Hacker Newsnew | past | comments | ask | show | jobs | submit | aggieNick02's commentslogin

So many NVMe/SATA drives that are locked/frozen during boot, and it turns out this is because the drives are actually behaving incorrectly when "security operations" are blocked on the drive. When "security operations" are blocked, you should not be able to set a password on the drive, but should be able to format it. So that's bug 1.

Most modern motherboards, on boot, will block "security operations" on a drive where the security password is set to the default (because it hasn't been manually set by the end-user). They do this to prevent malware from being able to set a password on a drive that hasn't had its password set. (Malware could set the password and I believe configure the drive to effectively brick it.)

But many (probably most) motherboards fail to correctly block "security operations" on a suspend/resume. This is bug 2, and makes suspend/resume often an effective workaround for a drive with bug 1, as well as a theoretical opportunity for malware to easily inflict damage on all drives that support "security operations".

So one generally ends up stuck and unable to securely erase their drive when it has bug 1 and is installed on a motherboard without bug 2. In this case, you have to hope your motherboard has a feature in its BIOS to, on next boot, not block security operations. Otherwise you're stuck and need to find another motherboard if you want to sanitize your drive, or hope that a firmware update for your drive resolves bug 1.

The full details are in this comment on a Github issue from 2016: https://github.com/linux-nvme/nvme-cli/issues/84#issuecommen... . It was one of the most rewarding bugs I've had the fortune to get to the bottom of. We were extra motivated to fully understand it when we moved to a new SSD benchmarking test system that turned out to not have bug 2: https://pcpartpicker.com/forums/topic/460000-an-ssd-that-can...


There was a lot of hype and momentum around Silverlight back in the day, until their wasn't. You got a cross-platform (Mac/Windows) WPF-like UI and C# programming environment, which was powerful.

I had the fortune to be involved developing the LEGO Mindstorms EV3 programming software. Under the hood, it was a small web browser shell (using Mono on Mac and WPF on Windows) around a Silverlight Out-of-Browser app. Anything beyond the permissions of the Silverlight app (e.g. bluetooth/USB comms) was an RPC from Silverlight to the shell.

After completing the Mac/Windows app, LEGO wanted to deliver a similar experience on iPad. There was no Silverlight there, and it was clear there never would be. But we were able to leverage Xamarin stuff to reuse most of the same codebase, just with an iOS UI on top.


There was a hot minute (and it was about a minute!) where Silverlight was absolutely phenomenal.

Too bad “every app is just a website” took over because of the cross-platform issues.


By chance, do you happen to know if the Mindstorms NXT (the old one, before EV3) software was based on the same toolkit? I always wondered what UI framework it used, it had an unusual look.


It was not... it actually was, IIRC, a LabVIEW program with some tweaks here and there. The UI was basically a LabVIEW VI front panel with a LabVIEW 2D Picture Control. Most of the program logic and the compiler to the NXT was LabVIEW G code.


oof, :%s/their/there


I wonder if the same kind of thing is at play when I ask my Google Home Mini to play a song (on Spotify) and it plays a version by a cover band instead of the real thing, despite my stating the song and band name.

For example, I'll say: "OK Google, Play 'Hey Jude' by 'The Beatles'". Sometimes I'll get that song. But many others I'll get "Hey Jude" by a Beatles tribute band... I wouldn't be surprised if the version by the tribute band is cheaper to play.


I think this is just Google Assistant being Google Assistant - It's awful at playing music, I've had Google Assistant play remixes, cover versions, or the right song but playing out of a 'Top Hits of x Year' or whatever compilation album instead of the original album.

However, whenever I used Spotify's own voice control via my Spotify Car Thing before they bricked it, it got me the exact song I wanted every single time, so I doubt there's some nefarious scheme on Spotify's part.


Someone in another comment said that artists don't even get paid if they have <1000 streams. I wonder if Spotify does anything to spread things around to try to keep as many artists as possible under that 1000 streams cap so that they don't have to pay for them.


Indeed! I just came back to post the exact same adjective after purchasing one as a Christmas gift for my teenage son. I think he'll love it, and I'm excited to get him such a cool present that he doesn't even know exists! (Though as spiffy as this is, there's a good chance that's not true by Christmas.)

Congrats on the launch and bravo on such a well-polished everything - product, UI, website, etc. Very impressive.


The one degree angle, while a little unusual, isn't what blows my mind. It's the disappearance after a small scroll. That's enough to make you think you were imagining things, might need to go to the eye doctor, etc...


What on earth is up with that? It's not just you. It happens in both Chrome and Firefox. After a very small amount of scroll it goes away?!?!


Agreed. Spent a couple minutes trying to figure out how I was reading it wrong for several of the categories - sometimes it is correct, but often it is not.


The "Framework: Outsourced Software Development" image confuses me. What do the green/yellow/lavender circles represent in each 6x6 grid of circles?


This is how I interpreted it:

Green - non engineers employed by the "the company"

Yellow - In house engineers, or engineers employed by the the company

Lavender - Vendor engineering external to the company


Ah, that makes sense, thanks. A legend or even sentence explaining that somewhere in the article would've been great.


My favorite FedEx facepalm was when they kept trying and failing to deliver a package to themselves...

They have an option to have your package held at a FedEx store. It's great for when the package requires signature and you're not able to wait at home all day for it.

Recently I used it. Unbeknownst to me, the FedEx store changed its physical location while the package was in transit, to a different strip mall across the highway. So for several days in a row, I was notified that FedEx attempted to deliver, but that the business was closed. Every call to customer service yielded understanding and sympathetic employees who had no idea how to fix the issue.

After about 5 days, something clicked, and my package showed up at the new FedEx location.


"Don't worry, though... Regardless of your browser choice, we'll still hijack 'alt+back_arrow' to show you supported browsers instead of navigating to the previous page."

That'll teach me to try to eat leftover bbq with my primary hand while using the other to browse HN over lunch.


> Regardless of your browser choice, we'll still hijack 'alt+back_arrow' to show you supported browsers instead of navigating to the previous page.

Frustrating. I'm using Mac, so the corresponding shortcut for returning to the previous page is command + left arrow (back arrow), now hijacked. command + [ does the same thing and isn't hijacked yet. If you're on Windows, backspace might work in Firefox, but you'll first need to change to change a flag in about:config [1]. I'd be reluctant to give backspace that behavior, since I've accidentally lost progress on online forms by accidentally navigating to another page.

[1] https://support.mozilla.org/en-US/kb/keyboard-shortcuts-perf...


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: