HN user

intsunny

1,953 karma
Posts0
Comments213
View on HN
No posts found.

Its funny, this is another of the billions of reasons why Mullvad should be the VPN of choice. But so many fucking people can't ever get over that their favorite social media influencer/Youtuber is offering a code for 200% off of NordShark VPN, now with extra AI.

They're excited about putting the spec behind a notoriously closed paywall??

Us older nerds will remember how Microsoft corrupted the entire ISO standardization process to ram down the Office Open XML (.docx/.xlsx/etc) unto the world.

The original Office ISO standard was 6000+ pages and basically declared unreproducible outside of Microsoft themselves.

There is an entire Wikipedia article dedicated to the kafkaesque byzantine nightmare that was that standardization. [0]

ISO def lacks luster, and maybe even relevance.

[O] https://en.wikipedia.org/wiki/Standardization_of_Office_Open...

100000% Agree.

Here in Germany, I'm convinced the Police simply don't care about motorcycles with modified mufflers. The sound is deafening. In the last decade the noise has gotten worse and worse.

Once one of those small penis motorcycle owners saw that I was covering my three year old child's ears as he passed by, and only then did he put his bike into neutral and walked it by us.

The headline is not great because Google will obviously appeal the ruling to the appeals court of DC, and if they have to, the Supreme Court.

A lot can happy from now and then. And this may take many years to grind through the court system.

I wonder if there exists AI models of all the super senior and important judges so we can venture how this will play out through the court system.

In the conclusion Google writes:

It took less than 3 months of research to discover 6 separate bugs in the adsprpc driver, two of which (CVE-2024-49848 and CVE-2024-21455) were not fixed by Qualcomm under the industry standard 90-day deadline. Furthermore, at the time of writing, CVE-2024-49848 remains unfixed 145 days after it was reported. Past research has shown that chipset drivers for Android are a promising target for attackers, and this ITW exploit represents a meaningful real-world example of the negative ramifications that the current third-party vendor driver security posture poses to end-users. A system’s cybersecurity is only as strong as its weakest link, and chipset/GPU drivers represent one of the weakest links for privilege separation on Android in 2024. Improving both the consistency and quality of code and the efficiency of the third-party vendor driver patch dissemination process are crucial next steps in order to increase the difficulty of privilege escalation on Android devices.

Does this mean the vast majority of Android users (who are on Qualcomm chipsets) are vulnerable to these zero day attacks?

As an aside: Why can't DSL modems be a single USB dongle?

Those of us with DSL connections must suffer either an extremely limited selection of DSL modem/routers that can run Linux/OpenWRT, or have to suffer running a Linux/OpenWRT router behind a DSL modem (that often has proprietary and out of date firmware).

How an entire article about rotary mixers fails to mention Rane or their legendary MP2016 mixer is wild.

It became one of the most commonly available rotary mixers, was the house mixer for many NYC clubs, and one of the mixers commonly found on tech riders of DJs who were the last to transition to CDJs.

Random bit of trivia: if you see old school photos or videos of rotary mixers in American clubs, sometimes it wasn't actually the Rane MP2016, but the Phazon SDX 3700: https://www.integralsound.com/sdx-3700-mixer It was the house mixer for Tunnel/Limelight.

EFF explanation on why this is a huge victory for EU citizens:

https://www.eff.org/deeplinks/2024/03/making-law-accessible-...

The important bits:

Earlier this month, the European Union Court of Justice ruled that harmonized standards are a part of EU law, and thus must be accessible to EU citizens and residents free of charge.

In 2018, two nonprofits, Public.Resource.Org and Right to Know, made a request to the European Commission for access to four harmonized standards—that is, standards that apply across the European Union—pertaining to the safety of toys. The Commission refused to grant them access on the grounds that the standards were copyrighted.

Last week, the EU Court of Justice overturned the General Court decision, holding that EU citizens and residents have an overriding interest in free access to the laws that govern them.

Gentoo goes Binary 3 years ago

I shudder to think how many sky high electricity bills and greenhouse gases were released to needlessly compile the same software over and over again.

I'm amazed at how email server software is innovating and evolving like never before. We have new implementations of SMTP, IMAP, etc. We even have new protocols like JMAP thanks to the Fastmail guys.

But it also feels like fewer and fewer people are running their own mail servers. Everyone seems to just outsource it to Google or Microsoft. I'm also surprised at how many engineers barely understand how email works. (IE: I have to show them what email headers are and the useful info that can ne found there.)

It blows my mind how shitty Raspberry PI foundation are to their community:

- They prioritized industry over community, and made it almost impossible for hobbyists to get any meaningful hardware for so long.

- They allowed retailers like Pimoroni price gouge Raspberry PI's by forcing everyone to buy really expensive bundles of needles cables, power adapters, officially licensed toothbrushes, and other nonsense

- And then, after all that drama, they release a new edition of the flagship product and make community members have buyers remorse over waiting so long and paying $400 for a Raspi Pi 4 2GB + officially licensed socks bundle. (The prices of Raspi Pi 4's in some countries was/is really shocking and sad.)

Given that Threads requires an app, and the app requires obscene permissions (health, etc) ... its hard not to think that Meta can't escape their set ways and this app is doomed to fail.

The app serves Meta more than it does the public.

AWS us-east-1 down 3 years ago

For those wondering: Currently PDT is 7 hours behind UTC.

AWS can do so many things, reporting critical outage updates in UTC is not one of those things.