Hacker Newsnew | past | comments | ask | show | jobs | submit | VorpalWay's commentslogin

Linux with AMD graphics is much more stable than with nvidia.

I have also counterintuitivly found Arch Linux (a rolling release distro) way more stable than Ubuntu LTS. Things like sleep works, and any bugs are small and fixed quickly, bug reports are followed up on within a couple of days. With Ubuntu bug reports go without any replies from the maintainers, and maybe it will be fixed by happenstance by the next release.


I'm thankfully out of the loop on Windows these days, but as I remember it Paint did not have any network features? Is that still true? If if is, maybe it is a misfiling of the CVE and it isn't remote?

Or are they chaining a browser auto opening a download in paint, (but browsers shouldn't do that)...


If they know what you paint/edit, they can sell you ads better

These days paint has copilot...

Why for the love of everything that is good does MS Paint have network trash in it. It's a super simple bitmap editor. Like Notepad, it's simple and just works.

Make a new product and bundle that as an option if you want to drastically change the functionality.


Hate to break it to you..

> Notepad in Windows includes AI features powered by Copilot that help refine and shorten text with the assistance of GPT. By default, these AI features are enabled on managed devices

https://learn.microsoft.com/en-us/windows/client-management/...


> Like Notepad, it's simple and just works.

I mean… what else were the people working on Notepad and Paint to do!?

The order came down to integrate AI, and they wanted to be promoted.

Every single day I’m happier and happier than I use Linux now.


Some distro will default to integrating an AI into bash any day now. It's only a matter of time till less and vim have AI search.

There are certainly many options to choose from: https://gist.github.com/ColinKennedy/8a0eea1b18b6e22bc10daa6...

Luckily with OSS we can fork it

This is the only network feature paint has iirc, so that's probably it.

It's the only network feature I can think of, but what is it doing opening a port to wait and listen for anything?

Most linux distros use PAM, so 2 is also a narrowing filter. Debian, Ubuntu, Fedora, Arch, etc all use PAM.

What if you narrow it down to musl-based distros (which none of the above are). Do most musl-based distros use PAM?

Alpine is mostly used in containers, where you don't run sshd anyway. It apparently doesn't use PAM by default though.

OpenWRT also doesn't use PAM by default apparently, and there is a risk of people using password login, which you should never do past initial setup.

But outside specific niches, musl is rare, with good reason. Performance is a joke compared to glibc, especially the allocator. The only reason to choose musl in my opinion is for memory constrained devices (OpenWRT etc) or for building static binaries where performance doesn't matter but portability does. I consider the "small container" use case questionable: performance will suffer, and you could share large base layers instead which would amortize the cost over many different images.


AFAIK OpenWRT doesn't use openssh

Yeah, OpenWRT doesn't use openssh by default - it uses dropbear. You can install openssh, if you want more features and there seem to be 2 packages - one with PAM support (openssh-server-pam) and one without it (openssh-server). PAM-less one is the one without the suffix so perhaps it's more likely you'd install that one out of the two, but only if you were trying to switch to using openssh in the first place.

Those distros are all filtered by 1, no?

You don't typically run sshd in containers, instead you only run whatever single service you set up your container for.

Sure there are native Alpine installs too, but that is far less common of a use case.


Yes, and at least in the past it did proof of work to verify that it wasn't a bot. Though apparently that is no longer effective against all bots.

Yeah, a funny thing with leaded solder being forbidden these days is that it isn't really about dangers when soldering with it, the issue is when it ends up in a garbage dump and leaches out.

The reason you still need fume extraction when soldering is the flux, those fumes are quite nasty to inhale. (How nasty varies based on the specific formulation, I recommend using proper ventilation for all of it though.)

(For those who don't know, the flux is there to prevent/clean oxidation and make the solder flow onto the metal pads and pins. Most solder wire contain a core of flux and you can also add additional flux if needed, usually liquid or a paste that melts into a liquid.)


A video on vulnerabilities in Asus routers was released yesterday: https://youtube.com/watch?v=kYnwCx2SNYY

But if you are talking TVs specifically, I expect they will get back to that too.


https://mrbruh.com/asusrouter/

  If you avoided downloading the app for whatever reason, you can be proud because it just saved you from potentially getting hacked.
Nice.

It's been many years, but they last time I tried that app it was completely useless.

> lean-zip beats every single compression level miniz_oxide

Miniz_oxide is an intentionally simple implementation. It would be more fair to compare it to the newer zlib-rs[1], which even beats zlib-ng (fastest implementation in C)[2].

[1]: https://lib.rs/crates/zlib-rs

[2]: https://trifectatech.org/blog/zlib-rs-is-faster-than-c/


So, lean-zip "outperforming an equivalent Rust package that crates.io says has been downloaded over a billion times". Yes, zlib-rs has only been downloaded 200 million times... But it is way faster!

Zlib-rs is several years newer, of course it has fewer downloads. Looking at recent downloads per day zlib-rs easily leads (2,500,000 vs 1,600,000)

downloads is such a weird metric to focus on

If something has a lot of downloads it shows a revealed preference that this kind of performance is acceptable.

Yes, but it also has many conditionals, for example:

- The faster package may have been available for a shorter amount of time and so downloads have not had the time to catch up yet.

- Many people may not be aware of the faster package, but they would switch if they knew.

- Maybe people are aware of the faster package, but there are switching costs that prevent them from adopting it right now that are greater than the costs incurred from the slower package.


I think its pretty safe to say most (bit not all) users of deflate don't have it in their hot path and arent zipping super large files.

How does it help? You could just as well compare to some slow popular Python version if all you need is "revealed preference"

Recent downloads per day show the opposite trend, with 2500k vs 1600k per day (with zlib-rs leading). The issue is zlib-rs is far younger so looking at total downloads is nonsense. And there is inertia to switch over as well.

The term you are looking for is viscosity. Water has higher viscosity than air. Honey and syrup even higher still. It basically describes how "thick" the medium is, or to be a bit more precise, how much it resists forces applied to it.

Honestly, why would we need anything except LE for TLS certs? Sure, they don't issue EV certs, but isn't that completely dead by now anyway?

You could argue single point of failure, which is fair, so then set up another LE clone which is run in a similar way in another (reasonable) country.

(And there is of course non TLS certs, such as code signing and S/MIME, if that is still a thing. I'm only arguing about the TLS case here.)


Personally? I'd agree with you. FWIW, you already have to trust your browser vendor, so you might as well trust Mozilla and Google and Apple and MSFT who can spin up one each, or collectively two or three CAs in US, UK, Switzerland, Ireland or sth like that.

That said, starting from the status quo, not sure that's the path of least resistance to get there.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: