Hacker Newsnew | past | comments | ask | show | jobs | submit | mnau's commentslogin

I am more likely to believe someone who bypassed Denuvo.

> One can see that Denuvo does indeed intervene from time to time, but what one can clearly see: It doesn’t do that very often, definitely not every frame.

> It’s only once every few seconds. Even less, sometimes it doesn’t do anything.

> To me personally, it tells that Denuvo executes checks so infrequently, that the likelyhood of it causing major performance issues seems rather low.

https://momo5502.com/posts/2024-03-31-bypassing-denuvo-in-ho...


91_remove_version_upgrade_warnings.patch is the one for asthetic reasons.

Debian keeps ancient versions that have many fixed bugs. Upstream maintainer has to deal with fallout of bug reports of obsolete version. To mitigate his workload, he added obsolete version warning. Debian removed it.


I'll admit that I haven't inspected the patch, but how could that warning possibly work without checking version information somewhere on the internet? That was listed in OP.


IIRC it just hardcodes the release date and complains if it is more than 2 or 3 years later.

It’s somewhat reasonable. I agree Debian should patch out phone-home and autoupdate (aka developer RCE). They should have left the xscreensaver local-only warning in, though. It is not a privacy or system integrity issue.

jwz however is also off the rails with entitlement.

They’re both wrong.


> jwz however is also off the rails with entitlement.

Always remember to not link to his site from HN because you'll get a testicle NSFW image when you click on a link to his site from HN. dang used to have rel=noreferrer on outgoing links, but that led to even more drama with other people...

Some people in the FOSS scene just love to stir drama, and jwz is far from the only one. Another person with such issues IMHO is the systemd crowd, although in this case ... IMHO it's excusable to a degree, as they're trying to solve real problems that make life difficult for everyone.


> Always remember to not link to his site from HN because you'll get a testicle NSFW image

What's his reason for targeting HN users this way?


The testicle speaks for itself [1]. He has held a serious political grudge against VC way over a decade back [2], the earliest mention of the JWZ testicles appearing on HN that I could find is over 9 years old [3].

[1] NSFW https://imgur.com/32R3qLv

[2] (Redirects to NSFW, so open in incognito or you'll get the testicles) https://www.jwz.org/blog/2011/11/watch-a-vc-use-my-name-to-s...

[3] https://news.ycombinator.com/item?id=10804953


> The testicle speaks for itself

It really doesn't. It says he hates users from HN but it says nothing about why. Is it really just that he doesn't like the traffic?

If it's because he has a grudge against VCs, which is more understandable, why is he taking it out on HN users?


> If it's because he has a grudge against VCs, which is more understandable, why is he taking it out on HN users?

It's a small form of protest. Make people uncomfortable.


What's the point in protesting if nobody witnessing your protest has any idea what you're protesting?


People unfamiliar with code base can easily screw it, here is SimplePie example:

https://news.ycombinator.com/item?id=44061563

I don't think that approach is reasonable. When you are effectively making a fork, don't freeload on existing project name and burden him with problems you cause.


It's not laziness, it's a tactic.

You don't want to provide more info than absolutely necessary, that could be bad from security and legal perspective.

Also, if you don't include more info, people tend to ask you less questions to clarify.


In EU, Cyber Resilience Act requires automatic updates, so the second point is moot.

Most owners want just plug and play, so it makes sense.

Even third point is pretty moot. We don't do that for hardware, why for software... A component is no longer manufactured? Tough luck, hopefully you stockpiled it.


Um, that's not what "moot" means.


No point unless coupled with ability to immigrate. Why would China educate foreigners only to see them leave? There is no payoff.

It makes sense in US because of for-profit universities and easier immigration. That is not situation over there.


The US doesn't really have many for-profit universities, and those that are for-profit don't attract a lot of international PhD students. We do (or did?) have a lot of research to be done, and we would never be able to do it without international PhD students (including from China and India).

China has some immigration, and people will be attracted to stay if the research jobs are good and accessible. If China takes over the USA's role of the preeminent world power, they will have access to and need to leverage world talent to do so.


Czechia. In theory, there is a fee for every media (e.g.HDD) that is paid to OSA (authors organization) and OSA pays to authors through some distribution scheme. Since user already paid fee, downloading is OK.

This is mostly leftover before computers were a thing (think cassettes and paper copiers).

In practice, it's a racket and OSA is a mafia that doesn't pay to anyone. Also, the fees are rather small considering the the purpose (I think it's capped at ~$5 per device), but since authors don't actually get money from it(OSA practices) , it doesn't really matter.

Anyway, downloading audiovisual media is fine, seeding is not.


Sweden has something similar (except, as I mentioned elsewhere, the law was amended in 2005 to explicitly add an exception for downloads).

The Berne Convention has a special provision for this. Something about if the biggest rights organizations agree then a country can have laws that allow some free copying. So a tax on empty media (in Sweden also covering the computer hard drives and the flash memory built into phones) is used to pay off the big music and movie companies.

The weird thing is that only the biggest industries are paid off. No matter what you use your storage for, it is the big movie and music companies that receive the money. No other industries are paid off as far as I know, so most others just have to accept that their stuff is legally copied for free, without compensation (a few things like software are always illegal to copy, so those industries are not affected).


Sweden apparently kept the fee and made it illegal. That's extra mafia.


It is specifically illegal to make a copy of something that has been illegally published, not illegal to make copies for personal use in general.

Not that I am a lawyer.


40% of all log4j downloads are still vulnerable versions.

Nobody cares, it's just another checkbox/policy. Security team is just another compliance department. It does not bring in money.


> Security team is just another compliance department. It does not bring in money.

This. Thanks for highlight it!


Please pick any semi-advanced economy other than USA when talking about healthcare. USA is well known for its corrupt healthcare system. You are picking the worst of the worst as an example.


They're picking the US as an example because the person who started this discussion was saying that the European model is in their view unsustainable. It's possible that that person wants to change Europe into Singapore or something, but given this site, I consider it much more likely that they meant "unsustainable compared to the US".


Why? Seems pretty sensible. Employer-employee is a business relationship. Treat it as such.


Worked with some of the teams making the first iPhone and bringing the Internet to everyone in a pocket sized slab was way more than a job it was a dream. Didn't turn out quite as expected, but this idea that work is only that is in my opinion dangerous. Millions are made selling sugar water and there is a famous multimillionaire with warehouses full of nickles, but business can be much more than that and it is up to all participants to build, man, and steer the boats.


> but business can be much more than that and it is up to all participants to build, man, and steer the boats.

If you own the galley you're a "participant"; if your job is rowing it, you're something else entirely.


That is covered by "pretty much anything." That doesn't mean absolutely everything.


"Pretty much everything" does include "can't print some things" which is pretty much: they control what you can and can't print. So technically you are right and they are right too, but this conversation path led us back in a circle instead of moving the debate forward.


With the 3D printer you can currently print everything on the 2-D printer you can print everything minus one. (actually there’s probably a whole bunch of currency you can’t print which is maybe hundreds of things ) those are completely different systems of control.


Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: