HN user

predakanga

358 karma
Posts2
Comments144
View on HN

I saw someone recommend a site called "The Storygraph" recently - haven't tried it yet, but it seems like an interesting alternative to Goodreads.

In particular the "moods" feature caught my eye.

As soon as I try to add more detail the previously imagined details dissapear and I have to circle back and reimagine them. Like having a very limited amount of draw calls every frame.

This matches my experience - I think of it a bit like a really slow CRT, the phosphorescence fading before the image can be composed.

I was amazed to discover, a few months ago, that iPeng is still under active development!

I went to set the alarm on my Squeezebox Boom one night and the time picker widget was completely broken. By the next week they'd pushed out an update to fix it.

That kind of dedication in a developer is fantastic to see.

If you can find the .ipa, you can sideload them, no developer account or anything needed.

The downsides are that you can only have 3 sideloaded apps at a time, and you have to reinstall them every 7 days.

https://sideloadly.io/ automates the process and can automatically reinstall them for you - I use it to keep the Pebble app installed and my watch synced.

Small correction for the author:

Copper stays copper, unless there are one or two electron heads in any cardinal direction, in which case it becomes an electron head

should be

Copper stays copper, unless there are one or two electron heads in any neighboring cell, in which case it becomes an electron head

I spent ages trying to figure out how the generators were working in their example before I looked up the rules elsewhere.

Pixel Tablet 3 years ago

You make a good point - there are loads of third-party magnetic charging cables out there, but I never saw the point when I have a wireless charger.

I might have to give the cables a try next time I replace my battery, see how it affects longevity.

Also, once you've got per-user encryption on ~/.ssh/authorized_keys you'll need some other mechanism for users to log in.

OpenSSH supports this through the AuthorizedKeysFile directive - it'd be quite simple for the homedir mounting tool to sync that file from the user's authorized_keys file on unmount.

You could also use SSH certificates, but that requires a CA - not ideal for the home user.

The thing that bothers me is that it's not even restricted to iDevices.

I was recently looking into replacing Time Machine on my MBP (which has a tendency to corrupt over SMB) with APFS snapshots, synced to ZFS snapshots on my NAS.

Unfortunately, I quickly found that Apple has locked the relevant API (fs_snapshot_create) away behind a private entitlement, only to be granted to select backup software that abides by their rules.

It's gotten to the point that I want to "jailbreak" my laptop. Just give myself the ability to grant any entitlement, for local use only.

You don't even need to patch any files - you can patch classes at runtime using a "-javaagent" library.

There are plenty of libraries out there to facilitate this such as Javassist or Apache BCEL, and lots of legitimate uses (AOP, instrumentation, etc).

While I don't think it's likely, it's not hard to conceive a scenario where the NIC purposely weakens the security for attackers in the know.

Purely theoretical (and I'm not a crypto guy, so please do correct me if this is nonsense), but imagine a scheme whereby the IV is chosen to be the first few bytes of the private key xor the port tuple.

This could reduce the difficulty of brute forcing the key, and no extra traffic need be generated - we already know that the NSA operates passive observers, and has even placed such systems inside corporate networks in the past.

EDIT: As to why they'd do this instead of getting a gag order - because they can? Because there's less oversight? Safest to assume that any technical capability will be abused sooner or later.