Hacker Newsnew | past | comments | ask | show | jobs | submit | computer23's commentslogin

The internet needs a "tin foil hat" emoji, but two proposals have been rejected :(

Emoji proposals and status: https://unicode.org/emoji/emoji-proposals-status.html


The entire notion that emoticons should be limited to what a committee approves (which is then mangled by corporate PR even further) is ridiculous. Just retvrn to images.


This. But more work is needed. I tried a bunch of Discord alternatives like Matrix but very few have a fun experience with things custom emoji images that really make a chat server feel like a home.


There are clients on Matrix that support custom emojii, such as Sable and Commet. Neither are absolutely perfect, but I know people who daily-drive one of the other (or both, which is where I'm at depending on the device).

For the most part, now that Matrix is merging those Matrix 2.0 specs finally, and the 2.0 features are already out in the wild with excellent results, it has a really good base, and as expected we've started to see clients build more into the average-consumer space to pose as alternatives to both niche and mainstream audiences such as Discord, Whatsapp, etc - Which it just wasn't/isn't able to do on Matrix 1.x (legacy).


That's positive. I think the other feature I wanted was embeds. I know prefetching content can be a security risk but it's super convenient.


Sable has opt-in embeds though I haven't tested the extent of supported websites, seems to work fine for Youtube for instance.

Commet has an open PR for this but not yet implemented.


Did they give a reason why it was declined? Was it some bureaucratic "form not filled in correct" thing, or are they actually against the concept of it?


Vendors-have-no-capacity-to-handle-more-than-handful-number-of-emojis-per-each-release thing.

To elaborate: it should be plain obvious that not every Emoji proposal can be accepted even though all of them are correctly filed, as there would be too many Emojis there then. So there has to be some threshold, and that threshold is mostly stipulated by vendors' willingness to process new Emoji characters for designing fonts and updating softwares in time.


That list only includes suggestions that were seriously considered and voted on.

Since it's a vote, there is no single official 'reason' for rejection. If I had to guess: it would be confusing to anyone who didn't grow up with American TV shows.


Eh, it's not like there are hundreds of emojises pretty much exclusively tied to Japanese culture.


They were grandfathered in, not voted on. Or rather there was a vote that resulted in adopting the character sets developed by Japanese telecoms en masse.


Weirdly this is in line with Unicode in general. Widespread (and not even widespread) historic use in say print results in characters getting included.


> emojises

I don’t protest the coinage here (goodness knows my native language did worse things to English words), but I can’t stop saying it in Gollum’s voice.


what's the connection to american TV shows? i'm only aware of the tinfoil hat through cultural osmosis i guess, something about shielding from radio waves

it's a popular image/byword/archetype for conspiracy theorists, idk if it's a common enough symbol to justify emoji inclusion. the submitted proposals probably have analyses of that though :p


Generally Unicode is for encoding all existing encodings/writing.

So you generally can’t add something because it would be cool or fun or useful, but only because it is currently in use and cannot be encoded by Unicode.


If this were entirely true, we'd never see new emoji added, and yet we do.


That's not at all the case. Unicode began as a standard for making things like string(':)') in to a single character.

Consider all of the languages it supports. Consider: ﷽ (which isn't an emoji, but the point stands) which is an entire sentence. It was already in use in certain places and unicode decided they wanted to support it, so now they do. Previously, one would have to type out the entire sentence in the original characters, but now it is a single unicode, just like u+263a () used to be alt+1 (). The emoji was already in use long before unicode existed, and in seeing it in common use, they decided to support it.


Seems like a conspiracy. Also it's so silly that pistol turned into water pistol.


Google has their own free ACME endpoint: https://pki.goog/


They implied it used a GCP account. It would require to give Google personal information, a phone number, and automatic payment permission. And Google not disable your account because your spouse uploaded images for your child's doctor.


ZeroSSL should also be drop in


ZeroSSL advertised for free 3 certificates with no multiple names or wild cards. The next plan was $180 yearly.


Their docs say unlimited free and wildcards are supported with ACME. Does require EAB tho

https://zerossl.com/documentation/acme/

Fwiw haven't used them personally


What's with the odd name? Apple already has a 15 year-old product called Thunderbolt. Mozilla already has a similarly-named but totally-different product called Thunderbird.


Not sure about the US but in France there’s absolutely no way this would be confused with Apple Thunderbolt. No one talks about it, and I don’t even know it it’s even a thing anymore since USB-C.

As for Thunderbird, it’s not the same name? Idk what to say


My first thought was "why would Mozilla support a proposal to expose Thunderbolt to the Web after rejecting similar proposals for USB and Bluetooth?"

So yeah, especially in light of the lightning bolt logo and "thunderbolt.io" domain name, I think it's confusing enough that I'm honestly surprised there's no "Thunderbolt is a registered trademark of Intel Corporation used under license" notice on the site.


The domain name is the most confusing part! "This is thunderbolt.io. No, not the I/O device, the AI client"...


Agreed. The name collision nowadays is horrible.

Then again, it's frustrating trying to name a product in today's era; too many names are taken.


It's clearly a fancy AI powered cable isn't it?

I suppose there is no Thunderbird for Macs then? Or someone in the team would have noticed.


It's not an Apple thing, though they may have adopted it first.

Basically every high end laptop comes with TB4 or 5 ports.


It was originally codeveloped by Apple and Intel.

Though from Thunderbolt 3 onward Intel has been the sole developer.


I came here to say that. Especially with the .io TLD instead of .ai


Please stop using Scribd, which paywalls public documents.

Here's the Courtlistener docket: https://www.courtlistener.com/docket/72373888/nintendo-of-am...


Has the word ChatGPT become generic? This has nothing to do with OpenAI's ChatGPT.


It's a reasonable shortcut for what this project provides: training code, inference code and a ChatGPT-style web interface for chatting with the model.


Waiting for Google to buy the rights to Ask Jeeves.


Healthline is not a trustworthy site- See Wikipedia discussion: https://en.m.wikipedia.org/wiki/Wikipedia:Reliable_sources/N...?


> OpenVox sounds like a text to speech engine.

Reminds me of the (bad) plot element from Star Trek: Picard where Picard's son became "Vox" and was able to control people on behalf of the Borg.


Jeff,

Price is precisely linear, not polynomial! $5/GiB (price= $40 + $5 * xGiB)

The graph isn't spaced correctly on the x axis, which causes confusion.


Is there a recommended (best practice) way to nmap scan your network for vulnerable machines, just to be safe?

From Red Hat's statement: > Red Hat rates these issues with a severity impact of Important. While all versions of RHEL are affected, it is important to note that affected packages are not vulnerable in their default configuration.

Basically, Red Hat machines aren't vulnerable unless "the cups-browsed service has manually been enabled or started."

https://www.redhat.com/en/blog/red-hat-response-openprinting...


>Is there a recommended (best practice) way to nmap scan your network for vulnerable machines, just to be safe?

Perhaps something like this?

   nmap -sU -p 631 -P0 [network]/[mask]

Edit: Added [network]/[mask] for completeness.


nmap can't really tell the difference between an open or a firewalled UDP port. For this specific vuln you can send it a packet like:

echo "0 3 http://myserver:PORT/printers/foo" | nc -u target 631

And if the target is running CUPS on that port it will reach out to `myserver:PORT` and POST some data. The downside is you need to have a server running that can accept inbound requests to see if it connects back.


A fair point, although nmap does list results as "closed", "open" or "open/filtered".

Which can be ambiguous if the port is open or firewalled.

However, if the nmap reports that port is "closed," it most likely is:

   Starting Nmap 7.92 ( https://nmap.org ) at 2024-09-26 20:02 EDT
   Nmap scan report for [host] (localip)
   Host is up (0.00084s latency).

   PORT    STATE  SERVICE
   631/udp closed ipp

I'd add that GP specifically requested an nmap command.

All that said, you're absolutely correct and if nmap returns something like this:

   Starting Nmap 7.92 ( https://nmap.org ) at 2024-09-26 20:04 EDT
   Nmap scan report for [host] (localip)
   Host is up (0.00058s latency).

   PORT    STATE         SERVICE
   631/udp open|filtered ipp
then further poking could be required, as you suggest.

I would point out that cups-browsed isn't really necessary unless you desire to have printers automatically added without any user interaction. Which is poor opsec in any situation.

If we're talking about a corporate environment, adding printers can be automated without cups-browsed, and at home or in the wild (cafes, public wifi, etc.) that's an unacceptable (at least from my perspective) risk and printers (if needed in such an unsecured environment) should be explicitly added by the user, with manual checks to ensure it's the correct device.

As such, rather than checking to see if cups-browsed is running unsecured, simply check to see if it's installed:

Debian and variants:

   'sudo apt list --installed | grep cups-browsed'
RedHat/Fedora and variants:

   'sudo rpm -a -q | grep cups-browsed'
And if it is, remove it.

Edit: fixed typo.


Surely you don't need sudo for listing with either apt or rpm.


You can use --data in nmap to send it easily to the range of hosts (but the server is still needed).


Corporate organisations make use of platforms like Nessus/Tenable to provide this continuous vuln scanning for compliance reasons.

Under the hood its basically running an nmap scan and spitting out a PDF report.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: