Hakkin

5 ms·

1.
by Hakkin 2mo ago
Isn't that kind of the point of the article? The random reads required for metadata traversal during scrubs will kill performance for sequential reads and writes as well if you don't have the IOPS to back them up, building a pool
2.
by Hakkin 5mo ago
The key shows up if you win, you can simulate it by adding ?devwin=1 to the URL.
3.
by Hakkin 5mo ago
Oh, this is interesting. I have been messing around with a WebExtension for dumping encoded WebRTC media streams by intercepting streams on RTCPeerConnection.addTrack, but it doesn't work reliably since the current WebRTC encoded strea
4.
by Hakkin 8mo ago
A scrub only reads allocated space, so in your 10TB example, a scrub would only read whatever portion of that 10TB is actually occupied by data. It's also usually recommended to keep your usage below 80% of the total pool size to avoid
5.
by Hakkin 9mo ago
Is this true? KADOKAWA had a massive hack last year that leaked a large amount of sensitive user data and as far as I know has faced no legal repercussions. Obviously they took a decent financial and reputational hit, but that was just an e
6.
by Hakkin 9mo ago
I definitely noticed the performance boost on my Pixel 8, for some reason it seems to really not like wireguard-go, it struggled to pull even 100mbps, maybe something unoptimized on Google's custom hardware. With the new GotaTun versio
7.
by Hakkin 11mo ago
That only helps so much, some things still won't work if the browser thinks you're talking over an unencrypted connection, like HTTP/2. Technically HTTP/2 allows unencrypted connections (h2c) but as far as I know, no bro
8.
by Hakkin 1y ago
Note that you don't actually need the generated column either, SQLite supports indexes on expressions, so you can do, for example, CREATE INDEX subjectidx ON messages(json_extract(headers, '$.Subject')) and it will use
9.
by Hakkin 1y ago
It sets a cookie with a JWT verifying you completed the proof-of-work along with metadata about the origin of the request, the cookie is valid for a week. This is as far as Anubis goes, once you have this cookie you can do whatever you want
10.
by Hakkin 1y ago
Much better than infinite Cloudflare captcha loops.
11.
by Hakkin 2y ago
If a disk is encrypted, you don't have to worry about the contents if you eventually have to RMA or dispose of the disk. For this use case, it makes no difference how the encryption key is input.
12.
by Hakkin 2y ago
It's fairly rare during general browsing, but Mullvad makes no attempt to hide that their servers are VPN IPs, so any site that explicitly wants to block VPN users will very likely block Mullvad. Mostly an issue if you're trying t
13.
by Hakkin 2y ago
I have an AOC Q27G3XMN and while I do get reduced motion blur from this, I also experience very bad color banding/shifting. Messing with some of the values in the script config makes it slightly better, and changing the overdrive setti
14.
by Hakkin 2y ago
You can bypass the "Out of bound" message by setting a Javascript breakpoint after `let t = JSON.parse(d[e].config_str)` and then run `Object.values(t.camera.presets).map(o=>o.max_distance=50&&o)` in the console. It b
15.
by Hakkin 2y ago
TIL HAR files are just JSON, I always assumed they were some kind of binary archive file. Very convenient.
16.
by Hakkin 2y ago
YouTube still supports WebSub (PubSubHubbub)[0] via their own hub[1]. There's very little documentation on how to actually use it though, and it seems like it's been on life support for quite awhile, a lot of small oddities have c
17.
by Hakkin 2y ago
This is true for a few different compression formats, it works for bzip2 too. I've processed a few TBs of text via `curl | tar -xOf - | bzip2 -dc | grep` for tar files with lots of individually compressed bz2 files inside.
18.
by Hakkin 2y ago
uBlock Origin has some advanced filter syntax that can sometimes deal with sites like this. It can intercept, modify or replace JavaScript functions, objects, network requests, parsing data, cookies, etc. That being said, writing filters fo
19.
by Hakkin 2y ago
This is more or less also what (GNU) ddrescue does[0]. It first tries to do a linear copy of the full disk, skipping any errors, then goes back and tries to re-read the error sectors until you either cancel or it succeeds. It also keeps tra
20.
by Hakkin 2y ago
I'm not sure what you mean, I just added a new Gmail account to test and it went through the normal OAuth flow. I didn't have to enter any password into Thunderbird itself, just the Gmail OAuth popup.
21.
by Hakkin 2y ago
Likely meant Qubes OS[0], not sure why it was phrased as a riddle. [0] https://www.qubes-os.org/
22.
by Hakkin 2y ago
DeepL has its moments but it also has many many failure cases. It particularly is very bad with long text blocks, it commonly completely misses sections of text or repeats the same block of text multiple times.
23.
by Hakkin 2y ago
I don't know if it's still the case, but it used to be that pretty much any semi-major company had a support presence on Twitter. Often just tweeting anything with the name of the company in it would get you a response from a supp
24.
by Hakkin 2y ago
Isn't there software emulated TPMs already? I think all this is doing is ensuring the cookies stay on the device that has the key (assuming a proper hardware TPM). If a site requires this, the underlying algorithm could be implemented
25.
by Hakkin 2y ago
Ah, I think I understand the random bytes at the start of the script now. They're prepended to make the partial output of the "corrupted" (pre-tr'd) test stream look like random data. Without those random bytes, you will
26.
by Hakkin 2y ago
I also thought it was odd. There's also different random bytes (not random text, actual random bytes) prefixed to the start the scripts, but the bytes are prefixed by a hash symbol, which comments them out, so they don't affect th
27.
by Hakkin 2y ago
and then that fork becomes more performant or feature rich or secure or (etc), and it becomes preferred over the original code base, and all distributions switch to it, and we're back at square one.
28.
by Hakkin 2y ago
> The post doesn't spell it out but I wonder if they implied there's a suspicion that the person doing the pressuring there is also another sock puppet of JiaT75 as some scheme of getting access to xz You can get the user'
29.
by Hakkin 3y ago
> If I could change one thing about S3's API I would like an option to read the metadata with the listings. Rclone stores modification times of files as metadata on the object and there isn't a bulk way of reading these, you ha
30.
by Hakkin 3y ago
I encountered similar issues with FTS5, I found you can clean it up slightly with a CTE WITH matches(id) AS ( SELECT rowid FROM address_fts WHERE address_fts MATCH 'google' ) ... WHERE fa.rowid IN matches OR

More ›