Hacker Newsnew | past | comments | ask | show | jobs | submit | edgeform's commentslogin

It appears to be related to sign-in flow[1], but may not affect signing in via Google.com or other Google-hosted services directly. It's the API for "Sign in with Google", far as I can tell here.

[1]: https://developers.google.com/identity/gsi/web


Thanks


> before 2018 are essentially now bricks

Quit being overly antagonistic, you know this is hyperbole because you are

> someone with a device locked on iOS 10


I feel like you think this means munk-a is merely refusing to update past iOS 10, but there are devices that simply can't. (The ones stuck specifically on iOS 10 forever are the iPhone 5 and 5c.)


Claiming devices from before 2018 are essentially bricks is still hyperbole because the iPhone 5c was released long before that, 2013. The iPhone 6s, released in 2015, will run iOS 15.

I think the original message was poorly worded, I think they were imagining that devices that can't run iOS 15 would essentially be bricks because every app maker would build their apps in this way that only works on iOS 15 devices. Of course, this will not happen. It has long been the case that developers need to balance the advantages of using techniques enabled in newer OS versions against the advantage of supporting a wider range of OS versions.


Well, as someone who stays on slightly old versions of iOS, that I can't even order food off of DoorDash is pretty frustrating. The reality is that people do in fact derelict these old devices under an expectation that everyone is rich enough to throw out perfectly functional equipment and replace it all the time. It is sad that Apple is actually the best at this :/.


I don't care about 3rd party delivery services but it looks like like DoorDash has a website so you can still be their customer.

It looks like their app requires iOS 13 which requires an iPhone 6s or newer (though it can run iOS 14 and will run iOS 15). The iPhone 6 won't run iOS 13, it had five years between its release and the release of an OS it can't run, that still seems like a respectable amount for a phone.

Apple is way better at supporting the longevity of their devices, through build quality and continued OS support, than the Android world is.


Given that my iPhone 6 cost $200 and I break a screen every 1-2 years, 5 years is more than enough. I’d never pay to replace a screen or battery on an old phone. I’d imagine a significant portion of devices have been accidentally smashed or dropped in a lake by that time.


>Well, as someone who stays on slightly old versions of iOS, that I can't even order food off of DoorDash is pretty frustrating.

Well, the idea with iOS/macOS is "Have a recent OS+Device, we change things all the time and demand that everyone moves along in 5-6 years or so".

With Windows it's "We support 20+ years old programs just fine. If you're OK with having to deal with 8+ layers of GUI code and legacy cruft, we're your thing".

It's not like this hasn't been the case for decades, for it to be a suprise...


Calling them 'essentially bricks' is calling them functionless, which they are not.

The iPhone 5/5c was released nine years ago. I'm just not crying for it. If your app dev isn't updating for iOS 15, you're stuck with the old version anyway. Sorry your decade-old device can't use the latest technology.


Well, I'll claim they are potentially worse than bricks, as they are riddled with remotely exploitable security holes (such as the various iMessage ones that come out every year)... like some kind of dangerous land mine in the shape of a brick.


I wouldn’t mind so much if I could have access to older software that still runs on the device.


This is a real problem for my device - I essentially can't download any "new" software since the app store only appears to make versions incompatible with the newest OS available - and my device (a 2012 iPad 4 Retina to be precise) refuses to update past iOS 10.3.3


these devices are nearly 10 years old


iPhone 5 is 9 years old, iPhone 5C is 8.


Oh sorry to clarify 2018 is when my partner got their most recent Apple device which will be able to run this update fine - our previous device is a Retina iPad from 2012. Re-reading my wording yea, I can see how that read as hyperbolic, sorry about that!


When Jason Snell posts on HN, I sit up in my chair.

Great read. That "technology" included in Realtek is absolutely bonkers -- who asked for that functionality at a consumer level? No one.


> When Jason Snell posts on HN, I sit up in my chair

I believe the post is from Juho Snell:

http://www.snellman.net/blog/archive/about/

https://twitter.com/juhosnellman


> That "technology" included in Realtek is absolutely bonkers -- who asked for that functionality at a consumer level? No one.

What tech are we talking about? WoL is definitely appreciated in all devices, although the "RealWoW" thing is very much diminishing returns. Otherwise, everything is just normal programmable chips and DMA-type data movement, both of which are generally desirable.


nah. i'll take wifi hardware that doesn't have buggy layer 4+ features in firmware that hackers can exploit to turn my keystrokes into udp packets, thank you very much.

in fact, i think i'd prefer a computer that leaves all the layer 4+ up to the operating system as at least it has a chance of being audited.

that said, this raises an interesting point. the only way to really be sure is to sniff your own packets... but if everything moves to being encrypted that's going to get a lot harder...


The RealWoW stuff requires host cooperation to set the proper configuration fields. The card has very basic functionality to be pre-configured to respond to certain packets, but this needs to be set by the host - it is disabled by default and in fact the Linux driver doesn't even support it.

In addition if he could achieve code execution on the card it wouldn't matter whether the card has this functionality as he could implement it himself if needed.


sorry. regardless of whether or not you can change the firmware binaries to do what you want. i'm really not okay with half-assed remote management junk being baked into the nic of my personal laptop that bypasses any firewalls i can configure and is constructed from code i cannot review.

that is exactly the kind of crap that gets exploited.


RealWoW.


This comment doesn't seem too related to the article except for the words "Jason Snell" and "Realtek", and both of those appear misused.

So I don't mean to be rude, but I'm guessing this is a chatbot? Skimmed for proper-nouns, then generic shrills about how the author and article are great and how technology's too complicated?


Good catch. I must say I concur with your assessment.


You're wrong, go see my reply to the other guy. What a miserable lot you two make.


> So I don't mean to be rude

He said, before being rude & condescending. Here, would a chat bot pick apart your miserable comment like this?

https://twitter.com/jsnell

Oh no I mixed up social media handles I must be a chat bot

> Skimmed for proper-nouns

Oh no I mixed up social media handles I must be a chat bot

> then generic shrills

Huh? I'm complaining about the very real technology present in the Realtek chips that enables any moron with access to a web browser to send firmware-level commands anywhere in the world.

Did you even read the article?

> about how the author and article are great

Are you a chatbot? I didn't even sing about the article being great, I asked if anyone had a real consumer application for the tech presented as an attack vector in the article.

Go outside. Talk to a human being. I'm betting it's been a couple years for you if you're this bad at not only misjudging intention but going straight to "this must not be a human being, only a bot would respond with something I do not wholly understand".

Again, what a miserable comment.


Hah, okay, that sounds human enough. Sorry for the misunderstanding; I truly meant no offense.

Thanks for clarifying! =)


> I truly meant no offense

Work on your approach.


He said "I don't mean to be rude", meanwhile you're the one that's actually being rude.


Chatbot detection protection? Throws some whataboutism and a human written paragraph attacking the comment to disguise things.


> Asked 9 years, 10 months ago

> Active 8 years, 9 months ago

Come on. Try.


> I love IT, I love working

> I have to be happy to go to work when I wake up in the morning.

Not too sure you love IT there, my friend.

Also sounds like you haven't risen above the first couple tiers of any given organization, because a lot of your complaints are bottom-of-the-ranks type stuff:

> non-sense tasks, no trust, social pressure to prove my skills

Are you company hopping like everyone else your age like a damn jackrabbit?


What an awful headline.

If you're buying this webcam, you're buying an external mic. Onboard microphones for cameras have always been awful, this is not news.


The owner/creator of Nexus Mods is an abusive one toward his users.

Years back, there existed a simple Nexus Mod Manager for well... managing your mods for installed games. It was a simple tool that did the job well.

At some point the owner of Nexus Mods decided/needed to monetize, so he started jamming ads and slow connections to non-premium customers.

Soon after, he deprecated Nexus Mod Manager for Vortex. Go search their own forums if you want to see the nightmare, but "installing" a mod via Vortex takes around 9 clicks, doesn't always install the mod properly, and generally is slower than molasses. It's essentially an app wrapper over a poorly written website.

No shock at all they're making yet another anti-user, anti-creator move. They generally seem to have a grudge against their own community.

The entire "mod" community around gaming is like this as well. ModDrop was created as a response to the onslaught of ads/premium/bad stewardship and became the very thing it hated.


I don't code professionally because I know I can't hack it at that level. I wouldn't want to code for 40+ hours/week, it would drive me mad.

I program insofar to make things on Raspberry Pi, manage my home automation tasks in Linux, although I'm sure professionals would label what I'm doing "scripting" in some instances.


Oof. You can confirm it pretty much everywhere. Qualifying just ended for the Austrian Grand Prix, and many people will/would be paying attention to their phones for news relating to that.

Someone at FOM/Liberty Media (holder of the commercial rights for Formula 1, thus the responsible parties for the app)[1] is not having a pleasant Saturday evening in Austria.

A head or two should roll up the IT chain, but who knows ... might be a credential leak. An event was held at this same track last weekend, an oddity of the COVID-affected race schedule for the sport. Perhaps they re-used some credentials from last week, that were leaked/identified in the layover between race weekends.

[1]: https://en.wikipedia.org/wiki/Formula_One_Group


Yes, it will be really interesting to read a post-mortem of this.

I also got a notification just saying "foo" 5 minutes before that and thought that was somebody testing in production.


Got the same message. Also thought it was a developer testing :-), but a few minutes later a message about security issues was pushed...

Love it ...


> The so-called compiler implemented uses the dumbest possible implementation

I love remarkably blunt comments in code. The Quake III code that caused the uproar recently with Copilot probably being the most famous example.


> The Quake III code that caused the uproar recently with Copilot

I've been in the hospital for a few days. Fill me in?


Copilot regurgitating Quake code, including sweary comments (1 day ago, 626 comments): https://news.ycombinator.com/item?id=27710287

The code in question, with the “remarkably blunt comments” 'edgeform refers to: https://en.wikipedia.org/wiki/Fast_inverse_square_root#Overv...


Ha, that's amazing.

To be fair (if this is even a defense), that algorithm is famous, as is its source, so "leading" the AI in that direction just got it to keep going in that direction.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: