Hacker News: cmg

New comment by cmg in "Pokémon Go Scans Trained the Navigation Tech for Military Drones"

cmg — Thu, 11 Jun 2026 13:11:23 +0000

The closest stop to me is between a dog park and a school - scanning it would have been an awkward situation, to say the least. And as you said, for rewards that aren't worth it. I got used to having that "Scan" task just sitting at the top of my list, never to be touched. But I noticed earlier this week that it's gone - and scanning stops doesn't give a new scan task.

New comment by cmg in "GitHub confirms breach of 3,800 repos via malicious VSCode extension"

cmg — Wed, 20 May 2026 21:59:00 +0000

That’s very possible. I switch between Cursor and VS Code, don’t remember which it was that day.

New comment by cmg in "GitHub confirms breach of 3,800 repos via malicious VSCode extension"

cmg — Wed, 20 May 2026 19:49:33 +0000

A few days ago I saw I had an update to the Twig extension. The UI flagged it as having new executable code in the update bundle, so I didn't install the update, disabled the extension as I wasn't working on Drupal views that day, and went about my work. I didn't have time to investigate the new update's contents. When I went back to the extension page, it was taken down: https://open-vsx.org/extension/whatwedo/twig

I'm not saying it was whatwedo.twig, but I'm not saying it wasn't, either.

Edit: If anyone's got a good recommendation for a twig formatter for Cursor / VS Code, please let me know.

New comment by cmg in "Testing Mac OS on the Apple Network Server 2.0 ROMs"

cmg — Mon, 04 May 2026 23:48:01 +0000

This is correct, and interestingly enough in one of the screenshots, the OpenFirmware prompt says "To continue booting the MacOS" too.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh...

New comment by cmg in "Canonical/Ubuntu have been under DDoS"

cmg — Fri, 01 May 2026 20:39:38 +0000

My mind immediately went to chaining this with another recent vulnerability in the Ninja Forms - File Upload plugin [0]

> This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

So, upload and execute a script that loads Copy Fail and even if you're only executing as www-data or another restricted user that "can't" sudo -- suddenly, uid=0!

To repeat the refrain... I'm so tired.

[0] https://www.wordfence.com/blog/2026/04/attackers-actively-ex...

New comment by cmg in "Block the “Upgrade to Tahoe” alerts"

cmg — Sun, 01 Mar 2026 14:51:25 +0000

The fact that in the miniplayer you can't display both the album art and the track information at the same time unless the cursor is hovering over the window absolutely boggles my mind. If I'm listening to a station, I want to glance over and see what I'm listening to. And I like the album art showing. This worked until Tahoe.

View menu > Hide Large Artwork will show the track info, but you of course lose the album art.

Of course it's not a major issue, it doesn't make the system unusable, but it was a nice little experience thing.

New comment by cmg in "Floor796"

cmg — Sat, 27 Dec 2025 16:34:16 +0000

From the FAQ:

> You can try to find Wally (Waldo), as in the well-known game Where's Wally. He is partially visible, but if you click on him, he will appear in full and wave at you.

New comment by cmg in "Objects should shut up"

cmg — Mon, 04 Aug 2025 20:54:35 +0000

I once bought one of those alarms that brighten along with the pattern of natural sunlight in the morning (and dim in the evening), as I don’t get much natural light in my bedroom. The time display on it was so unbelievably bright at its lowest setting that my sleep was worse until I piled stuff up in front of it. I don’t even bother with it anymore.

New comment by cmg in "Linode / Akamai US-EAST is down"

cmg — Mon, 28 Jul 2025 14:45:38 +0000

Of 60-something Linodes in Newark across a few accounts (we don't use LKE, Node Balancers, etc)

- Many came back up yesterday. Most of the rest came back up this morning.

- All but two are back online. One of those is "Powered off" but can't be turned on because "Linode busy". The other is online but unreachable, same behavior as most of them during the outage.

- Three required me to put them in Rescue Mode and run fsck.ext4 -F /dev/sda to get them back online.

New comment by cmg in "Linode / Akamai US-EAST is down"

cmg — Sun, 27 Jul 2025 14:41:07 +0000

I woke up to a few hundred messages from Icinga - thankfully my phone is on do-not-disturb overnight. Some of my servers in Newark are up and responding, some are not.

Happy Sunday! Cleaning up the automatically-created maintenance/alert tickets generated by this is going to be a fun time.

New comment by cmg in "Cloudflare Introduces Default Blocking of A.I. Data Scrapers"

cmg — Wed, 02 Jul 2025 13:36:54 +0000

Archive link: https://archive.ph/ARnyu

New comment by cmg in "HP Acquires Humane's AI Software"

cmg — Wed, 19 Feb 2025 15:11:59 +0000

This isn't obvious at all but you can click the star next to an item that's "Linked" on DF (where the title goes to another site) to get a permalink to the item on DF itself! https://daringfireball.net/linked/2025/02/18/hp-buys-humane

New comment by cmg in "Show HN: Cardstock- Free TCG Proxy Manager for Magic, Yugioh, & Pokemon"

cmg — Wed, 08 Jan 2025 20:03:07 +0000

For anyone else trying this, the password is hackernews - without an exclamation point. Tripped me up.

Thanks for setting this up adenta!

New comment by cmg in "Bill requiring US agencies to share source code with each other becomes law"

cmg — Fri, 27 Dec 2024 03:13:24 +0000

From the article:

> The new law doesn’t apply to classified code, national security systems or code that would post privacy risks if shared.

New comment by cmg in "Ask HN: What do you monitor on your servers?"

cmg — Sat, 17 Aug 2024 18:40:56 +0000

With Icinga, for webservers:

- apt status (for security/critical updates that haven't been run yet)

- reboot needed (presence of /var/run/reboot-required)

- fail2ban jail status (how many are in each of our defined jails)

- CPU usage

- MySQL active, long-running processes, number of queries

- iostat numbers

- disk space

- SSL cert expiration date

- domain expiration date

- reachability (ping, domain resolution, specific string in an HTTP request)

- Application-specific checks (WordPress, Drupal, CRM, etc)

- postfix queue size

New comment by cmg in "Suspicious data pattern in recent Venezuelan election"

cmg — Thu, 01 Aug 2024 01:15:11 +0000

The comment I’m replying to says they’re “the only impartial observers who were in Venezuela for the election,” so I think the point stands - given their funding and connection to the US government and international capital, they can’t be considered impartial in this situation.

New comment by cmg in "Suspicious data pattern in recent Venezuelan election"

cmg — Thu, 01 Aug 2024 00:27:25 +0000

[flagged]

New comment by cmg in "Stop Microsoft users sending 'reactions' to email by adding a postfix header"

cmg — Wed, 17 Jul 2024 12:17:09 +0000

Even in messenger-type apps there's a weird setup. With iMessage, if you're in a group chat with yourself and other people (B and C): if C sends a message and B reacts to it, you still get a message about B's reaction to C. Drives me crazy in certain group chats I'm in.

Signal, for some reason, notifies of reactions to your message on desktop but not on mobile (at least iOS).

New comment by cmg in "Test and learn how DMARC, SPF and DKIM work"

cmg — Wed, 08 May 2024 22:07:13 +0000

HN hug of death? I sent an email to the address provided and over time, the page showed:

  Waiting for incoming email...  
  You don't have to write us an entire love letter :-). 
  Still waiting... 
  It's pretty quiet here... ¯\(°_o)/¯. 
  Waiting...  
  I'm giving up, reload the page to start over. (︶︹︶).

I've been very lucky overall to use Sendgrid for the majority of my email, so that DKIM is just a matter of setting up the CNAMEs they provide, but just had a situation where I had to set up OpenDKIM on a server running mailman to deal with the latest requirements from Yahoo and Google. (Apple also seems to be part of this enhanced enforcement, though never really mentioned.)

New comment by cmg in "John C. Dvorak on Intel's First Neural Network Chip in 1990"

cmg — Fri, 23 Feb 2024 17:09:27 +0000

Texting also became expensive once the carriers figured out people wanted to use it. I remember being pissed off in the mid-2000s when I posted an item for sale on Craigslist and someone texted me about it instead of calling - that text probably cost me a quarter!

(Now, of course, I can't imagine calling a random person or putting my phone number on an item listing.)