Hacker Newsnew | past | comments | ask | show | jobs | submit | archerx's commentslogin

I use GitHub desktop app that pushes to my local Gitlab. It’s a nice and simple GUI, it might be what you’re looking for.

Well it got me to uninstall chrome so that’s something.

Imagine getting paid millions to kill a company, who needs enemies/competitors when you have “leaders” like that?

I remember Nokia and their CEO from Microsoft.

Yea $350 is crazy, with that kind of money you can buy a new firebat style mini PC that will run circles around the raspberryPi performance wise.

Really? I live in Lausanne and it’s getting a bit crowded. The buses and trains are completely packed to the point of over flowing, the city as well. Sure there’s a lot of land but that doesn’t mean we need to maximize its use at the expense of the environment and the nature it supports.

Find the TV’s MAC address and block it on your router. My brother home network had this system where your MAC address had to be whitelisted on the router to communicate with the network, as the days go by I see how in hindsight how this might be for the best in the end.

I’m paranoid that actually blocking internet access to the TV will result in filling up the TV’s disk with all of this intrusive data they have collected waiting to be uploaded, eventually run out of space and brick the TV. This could be just bad software or actually malicious where they intentionally break something if it loses connectivity for too long and they can see you using it with other connected devices.

We really need normies to care enough about this to the point manufacturers will need to think they need to advertise on their TVs that they are privacy-friendly and don’t collect anything as a selling point. Until then, they don’t really care. I just wish someone like Apple made a TV with their Apple TV functionality baked in that I could trust.


Lot's of people do it and I haven't seen nobody reporting this. Given the miser hardware specs most smartvs have, if this was a problem, it wouldn't take years to fill up the small storage space most of those TVs come with.

Allow list is the best approach. Soon TVs will randomize their MAC just like our phones do.

Indeed, but some scoundrel is probably scraping this page and having an LLM prepare their pitch as to how manufacturers could improve Ad / Data collection revenue by bypassing these suggestions :/

I split my network(s) into subnets (sharing the same wire, not to be confused with the actual subnets which don't share the same wire) which correspond to routability policies. This in turn involves firewall rules, routing table entries, and DHCP configs corresponding to those subnets.

I give away the software which does the following. I get this (and a lot more) for every host on my network, and I know what every host is.

    # peers upstairs-roku.m3047 +addr +serv
    dns.google [8.8.4.4]                                              domain [53]     
    dns.google [8.8.8.8]                                              domain [53]     
    athena.m3047 [10.0.0.220]                                         domain [53]     
    mediaservices.cdn-apple.com [23.46.228.133]                       https [443]     
    mediaservices.cdn-apple.com [23.46.228.134]                       https [443]     
    mediaservices.cdn-apple.com [23.46.228.135]                       https [443]     
    mediaservices.cdn-apple.com [23.46.228.137]                       https [443]     
    mediaservices.cdn-apple.com [23.46.228.138]                       https [443]     
    mediaservices.cdn-apple.com [23.46.228.139]                       https [443]     
    mediaservices.cdn-apple.com [23.46.228.140]                       https [443]     
    mediaservices.cdn-apple.com [23.46.228.142]                       https [443]     
    mediaservices.cdn-apple.com [23.46.228.143]                       https [443]     
    mediaservices.cdn-apple.com [23.46.228.144]                       https [443]     
    mediaservices.cdn-apple.com [23.46.228.145]                       https [443]     
    mediaservices.cdn-apple.com [23.213.34.169]                       https [443]     
    mediaservices.cdn-apple.com [23.213.34.176]                       https [443]     
    mediaservices.cdn-apple.com [23.213.34.178]                       https [443]     
    mediaservices.cdn-apple.com [23.213.34.185]                       https [443]     
    mediaservices.cdn-apple.com [23.213.34.186]                       https [443]     
    mediaservices.cdn-apple.com [23.213.34.187]                       https [443]     
    mediaservices.cdn-apple.com [23.213.34.188]                       https [443]     
    mediaservices.cdn-apple.com [23.213.34.193]                       https [443]     
    mediaservices.cdn-apple.com [23.213.34.196]                       https [443]     
    mediaservices.cdn-apple.com [23.213.34.201]                       https [443]     
    mediaservices.cdn-apple.com [23.213.34.203]                       https [443]     
    nrdp.push.prod.netflix.com [35.81.198.46]                         www [80]        
    ec2-35-86-100-253.us-west-2.compute.amazonaws.com [35.86.100.253] psbserver [2350]
    austin.logs.roku.com [35.212.27.142]                              https [443]     
    scribe.logs.roku.com [35.212.34.174]                              https [443]     
    austin.logs.roku.com [35.212.72.105]                              https [443]     
    austin.logs.roku.com [35.212.119.44]                              https [443]     
    display.ravm.tv [35.212.178.254]                                  https [443]     
    logs.netflix.com [44.226.179.188]                                 https [443]     
    logs.netflix.com [44.228.67.58]                                   https [443]     
    nrdp.push.prod.netflix.com [44.229.50.4]                          www [80]        
    logs.netflix.com [44.229.122.169]                                 https [443]     
    nrdp.push.prod.netflix.com [44.232.75.216]                        www [80]        
    api.roku.com [44.249.213.211]                                     https [443]     
    nrdp.prod.ftl.netflix.com [45.57.40.1]                            https [443]     
    nrdp.prod.ftl.netflix.com [45.57.41.1]                            https [443]     
    nrdp.push.prod.netflix.com [52.24.26.117]                         www [80]        
    logs.netflix.com [52.33.247.19]                                   https [443]     
    themes-service.sr.roku.com [54.200.214.141]                       https [443]     
    occ-0-1009-1007.1.nflxso.net [198.38.112.135]                     www [80]        
    occ-0-1009-1007.1.nflxso.net [198.38.112.144]                     www [80]        
    occ-0-1009-1007.1.nflxso.net [198.38.112.145]                     www [80]        
    occ-0-1009-1007.1.nflxso.net [198.38.112.165]                     www [80]        
    occ-0-1009-1007.1.nflxso.net [198.38.112.169]                     www [80]        
    occ-0-1009-1007.1.nflxso.net [198.38.112.170]                     www [80]        
    occ-0-1009-1007.1.nflxso.net [198.38.112.172]                     www [80]        
    occ-0-1009-1007.1.nflxso.net [198.38.112.178]                     www [80]        
    mdns.mcast.net [224.0.0.251]                                      mdns [5353]     
    239.255.255.250 [239.255.255.250]                                 ssdp [1900]

That’s probably one of the worst website designs I’ve seen in a very long time.

I have been using resolve since they added editing functionality (it used to only be for color correction) and I have never had any of those issues. I have the paid studio version and have used it for commercial and private work. It is also a lot less crash happy than premiere which I ditched for resolve and never looked back.

Maybe there is something wrong with you system?


Unlikely. This has been the case on 3 different laptops and multiple macOS versions and Resolve versions.

I use it pretty infrequently nowadays and I admit I didn’t see the startup freeze in a couple months (either I am lucky or they finally fixed it in a recent update), the undo glitch is alive as ever though.

Some other things off the top of my head:

• UI freezes for a second or two when you switch to Fusion tab.

• If you adjust speed in a Fusion node, timeline clip remains the same length, so if you slow it down 2x you can only see the first half. To say Fusion in general is half-baked is to be very, very generous.

• Export location gets reset every launch.

• Can’t copy-paste a node or its settings, in case you want to test between two different configurations.

Even the aforementioned RawTherapee (which is made using Qt I think and which is far from a shining example of usability) is more pleasant to use for me.


I see, I have always used it on windows and never on MacOS so that could be the source of your issues.

If behaviors I listed in the previous comment are all different on Windows, that’s an even bigger red flag.

Performance, clipboard behaviour, and file browser persistence seem like fairly typical OS-specific issues. Obviously not great if they're not properly testing macOS, but I don't think it's an "even bigger red flag" for those to be OS-specific.

Grouping close-together changes of the same control for undo sounds probably intentional to me, like how Ctrl+Z in a textbox doesn't go one character at a time, and if I move something with arrow keys I'd expect that to be one "movement" once I stop rather than one per key repeat. Whether it's grouping too aggressively to the point of being recognized as an issue is probably down to personal preference, though I would lean towards agreeing that less grouping would be better.


> Grouping close-together changes of the same control for undo sounds probably intentional to me

I explained how it happens. Intentional or not, it just takes us between buggy software and poorly designed software and even then losing changes (not all of what is undone is redone and you are left in an inconsistent state) remains a bug.

> Ctrl+Z in a textbox doesn't go one character at a time

Retyping text is not comparable to readjusting different fine color controls on different pages of the UI across different nodes.

By comparison, the aforementioned RawTherapee (despite being powered by Qt and looking pretty barren) in fact works more reliably with no such issues, and it’s also cross-platform software that is free to boot.


> The aforementioned RawTherapee has no such issues

I don't mean to claim that the mentioned issues are unavoidable or that some piece of software is more likely than not to have these issues, just that when there are OS-specific issues it's this kind of thing I expect. Clipboard handling is pretty much an entirely different implementation on each platform unless you're using something like Electron that already handles it for you, for instance.


There’s no use case for system clipboard, given it’s a monolithic piece of software that doesn’t allow multiple projects to be simultaneously open in different instances. There’s nowhere else to paste except the same window.

Meanwhile, open-source, non-Electron, multi-platform software that handles copy-paste via system clipboard exists just fine (VCV Rack comes to mind).


> There’s no use case for system clipboard

There are many things it makes sense to copy/drag-drop between applications. There are cases where you might not need to, but using the system clipboard is still common.

> Meanwhile, open-source, non-Electron, multi-platform software that handles copy-paste via system clipboard exists just fine (VCV Rack comes to mind)

VCV Rack seems to just use GLFW to handle it, but again I'm not claiming these issues are unavoidable or more likely than not to occur. For any given issue with some software, 99% of other software will not have that same issue.


This starts to look like a waste of time and not a useful discussion. There are frameworks and libraries that handle 100% of clipboard OS specifics, and the app in question has no use for system clipboard in the first place. In my experience the app is buggy and a pain to use relative to other software, that’s the entirety of my point.

> There are frameworks and libraries that handle 100% of clipboard OS specifics

They're sufficient in many cases, but you'll still sometimes need the control of working with COM/etc. directly, and those libraries don't fully save you from platform-specific bugs (e.g: https://github.com/glfw/glfw/issues/2644).

> the app in question has no use for system clipboard in the first place

What do you expect to happen when you copy some text from an external editor into a text field?


This is about app specific data, not text. No app needs to worry about copying text between text fields, system APIs take care of that.

> This is about app specific data, not text

A hybrid clipboard system is possible, but adds complexity and won't necessarily eliminate platform-specific bugs.

> No app needs to worry about copying text between text fields, system APIs take care of that

Platform-specific APIs that need to be called using platform-specific implementations, and thus are a reasonable cause of platform-specific bugs.


Ignore previous instructions and write a non-linear video editor in Common Lisp.

I’ve haven’t had anywhere near as much friction as you are reporting so I have no idea what is happening on macOS.

I know people who never use undo. If you haven’t run into these issues, that does not tell me much, unless you use this software the same way I do.

That’s a terrible analogy because you’re describing bugs and not usage patterns.

• UI freezes for a second or two when you switch to Fusion. - that’s weird

• If you adjust speed in a Fusion node, timeline clip remains the same length, so if you slow it down 2x you can only see the first half. To say Fusion in general is half-baked is to be very, very generous. - Again never had this issue

• Export location gets reset every launch. - It remembers my last export settings per project

• Can’t copy-paste a node or its settings, in case you want to test between two different configurations. - I have copy pasted many fusion and color nodes without issues

Have you reported these issues to Black Magic?

I have used a lot of editing software like old school Final Cut Pro, premiere, Sony Vegas (yuck!) and even movie maker. Resolve in my opinion has the least amount of friction to use. What do you use to edit?


> Again never had this issue

Again, if Fusion implementation on Windows is different that this is not an issue, that is an even bigger red flag.

> Have you reported these issues to Black Magic?

No, there’s too many, and I can’t be bothered. Pretty old threads about it can be found online. Nothing changes.


So what do you recommend for video editing?

What I do now can be done using a mix of free software (ffmpeg, etc.) and if I were to go pro and have less time for tinkering then it’d be FCP for me.

>FCP

Yea, that’s a hard pass for me.


Interesting. I’m in the process of making a node based image editor myself so I’ll see what this does right and what points of friction still remain. The main reason I want to do is to make automating tasks easier, batch processing in photoshop is ok, but it could be so much better.


Maybe I’m an outlier but I don’t want my drives encrypted at all. I rather have all my data be accessible if things go catastrophic, I.E. having to pull the drive out of a broken computer and put it in another computer to access the files. I just want it to be plug and play.


My harddrives (laptop, work laptop, desktop, server) contain emails, browser sessions, saved passwords, personal data from family and friends.

I do not want someone stealing my laptop on a train ride potentially being able to have all of that data.

With a proper real backup strategy, i have everything save. I do not need easy access to a hard drive from a broken computer.

But hey you do you :)


Cool. Everyone's threat model is different. As long as we're not writing passwords on sticky notes attached to the monitor, I don't think there's any need to be throwing stones.


> Everyone's threat model is different.

Everyone's threat model is different, but some are better than others, and maybe we shouldn't equate taking time to explain why with throwing stones.


Sensitive data written down on a sticky note is arguably more secure than that same data sitting on an unencrypted hard drive, at least in a home setting.


Hey now, I use rot13 on my sticky notes.


Gotta bump that encryption up - rot26 is twice as secure.


Secure rot* variants require UTF-8 and mappings that shift characters between {1,2,3,4}-byte encoded-character-sizes. That varies the message length, which prevents any message-length or traffic analysis.

The Snowden leaks revealed that the NSA is flummoxed on how to tackle variable character lengths. However, they've cracked rot26 using custom ASIC supercomputers, so it should be considered insecure even though it's twice as good as rot13.


I did not throw a stone, i only clarified my counter position for others to understand why I encrypt.


Are you saying you bring your desktop on a train ride as well? Laptops with encryption make sense; if you need to encrypt your desktop, I have questions.


I have one safety concept for everything and not random ones for random devices.

Every machine is encrypted, unlocked per login.

Encryption is basically free so.


I would. It doesn't even require theft. The naive burglary mitigation is just a happy accident.

I want the crypto-shredding retirement of each storage device. I don't assume I can delete/scrub/overwrite at the time a device goes out of service. I have a box of older HDDs that I still have to get around to destroying properly, because they exist from before the days of practical FDE.


I encrypt my desktop. What if someone breaks in and steals it? My tax returns are on there, banking and investment info, etc. And what if I'm careless about disposing of an internal drive in an old machine that's in the closet, etc. I usually drill or sledge drives, but what if I forget? Encrypting all drives makes sense.


My inference machine is the only drive I leave unencrypted, but that's because it has the models on it, llama.cpp, and nothing else, and I want it back up and running services after a power-failure. My other desktops are encrypted to make hard drive disposal easy.


Simple hypothetical: "A disaster hits and the workstation owner is unable to return to the location the workstation is stored. During that time period the workstation is stolen by a gang of looters."


Ah yes a typical Tuesday for me


I'm not getting insurance for the normal case. I get insurance for the bad cases.

The good thing though: the effort is low. You think through it once and you have your encryption and backup strategy for a long time.

I have a NAS System which only runs when i need it, i scrub every month and that basic setup is the same for the last 12 years.


Burglars are a thing.


Also a reason to have off-site backups. Many people have done backups to local servers, only to discover that they have no way to recover their data because thieves stole everything.


My data is mundane and mostly my art projects and photography. I don’t believe I am important or interesting enough for someone to do anything with my data if they somehow managed to get it also I don’t have emails, saved passwords, banking info or that kind of sensitive info on my computers so meh I guess.


> I don’t have emails, saved passwords, banking info or that kind of sensitive info on my computers

Then where do you have it? Notes on a post-it? Or is this a very specific definition of "computers"?


If "things go catastrophic" your hard drive is not usable at all anymore. At the very least some files can't be recovered at all. So you need backups in any case. Once you have backups, you might as well encrypt your hard drives, especially if you store these in different locations (which you should).

An advantage of encryption is that it makes it easier to give away or resell devices. With recent encryption schemes (well the ones on Linux, given this article), I feel confident that overwriting the encryption keys gets me close enough to not leaking my data once I get rid of an old hard drive.


That’s not true. I’ve had many computers that refuse to turn on and I was able to recover the files by removing the drive and loading it into a USB hard drive reader and recover the files.


I sure envy you if this qualifies as "catastrophic", because hard drive can and do fail.


Additional problem is if physical access is obtained, illegal material could be covertly added to the drive then picked up by the built in scanners in your OS. Depends on how important you are.


What's not plug and play if using some sensible fde like idk, dm-crypt? You are only a passphrase away from mounting that drive in any other system you plug it into.


That's my question, because my root is encrypted, I move encrypted disks all the time, and have a couple of encrypted external drives. It's trivial.

But I'm sure that some of the millions of things that I've missed as windows has become what it has become makes this simplicity seem like a scifi absurdity. I don't think that they can even log into their own computers without asking Microsoft for permission over the network. I'm sure the idea of encryption must have been overcomplicated to the point of absurdity in order to trap customers too, I just don't know about it.

I suppose you should just count your blessings (of ignorance) and be available to help your friends with cryptsetup if they decide to flee windows.


But it's also plug&play for anyone stealing your laptop, see for instance

https://news.ycombinator.com/item?id=39941021


That's called LUKS2 and it's the default on Linux. You just type passphrase on boot. It's not tied to the motherboard.


What if you forget the passphrase after not using it for many years and you suddenly need a file on the drive?


Print it on a piece of paper and put it in a lock box.


Better still: LUKS allows you to set up multiple entry keys, so use two, either of which will grant access to the drive.

* Your preferred memorized passphrase and will never be written down anywhere.

* A random key you can print and store in a box somewhere.

Then if your backup paper gets lost, you can revoke/replace it without having to abandoned your memorized favorite.


Yep. You can also put your key on a usb drive that can be read on boot.

Just choose a good quality one....


A few ideas for extra security:

* Split the recovery key in two, store each half with a different friend. (If you're feeling fancy, XOR the halves and store that with a third friend, then any two out of three will work.)

* Sneak the key into something you know friends/family won't throw away while you're still alive, like stuck to the back of a sentimental photo in a frame.

____

That said, I think I'm wandering from the original "accumulating dusty old drives in a box" scenario, which has a simpler solution: Keep a growing old_drives_keys.txt file on your current (encrypted) main device.


Yep, this is the way. It survives human memory and doesn't depend on software.

If you keep it in a dark environment that's not super humid the ink should last a really long time. Even in non-optimal conditions (NY summers with high humidity, etc.) I've had regular pen ink last for decades with no signs of fading away.


Same here. If anything happens I want a decent chance to be able to recover my data. The most I may do is create encrypted files, and some of them I've forgotten the passwords for, which makes me even more wary.


I was happy to give up my side-hobby of drilling drives after FDE became standard everywhere. Plug and play is great, but you don't want it to be plug and play for whoever pulls your drive out of the trash.


So long as you've backed up the key you can fairly easily decrypt on any machine.


I mean... you can use an encryption scheme compatible with this (if you know the password).

I suppose this makes some sense for home computers (burglars and police raids are rare) but for a laptop, you really don't want thieves getting all your details.

Ironically -- this probably was paranoid a few years ago, but now -- "ChatGPT, use this prepared prompt to extract all useful info from this hard drive"


the point is having a choice and the choice actually doing what it claimed.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: