Hacker Newsnew | past | comments | ask | show | jobs | submit | girst's commentslogin

Hi, I'm the maintainer/"janitor keeping the lights on" for VimFx. It still works on up-to-date Firefox versions, as long as you copy a litte bit of javascript in Firefox' install directory[1].

> Vimium these days does not work when a page hasn't finished loading and it doesn't work on blank pages (about:blank) or any other "system page"

This is the single thing that makes the (current) Webextension framework unusable for such extensions, and the reason I keep working on VimFx.

[1]: https://git.gir.st/LegacyFox.git


Thank you! As I mention further down in the conversation, I use VimFX with Waterfox Current alongside Firefox. I'd rather just use Firefox though. I've been staring at those LegacyFox instruction more than one time. Being lazy I've just continued using Waterfox. Using LegacyFox means I have to build/make it after every update of Firefox, right?


> Using LegacyFox means I have to build/make it after every update of Firefox, right?

Nope! Installing once is enough.

As long as you're upgrading in-place (which you probably do), it will stay persistent, since Legacyfox doesn't overwrite files provided by Firefox.


>It does contain a bit more information than required, such as the specifics of the vaccine.

between eu member states, the acceptance of e.g. sputnik-v (the russian corona vaccine) varies. having the name (or id) of the vaccine in the code allows countries who don't recognize a given vaccine to validate codes issued by other eu nations, who are more open to such a vaccine. (what a horriblly worded sentence, i hope you get what i'm trying to say)


Yes what is "required" is controversial. What I meant to say is that they could have chosen to go for a yes/no type of verdict but instead they chose to let the reader decide if they consider the protection acceptable. Both decisions have pros and cons.


What's "acceptable" can vary by country. They couldn't have done this with the acceptance bit only.


Additionally, the situation is constantly changing. A vaccine effective today might be considered insufficient tomorrow, e.g. due to mutations, new studies etc.


well, i've written that code quite hastily, and mostly for my own need. i'd guess, the most likely cause would be a missing libzbar.


the juicy bits seem to be here: https://github.com/ehn-dcc-development


First, the music itself wasn't written by me, but by Rob Miles[1]. So I had a version in C available. I then iteratively transformed the code into simpler and simpler expressions, and finally into a simulated assembly language, written as C macros[2]. Only the final step, initializing peripherals, stetting up interrupt handlers, etc was done with the actual chips. Of course, I made some erros with the before mentioned C macros, so some final debugging was trial-and-error. Later on I also used simulators, but they don't support all the necessary features of the MCUs, or were outright broken[3] (patches now upstream).

[1]: http://txti.es/bitshiftvariationsincminor

[2]: https://git.gir.st/Chiptunes-pms150c.git/blob/f1b013452400b0...

[3]: https://sourceforge.net/p/sdcc/patches/379/


Hi, author here. What a nice surprise to see my project turn up here :)

If you have any questions, shoot!


Hi - I love what you built. I wanted to know if I can buy the RCA chiptune jack or one like it? Id love to see it working IRL. Im not near Innsbruck atm but if I can buy this or a similar product that would be neat. Thanks!


> What a nice surprise to see my project turn up here

Same!


Happy Holidays, HN!

Serles-ACME is a small (1300 LoC) Python ACME server that you can hook up to your existing PKI. We have written an adaptor for the Free-as-in-Freedom and Free-as-in-Beer EJBCA Community Edition, or you can write one for your PKI in about 10-20 lines (patches/pulls very welcome).

We are DVTirol[1], the IT provider for the federal government of the state of Tyrol, Austria, and have developed this tool for our internal use, and have been running it for some time now for our servers. And given that the existing solutions are prohibitively expensive[2] or not available[3] at all, we decided to make the source available for you to profit from it, too!

The documentation, including setup instructions for Serles-ACME and EJBCA, live at https://serles-acme.readthedocs.io/ . We intend to provide a CI/CD pipline for unit testing and pypi-publishing[4] after the holidays (unit test coverage is already at 100%), so stay tuned for that.

Who this is for:

- You want to build up you own PKI, either for company or home use

- You want to automate the issuing process for all your devices/servers

- You already using another PKI Software and want to use certbot with it

Please let us know if you're using it, or contribute backend adaptors for your PKI!

[1]: https://dvt.at

[2]: e.g. EJBCA Enterprise: "if you have to ask, you can't afford it"

[3]: smallstep's ACME is still in early access, and no pricing either

[4]: https://pypi.org/project/serles-acme/


given that the outage affects redirector.googlevideo.com and youtube.com/get_video_info, but as you say, not the f3---<something>.googlevideo.com domains serving the actual streams, i suspect they have problems with the database storing where streams are actually hosted.


In other words, the metadata service. The actual content servers are still up, so provided you know where the content is, you can still access it.

(Does anyone still remember when you could easily download videos from YT by simply replacing "watch" with "get_video" in the URL? I miss those days... when corporate greed hadn't gotten to where it is today.)


DASH isn't driven by greed really, it simply allows flexibly and seamlessly switching audio and video streams to vary quality. You can change resolution, and it still plays things continuously for you.

But it makes it hard to download, unless you stitch all that on the receiving end, something that youtube-dl does.

Greed and etc. were already piled on top of that with DRM, obfuscation and the like.


youtube videos are drm protected?


That’s what the RIAA argued in the request that made their member Microsoft take down youtube-dl.


Some of them are. IIRC the whole fiasco with YouTube-dl was because the repository had tests indicating how to decode DRM protected videos.


IIUC part of the fiasco was the tests needing to use certain non-libre videos as they were the only ones with the worst DRM, but the RIAA also argued that the simpler obfuscation of normal videos was a “rolling cipher” and an “effective prevention mechanism” or whatever the DMCA legalese for DRM is as well.


Something people seem to forget is circumvention isn't always illegal. You may circumvent copy protection for a work you own the rights to view, so the complaints about youtube-dl are poorly founded.


That's the problem with DMCA 1201. It doesn't care that breaking of DRM can be done for legitimate uses. It just point blank forbids it.

The supposed excuse of that overreach in giving the Librarian of Congress the ability to define exceptions is totally lame and unacceptable.


You didn't understand what I wrote. You can break copy protection if you own the rights to a work. This means you can e.g. circumvent Window's license checking if you own a copy of it already. The DMCA does not criminalize that, nor could it, and this is probably why py-kms is still up on github after a copyright challenge.

This was a change that I am assuming was added before any complaint could be mounted about this use case for fear of striking more of the DMCA down than just that provision that was modified.


Some of them have some kind of intentional obfuscation.


videos with content-matched copyrighted audio have some sort of obfuscation in the js player, mostly to deter casual downloading.


doing a `curl -v https://redirector.googlevideo.com` (the host you'll connect to before getting redirected to the actual mp4/m4a streams) opens a tls connection (and gives a cert), but it then hangs for two minutes, before returning a 502.

i'd wager some database storing info about the streams crashed :^D (given that it also crashes on /, it's more likely something else)


I remember hearing something like Google Global Cache proxies requests to Google datacenters so that retransmit times, due to last mile issues, are lower since packets do not need to travel all the way to the datacenter. My guess is that they might do HTTP TLS termination there, and when the backend failed to respond in time returned 502.


yep. thinking it over, that makes more sense. amended my comment


Turns out Youtube-DL was being used by YouTube also. ;)


and now youtube.com/get_video_info, the undocumented endpoint for querying (among other things) streaming urls, is broken as well. returns "Video ID is invalid." or "An error occurred. Please try again later."


Regarding Fedora's Firefox: The Fedora Firefox mainainers, Martin Stransky and Jan Horak, are also the main maintainers of the Linux/GTK parts of Firefox. The VAAPI patches you've mentioned are (afair) mostly-if-not-all Martin's work. So he's not applying some rando's "untested" patches.


But the patches weren’t in Firefox’s codebase, so they didn’t go through the typical Firefox QA process including the Nightly, Beta, etc process.

I’m not saying those guys don’t know what they’re doing, obviously they are experts. But I would prefer to trust but verify (not just trust).


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: