<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Hacker News: winkelmann</title><link>https://news.ycombinator.com/user?id=winkelmann</link><description>Hacker News RSS</description><docs>https://hnrss.org/</docs><generator>hnrss v2.1.1</generator><lastBuildDate>Thu, 21 May 2026 17:53:27 +0000</lastBuildDate><atom:link href="https://hnrss.org/user?id=winkelmann" rel="self" type="application/rss+xml"></atom:link><item><title><![CDATA[New comment by winkelmann in "Reviving old scanners with an in-browser Linux VM bridged to WebUSB over USB/IP"]]></title><description><![CDATA[
<p>FYI, if the goal is just to use something like an old Canon LiDE scanner (pretty common/cheap devices with no more driver support) on macOS: SANE runs natively and works great: <a href="https://formulae.brew.sh/formula/sane-backends" rel="nofollow">https://formulae.brew.sh/formula/sane-backends</a> (comes with `scanimage` CLI tool).</p>
]]></description><pubDate>Thu, 21 May 2026 10:38:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=48220443</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=48220443</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48220443</guid></item><item><title><![CDATA[New comment by winkelmann in "Why is Google Maps back to showing old satellite images of Altadena?"]]></title><description><![CDATA[
<p>The most unfortunate thing about Google's 3D photogrammetry is that they don't allow you to view historical captures, as they only serve the flattened 2D version there. For the time being, the only resource for these captures are various Microsoft Flight Simulator addons where people dumped Google's photogrammetry data to add scenery not included in the built-in photogrammetry coverage.</p>
]]></description><pubDate>Tue, 19 May 2026 04:10:56 +0000</pubDate><link>https://news.ycombinator.com/item?id=48189077</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=48189077</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=48189077</guid></item><item><title><![CDATA[New comment by winkelmann in "Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2"]]></title><description><![CDATA[
<p>I was wondering about this too. I thought that it could be about it being possible to use archive.today to view sites otherwise blocked via DNS, but web.archive.org[1] doesn't have that flag, so it must be something else.<p>[1] <a href="https://radar.cloudflare.com/domains/domain/web.archive.org" rel="nofollow">https://radar.cloudflare.com/domains/domain/web.archive.org</a></p>
]]></description><pubDate>Sun, 22 Mar 2026 16:29:42 +0000</pubDate><link>https://news.ycombinator.com/item?id=47479199</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=47479199</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47479199</guid></item><item><title><![CDATA[New comment by winkelmann in "Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2"]]></title><description><![CDATA[
<p>> all the content in the past 4+ years is about archive.today<p>But it's not? This was published between the two posts about archive.today: <a href="https://gyrovague.com/2025/02/23/anatomy-of-a-boarding-pass-how-to-detect-fake-flight-tickets-by-scammers/" rel="nofollow">https://gyrovague.com/2025/02/23/anatomy-of-a-boarding-pass-...</a></p>
]]></description><pubDate>Sun, 22 Mar 2026 06:56:31 +0000</pubDate><link>https://news.ycombinator.com/item?id=47475101</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=47475101</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47475101</guid></item><item><title><![CDATA[New comment by winkelmann in "Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2"]]></title><description><![CDATA[
<p>I'm not a web developer, but I've picked up some bits of knowledge here and there, mostly from troubleshooting issues I encounter while using websites.<p>I know there are a number of headers used to control cross-site access to websites, and the linked blog post shows archive.today's denial-of-service script sending random queries to the site's search function. Shouldn't there be a way to prevent those from running when they're requested from within a third-party site?</p>
]]></description><pubDate>Sun, 22 Mar 2026 06:10:35 +0000</pubDate><link>https://news.ycombinator.com/item?id=47474913</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=47474913</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47474913</guid></item><item><title><![CDATA[New comment by winkelmann in "Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2"]]></title><description><![CDATA[
<p>Call me naive, but I still believe that people generally disapprove of their internet connection being abused to conduct cyber-attacks.</p>
]]></description><pubDate>Sun, 22 Mar 2026 05:58:12 +0000</pubDate><link>https://news.ycombinator.com/item?id=47474859</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=47474859</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47474859</guid></item><item><title><![CDATA[New comment by winkelmann in "Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2"]]></title><description><![CDATA[
<p>There's probably a worthwhile discussion to be had about what it takes for a site in this situation to be removed from blocklists. An apology? Surrender to authorities? Halting the malicious activity for a certain period of time?<p>Regardless, another user reports the attack is still ongoing[1], so this isn't a discussion that's going to happen about archive.today anytime soon.<p>[1] <a href="https://news.ycombinator.com/item?id=47474777">https://news.ycombinator.com/item?id=47474777</a></p>
]]></description><pubDate>Sun, 22 Mar 2026 05:53:21 +0000</pubDate><link>https://news.ycombinator.com/item?id=47474833</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=47474833</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47474833</guid></item><item><title><![CDATA[New comment by winkelmann in "Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2"]]></title><description><![CDATA[
<p>As far as I am aware, all previous issues with archive.today and Cloudflare were on account of archive.today taking measures to stop Cloudflare's DNS from correctly resolving their domains, not the other way around.<p>The current situation is due to Cloudflare flagging archive.today's domains for malicious activity, Cloudflare actually still resolves the domains on their normal 1.1.1.1 DNS, but 1.1.1.2 ("No Malware") now refuses. Exactly why they decided to flag their domains <i>now</i>, over a month after the denial-of-service accusations came out, is unclear, maybe someone here has more information.</p>
]]></description><pubDate>Sun, 22 Mar 2026 05:21:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=47474729</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=47474729</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47474729</guid></item><item><title><![CDATA[New comment by winkelmann in "Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2"]]></title><description><![CDATA[
<p>"archive.today is currently categorized as: * CIPA Filter * Reference * Command and Control & Botnet * DNS Tunneling"<p>Ditto for their other domains like archive.is and archive.ph<p>Example DoH request:<p>$ curl -s "<a href="https://1.1.1.2/dns-query?name=archive.is&type=A" rel="nofollow">https://1.1.1.2/dns-query?name=archive.is&type=A</a>" -H "accept: application/dns-json"<p>{"Status":0,"TC":false,"RD":true,"RA":true,"AD":false,"CD":false,"Question":[{"name":"archive.is","type":1}],"Answer":[{"name":"archive.is","type":1,"TTL":60,"data":"0.0.0.0"}],"Comment":["EDE(16): Censored"]}<p>---<p>Relevant HN discussions:<p><a href="https://news.ycombinator.com/item?id=46843805">https://news.ycombinator.com/item?id=46843805</a> "Archive.today is directing a DDoS attack against my blog"<p><a href="https://news.ycombinator.com/item?id=47092006">https://news.ycombinator.com/item?id=47092006</a> "Wikipedia deprecates Archive.today, starts removing archive links"<p><a href="https://news.ycombinator.com/item?id=46624740">https://news.ycombinator.com/item?id=46624740</a> "Ask HN: Weird archive.today behavior?" - Post about the script used to execute the denial-of-service attack<p>Wikipedia page on deprecating and replacing archive.today links:<p><a href="https://en.wikipedia.org/wiki/Wikipedia:Archive.today_guidance" rel="nofollow">https://en.wikipedia.org/wiki/Wikipedia:Archive.today_guidan...</a></p>
]]></description><pubDate>Sun, 22 Mar 2026 03:43:51 +0000</pubDate><link>https://news.ycombinator.com/item?id=47474256</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=47474256</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47474256</guid></item><item><title><![CDATA[Cloudflare flags archive.today as "C&C/Botnet"; no longer resolves via 1.1.1.2]]></title><description><![CDATA[
<p>Article URL: <a href="https://radar.cloudflare.com/domains/domain/archive.today">https://radar.cloudflare.com/domains/domain/archive.today</a></p>
<p>Comments URL: <a href="https://news.ycombinator.com/item?id=47474255">https://news.ycombinator.com/item?id=47474255</a></p>
<p>Points: 418</p>
<p># Comments: 295</p>
]]></description><pubDate>Sun, 22 Mar 2026 03:43:51 +0000</pubDate><link>https://radar.cloudflare.com/domains/domain/archive.today</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=47474255</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=47474255</guid></item><item><title><![CDATA[New comment by winkelmann in "FBI tries to unmask owner of archive.is"]]></title><description><![CDATA[
<p>This was fixed/changed at some point. I use Cloudflare's DNS and it works fine for me.</p>
]]></description><pubDate>Thu, 06 Nov 2025 18:00:49 +0000</pubDate><link>https://news.ycombinator.com/item?id=45838170</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=45838170</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45838170</guid></item><item><title><![CDATA[New comment by winkelmann in "Ventoy: Create bootable USB drive for ISO/WIM/IMG/VHD(x)/EFI Files"]]></title><description><![CDATA[
<p>I've been using an IODD 2531 enclosure for many years now, and it's doing pretty much exactly that. It works with any ISO I throw at it and has no issues with Secure Boot. It’s also platform-agnostic as it acts as a USB optical disk drive.<p>There are some shortcomings, like a bug where it doesn't remember the last selected ISO if its filename is too long, files also need to be fully sequential. These might be fixed in their newer models (the 2531 is fairly old).</p>
]]></description><pubDate>Thu, 30 Oct 2025 16:51:43 +0000</pubDate><link>https://news.ycombinator.com/item?id=45762153</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=45762153</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45762153</guid></item><item><title><![CDATA[New comment by winkelmann in "Microsoft is plugging more holes that let you use Windows 11 without MS account"]]></title><description><![CDATA[
<p>Not sure if this still works, but you used to be able to run "wsreset.exe -i" to install the Microsoft Store. The command kicks off the process in the background, so there's no progress indicator, but the Store app just appeared after a few minutes.</p>
]]></description><pubDate>Tue, 07 Oct 2025 05:26:58 +0000</pubDate><link>https://news.ycombinator.com/item?id=45499646</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=45499646</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45499646</guid></item><item><title><![CDATA[New comment by winkelmann in "Sora 2"]]></title><description><![CDATA[
<p>I think a dedicated "TikTok but AI" is infinitely better than AI videos polluting other platforms. Of course, in practice, the latter is already the case, rendering the theoretical benefits of the former kind of moot.<p>Nonetheless, a platform for AI videos with an audience looking for them, rather than the horrible "boomer-slop" that is prevalent on other social media, is welcome in my eyes.</p>
]]></description><pubDate>Tue, 30 Sep 2025 23:48:13 +0000</pubDate><link>https://news.ycombinator.com/item?id=45432710</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=45432710</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45432710</guid></item><item><title><![CDATA[New comment by winkelmann in "25L Portable NV-linked Dual 3090 LLM Rig"]]></title><description><![CDATA[
<p>3D rendering and fluid simulation stuff could be interesting.</p>
]]></description><pubDate>Tue, 23 Sep 2025 07:45:48 +0000</pubDate><link>https://news.ycombinator.com/item?id=45343986</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=45343986</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45343986</guid></item><item><title><![CDATA[New comment by winkelmann in "Things you can do with a Software Defined Radio (2024)"]]></title><description><![CDATA[
<p>Warning: My German legalese isn't very good and this is not legal advice. I unfortunately know very little about how the German court system works and where to look up stuff.<p>The law[1] is worded like this:<p>> (1) Mit einer Funkanlage (§ 3 Absatz 1 Nummer 1 des Funkanlagengesetzes) dürfen nur solche Nachrichten abgehört oder in vergleichbarer Weise zur Kenntnis genommen werden, die für den Betreiber der Funkanlage, für Funkamateure im Sinne des § 2 Nummer 1 des Amateurfunkgesetzes, für die Allgemeinheit oder für einen unbestimmten Personenkreis bestimmt sind.<p>The law basically says that you may only listen to (or take note of in comparable way[2]) messages that are:<p>1. For you, the operator<p>2. For amateur radio operators according to the Amateurfunkgesetz<p>3. For the general public<p>4. For an indeterminate group of persons (I think that's an accurate translation?)<p>For me, a big question regarding aviation and marine traffic monitoring is what "unbestimmten Personenkreis"/"indeterminate group of persons" actually means. Since "die Allgemeinheit"/"the general public" is listed separately, I'd assume it's a distinct group from that, and to me the previous commenter's "meant for any member of the public who happens to be flying a plane nearby" sounds like it could fit that description. I'd argue, for example, that police radio is for a "determinate" group of persons, police officers and dispatchers working for the government, whereas aviation and maritime traffic is an "indeterminate" group of people, people working for all sorts of airlines, shipping companies, recreational pilots/boaters, who happen to be around the same area.<p>If anyone has any links to cases where this law was tried in relation to aviation or maritime communications, please share them, I have been struggling to figure out where to look for this stuff, on top of that, the law was also renamed or moved around, which makes it extra confusing.<p>[1] <a href="https://dejure.org/gesetze/TDDDG/5.html" rel="nofollow">https://dejure.org/gesetze/TDDDG/5.html</a><p>[2] Might be related to this weird ruling, where a judge in a case about some ADS-B receiver decided that it was ok because rendering the position of aircraft wasn't "listening to" (as in, literally hearing) the traffic: <a href="https://openjur.de/u/130555.html" rel="nofollow">https://openjur.de/u/130555.html</a> - This decision is probably moot now, due the addition of "take note of in comparable way". The judge briefly mentions that actually listening to the traffic could be violating the law, but I am not sure if this point was ever properly litigated.</p>
]]></description><pubDate>Wed, 17 Sep 2025 02:19:23 +0000</pubDate><link>https://news.ycombinator.com/item?id=45270826</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=45270826</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45270826</guid></item><item><title><![CDATA[New comment by winkelmann in "We all dodged a bullet"]]></title><description><![CDATA[
<p>Crucially, it would have to be set up so they need to use the hardware key when pushing any changes. Just requiring a hardware key as a login method does nothing to protect against token stealing, which I believe is the most common form of supply chain attack right now.</p>
]]></description><pubDate>Wed, 10 Sep 2025 01:13:03 +0000</pubDate><link>https://news.ycombinator.com/item?id=45191840</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=45191840</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45191840</guid></item><item><title><![CDATA[New comment by winkelmann in "iOS 18.6.2 – System-Wide Trust Collapse via Anchor Corruption and ATS Reset"]]></title><description><![CDATA[
<p>Not the first time that user has been posted here: <a href="https://news.ycombinator.com/item?id=45072797">https://news.ycombinator.com/item?id=45072797</a> ("A16-FuseBypass: Debug Logic Enabled on Production Apple Silicon")<p>Edit:<p>"Apple A17 Pro Chip Hardware Flaw?" - <a href="https://news.ycombinator.com/item?id=45160947">https://news.ycombinator.com/item?id=45160947</a><p>"iOS 18.5 Bluetooth Privacy Vulnerabilities" - <a href="https://news.ycombinator.com/item?id=44933435">https://news.ycombinator.com/item?id=44933435</a><p>Both of these submissions are [flagged]. I suspect that OP takes iPhone device logs and feeds the to an LLM to come up with security issues.</p>
]]></description><pubDate>Wed, 10 Sep 2025 00:43:04 +0000</pubDate><link>https://news.ycombinator.com/item?id=45191629</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=45191629</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45191629</guid></item><item><title><![CDATA[New comment by winkelmann in "A16-FuseBypass: Debug Logic Enabled on Production Apple Silicon"]]></title><description><![CDATA[
<p>Complete AI slop. "Contents" lists hallucinated directories that don't exist in the repo, and the report is pretty much just that log entries with the word "debug" in them supposedly mean that debug logic is enabled.<p>Edit: There isn't any exploit or bypass described here, the claim is just that "debug logic" is enabled on production devices.</p>
]]></description><pubDate>Sat, 30 Aug 2025 15:37:45 +0000</pubDate><link>https://news.ycombinator.com/item?id=45075545</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=45075545</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45075545</guid></item><item><title><![CDATA[New comment by winkelmann in "Windows 11 Update KB5063878 Causing SSD Failures"]]></title><description><![CDATA[
<p>> if you don't mind buying grey market keys<p>Please don't buy "grey market" MS keys (i.e. super cheap keys or keys for products not sold to end users, like LTSC).<p>Either buy keys from legitimate vendors or use alternative activation methods (emulated KMS, etc.). I believe a lot of these grey market keys come either from MSDN subscriptions or leaked MAK keys, in either case, you aren't really paying for the product, you're just funneling money to sketchy people.</p>
]]></description><pubDate>Thu, 28 Aug 2025 12:41:30 +0000</pubDate><link>https://news.ycombinator.com/item?id=45051452</link><dc:creator>winkelmann</dc:creator><comments>https://news.ycombinator.com/item?id=45051452</comments><guid isPermaLink="false">https://news.ycombinator.com/item?id=45051452</guid></item></channel></rss>