Hacker Newsnew | past | comments | ask | show | jobs | submit | benoau's commentslogin

This is why ultrawides are very comfortable, you can focus on the center region where 2x monitors likely have their edges meeting.

I repurposed a 43” 4K TV as a monitor. The thing I’m working on goes roughly in the middle, everything else is sprawled out wherever.

Which? I like this idea.

It is an older $299 Toshiba Fire TV that isn’t powerful enough to stream 4K content smoothly. Displays 4K@60Hz fine over HDMI fine.

Wouldn’t recommend it, but I already had it.


Ah. Got it. Thanks!

Apple's dream... that if the contempt can't be unwound so they can obstruct third party payments with a 27% fee, then every developer wanting to use third party payments should have to sue them individually - a process they will make sure takes years and hemorrhages vast amounts of money while they delay, stall discovery, abuse document privilege, lie to judges, and evade compliance... all over again.

Even their Supreme Court appeal is dishonest, both the judge and the appeals court found they violated the "letter" of the injunction while Apple claims they're being punished for violating the "spirit" of it.


Does "advertise" count as non-obvious? It seems like you've ignored the most effective way to get traffic: pay for it.

Get ads on Mac-related blogs, subreddits, etc.


You also need to make sure you take care using PR titles and descriptions in your GHA because if they contain `text` it *may be executed lmfao.

edited: not "will", may depending on your GHA


Maybe zizmor could catch this https://github.com/zizmorcore/zizmor but not sure 100%

Yeah, zizmor checks for template injection.

Nice

Can you cite this? It's not YAML execution syntax, surely Github doesn't do it, the only vector I can see is if you put it unquoted into a shell script inside of a GHA yaml.

https://github.com/orgs/community/discussions/27065

https://stackoverflow.com/questions/77090044/github-actions-...

https://www.praetorian.com/blog/pwn-request-hacking-microsof...

All you need is user content containing `backticked`, and a github action referencing that via eg "github.event.issue.title" where the shell would normally execute `backticked` as a command (like echo, cat, etc).



Yes that's it.


Because software is a massive house of cards and its bottom layers are poorly-funded people and volunteer groups who can't conceive every possible security issue, don't necessarily engage in every best practice to secure their accounts and publishing pipelines, can't single-handedly provide adequate oversight of all their dependencies, and might fall prey to a targeted attack or tempting offer.

And then on top of that are companies building software and prioritizing new features over revisiting old code.


But they make way more money implementing the dark pattern playbook. It's hardly an accident when subscriptions are hard to cancel it's a deliberate optimization.

Plus on the new layout you're forced to use the mobile app now.

I use firefox and YesterdayForOldReddit for mobile browsing and it's basically the old.reddit experience on mobile.

Musk is suing Apple/OpenAI for allegedly shutting out Grok in favour of exclusivity with OpenAI.

OpenAI is reportedly going to sue Apple for that integration being poorly done.

While Apple is reportedly preparing to use Gemini and offer public APIs for other AI services to integrate in the way OpenAI has.

Federighi's emails should be very popcorn-worthy.

https://www.bloomberg.com/news/articles/2026-05-14/openai-ap...

https://9to5mac.com/2026/05/05/ios-27-will-let-you-choose-be...


It's easy until the shit hits the fan...

> In the fire, 384 battery packs were burnt, which took down 96 government systems. Whilst this is obviously still a huge loss, 95 of these had backups - but the G-drive system (government drive), used primarily by the Ministry of Personnel Management, did not.

> [...] reports estimate that 8 years worth of data was lost, and around 17% of central government officials are impacted

https://www.techradar.com/pro/security/the-south-korean-gove...


Being against on-prem just because South Korean government implemented on-prem poorly with no backup best practices and lost data one time, would be like if homo sapiens stopped using fire because a guy burned down his straw hut one time.

Yes but you're saying this guy needs to build his own house and trusting him to obey the fire and safety codes, when plenty of professionals exist that specialize in following those.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: