Hacker Newsnew | past | comments | ask | show | jobs | submit | Hackbraten's commentslogin

> A baseline hash is computed at game start, and periodic re-hashes are compared against the baseline.

In 2015, Apple briefly used this “hall monitor” technique for iOS 9 [0] but abandoned it when they learned that the whole approach is fundamentally flawed. Looks like anti-cheat developers reinvented this old trick even though it doesn’t work.

[0]: https://xerub.github.io/ios/kpp/2017/04/13/tick-tock.html


At the cost of a slightly more complex schema, the JSON representation can be made much more readable:

    {
      "path": "/tentativeTaxNetNonRefundableCredits",
      "description": "Total tentative tax after applying non-refundable credits, but before applying refundable credits.",
      "maxOf": [
        {
          "const": {
            "value": 0,
            "currency": "Dollar"
          }
        },
        {
          "subtract": {
            "from": "/totalTentativeTax",
            "amount": "/totalNonRefundableCredits"
          }
        }
      ]
    }

YAML seems like a great middleground here between xml and json..

My immediate thought. Except not "vanilla" YAML, but a safer stricter subset (iirc some people published a spec about it): no implicit conversion, no norway problem, etc. If only this gained actual traction.

The JSON in the article is a bit, let's say, heavy on the different objects and does not try to represent anything useful with most keys. All the things like `greaterOf`, `sum`, etc are much better expressed as keys than `{"children": [{"type": "greaterOf", ...}]}`.

Basically something that feels an reads like "freeform" yaml, yet that has an actual spec.


I have worked with a lot of langauges over decades including YAML, and I regard it as one of the worst that I have tangled with for a number of reasons...

lots of haters when openspec is yaml(and json), k8s is yaml, most of go is yaml actually. sure I know it has faults, but it's really nice to type.

YAML is never a great anything.

Looking forward to no longer having to patch glibc on my Linux phone just so I can watch YouTube or use Spotify.

Wait what, how is glibc patching related to YouTube and Spotify? Could you not watch YouTube using an arm64 build of Chromium or Firefox?

Spotify requires Widevine CDM to run, and Firefox doesn't come with Widevine on Debian-based distros. The .so hasn't been available on arm64 except for ChromeOS. You can rip the .so out of ChromeOS (that's what RaspberryPi OS did). But ChromeOS uses its own flavor of libc so a couple of patches to glibc are required.

Same thing with YouTube. A few months ago, YouTube started to require Widevine CDM if one uses the m.youtube.com site. I can't use the non-mobile site on my phone for performance issues, so I'm essentially locked into Widevine for watching YouTube, too.


Firefox pre-packaged for Ubuntu on my NVIDIA Spark has no problems with YouTube?

I guess it must be a snap, not a deb package, but... wouldn't that work?


Regular YouTube works as is (but has performance issues on my weak phone.)

It's m.youtube.com that seems to require the DRM thing, at least for me. Have you tried that?


m.youtube.com works fine in both Epiphany and Firefox on my Librem 5 with PureOS.

Turns out you’re right. I just uninstalled the CDM and YouTube indeed works! I’m still absolutely, positively sure that m.youtube.com started gating it for me last August without a doubt. [0]

Maybe they pulled some temporary A/B experiment on me? I’ll probably never know. Thanks for the correction.

[0]: https://news.ycombinator.com/item?id=45193597


Why are you selling access to this instead of just keeping it for yourself to generate money?

We are doing both lol. The questions I ask and edges i get are completely different from the questions someone else may ask. And we saw our friends in college and after go into generational debt sports gambling and on prediction markets and 0DTE options plays because they thought they had an edge but didnt have the stats knowledge to know it was fake. And this good for brokerages too so we are trying to sell to them too

> Not to mention better utilization of hardware

When compared to a VM, yes. But shipping a separate userspace for each small app is still bloat. You can reuse software packages and runtime environments across apps. From an I/O, storage, and memory utilization point of view, it feels baffling to me that containers are so popular.


"bloat" has always been the last resort criticism from someone who has nothing valid. Containers are incredibly light, start very rapidly, and have such low overhead in general that the entire industry has been using them.

Docker containers also do reuse shared components, layers that are shared between containers are not redownloaded. The stuff that's unique at the bottom is basically just going to be the app you want to run.


> From an I/O, storage, and memory utilization point of view, it feels baffling to me that containers are so popular.

Why? It's not virtualization, it's containerization. It's using the host kennel.

Containers are fast.


I was referring to the userspace runtime stack, not the kernel. What I criticize is that multiple containers that share a single host usually overdo it with filesystem isolation. Hundreds of MBs of libraries and tools needlessly duplicated, even though they could just as well have used distro packages and deployed their apps as system-level packages and systemd unit files with `DynamicUser=`.

You can hardly call this efficient hardware utilization.


The duplication is a necessity to achieve the isolation. Having shared devels and hordes of unit files for a multi tenant system is hell - versioning issues can and will break this paradigm, no serious shop is doing this.

For running your own machine, sure. But this would become non maintainable for a sufficiently multi tenant system. Nix is the only thing that really can begin to solve this outside of container orchestration.


The isolation is the POINT. You can't be assured that the library and version you need for you app is the same in installed by the system, for example.

And it may not even be installed by the system, hence docker.


Don’t you dare take away the little rest of the internet for me that does NOT constantly lock me out using the snake oil that is Cloudflare’s Turnstile.

16 hours later and it still doesn't load.

How dare you go online without a clean IP at a first world country home ISP! You should be subjected to 99 captchas a minute for it!

It’s even a residential IP from a German tier 1 ISP, as reputable as it gets. Works fine on computers and for everyone around me.

But somehow, Turnstile seems to think that traffic from a Linux phone == robot traffic.


> Not marketing and promoting here

Yet you chose to use that screaming, upper case only title.

> it is 40x POWERFUL

Citation needed.


> The upper case was written intentionally, so that the post wouldn't get buried. I understand now how that would have come across.

> On "40x" was to demonstrate impact, not a published statistic. If I frame it something as measurable, I should back it with data. The goal is to test whether demonstrated skill (video/audio) may build trust and signal faster than text profiles.

Appreciate you for flagging both the points.

If you want, check out the Future of Jobs 2025 report by World Economic Forum. The report highlights the growing shift towards skill based hiring by demonstrating your skills. The medium (videos and audios) are possible ways to support that shift which I am trying.


Because FIDO2 is not enough for non-tech-savvy people. The main issue is potential confusion about what transaction they’re actually signing. For example, a malicious browser extension can pretend the site sends money to X while actually sending it to Y.

The European PSD2 directive mandates that the 2FA scheme must let the user see what they’re about to sign. At the very least, that includes the amount and part of the recipient’s IBAN. FIDO2 doesn’t have that.

It’s the reason I own a device that looks like this [0]. Without it, I wouldn’t be able to transfer money at all due to the lack of banking apps that work on Linux phones.

[0]: https://en.wikipedia.org/wiki/Chip_Authentication_Program


In this case, wouldn't FIDO2 only be used to log into the bank's website, not to sign individual transactions? (Corresponding to Mode2 in the Wikipedia article you provided?) Would this "mode2" only usage be allowed under European law, given that there is no transaction involving an amount of money taking place?

I use my Librem 5 as a daily driver, and I’m certainly not an open source purist.

What I do care about is that my phone isn’t going to run into obsolescence a few years down the road (due to hard kernel forks and YOLO’ed device drivers that are not going to be updated for newer kernels).


How is it nowadays ?

I can't find recent demos of the phone, everything is a few years old on YouTube now, and I know the device is still in development.

How usable the browser and camera are ?

Can you get a full day of battery ?


I type this in a browser on the phone.

Camera: https://social.librem.one/@dos/tagged/shotonlibrem5

Battery: I unplugged it from the charger 10 hours ago, it's currently at 55%. Typically it's up to 22 hours when suspended, up to 12 hours when idling without suspend and about 3-5 hours of active use depending on what you're doing. Could be better, but can be worked with.


> I can't decouple from Google unfortunately

Why not?


Same here, because I'm a part owner of a restaurant and we'd probably lose half our business without being on Google Maps as it's not in a busy street.


i just built a map precisely to highlight restaurants in my area who choose _not_ to pay Google/Yelp :)

https://eat.dash.nyc

https://github.com/jareklupinski/dash-nyc


Cool app. But the actual value is attention. To replace google maps for resteraunt doscovery, you need to be big in the attention market. Unfortunately good engineering alone doesnt do that, you need marketing/product


thanks :) it was built rly for me/family/friends, but it costs nothing to run (lives on the same server as my portfolio)

doesnt have to be a hit, just has to exist i hope


Thanks, this is a really fun way to view the data. I don't think the no-google/no-yelp filters will really accomplish this goal though. Most of the ones I examined were either variations in the restaurant name or not really restaurants (gas station convenience store, hotel with breakfast, catering LLC with no storefront, etc.) The google and yelp datasets in NYC are really quite good.


This is super cool, thanks for sharing it!


nice app - how do you find those who are not on google?


thank you! in nyc, every restaurant must be licensed and pass a health inspection to operate, so i pulled in all of the health inspection reports :)

yay open data


Google is a godsend for SMEs: it's the way out of Microsoft. Many a small mom and pop shop ties themselves to Google Workspace, pay the subscription, and this allows them to manage their entire SME from either a Mac, a PC running Windows, a PC running Linux (yup), a Chromebook and/or even their phone. Don't tell me it's not happening: I know several companies doing just that.

It's an "all in one" solution that allows SMEs to not have to use Windows.

The lock-in is real: once several employees all have their Google Workspace account and some Google Drive docs are shared with people from outside the company, it's hard to decouple from Google.

But at least you're not tied to the shittiest OS out there (Windows) and the mediocre company that produces it.


YouTube


enshitification at scale


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: