Amazon receives FDA warning letter for supplements with undeclared ingredients
490 by mkmk | 404 comments on Hacker News.
Sunday 31 December 2023
New best story on Hacker News: Happy New Year HN!
Happy New Year HN!
625 by thunderbong | 126 comments on Hacker News.
I spend too much time on HN. But of all the places on the internet, this is the only place which feels worth visiting multiple times a day! Wishing everyone a great 2024!
625 by thunderbong | 126 comments on Hacker News.
I spend too much time on HN. But of all the places on the internet, this is the only place which feels worth visiting multiple times a day! Wishing everyone a great 2024!
New best story on Hacker News: Compare Google, Bing, Marginalia, Kagi, Mwmbl, and ChatGPT
Compare Google, Bing, Marginalia, Kagi, Mwmbl, and ChatGPT
562 by 882542F3884314B | 248 comments on Hacker News.
562 by 882542F3884314B | 248 comments on Hacker News.
Friday 29 December 2023
New best story on Hacker News: Show HN: Rem: Remember Everything (open source)
Show HN: Rem: Remember Everything (open source)
515 by jasonjmcghee | 183 comments on Hacker News.
An open source approach to locally record everything you view on your Apple Silicon computer. Note: Relies on Apple Silicon, and configured to only produce Apple Silicon builds. I think the idea of recording everything you see has the potential to change how we interact with our computers, and believe it should be open source. Also, from a privacy / security perspective, this is like... pretty scary stuff, and I want the code open so we know for certain that nothing is leaving your laptop. Even logging to Sentry has the potential to leak private info.
515 by jasonjmcghee | 183 comments on Hacker News.
An open source approach to locally record everything you view on your Apple Silicon computer. Note: Relies on Apple Silicon, and configured to only produce Apple Silicon builds. I think the idea of recording everything you see has the potential to change how we interact with our computers, and believe it should be open source. Also, from a privacy / security perspective, this is like... pretty scary stuff, and I want the code open so we know for certain that nothing is leaving your laptop. Even logging to Sentry has the potential to leak private info.
Thursday 28 December 2023
Wednesday 27 December 2023
Tuesday 26 December 2023
Monday 25 December 2023
New best story on Hacker News: Ask HN: How do I train a custom LLM/ChatGPT on my own documents in Dec 2023?
Ask HN: How do I train a custom LLM/ChatGPT on my own documents in Dec 2023?
576 by divan | 178 comments on Hacker News.
There is a 5 month old thread [1] on this, but it might be already outdated. What is the best approach for feeding custom set of documents to LLM and get non-halucinating and decent result in Dec 2023? UPD: The question is generally about how to "teach" LLM answer questions using your set of documents (not necessarily train your own, so approaches like RAG counts) [1] https://ift.tt/qvaRy3U
576 by divan | 178 comments on Hacker News.
There is a 5 month old thread [1] on this, but it might be already outdated. What is the best approach for feeding custom set of documents to LLM and get non-halucinating and decent result in Dec 2023? UPD: The question is generally about how to "teach" LLM answer questions using your set of documents (not necessarily train your own, so approaches like RAG counts) [1] https://ift.tt/qvaRy3U
Sunday 24 December 2023
Saturday 23 December 2023
Friday 22 December 2023
New best story on Hacker News: Show HN: Heynote – A dedicated scratchpad for developers
Show HN: Heynote – A dedicated scratchpad for developers
547 by jonatanheyman | 175 comments on Hacker News.
Hey! I made Heynote entirely for my own use case. For many years, I always had an Emacs instance running with the scratch buffer open, even long after I had abandoned Emacs as my programming editor in favor of more recent IDE:s. The simplicity of having just one big scratch buffer appeals to me, but I still want to separate the different things I jot down somehow (without using tabs or similar). Previously, my solution was to insert a bunch of blank lines between the notes, but hitting C-A would still select the entire buffer. That's why I came up with the concept of "blocks", which turned out really well for my use cases. I decided to release Heynote, thinking it might be useful to others.
547 by jonatanheyman | 175 comments on Hacker News.
Hey! I made Heynote entirely for my own use case. For many years, I always had an Emacs instance running with the scratch buffer open, even long after I had abandoned Emacs as my programming editor in favor of more recent IDE:s. The simplicity of having just one big scratch buffer appeals to me, but I still want to separate the different things I jot down somehow (without using tabs or similar). Previously, my solution was to insert a bunch of blank lines between the notes, but hitting C-A would still select the entire buffer. That's why I came up with the concept of "blocks", which turned out really well for my use cases. I decided to release Heynote, thinking it might be useful to others.
Thursday 21 December 2023
New best story on Hacker News: Tell HN: I salute everyone on call/working support through the holidays
Tell HN: I salute everyone on call/working support through the holidays
551 by waynesoftware | 107 comments on Hacker News.
Thank you for keeping systems available and safe. I've been there many times in the past, including having to fly at the last minute to a non-internet-connected data center in NJ to babysit an emergency production bug fix that took the entire holiday to create, install, verify, and monitor.
551 by waynesoftware | 107 comments on Hacker News.
Thank you for keeping systems available and safe. I've been there many times in the past, including having to fly at the last minute to a non-internet-connected data center in NJ to babysit an emergency production bug fix that took the entire holiday to create, install, verify, and monitor.
Wednesday 20 December 2023
New best story on Hacker News: Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
Tell HN: Microsoft.com added 192.168.1.1 to their DNS record
472 by indosauros | 128 comments on Hacker News.
Is this bad? $ nslookup microsoft.com Non-authoritative answer: Name: microsoft.com Address: 192.168.1.0 Name: microsoft.com Address: 20.112.250.133 Name: microsoft.com Address: 20.231.239.246 Name: microsoft.com Address: 20.76.201.171 Name: microsoft.com Address: 20.70.246.20 Name: microsoft.com Address: 20.236.44.162 Name: microsoft.com Address: 192.168.1.1
472 by indosauros | 128 comments on Hacker News.
Is this bad? $ nslookup microsoft.com Non-authoritative answer: Name: microsoft.com Address: 192.168.1.0 Name: microsoft.com Address: 20.112.250.133 Name: microsoft.com Address: 20.231.239.246 Name: microsoft.com Address: 20.76.201.171 Name: microsoft.com Address: 20.70.246.20 Name: microsoft.com Address: 20.236.44.162 Name: microsoft.com Address: 192.168.1.1
Tuesday 19 December 2023
Monday 18 December 2023
Sunday 17 December 2023
Saturday 16 December 2023
Friday 15 December 2023
Thursday 14 December 2023
New best story on Hacker News: Ask HN: What apps have you created for your own use?
Ask HN: What apps have you created for your own use?
342 by fuzztester | 716 comments on Hacker News.
Could be CLI, GUI, web, mobile, other. Asking out of interest. Thanks in advance to all.
342 by fuzztester | 716 comments on Hacker News.
Could be CLI, GUI, web, mobile, other. Asking out of interest. Thanks in advance to all.
Wednesday 13 December 2023
New best story on Hacker News: Show HN: Open-source macOS AI copilot using vision and voice
Show HN: Open-source macOS AI copilot using vision and voice
424 by ralfelfving | 154 comments on Hacker News.
Heeey! I built a macOS copilot that has been useful to me, so I open sourced it in case others would find it useful too. It's pretty simple: - Use a keyboard shortcut to take a screenshot of your active macOS window and start recording the microphone. - Speak your question, then press the keyboard shortcut again to send your question + screenshot off to OpenAI Vision - The Vision response is presented in-context/overlayed over the active window, and spoken to you as audio. - The app keeps running in the background, only taking a screenshot/listening when activated by keyboard shortcut. It's built with NodeJS/Electron, and uses OpenAI Whisper, Vision and TTS APIs under the hood (BYO API key). There's a simple demo and a longer walk-through in the GH readme https://ift.tt/EzInCK6 , and I also posted a different demo on Twitter: https://twitter.com/ralfelfving/status/1732044723630805212
424 by ralfelfving | 154 comments on Hacker News.
Heeey! I built a macOS copilot that has been useful to me, so I open sourced it in case others would find it useful too. It's pretty simple: - Use a keyboard shortcut to take a screenshot of your active macOS window and start recording the microphone. - Speak your question, then press the keyboard shortcut again to send your question + screenshot off to OpenAI Vision - The Vision response is presented in-context/overlayed over the active window, and spoken to you as audio. - The app keeps running in the background, only taking a screenshot/listening when activated by keyboard shortcut. It's built with NodeJS/Electron, and uses OpenAI Whisper, Vision and TTS APIs under the hood (BYO API key). There's a simple demo and a longer walk-through in the GH readme https://ift.tt/EzInCK6 , and I also posted a different demo on Twitter: https://twitter.com/ralfelfving/status/1732044723630805212
Tuesday 12 December 2023
Monday 11 December 2023
Sunday 10 December 2023
Saturday 9 December 2023
Friday 8 December 2023
Thursday 7 December 2023
Wednesday 6 December 2023
Tuesday 5 December 2023
New best story on Hacker News: Show HN: Beeper Mini – iMessage Client for Android
Show HN: Beeper Mini – iMessage Client for Android
577 by erohead | 406 comments on Hacker News.
Hi HN! I’m proud to share that we have built a real 3rd party iMessage client for Android. We did it by reverse engineering the iMessage protocol and encryption system. It's available to download today (no waitlist): https://ift.tt/bXHYrUP and there's a technical writeup here: https://ift.tt/m7HNM1F . Unlike every other attempt to build an iMessage app for Android (including our first gen app), Beeper Mini does not use a Mac server relay in the cloud. The app connects directly to Apple servers to send and receive end-to-end encrypted messages. Encryption keys never leave your device. No Apple ID is required. Beeper does not have access to your Apple account. With Beeper Mini, your Android phone number is registered on iMessage. You show up as a ‘blue bubble’ when iPhone friends text you, and can join real iMessage group chats. All chat features like typing status, read receipts, full resolution images/video, emoji reactions, voice notes, editing/unsending, stickers etc are supported. This is all unprecedented, so I imagine you may have a lot of questions. We’ve written a detailed technical blog post about how Beeper Mini works: https://ift.tt/m7HNM1F . A team member has published an open source Python iMessage protocol PoC on Github: https://ift.tt/MK5g0XP . You can try it yourself on any Mac/Windows/Linux computer and see how iMessage works. My cofounder and I are also here to answer questions in the comments. Our long term vision is to build a universal chat app ( https://ift.tt/jx3lfw9 ). Over the next few months, we will be adding support for SMS/RCS, WhatsApp, Signal and 12 other chat networks into Beeper Mini. At that point, we’ll drop the `Mini` postfix. We’re also rebuilding our Beeper Desktop and iOS apps to support our new ‘client-side bridge’ architecture that preserves full end-to-end encryption. We’re also renaming our first gen apps to ‘Beeper Cloud’ to more clearly differentiate them from Beeper Mini. Side note: many people always ask ‘what do you think Apple is going to do about this?’ To be honest, I am shocked that everyone is so shocked by the sheer existence of a 3rd party iMessage client. The internet has always had 3rd party clients! It’s almost like people have forgotten that iChat (the app that iMessage grew out of) was itself a multi-protocol chat app! It supported AIM, Jabber and Google talk. Here’s a blast from the past: https://ift.tt/08BcoDC .
577 by erohead | 406 comments on Hacker News.
Hi HN! I’m proud to share that we have built a real 3rd party iMessage client for Android. We did it by reverse engineering the iMessage protocol and encryption system. It's available to download today (no waitlist): https://ift.tt/bXHYrUP and there's a technical writeup here: https://ift.tt/m7HNM1F . Unlike every other attempt to build an iMessage app for Android (including our first gen app), Beeper Mini does not use a Mac server relay in the cloud. The app connects directly to Apple servers to send and receive end-to-end encrypted messages. Encryption keys never leave your device. No Apple ID is required. Beeper does not have access to your Apple account. With Beeper Mini, your Android phone number is registered on iMessage. You show up as a ‘blue bubble’ when iPhone friends text you, and can join real iMessage group chats. All chat features like typing status, read receipts, full resolution images/video, emoji reactions, voice notes, editing/unsending, stickers etc are supported. This is all unprecedented, so I imagine you may have a lot of questions. We’ve written a detailed technical blog post about how Beeper Mini works: https://ift.tt/m7HNM1F . A team member has published an open source Python iMessage protocol PoC on Github: https://ift.tt/MK5g0XP . You can try it yourself on any Mac/Windows/Linux computer and see how iMessage works. My cofounder and I are also here to answer questions in the comments. Our long term vision is to build a universal chat app ( https://ift.tt/jx3lfw9 ). Over the next few months, we will be adding support for SMS/RCS, WhatsApp, Signal and 12 other chat networks into Beeper Mini. At that point, we’ll drop the `Mini` postfix. We’re also rebuilding our Beeper Desktop and iOS apps to support our new ‘client-side bridge’ architecture that preserves full end-to-end encryption. We’re also renaming our first gen apps to ‘Beeper Cloud’ to more clearly differentiate them from Beeper Mini. Side note: many people always ask ‘what do you think Apple is going to do about this?’ To be honest, I am shocked that everyone is so shocked by the sheer existence of a 3rd party iMessage client. The internet has always had 3rd party clients! It’s almost like people have forgotten that iChat (the app that iMessage grew out of) was itself a multi-protocol chat app! It supported AIM, Jabber and Google talk. Here’s a blast from the past: https://ift.tt/08BcoDC .
Monday 4 December 2023
New best story on Hacker News: Ask HN: What side projects landed you a job?
Ask HN: What side projects landed you a job?
498 by jessehorne | 471 comments on Hacker News.
I'm curious to see what projects members of this community have worked on that contributed to them getting a job. What's the project? How did it help you land a job? Did the project itself get you the job or did it help in the interview process? Was the project work related to the job at all? Edit: Ya'll hirin'?
498 by jessehorne | 471 comments on Hacker News.
I'm curious to see what projects members of this community have worked on that contributed to them getting a job. What's the project? How did it help you land a job? Did the project itself get you the job or did it help in the interview process? Was the project work related to the job at all? Edit: Ya'll hirin'?
Sunday 3 December 2023
New best story on Hacker News: Ask HN: Who is hiring? (December 2023)
Ask HN: Who is hiring? (December 2023)
471 by whoishiring | 367 comments on Hacker News.
Please state the location and include REMOTE, INTERNS and/or VISA when that sort of candidate is welcome. When remote work is not an option, include ONSITE. Please only post if you personally are part of the hiring company—no recruiting firms or job boards. One post per company. If it isn't a household name, explain what your company does. Commenters: please don't reply to job posts to complain about something. It's off topic here. Readers: please only email if you are personally interested in the job. Searchers: try https://ift.tt/lx13EGW , https://ift.tt/X9jvzL3 , https://ift.tt/yORvZLb , https://hnhired.fly.dev , https://ift.tt/85kPZp2 , https://ift.tt/syzCXlT . Don't miss these other fine threads: Who wants to be hired? https://ift.tt/edxUWzO Freelancer? Seeking freelancer? https://ift.tt/Y4r05EB
471 by whoishiring | 367 comments on Hacker News.
Please state the location and include REMOTE, INTERNS and/or VISA when that sort of candidate is welcome. When remote work is not an option, include ONSITE. Please only post if you personally are part of the hiring company—no recruiting firms or job boards. One post per company. If it isn't a household name, explain what your company does. Commenters: please don't reply to job posts to complain about something. It's off topic here. Readers: please only email if you are personally interested in the job. Searchers: try https://ift.tt/lx13EGW , https://ift.tt/X9jvzL3 , https://ift.tt/yORvZLb , https://hnhired.fly.dev , https://ift.tt/85kPZp2 , https://ift.tt/syzCXlT . Don't miss these other fine threads: Who wants to be hired? https://ift.tt/edxUWzO Freelancer? Seeking freelancer? https://ift.tt/Y4r05EB
Saturday 2 December 2023
Friday 1 December 2023
Thursday 30 November 2023
Wednesday 29 November 2023
Tuesday 28 November 2023
Monday 27 November 2023
Sunday 26 November 2023
Saturday 25 November 2023
Friday 24 November 2023
Thursday 23 November 2023
Wednesday 22 November 2023
Tuesday 21 November 2023
Monday 20 November 2023
Sunday 19 November 2023
New best story on Hacker News: Show HN: YouTube banned adblockers so I built an extension to skip their ads
Show HN: YouTube banned adblockers so I built an extension to skip their ads
578 by rKarpinski | 630 comments on Hacker News.
Hi HN! Since Youtube no longer allows AdBlockers, I built my own extension to get around their video ads. If there is an ad it temporarily manipulates the video; Mutes the volume, sets speed to 10x, and skips it if there is a button. Chrome Webstore link: https://ift.tt/LPjTqDX... Code: https://ift.tt/H6Y1R3d
578 by rKarpinski | 630 comments on Hacker News.
Hi HN! Since Youtube no longer allows AdBlockers, I built my own extension to get around their video ads. If there is an ad it temporarily manipulates the video; Mutes the volume, sets speed to 10x, and skips it if there is a button. Chrome Webstore link: https://ift.tt/LPjTqDX... Code: https://ift.tt/H6Y1R3d
Saturday 18 November 2023
Friday 17 November 2023
Thursday 16 November 2023
Wednesday 15 November 2023
Tuesday 14 November 2023
Monday 13 November 2023
Sunday 12 November 2023
Saturday 11 November 2023
Friday 10 November 2023
Thursday 9 November 2023
Wednesday 8 November 2023
Tuesday 7 November 2023
Monday 6 November 2023
Sunday 5 November 2023
Friday 3 November 2023
Thursday 2 November 2023
Wednesday 1 November 2023
Tuesday 31 October 2023
New best story on Hacker News: Phind Model beats GPT-4 at coding, with GPT-3.5 speed and 16k context
Phind Model beats GPT-4 at coding, with GPT-3.5 speed and 16k context
501 by rushingcreek | 221 comments on Hacker News.
Hi HN, We’re excited to announce that Phind now defaults to our own model that matches and exceeds GPT-4’s coding abilities while running 5x faster. You can now get high quality answers for technical questions in 10 seconds instead of 50. The current 7th-generation Phind Model is built on top of our open-source CodeLlama-34B fine-tunes that were the first models to beat GPT-4’s score on HumanEval and are still the best open source coding models overall by a wide margin: https://ift.tt/79xoLWH... . This new model has been fine-tuned on an additional 70B+ tokens of high quality code and reasoning problems and exhibits a HumanEval score of 74.7%. However, we’ve found that HumanEval is a poor indicator of real-world helpfulness. After deploying previous iterations of the Phind Model on our service, we’ve collected detailed feedback and noticed that our model matches or exceeds GPT-4’s helpfulness most of the time on real-world questions. Many in our Discord community have begun using Phind exclusively with the Phind Model despite also having unlimited access to GPT-4. One of the Phind Model’s key advantages is that it's very fast. We’ve been able to achieve a 5x speedup over GPT-4 by running our model on H100s using the new TensorRT-LLM library from NVIDIA. We can achieve up to 100 tokens per second single-stream while GPT-4 runs around 20 tokens per second at best. Another key advantage of the Phind Model is context – it supports up to 16k tokens. We currently allow inputs of up to 12k tokens on the website and reserve the remaining 4k for web results. There are still some rough edges with the Phind Model and we’ll continue improving it constantly. One area where it still suffers is consistency — on certain challenging questions where it is capable of getting the right answer, the Phind Model might take more generations to get to the right answer than GPT-4. We’d love to hear your feedback. Cheers, The Phind Team
501 by rushingcreek | 221 comments on Hacker News.
Hi HN, We’re excited to announce that Phind now defaults to our own model that matches and exceeds GPT-4’s coding abilities while running 5x faster. You can now get high quality answers for technical questions in 10 seconds instead of 50. The current 7th-generation Phind Model is built on top of our open-source CodeLlama-34B fine-tunes that were the first models to beat GPT-4’s score on HumanEval and are still the best open source coding models overall by a wide margin: https://ift.tt/79xoLWH... . This new model has been fine-tuned on an additional 70B+ tokens of high quality code and reasoning problems and exhibits a HumanEval score of 74.7%. However, we’ve found that HumanEval is a poor indicator of real-world helpfulness. After deploying previous iterations of the Phind Model on our service, we’ve collected detailed feedback and noticed that our model matches or exceeds GPT-4’s helpfulness most of the time on real-world questions. Many in our Discord community have begun using Phind exclusively with the Phind Model despite also having unlimited access to GPT-4. One of the Phind Model’s key advantages is that it's very fast. We’ve been able to achieve a 5x speedup over GPT-4 by running our model on H100s using the new TensorRT-LLM library from NVIDIA. We can achieve up to 100 tokens per second single-stream while GPT-4 runs around 20 tokens per second at best. Another key advantage of the Phind Model is context – it supports up to 16k tokens. We currently allow inputs of up to 12k tokens on the website and reserve the remaining 4k for web results. There are still some rough edges with the Phind Model and we’ll continue improving it constantly. One area where it still suffers is consistency — on certain challenging questions where it is capable of getting the right answer, the Phind Model might take more generations to get to the right answer than GPT-4. We’d love to hear your feedback. Cheers, The Phind Team
Monday 30 October 2023
Sunday 29 October 2023
Saturday 28 October 2023
Friday 27 October 2023
Thursday 26 October 2023
Wednesday 25 October 2023
Tuesday 24 October 2023
Monday 23 October 2023
Sunday 22 October 2023
Saturday 21 October 2023
Friday 20 October 2023
Thursday 19 October 2023
Wednesday 18 October 2023
Tuesday 17 October 2023
Monday 16 October 2023
Sunday 15 October 2023
Saturday 14 October 2023
Thursday 12 October 2023
Wednesday 11 October 2023
Tuesday 10 October 2023
Monday 9 October 2023
Sunday 8 October 2023
Saturday 7 October 2023
Friday 6 October 2023
Thursday 5 October 2023
New best story on Hacker News: Show HN: Classic Video Poker
Show HN: Classic Video Poker
551 by appstorelottery | 210 comments on Hacker News.
I'm a Unity 3D refugee, certified expert, started in 2005 when it was a two man-band with Joachim and David. I've been lucky enough to make a good living out of Unity with my own consultancy over the years making data visualisation applications (Wind Energy) and innovation projects (Visualising accounting data for Wolters Kluwer etc.). Godot is pretty amazing in my opinion. Wrote this game over a few days and was productive in Godot basically instantly. I couldn't get up and running in Unreal despite trying a few times. It's my ambition to start a niche agency developing 80's style games of skill and chance for the corporate world. So... If anyone has any leads for making Space Invaders for Nike - please help! Happy to pay 5% on whatever work I get.
551 by appstorelottery | 210 comments on Hacker News.
I'm a Unity 3D refugee, certified expert, started in 2005 when it was a two man-band with Joachim and David. I've been lucky enough to make a good living out of Unity with my own consultancy over the years making data visualisation applications (Wind Energy) and innovation projects (Visualising accounting data for Wolters Kluwer etc.). Godot is pretty amazing in my opinion. Wrote this game over a few days and was productive in Godot basically instantly. I couldn't get up and running in Unreal despite trying a few times. It's my ambition to start a niche agency developing 80's style games of skill and chance for the corporate world. So... If anyone has any leads for making Space Invaders for Nike - please help! Happy to pay 5% on whatever work I get.
Wednesday 4 October 2023
Tuesday 3 October 2023
New best story on Hacker News: Ask HN: Who is hiring? (October 2023)
Ask HN: Who is hiring? (October 2023)
456 by whoishiring | 475 comments on Hacker News.
Please state the location and include REMOTE, INTERNS and/or VISA when that sort of candidate is welcome. When remote work is not an option, include ONSITE. Please only post if you personally are part of the hiring company—no recruiting firms or job boards. One post per company. If it isn't a household name, explain what your company does. Commenters: please don't reply to job posts to complain about something. It's off topic here. Readers: please only email if you are personally interested in the job. Searchers: try https://ift.tt/ErwWTGq , https://ift.tt/2pPmiB3 , https://ift.tt/r6D5gR8 , https://hnhired.fly.dev , https://ift.tt/YomHcyG , https://ift.tt/egwPNRk . Don't miss these other fine threads: Who wants to be hired? https://ift.tt/mpRZY5l Freelancer? Seeking freelancer? https://ift.tt/mRON7BP
456 by whoishiring | 475 comments on Hacker News.
Please state the location and include REMOTE, INTERNS and/or VISA when that sort of candidate is welcome. When remote work is not an option, include ONSITE. Please only post if you personally are part of the hiring company—no recruiting firms or job boards. One post per company. If it isn't a household name, explain what your company does. Commenters: please don't reply to job posts to complain about something. It's off topic here. Readers: please only email if you are personally interested in the job. Searchers: try https://ift.tt/ErwWTGq , https://ift.tt/2pPmiB3 , https://ift.tt/r6D5gR8 , https://hnhired.fly.dev , https://ift.tt/YomHcyG , https://ift.tt/egwPNRk . Don't miss these other fine threads: Who wants to be hired? https://ift.tt/mpRZY5l Freelancer? Seeking freelancer? https://ift.tt/mRON7BP
New best story on Hacker News: Exploiting the iPhone 4
Exploiting the iPhone 4
432 by codyd51 | 46 comments on Hacker News.
Hi HN, author here! For the past three months, I've been obsessively working on gala, a jailbreak for iOS 4 that currently targets the iPhone 4. While other jailbreaks for this device, and this iOS version, already exist, the 'special sauce' of this jailbreak is that it comes with a 6-part series describing the building of a jailbreak and the many challenges that arose when jailbreaking iOS. The series includes interactive visualizations at every step of exploiting the device - from pulling memory dumps of the boot ROM to debugging a flashed filesystem image. That said, this isn't just a bare-bones jailbreak with some writing attached: gala is a fully-fledged suite that includes a significant Python application, a Cocoa GUI for end-users, a Rust payload, Cocoa Touch games to play within the boot environment while the jailbreak completes, and C utilities that run on-device. This was a lot of fun, and the journey included lots of milestones: when an iOS device boots, it does so in discrete stages (boot ROM, then boot loader, then kernel, etc.). This meant that my experience of developing this jailbreak also included these milestones, as over time I successfully compromised and ran each of these stages! Building this was personally exciting because I used to regularly make and sell tweaks for jailbroken phones on Cydia. The jailbreaks themselves always seemed like inscrutable black magic, until now! I'm really gratified to have finished up this project, and am excited to put it out into the world. Please feel welcome to have a look at the code, the writeup, or give it a spin on an old iPhone 4 that you have lying around. I hope you enjoy!
432 by codyd51 | 46 comments on Hacker News.
Hi HN, author here! For the past three months, I've been obsessively working on gala, a jailbreak for iOS 4 that currently targets the iPhone 4. While other jailbreaks for this device, and this iOS version, already exist, the 'special sauce' of this jailbreak is that it comes with a 6-part series describing the building of a jailbreak and the many challenges that arose when jailbreaking iOS. The series includes interactive visualizations at every step of exploiting the device - from pulling memory dumps of the boot ROM to debugging a flashed filesystem image. That said, this isn't just a bare-bones jailbreak with some writing attached: gala is a fully-fledged suite that includes a significant Python application, a Cocoa GUI for end-users, a Rust payload, Cocoa Touch games to play within the boot environment while the jailbreak completes, and C utilities that run on-device. This was a lot of fun, and the journey included lots of milestones: when an iOS device boots, it does so in discrete stages (boot ROM, then boot loader, then kernel, etc.). This meant that my experience of developing this jailbreak also included these milestones, as over time I successfully compromised and ran each of these stages! Building this was personally exciting because I used to regularly make and sell tweaks for jailbroken phones on Cydia. The jailbreaks themselves always seemed like inscrutable black magic, until now! I'm really gratified to have finished up this project, and am excited to put it out into the world. Please feel welcome to have a look at the code, the writeup, or give it a spin on an old iPhone 4 that you have lying around. I hope you enjoy!
Monday 2 October 2023
Sunday 1 October 2023
New best story on Hacker News: Show HN: RISC-V assembly tabletop board game (hack your opponent)
Show HN: RISC-V assembly tabletop board game (hack your opponent)
377 by throwaway71271 | 46 comments on Hacker News.
I made this game to teach my daughter how buffer overflows work. I want her to look at programs as things she can change, and make them do whatever she wants. Building your exploit in memory and jumping to it feels so cool. I hope this game teaches kids and programmers (who seem to have forgotten what computers actually are) that its quite fun to mess with programs. We used to have that excitement few years ago, just break into softice and change a branch into a nop and ignore the serial number check, or go to a different game level because this one is too annoying. While working on the game I kept thinking what we have lost from 6502 to Apple Silicon, and the transition from 'personal computers' to 'you are completely not responsible for most the code running on your device', it made me a bit sad and happy in the same time, RISCV seems like a breath of fresh air, and many hackers will build many new things, new protocols, new networks, new programs. As PI4 cost increases, the esp32 cost is decreasing, we have transparent displays for 20$, good computers for 5$, cheap lora, and etc. Everything is more accessible than ever. I played with a friend who saw completely different exploits than me, and I learned a lot just from few games, and because of the complexity of the game its often you enter into a position that you get surprised by your own actions :) So if you manage to find at least one friend who is not completely stunned by the assembler, I think you will have some good time. A huge inspiration comes from phrack 49's 'Smashing The Stack For Fun And Profit' which has demystified the stack for me: https://ift.tt/SYy5NjI TLDR: computers are fun, and you can make them do things. PS: In order to play with my friends I also built esp32 helper[1] that keeps track of the game state, and when I built it and wrote the code and everything I realized I could've just media queried the web version of the game.. but anyway, its way cooler to have a board game contraption. [1]: https://ift.tt/Ya5SgOz
377 by throwaway71271 | 46 comments on Hacker News.
I made this game to teach my daughter how buffer overflows work. I want her to look at programs as things she can change, and make them do whatever she wants. Building your exploit in memory and jumping to it feels so cool. I hope this game teaches kids and programmers (who seem to have forgotten what computers actually are) that its quite fun to mess with programs. We used to have that excitement few years ago, just break into softice and change a branch into a nop and ignore the serial number check, or go to a different game level because this one is too annoying. While working on the game I kept thinking what we have lost from 6502 to Apple Silicon, and the transition from 'personal computers' to 'you are completely not responsible for most the code running on your device', it made me a bit sad and happy in the same time, RISCV seems like a breath of fresh air, and many hackers will build many new things, new protocols, new networks, new programs. As PI4 cost increases, the esp32 cost is decreasing, we have transparent displays for 20$, good computers for 5$, cheap lora, and etc. Everything is more accessible than ever. I played with a friend who saw completely different exploits than me, and I learned a lot just from few games, and because of the complexity of the game its often you enter into a position that you get surprised by your own actions :) So if you manage to find at least one friend who is not completely stunned by the assembler, I think you will have some good time. A huge inspiration comes from phrack 49's 'Smashing The Stack For Fun And Profit' which has demystified the stack for me: https://ift.tt/SYy5NjI TLDR: computers are fun, and you can make them do things. PS: In order to play with my friends I also built esp32 helper[1] that keeps track of the game state, and when I built it and wrote the code and everything I realized I could've just media queried the web version of the game.. but anyway, its way cooler to have a board game contraption. [1]: https://ift.tt/Ya5SgOz
Saturday 30 September 2023
Friday 29 September 2023
Thursday 28 September 2023
Wednesday 27 September 2023
New best story on Hacker News: Show HN: Unity like game editor running in pure WASM
Show HN: Unity like game editor running in pure WASM
523 by TrevorSundberg | 115 comments on Hacker News.
In the wake of all the Unity nonsense, just wanted to toss the Raverie engine into this mix :) We’re building off a previous engine that we worked on for DigiPen Institute of Technology called the Zero Engine with a similar component based design architecture to Unity. Our engine had a unique feature called Spaces: separate worlds/levels that you can instantiate and run at the same time, which became super useful for creating UI overlays using only game objects, running multiple simulations, etc. The lighting and rendering engine is scriptable, and the default deferred rendering implementation is based on the Unreal physically based rendering (PBR) approach. The physics engine was built from the ground up to handle both 2D and 3D physics together. The scripting language was also built in house to be a type safe language that binds to C++ objects and facilitates auto-complete (try it in editor!) This particular fork by Raverie builds both the engine and editor to WebAssembly using only clang without Emscripten. We love Emscripten and in fact borrowed a tiny bit of exception code that we’d love to see up-streamed into LLVM, however we wanted to create a pure WASM binary without Emscripten bindings. We also love WASI too though we already had our own in memory virtual file system, hence we don’t use the WASI imports. All WASM imports and exports needed to run the engine are defined here: https://ift.tt/1vkDb5d... The abstraction means that in the future, porting to other platforms that can support a WASM runtime should be trivial. It’s our dream to be able to export a build of your game to any platform, all from inside the browser. Our near term road-map includes getting the sound engine integrated with WebAudio, getting the script debugger working (currently freezes), porting our networking engine to WebRTC and WebSockets, and getting saving/loading from a database instead of browser local storage. Our end goal is to use this engine to create an online Flash-like hub for games that people can share and remix, akin to Scratch or Tinkercad. https://ift.tt/KyHjlIh
523 by TrevorSundberg | 115 comments on Hacker News.
In the wake of all the Unity nonsense, just wanted to toss the Raverie engine into this mix :) We’re building off a previous engine that we worked on for DigiPen Institute of Technology called the Zero Engine with a similar component based design architecture to Unity. Our engine had a unique feature called Spaces: separate worlds/levels that you can instantiate and run at the same time, which became super useful for creating UI overlays using only game objects, running multiple simulations, etc. The lighting and rendering engine is scriptable, and the default deferred rendering implementation is based on the Unreal physically based rendering (PBR) approach. The physics engine was built from the ground up to handle both 2D and 3D physics together. The scripting language was also built in house to be a type safe language that binds to C++ objects and facilitates auto-complete (try it in editor!) This particular fork by Raverie builds both the engine and editor to WebAssembly using only clang without Emscripten. We love Emscripten and in fact borrowed a tiny bit of exception code that we’d love to see up-streamed into LLVM, however we wanted to create a pure WASM binary without Emscripten bindings. We also love WASI too though we already had our own in memory virtual file system, hence we don’t use the WASI imports. All WASM imports and exports needed to run the engine are defined here: https://ift.tt/1vkDb5d... The abstraction means that in the future, porting to other platforms that can support a WASM runtime should be trivial. It’s our dream to be able to export a build of your game to any platform, all from inside the browser. Our near term road-map includes getting the sound engine integrated with WebAudio, getting the script debugger working (currently freezes), porting our networking engine to WebRTC and WebSockets, and getting saving/loading from a database instead of browser local storage. Our end goal is to use this engine to create an online Flash-like hub for games that people can share and remix, akin to Scratch or Tinkercad. https://ift.tt/KyHjlIh
Tuesday 26 September 2023
Monday 25 September 2023
Sunday 24 September 2023
Saturday 23 September 2023
Friday 22 September 2023
Thursday 21 September 2023
Wednesday 20 September 2023
New best story on Hacker News: My uBlock Origin filters to remove distractions
My uBlock Origin filters to remove distractions
413 by mig4ng | 166 comments on Hacker News.
Repository with my filter lists that block some distractions from sites I want to keep using. I am pretty ruthless removing distractions from my life (e.g. no Instagram, Facebook, TikTok), but some tools I'd like to keep using some parts of it. E.g. Twitter/X, I dislike the feed but I like reading some threads that are shared here or on blog posts. Same for YouTube, I enjoy some videos but I do not want recommendations when I finish the video I was watching. Feel free to suggest more, open issues, pull requests or send me an email :)
413 by mig4ng | 166 comments on Hacker News.
Repository with my filter lists that block some distractions from sites I want to keep using. I am pretty ruthless removing distractions from my life (e.g. no Instagram, Facebook, TikTok), but some tools I'd like to keep using some parts of it. E.g. Twitter/X, I dislike the feed but I like reading some threads that are shared here or on blog posts. Same for YouTube, I enjoy some videos but I do not want recommendations when I finish the video I was watching. Feel free to suggest more, open issues, pull requests or send me an email :)
Tuesday 19 September 2023
Monday 18 September 2023
New best story on Hacker News: Show HN: HyperDX – open-source dev-friendly Datadog alternative
Show HN: HyperDX – open-source dev-friendly Datadog alternative
450 by mikeshi42 | 107 comments on Hacker News.
Hi HN, Mike and Warren here! We've been building HyperDX (hyperdx.io). HyperDX allows you to easily search and correlate logs, traces, metrics (alpha), and session replays all in one place. For example, if a user reports a bug “this button doesn't work," an engineer can play back what the user was doing in their browser and trace API calls back to the backend logs for that specific request, all from a single view. Github Repo: https://ift.tt/piRCJM9 Coming from an observability nerd background, with Warren being SRE #1 at his last startup and me previously leading dev experience at LogDNA/Mezmo, we knew there were gaps in the existing tools we were used to using. Our previous stack of tools like Bugsnag, LogRocket, and Cloudwatch required us to switch between different tools, correlate timestamps (UTC? local?), and manually cross-check IDs to piece together what was actually happening. This often made meant small issues required hours of frustration to root cause. Other tools like Datadog or New Relic come with high price tags - when estimating costs for Datadog in the past, we found that our Datadog bill would exceed our AWS bill! Other teams have had to adjust their infrastructure just to appease the Datadog pricing model. To build HyperDX, we've centralized all the telemetry in one place by leveraging OpenTelemetry (a CNCF project for standardizing/collecting telemetry) to pull and correlate logs, metrics, traces, and replays. In-app, we can correlate your logs/traces together in one panel by joining everything automatically via trace ids and session ids, so you can go from log <> trace <> replay in the same panel. To keep costs low, we store everything in Clickhouse (w/ S3 backing) to make it extremely affordable to store large amounts of data (compared to Elasticsearch) while still being able to query it efficiently (compared to services like Cloudwatch or Loki), in large part thanks to Clickhouse's bloom filters + columnar layout. On top of that, we've focused on providing a smooth developer experience (the DX in HyperDX!). This includes features like native parsing of JSON logs, full-text search on any log or trace, 2-click alert creation, and SDKs that help you get started with OpenTelemetry faster than the default OpenTelemetry SDKs. I'm excited to share what we've been working with you all and would love to hear your feedback and opinions! Hosted Demo - https://ift.tt/lqZus6Q Open Source Repo: https://ift.tt/piRCJM9 Landing Page: https://hyperdx.io
450 by mikeshi42 | 107 comments on Hacker News.
Hi HN, Mike and Warren here! We've been building HyperDX (hyperdx.io). HyperDX allows you to easily search and correlate logs, traces, metrics (alpha), and session replays all in one place. For example, if a user reports a bug “this button doesn't work," an engineer can play back what the user was doing in their browser and trace API calls back to the backend logs for that specific request, all from a single view. Github Repo: https://ift.tt/piRCJM9 Coming from an observability nerd background, with Warren being SRE #1 at his last startup and me previously leading dev experience at LogDNA/Mezmo, we knew there were gaps in the existing tools we were used to using. Our previous stack of tools like Bugsnag, LogRocket, and Cloudwatch required us to switch between different tools, correlate timestamps (UTC? local?), and manually cross-check IDs to piece together what was actually happening. This often made meant small issues required hours of frustration to root cause. Other tools like Datadog or New Relic come with high price tags - when estimating costs for Datadog in the past, we found that our Datadog bill would exceed our AWS bill! Other teams have had to adjust their infrastructure just to appease the Datadog pricing model. To build HyperDX, we've centralized all the telemetry in one place by leveraging OpenTelemetry (a CNCF project for standardizing/collecting telemetry) to pull and correlate logs, metrics, traces, and replays. In-app, we can correlate your logs/traces together in one panel by joining everything automatically via trace ids and session ids, so you can go from log <> trace <> replay in the same panel. To keep costs low, we store everything in Clickhouse (w/ S3 backing) to make it extremely affordable to store large amounts of data (compared to Elasticsearch) while still being able to query it efficiently (compared to services like Cloudwatch or Loki), in large part thanks to Clickhouse's bloom filters + columnar layout. On top of that, we've focused on providing a smooth developer experience (the DX in HyperDX!). This includes features like native parsing of JSON logs, full-text search on any log or trace, 2-click alert creation, and SDKs that help you get started with OpenTelemetry faster than the default OpenTelemetry SDKs. I'm excited to share what we've been working with you all and would love to hear your feedback and opinions! Hosted Demo - https://ift.tt/lqZus6Q Open Source Repo: https://ift.tt/piRCJM9 Landing Page: https://hyperdx.io
Subscribe to:
Posts (Atom)
-
Path to a free, self-taught education in Computer Science 495 by netfortius | 130 comments on Hacker News.
-
U.S. Postal Service starts nationwide electric vehicle fleet, buying 9,250 EVs 444 by lxm | 336 comments on Hacker News.
-
So you want to study mathematics 507 by musgravepeter | 292 comments on Hacker News.