mmis1000 (u/mmis1000)

mmis1000 commented on Notepad++ Updater Installed Malware heise.de/en/news/Notepad-... · Posted by u/mimikasec

mimikasec · 9 days ago

> Anyone who can intercept and manipulate this traffic can therefore change the download URL. Until version 8.8.7 of Notepad++, the developer used a self-signed certificate, which is available in the Github source code. This made it possible to create manipulated updates and push them onto victims. Since v8.8.7, however, Notepad++ relies on a legitimate GlobalSign certificate, and installing its own Notepad++ root certificate is no longer necessary.

I came across some more technical information here: https://doublepulsar.com/small-numbers-of-notepad-users-repo...

mmis1000 · 8 days ago

Even the software itself does not signed with a validatable cert. How do the hijacker overcome the https cert though? It's 2025 now. It's extremely unlikely that anyone fetch binary with plain text http. Is wingup get compromised and have a cert leak? Or there is yet another root CA doing weird thing?

mmis1000 commented on CSS now has an if() conditional function caniuse.com/?search=if... · Posted by u/aanthonymax

Incipient · 14 days ago

As long as css remains "so fast it's free" then I'm mostly happy with that - I use css without thinking about optimisations, and I like it like that!

mmis1000 · 14 days ago

Well, you can actually write slow css if you make real deep nested flex container. And it's not even too rare. You can actually find such example in yhe wild.

The spec of flex layout requires it to layout its child elements several times to compute actual layout. Make it deep and nested without proper constrains will results in n*n*n*n… layout computations and bring down the browser on resize.

mmis1000 commented on CSS now has an if() conditional function caniuse.com/?search=if... · Posted by u/aanthonymax

mikestorrent · 14 days ago

How hard would it be to have a response header that tells the browser "don't display anything at all until we ask you to from JS when we're ready"?

Considering the kinds of crap that have been done with headers...

mmis1000 · 14 days ago

Practically only cordova does these for now. But it's a native app so of course it can do whatever it want.

mmis1000 commented on CSS now has an if() conditional function caniuse.com/?search=if... · Posted by u/aanthonymax

themafia · 14 days ago

It's a great way to make conditional styles without having to use JavaScript; however, having used JS for years to make theme color and icon sets that rely on CSS properties, I'm not sure I particularly like this method. I feel like you have to smear a lot of logic across your CSS whereas with JS you can reduce your theme to a data structure and just have a simple function to setup all the CSS variables based on that.

Am I just an old man?

mmis1000 · 14 days ago

Javascript always suffer from FOUC problem though (Unless it's server side). Although the if() css function seems to just be syntax suger of standard @media query. So it doesn't really add anything to solve existing problems.

Edited: It seems it can also be toggled from css variable? So it might actually fix some existing problems.

mmis1000 commented on OpenAI declares 'code red' as Google catches up in AI race theverge.com/news/836212/... · Posted by u/goplayoutside

mmis1000 · 16 days ago

Most discussion focused on capabilities. But I wonder does OpenAI's "make a even big and costly model" strategy even work in long term? They are already losing money at current size. Unless we have some break though in chip efficiency.(which didn't seem to be likely for now) They are only going to loss even more.

mmis1000 commented on Your smartphone, their rules: App stores enable corporate-government censorship aclu.org/news/free-speech... · Posted by u/pabs3

popcornricecake · a month ago

To be fair, Android also sabotages PWAs, it's just done behind your back. You see, in order to get a PWA to properly install, you'll have to use Chrome, and you'll have to have a Google Play account and Chrome will submit the PWA manifest for validation to a Google server, which in turn will decide whether the PWA is worthy, and if it is, it will generate a so called WebAPK, which is then installed on your device. If it's not worthy however, then it will become a bookmark instead, and many of the features that can be described in the manifest will not work at all.

So if you wanted to use a different browser or install a PWA without a connection to the internet, or without Google Play, all you get is a bookmark.

mmis1000 · a month ago

> in turn will decide whether the PWA is worthy

In my personal experience, it only validate whether manifest is malformatted though. Although it's still up to google if they want to do something wonky.

mmis1000 commented on Your smartphone, their rules: App stores enable corporate-government censorship aclu.org/news/free-speech... · Posted by u/pabs3

theK · a month ago

PWA was an awesome idea and should have been the way forward.

Unfortunately both Google and Apple very early on identified that it was in their best interest to keep the concept around in a half-dead state and ensure nobody really built on it...

mmis1000 · a month ago

PWA on android's side is at least usable.

You get notification. You can autoplay video/audio. You get whaterver video or element full screen with all necessary UI. You get rotation lock. You have a fullscreen to do what ever you want for any purpose. You probably can't touch hardware APIs(for example: bluetooth/nfc) like native app. But that isn't really needed for most apps either.

On the other side. Apple seems sabotage the PWA as much as possible. You can't autoplay video/audio. You can't even fullscreen anything other than video, and when fullscreen video, UI is ignored. Also there is no way to disable gesture so your app will misfire system gesture. And you can't lock the rotation either. There is no way to auto rotate the video player or whatever when maximized either.

It's really a golden example for pretend to do something while actually not. It seems you can do pretty much everything with ios pwa. And when you try to do it. You will figured out it will have a worse experience than native app because all sort of issues.

mmis1000 commented on AMD continues to chip away at Intel's x86 market share tomshardware.com/pc-compo... · Posted by u/speckx

rincebrain · a month ago

My experiences with trying AMD CPU laptops is that they're not good.

Every time I've tried it in the last 10 years, it's felt like I was teleported into the late 90s PC era - weird bugs in specific drivers that you can find lots of reports of for this specific model and no resolution, heat management that feels like someone in a basement strung things together in 5 minutes and never tested it again, strange failures in "plug and play" support for USB devices that work on every other machine flawlessly with the same cable and device, and don't get me started on Bluetooth. (My favorite ever might be the time that attempting to pair a specific pair of headphones to the laptop shut off every USB port, reproducibly, apparently because the BT adapter was connected over the USB M.2 pins to the root hub, and was crashing in firmware, so both Windows and Linux did the same style of dance of "try to reset it, once that fails, go up a level and turn off the complex to make sure other things keep working"...except up one level was the root.) (Though, to be fair to AMD, that was an Intel BT/wifi chip in an AMD laptop...)

I really want to like and recommend AMD mobile hardware, but every time I've tried it has been a shitshow without fail.

mmis1000 · a month ago

This is honestly not my experience though. I'd like to know what vendor and model are you using (and get so much problems). Also I don't have experience about heat management issue either. On the other hand, the intel mac I used before is just underpowered and have giant issues about heat management. Every single mac-pro in my office apartmentmet have an early battery fail at really low cycle count. (And it's also just underpowered thus make working painful)

mmis1000 commented on Show HN: Unflip – a puzzle game about XOR patterns of squares unflipgame.com/... · Posted by u/bogdanoff_2

mmis1000 · a month ago

The game is quite fun. But it seems the difficulty ramp quite late? It's not very difficult to get the answer with least step by solve the side first until about last 20 levels.

Also, the game does give you a hint about how to bruteforce the level if you only have one square left. Good job.