Recent submissions

Comment · 10 days ago
Very unlikely to happen via emulation, there's Switch 1 games that the Steam Deck struggles to run already.
Comment · 2 months ago
Twist scroll requires two sensors and is patented by Kensington.
Comment · 3 months ago
It used to be more of a problem back when not every popular firmware had a way to reflash from SD/via OTA, because you could get stuck on a firmware with no way to flash out of it. The current solutions work pretty well, though I still stay far away from non-stable releases, just in case.
Comment · 3 months ago
I own both an "old" X4 as well as a "new"/"domestic"/locked X3. The pogo cable transfers data, and the device shows up in dmesg when connected, but disappears shortly after. The cable itself works fine for transferring data, tested with a different device with the same connector.
Comment · 3 months ago
They disabled the ability to USB flash on every device not bought from their official store.
Comment · 3 months ago
That's, in my opinion, a pretty vanilla starter stack. Could probably argue that you don't need replicated storage, and that ArgoCD is nicer to look at, but Talos in particular simplifies a lot of the deployment because there's not much of an OS to configure or keep updated.
Comment · 3 months ago
Codeberg doesn't use Cloudflare.
Comment · 3 months ago
> you get most of results in Windows through the CryptoProvider

Isn't that what you want on that platform? ADCS even supports issuing remote-attested TPM certs via EK, no need to reinvent the wheel.

> on Linux and Mac exists own OS solutions/access.

I'm not sure what the story is on MacOS, but on Linux the options are definitely lacking. From what I can tell, tpm2-openssl is the most mature solution, but that doesn't support binding to PCRs at all, and validating EK signatures on the server side is left as an exercise to the reader.

> Implementing it isn't trivial at all, otherwise you would already seen (not vibe-coded) open source implementions spawning on GitHub.

If I had to guess, I'd say another issue is that TPM remote attestation is seen as an "enterprise" feature. Open source projects like smallstep support it, but only via their paid enterprise offerings.

Comment · 3 months ago
>e.g. $500 USD

I've seen private cheats for games with less-than-terrible anticheats charge that monthly, if not weekly. You're underestimating how much people are willing to pay to play with cheats, and overestimating how much regular people are willing to pay to play against players without them.

Comment · 5 months ago
That's actually really easy:

1. be government agency

2. pay 30-70% less than private sector companies would for a similar position

3. receive applicants that are 30-70% less competent

Bonus:

- have 30+ year old systems nobody understands anymore because the team behind them has been dead/retired for a decade

- have hiring process handled entirely by out of touch suits

- have a revolving door of motivated soon-to-be burnouts mopping up the mess behind the aforementioned regular employees

Comment · 5 months ago
Sensitive data written down on a sticky note is arguably more secure than that same data sitting on an unencrypted hard drive, at least in a home setting.
Comment · 5 months ago
Kind of. There's an "unlocker" that just spoofs their OTA endpoint to flash custom firmware because xteink decided to not implement TLS validation, though they could theoretically change that at any point.

Xteink also claims that non-domestic versions of their devices sold by their "official" store are unlocked, but there's been a bunch of reports that that's not always the case (...along with devices arriving with broken screens, not arriving at all, or the wrong device showing up).

Comment · 5 months ago
The X3/X4 are such neat devices with a great community behind them, shame the manufacturer decided to lock down devices sold on AliExpress in an attempt to funnel potential customers into their own store instead of embracing the open source firmware like Chinese handheld gaming vendors usually do. I hope these devices being as successful as they are inspire other manufacturers to build a better device that doesn't try to force customers to choose between running the dysfunctional stock firmware, or having to purchase from the equally dysfunctional manufacturer store.
Comment · 5 months ago
The "CTF for fun" aspect has been dead ever since the winning teams had thousands of dollars of rewards waiting for them. Of course people are going to use anything that's not explicitly forbidden by the rules to win. Introducing what amounts to an "I win" button that both can't be prevented by rules and is accessible to anyone didn't "break the format" anymore than the epidemic of giant merger teams did a couple years ago, it just broke the community because you now don't have to actually talk to other people to cheat anymore.

Many CTFs have switched to a dual-leaderboard format recently, one for "agentic teams," one for the rest. If all you care about is "learning" and imaginary internet points, you can just participate as a human team and adblock the AI scoreboard, and maybe lobby CTFTime into splitting their rankings as well.

Comment · 5 months ago
Vista was fine from the get-go if you had enough (>=4GB) RAM, which OEMs mostly didn't bother shipping.

My ME machine would reliably BSOD when I opened / closed the CD tray.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton