BOOT button down while pressing RESET. Wait a few seconds, then COM7 is available. You program the board, and then manually RESET the board with the button. COM7 disappears. Then you wait a few seconds, then COM6 appears. Oh, did you print some debug info on boot? Too bad, it takes a few seconds for the virtual serial port to appear in Windows so you just can't get input during that time because the reset resets the USB controller as well (the entire chip).

This is the benefit of on-board USB-UART chips: if you need to reset the chip, your USB controller doesn't need to be reset so your serial port stays open. Additionally, most ESP32 dev boards offer automatic reset by utilizing the DTR or RTS pins of the UART chip and a couple of transistors.

Well, it is the second sentence on the page:

AutoHotkey v2 aims to improve the usability and convenience of the language and command set by sacrificing backward compatibility. As such, scripts written for v1 generally will not work without changes on v2

How Uber Uses Zig 4 years ago

Obscurity depends on how closely you're looking. In fluid dynamics (meteorology, atmospheric sciences) and other scientific fields, Fortran definitely sees widespread adoption.