Hacker News: Tomdarkness

New comment by Tomdarkness in "eMudhra ignored Mozilla Root investigation deadline; blames social media"

Tomdarkness — Fri, 23 Oct 2026 16:23:39 +0000

What kind of leverage do these browser CA programs have with eMudhra given they are no longer issuing TLS certificates?

If eMudhra just don't comply with Mozilla/Chrome, is there anything they can actually do?

New comment by Tomdarkness in "Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure"

Tomdarkness — Thu, 22 Oct 2026 13:37:07 +0000

It's a upstream targeted fix that was made available significantly faster in packages/images maintained by volunteers, it's not some untested downstream patch. Customers at this point would have likely taken their applications offline over this issue so it would have been difficult to make the situation any worse.

New comment by Tomdarkness in "Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure"

Tomdarkness — Thu, 22 Oct 2026 13:29:38 +0000

If this is only a retrospective find then they should make it more clear, from the blog it reads to me as promoting their MadPot tool for detection pre CVE disclosure:

"Subsequently, from 2026-10-21 0200 UTC to 2026-10-21 0800 UTC, Amazon Threat Intelligence identified additional exploitation attempts of PHP2Shell targeting MadPot from additional anonymized infrastructure." (i.e almost 12 hours before the release of the patch)

"Invest in detections that don’t rely on a signature for a specific CVE. The first exploitation will often come before those signatures exist."

"We analyze over 200 billion events per minute and integrate threat intelligence from our MadPot honeypot network to identify and block known exploitation attempts in real time. Our honeypot system provides us with early detection of exploitation attempts, enabling rapid response and threat analysis."

New comment by Tomdarkness in "Amazon identifies Oct 17 PHP2Shell exploitation prior to public disclosure"

Tomdarkness — Thu, 22 Oct 2026 13:06:08 +0000

So Amazon knew about this exploit and that it was actively being used several days before the release of any patches. Despite this they still took 18 hours AFTER the release of the patches to provide updated version of their Amazon Linux packages?

https://github.com/amazonlinux/amazon-linux-2023/issues/1148

I don't think this blog post is sending the message AWS intended...

New comment by Tomdarkness in "OLED burn-in test: 30-month update"

Tomdarkness — Fri, 09 Oct 2026 00:13:36 +0000

The issue with text on OLED panels is typically due to the sub pixel layout, they tend to use different sub pixel layouts to traditional monitors which causes issues with subpixel rendering and can make text look blurry or have color fringing.

However, recently you can now get OLED panels from LG with RGB stripe sub pixel layouts (matching traditional monitors) which eliminates this problem and text should be just as good as an non-OLED display.

New comment by Tomdarkness in "DongleHider+ Framework Laptop Expansion Card"

Tomdarkness — Mon, 25 Mar 2024 11:36:28 +0000

I'd be curious about this as well, I have one of these Logitech dongles and if I plug a USB3 device in the port next to it (say a SD card reader or external drive) the logitech device, my mouse in this case, becomes basically unusable due to the interference.

New comment by Tomdarkness in "Lufthansa bans AirTags in checked luggage"

Tomdarkness — Fri, 07 Oct 2022 22:26:23 +0000

How are they even going to know if there is an airtag in someone's luggage? Are they particularly obvious on an x-ray or is there some kind of specialised detector?

New comment by Tomdarkness in "Crazy Thin ‘Deep Insert’ ATM Skimmers"

Tomdarkness — Thu, 15 Sep 2022 01:30:30 +0000

Yep, like this person who used that method to steal £25,000 worth of goods from airlines: https://www.manchestereveningnews.co.uk/news/greater-manches...

New comment by Tomdarkness in "Will I Ever See the $36MM Oberlin College Owes Me?"

Tomdarkness — Thu, 01 Sep 2022 16:17:26 +0000

As someone from the UK I'm a bit confused why he can't seem to get the college to pay him? If a court has ruled that the college has to pay how can they avoid this? In the UK if a company failed to pay a debt then ultimately you can apply to the court for a winding up petition which if they didn't resolve the situation the company would be liquidated by the court.

New comment by Tomdarkness in "Tell HN: Most DisplayPort cables aren't sold with correct information"

Tomdarkness — Sun, 28 Aug 2022 14:53:27 +0000

Personally with DP cables, especially if you're looking for a longer length cable or wanting to push a higher bit rate through it, then you're better off just spending a bit extra and getting a proper VESA certified cable.

New comment by Tomdarkness in "Typical implementations of payment processing and related security issues"

Tomdarkness — Mon, 18 Jul 2022 14:11:31 +0000

Yeah, on the list on the article the only "modern major payment service" I actually recognised was PayPal and Alipay. I noticed that Rubles are mentioned multiple times in the article, perhaps the author is Russian. Is Stripe even available in Russia?

However saying that I thought PayPal had suspended operations in Russia.

New comment by Tomdarkness in "Bob Cassette Rewinder: Hacking Detergent DRM"

Tomdarkness — Mon, 30 May 2022 14:39:30 +0000

I mean you can get pretty comparable counter top dishwashers for a similar price or even less that just use regular dishwasher detergent with no DRM features.

New comment by Tomdarkness in "TinyPilot: Build a KVM over IP for Under $100"

Tomdarkness — Mon, 30 May 2022 00:52:13 +0000

If you're looking for a KVM over IP for a hobby project with a Intel CPU you might want to first check to see if your CPU supports Intel AMT/vPro. If you enable this then you get a built in KVM over IP without any additional hardware/software. Once setup you can connect via a VNC client.

New comment by Tomdarkness in "Building a Budget Homelab NAS Server"

Tomdarkness — Sun, 29 May 2022 15:05:11 +0000

Not really sure the comparison is valid. TrueNAS uses Samba to provide SMB network shares.

New comment by Tomdarkness in "Approved Cameras"

Tomdarkness — Sun, 09 Jan 2022 00:25:23 +0000

The technical quality of Netflix originals is really high. One thing that annoys me though is for some reason despite having rigorous standards for the camera it seems a common trend through numerous Netflix Originals to use the Vantage Hawk V-Lite Vintage '74 line of anamorphic lenses. I guess it's a stylistic choice but it results is some (for me at least) annoying image distortion that can really distract from the show. They are literally described at claiming the flaws are a feature: "The Vintage’74 version has certain gentle aberrations and other characteristics that might be considered flaws by others but are welcomed storytelling tools for cinematographers"

You can see this is some example footage: https://www.youtube.com/watch?v=GhbRkoeNb9U

Note the distortion and blurred top and bottom of the image.

New comment by Tomdarkness in "Ubuntu 21.04"

Tomdarkness — Thu, 22 Apr 2021 14:38:38 +0000

From what I understand after briefly looking into this earlier this month the issue seems to be basically NVIDIA want to push their own buffer API (EGLStreams) rather than use the buffer API developers are actually using (GBM).

If you use one of the "big" compositors like GNOME or KDE I believe they have sort of added EGLStreams support so you can use it on NVIDIA but it's not perfect. If you use a more niche one, e.g sway, then it won't work on the NVIDIA proprietary drivers because they don't support GBM.

There is some news recently that NVIDIA may be coming around and are in the progress of implementing GBM support in their drivers, but it's not confirmed.

You can also use the nouveau nvidia drivers but from what I understand the performance is trash in 3d applications using modern cards, it seems more orientated to supporting older nvidia cards.

New comment by Tomdarkness in "New report on Apple’s VR headset: 8K in each eye, potential $3k price tag"

Tomdarkness — Thu, 04 Feb 2021 23:09:33 +0000

8k seems... optimistic. The PPI of such a display would be off the charts. Not to mention the kind of hardware required to run such a device. The NVIDIA RTX 3090 can barely run a 3D 8k game at 30fps, let alone in 3D for VR. What would you even connect such a device with? Displayport and HDMI wouldn't support two 8k streams.

New comment by Tomdarkness in "BMW to shame out-of-warranty UK drivers with smart billboards"

Tomdarkness — Thu, 24 Dec 2020 19:10:31 +0000

If it's any conciliation personally I think you have the nicer car mechanically. The m240i is a rwd straight 6 with the legendary zf 8hp gearbox whilst the newer m235i is an awd 4 cylinder with some inferior aisin gearbox.

New comment by Tomdarkness in "AirPods Max"

Tomdarkness — Tue, 08 Dec 2020 13:39:15 +0000

At $549 they better be rather impressive. The same amount of money can buy you some fairly high end conventional headphones.

New comment by Tomdarkness in "GitHub Container Registry"

Tomdarkness — Tue, 01 Sep 2020 20:27:52 +0000

Seems extremely expensive, especially the data transfer part. Just a quick calculation at $0.50/GB we would end up spending $10,000s in just data transfer costs vs $0 with AWS ECR (transfer within region is free).

Guess this would work out okay for storing some development images but definitely does not seem feasible for production use.

Unless I'm missing something? There's some fine print about it being free within the context of a github action, but this doesn't really seem clear. Does my fleet of ec2 instances pulling down the image after a new deployment count as within an "action"?