HN user

jwatt

249 karma
Posts5
Comments90
View on HN

For me `isoinfo` doesn't like the format of the .iso file ("CD-ROM is NOT in ISO 9660 format"). Using bsdtar worked though:

  bsdtar xOf xxx.iso initrd | gzip -dc | cpio -idv --no-absolute-filenames "root/fumagician*"
(And of course then running `root/fumagician/fumagician` in either case.)

I agree the number of attack vectors is significantly reduced in comparison to the same version of Android on a smartphone (particularly if the user is making little or no use of the music player's already limited app store). But there are still many, many CVEs for Bluetooth, for example. Taking the Bluetooth example, I would be happier connecting to a hire car's audio system with a version of Android that is getting patched than a version that is not, and may have known vulnerabilities. I don't want my DAP to potentially be a vector for transferring malware around.

I would like something like this but one thing that makes Android-based music players like this unappealing is the versions of Android they start with. When this is releases in February, Android 13 will have been out for six months. Android devices don't get security updates for long enough as it is, so starting out the gate with a non-current version of Android isn't great.

He also just released the second edition of his book, Taking Charge of Adult ADHD, this year. That book (along with Atomic Habits) seems to be the one most suggested by the ADHD subredit's users...at least for those who can manage to make it through a book.

I recently watched the following series of videos by Russell Barkley who I believe is one of the world's leading ADHD researchers. I think it's a good place to start because it describes the scientific understanding of what ADHD is, which I feel has given me a more solid grounding to evaluating other things I read and hear about ADHD, some of which turns out to be innacurate.

https://www.youtube.com/watch?v=6T9LQ5kqOqo&list=PLzBixSjmbc...

What? Power is the rate at which energy is supplied. Power and energy from one source are both exactly proportional to power and energy, respectively, from another source. Fuel, or cost of infrastructure, of whatever it is you're referring to here when you say "energy", isn't energy.

On a related note, I've been getting increasingly worried that we're imminently and blindly walking into a human catastrophe due to our current energy policies. I'd be interested to hear about holes that anyone here might be able to poke in any of the red flags being raised by people like Anas-Alhajji[1], the Doomberg team[2] and Wil VanLoh[3].

1. https://www.macrovoices.com/1087-macrovoices-328-dr-anas-alh...

2. https://doomberg.substack.com/

3. https://www.realvision.com/shows/the-kyle-bass-interviews/vi...

For anyone thinking of using this with Linux, there are a couple of issues I've encountered with Logi Bolt with my MX Keys Mini.

Getting the keyboard and a Logi Bolt USB receiver to pair on Linux was a huge PITA. (Why do I have to trust and install an app for this anyway?) In the end I resorted to plugging the receiver into a mac and pairing it that way. Even that hasn't worked out so well though, since I ended up with messed up modifier keys when I transferred the receiver back to a Linux machine (the modifier keys are still mapped as a mac keyboard).

Another issue I have is that I can't suspend the Linux machine if I leave the USB receiver plugged in. If I do, the machine will wake back up almost immediately after suspending. Kinda annoying to have to always unplug it...especially since if you buying a Logi Bolt device it's probably because you want to be able to switch it between multiple machines without having to constantly plug/unplug thing to USB...

I'm not sure it's "desperately" chasing; its trajectory looks positive. For example, in the 2019 Stack Overflow developer survey[1] only 3% of professional developers reported using Rust. A year later[2] it was 4.8% and a year after that[3] it was 6.4%. So based on that metric (of debatable value), professional developer use may have doubled in two years. For reference, in the SO surveys C++ and C use was about 20% and 16%, respectively and, if anything, slowly declining (as a percentage of respondents, of course).

1. https://insights.stackoverflow.com/survey/2019#technology-_-...

2. https://insights.stackoverflow.com/survey/2020#technology-pr...

3. https://insights.stackoverflow.com/survey/2021#technology-mo...

He could be referring to multiple things, but the one I recall was the treasurer resigning, claiming he felt/was removed by the founder for blocking what he saw as misuses of donated funds and breach of the agreed spending guidelines:

https://news.ycombinator.com/item?id=23940824

The original link is dead because the database for the entire Manjaro forums was lost shortly after that, so you'll need to use archive.org if you want to read the original discussion:

https://web.archive.org/web/20200807042341/https://forum.man...

Pijul 1.0 Beta 5 years ago

Although it seems to be intentionally hidden when coming to that section of the site from the "Documentation" link on the homepage:

Coming soon. If you are interested in contributing, ...

Presumably there are reasons for that, but hopefully the manual is already useful to read?

Rust in 2022 5 years ago

I think it's too early to say it's failed to replace the existing systems programming languages and its trajectory looks positive. For example, in the 2019 Stack Overflow developer survey[1] only 3% of professional developers reported using Rust. A year later[2] it was 4.8% and a year after that[3] it was 6.4%. So in two years professional developer use doubled, by that metric. For reference, in the SO surveys C++ and C use was about 20% and 16%, respectively and, if anything, slowly declining (as a percentage of respondents, of course).

1. https://insights.stackoverflow.com/survey/2019#technology-_-...

2. https://insights.stackoverflow.com/survey/2020#technology-pr...

3. https://insights.stackoverflow.com/survey/2021#technology-mo...

I stopped using Lastpass in 2017 after the second breach that year that allowed remote code execution:

https://en.wikipedia.org/wiki/LastPass#2017_security_inciden...

It wasn't so much that that happened, but rather their response:

https://blog.lastpass.com/2017/03/important-security-updates...

- "Our investigation to date has not indicated that any sensitive user data was lost or compromised"

- "No master password change is required"

- "No site credential passwords need to be changed"

Given the fact that an attacker could run code in a user's browser extension without any communication with Lastpass servers, there was no way for them to know whether the master or site passwords had been stolen. The only responsible thing for them to do at that point in my view was to recommend everyone change all their passwords. Instead they completely played it down.

So they completely lost my trust and I spend the next several days moving off Lastpass and changing the passwords for hundreds of websites...I feel for all of you finding yourselves in that situation now. :-(

The biggest benefit is that you can use drivers with actually correct acceleration curves

I just checked, and libinput does have the correct "flat" acceleration curve as an option, so I think we're good. ;-)

https://wayland.freedesktop.org/libinput/doc/latest/pointer-...

Being more serious, that document has a bunch of graphs of libinput's acceleration curves for different devices. I'd love to see a write-up of the curves you've implemented and why they're superior in your opinion.