Recent submissions

Comment · 14 days ago
Even when they are a CNA, there are procedures to get a CVE issued.
Comment · 4 months ago
Maybe they meant encoding, the file format.
Comment · 5 months ago
All ADCs I have looked at document that they can't represent the positive full scale. For instance, for an 8 bit ±1 V ADC, -128 represents -1 V, +127 represents 127/128=0.99219 V. The transition from 126 to 127 happens at 1.5 LSB from the positive full range. 1 LSB difference represents 1/128 = 0.00781 V difference, and not 2 / 255 = 0.00784 V.

But if you actually care about what the voltage (and uncertainty) is, most of this is difference is mostly pointless, you're reference will have a bias, there are linearity errors and so on. 1 LSB will not match either the 1/128 or 2/255, you will need parameters to compensate for it.

Comment · 6 months ago
As others have pointed out, the 2nd color is not something I would call either blue or green. Except for the first, it never showed anything I would call blue. So really I have told it the border where I still call something green. So is my green your green?
Comment · 9 months ago
The correct URL is https://security-tracker.debian.org/tracker/CVE-2025-15467

You're pointing to one of the other security issues for which a fix was released today.

Comment · 9 months ago
Comment · 1 year ago
It's my understanding that is about generating the .iso file from the .deb files, not about generating the .deb files from source. Generating .deb from source in a reproducible way is still a work in progress.
Comment · 2 years ago
https://www.inaturalist.org/lifelists/cmeckerman?view=tree&t... says he has 1044 different species of the order Lepidoptera.
Comment · 2 years ago
Comment · 2 years ago
For the major browsers, this probably makes little difference, but for anything else, this will most likely result in not verifying the revocation status of certificates anymore or making things slower.

As far as I know, most browser vendors already download the CRLs, and then update the browsers based on what they downloaded. For instance firefox seems to be using CRLite. There is a lack of support for something like that in the non-major browsers and non-browsers. The alternative they have is to download the CRL instead of the OCSP reply, which is larger, probably making things slower. Or they could just not check the status, which is most likely what will happen.

CRLite changes the failure mode of the status check, it no longer just ignores error in downloading the status information.

We need better support for something like CRLite.

Comment · 3 years ago
Is a passkey a software implementation of a FIDO key? Where the implementation could use something like the TPM to protect the key.
Comment · 3 years ago
Yes, the dates are correct.
Comment · 4 years ago
C2 is error detection, not correction. C1 is the error correction. I think what wikipedia is trying to say is that the C2 error detection just points out something is wrong, even after the C1 error correction, and so you can't fix it. But a data CD has additional error correction, so it can correct more errors.
Comment · 4 years ago
An audio CD has 2352 audio bytes per sector. The sector also contains C1 error correction and C2 error detection.

On a data CD, those 2352 bytes are split in 2048 data bytes, plus an additional 4 error detection, 276 error correction, plus some other bytes including an address. So there is an extra layer of error correction.

Comment · 4 years ago
As one of the other links explains, ripping the same CD on the same drive a 100 time might still not produce the correct rip. Something like AccurateRip works by having multiple copies of the CD scanned, and then voting which one is the correct version.

I forgot that CTDB (http://db.cuetools.net/) exists, which is is an alternative to AccurateRip. CUETools is open source Windows software to rip CDs. Instead of just providing a checksum of the track, it provides error correction information. So instead of just getting that you probably have a bad rip, and keep getting a bad rip, it's possible to correct the rip. EAC has a CTDB plugin that's installed by default, whipper currently doesn't support it.

AccurateRip is not something from EAC, it's from dbpoweramp.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton