HNHacker News
TopNewBestAskShowJobs

3r7j6qzi9jvnve

210 karma · joined May 9, 2024

submissionscomments
3r7j6qzi9jvnve··on I resigned from Anthropic today
(and now I want to watch summer wars again)
3r7j6qzi9jvnve··on Hang on to Your Firefox
Not sure if chrome has an equivalent but FF bar allows limiting results, e.g. adding a single % in the bar will search tabs, ^ history, * bookmarks, (+ searchs tagged bookmarks? there's no shiny icon)...
3r7j6qzi9jvnve··on Transfer files over an Ethernet patch cable
tbstream looks fun, but hard to use for the casual user -- not sure if it'll get simpler but I don't think I'll remember messing in configfs just to transfer a file:

https://git.kernel.org/pub/scm/linux/kernel/git/westeri/thun...

3r7j6qzi9jvnve··on GitHub Publishes IPv6 Addresses for Git SSH remotes
There are ranges in the "git" block, but it doesn't mean they're doing anything with it (until it's in the DNS or they publish specific IPs are safe to connect to it doesn't mean anything)

This page is actually in the wayback machine (thank you!!!) and the same ranges were already listed in 2022 (not in 2021, didn't look for exact first occurence)

http://web.archive.org/web/20220710073458/https://api.github...

3r7j6qzi9jvnve··on Android Developer Verification: Threat masquerading as protection
related: https://keepandroidopen.org/ previously on hn

- https://news.ycombinator.com/item?id=47935853 (2 months ago, 889 comments)

- https://news.ycombinator.com/item?id=47139765 (4 months ago, 378 comments)

- https://news.ycombinator.com/item?id=47778274 (3 months ago, 68 comments)

3r7j6qzi9jvnve··on Re: [PATCH] OOM_pardon, a.k.a. don't kill my xlock (2004)
If it helps, I run ff in systemd-run with memory limits set -- that's usually enough to avoid the problem in the first place (ff does freeze when loading google spreadsheets or whatever heavy UI, so I also have a script to adjust /sys/fs/cgroup/user.slice/user-1000.slice/user@1000.service/app.slice/ff-*.scope/memory.max and memory.high at runtime... I should publish my $bindir someday)

    systemd-run --user --scope --unit=ff-$$.scope \
     -p MemoryMax=4G -p MemoryHigh=3G \
     -p MemorySwapMax=0 \
     firejail firefox "$@"
3r7j6qzi9jvnve··on SSH has no Host header
I wonder if it's something like https://github.com/cea-hpc/sshproxy that sits in the middle (with decryption and everything) or if they could do this without setting up a session directly with the client.

Well, we're implicitly trusting the host when running a VM anyway (most of the time), but it's something I'd want to check before buying into the service.

EDIT: Ah, it's probably https://github.com/boldsoftware/sshpiper

will try to remember to look later.

3r7j6qzi9jvnve··on MinIO repository is no longer maintained
See https://news.ycombinator.com/item?id=46136023 - MinIO is now in maintenance-mode

It was pretty clear they pivoted to their closed source repo back then.

3r7j6qzi9jvnve··on Everything You Need to Know About Email Encryption in 2026
> SMTP, the protocol for sending email, rarely enforces TLS (if it’s even supported at all)

FWIW that's being less and less true. Major players like apple now automatically trash mail (I don't remember if it was marked as spam or bounced) if you try to send them a mail without TLS. I recall gmail published something similar for workspace? And I'm sure others will follow/already have, so you can probably also turn that knob for your own servers too and refuse plain mails -- with a bit of luck that'll bounce off some spam..

(This doesn't change the fact that any admin over there can probably read anything you send to someone there, I don't know.)

EDIT: oh, according to this ( https://old.reddit.com/r/crypto/comments/1q4arv5/everything_... ) enabling TLS doesn't check the host name matches anything sane? So TLS doesn't actually bring in anything, wow...

3r7j6qzi9jvnve··on Python 3.15’s interpreter for Windows x86-64 should hopefully be 15% faster
I now have to know why subparsers test got 60% slower... (0.3960 in the graph)
3r7j6qzi9jvnve··on Why do voice transcription apps charge monthly when Whisper runs locally?
It might make up a bunch of words, like "subtitles by soandso", when there's silence though... /s
3r7j6qzi9jvnve··on Preventing IoT Edge Device Cloning
The user apparently needs to provide that through ba.tpm.uniquekey(), providing persistent random data that is device dependent: https://realtimelogic.com/ba/doc/?url=auxlua.html#ba_tpm_glo...

I guess the rest still provide value by transforming whatever random seed into a proper certificate though.

3r7j6qzi9jvnve··on Welcome to the IPv4 Games
That only works if the proxy is sitting on localhost or a local network, just setting the header shouldn't work.

(I came here because I was curious how jart got 127 and 10, but after seeing the source is their's that's less of wonder..)

3r7j6qzi9jvnve··on Many countries that said no to ChatControl in 2024 are now undecided
Note to poster if they happen to see this: as pointed out there's alt text... But it's plain wrong, saying "Countries like Germany, Poland, Austria, Slovenia, Croatia, and the Netherlands are in green, indicating opposition or neutrality" when only the Netherlands, Poland an Austria are opposed; it's probably just been copied from an older version and could use updating.
3r7j6qzi9jvnve··on Gmailtail – Command-line tool to monitor Gmail messages and output them as JSON
This just polls every x (default 30) seconds; if you use IMAP you can do better with IDLE (e.g. I pipe `fetchmail --check` to something that triggers a sync to immediately get new mails)
3r7j6qzi9jvnve··on Better Shell History Search
> I’m also not sure the ‘fuzzy’ aspects of Atuin quite match the heights of fzf/skim).

This. I've been using atuin for a few months and this is so horrible how much better it could be with a "real" fzf matching... I just tried skim shell integration ( https://github.com/skim-rs/skim/tree/master/shell ) and it's great. I kind of like the extra metadata atuin saves (cwd, session context), but I think I was just waiting to stumble into this to turn atuin back off...

3r7j6qzi9jvnve··on Thoughts on Daylight Computer
While I was looking up such screens, these also seem to sell "quick refresh" PC screens: https://shop.dasung.com/

Just did a quick search on HN and while it did get posted recent ones didn't get many comments, not many users perhaps?

I'd be greedy and wish there was something in the middle (13 is tiny for desktop but there's no battery so it's not really laptop friendly; 25 is a bit too big for my desk), but perhaps...

3r7j6qzi9jvnve··on Thoughts on Daylight Computer
There seem to be equivalent for linux (not tested) https://www.tomshardware.com/how-to/use-tablet-or-phone-seco...

That's an interesting idea! I'm a bit wary of latency if this all goes over wifi, but probably worth a try.

3r7j6qzi9jvnve··on Thoughts on Daylight Computer
Unlocking the bootloader by itself is allowed apparently: https://www.daylighthacker.wiki/unlock

The problem is that in order to run linux you'll probably want a kernel with quite a few patches and their DTS, and I haven't found anything for this yet. Android is almost linux so with a bit of effort it's probably not unreachable, but I don't quite have the time for this yet... If someone does it then Linux with an external keyboard would probably work for me as well, there was someone who did it with the remarkable (it's already linux but they ran standard X11 on it), but the refresh rate was a bit too sluggish, something like the daylight computer would probably do nicely!

3r7j6qzi9jvnve··on Thoughts on Daylight Computer
(not mine) was just checking what became of them and this review hit home

I have no use for an android tablet like this, but as soon as they make a PC screen (either laptop or desktop) I'm pretty sure I'd buy one fast! Keep it up folks!

3r7j6qzi9jvnve··on Comparison of File Systems for an SSD
note reiserfs has been removed from 6.13, so you probably do not want to use that... https://www.phoronix.com/news/ReiserFS-Deleted-Linux-6.13
3r7j6qzi9jvnve··on Zig; what I think after months of using it
(never used zig yet myself) For UB detection I've read zig had prime support for sanitizers, so you could run your tests with ubsan and catch UBs at this point... Assuming there are enough tests.

As far as I'm concerned (doing half C / half rust) I'm still watching from the sidelines but I'll definitely give zig a try at some point. This article was insightful, thank you!

3r7j6qzi9jvnve··on Ghostty 1.0
(probably, I was also looking for that)
3r7j6qzi9jvnve··on Unexpected Keyboard
Japanese flick input is closer to thumb-key ( https://github.com/dessalines/thumb-key I just discovered in another comment), and even that's a bit different as you get to input a consonant+vowel pair at a time (e.g. ka-ki-ku-ke-ko on a key)

I switch between Japanese input and hacker keyboard all the time for termux and it's much faster to type Japanese; this thread made me want to try both thumb-key and unexpected keyboard but I think I'll try thumb-key first.

3r7j6qzi9jvnve··on Git commit with hash `0000000`
https://github.com/not-an-aardvark/lucky-commit and others have shown up to engineer (read: brute-force) these early hash digits
3r7j6qzi9jvnve··on Show HN: bpfquery – experimenting with compiling SQL to bpf(trace)
> --I ran ctags across the linux kernel source code, pulled out all the signatures and then reference the signature when compiling the query, so you don't have to do a bunch of casts in the query.

note you don't need the casts if you use kfuncs instead, which also let you reference arguments by name (from https://github.com/bpftrace/bpftrace/blob/master/man/adoc/bp... ):

    kfunc:tcp_connect {
        if (args->sk->__sk_common.skc_daddr == (uint32)pton("127.0.0.1"))
            ...
    }
With that said, kfuncs don't work (yet?) on aarch64, so this is great for me -- I'll definitely give it a try next time I need it.

(EDIT: formatting)

3r7j6qzi9jvnve··on It's time to take a closer look at CVE-2024-38063 (Windows IPv6 RCE)
infinitely easier to read with https://threadreaderapp.com/thread/1825472703223992323

I don't know what that scrolly thing is, but it's horrible for this kind of messages.

It'd be even better if it didn't start on X in the first place, but at this point it's a lost battle...

3r7j6qzi9jvnve··on JSON extra uses orjson instead of ujson (2019)
I'm really surprised ijl got angry that his mail was quoted, it looks innocent enough to me.

For reference it's been edited out here: https://github.com/pydantic/pydantic/issues/589

But github shows edits, so the edit is meaningless for privacy. Here's the original mail (yes, I'm blatantly ignoring his request to not publish this, I'm just this evil.)

    I've looked into replacing ujson in pydantic with orjson
    (https://github.com/ijl/orjson). In this implementation, the same JSON
    library is used for everything, and JSON outputs bytes without
    whitespace (as it's faster and JSON is a serialization format). If
    orjson is installed, it won't affect pydantic's benchmark for
    validation, but can be expected to improve whole-program performance.

    It's a large change with breaking changes to JSON methods, however, so
    rather than opening a pull request now, could you take a look and see if
    that's consistent and acceptable to the project?

    https://github.com/ijl/pydantic/commit/7c08f41edd340614d7c58888f025665dbc71d0e3

    That passes tests, but that's all. I'll clean it up or modify if the
    idea's acceptable.

    Thanks.
3r7j6qzi9jvnve··on [dead]
took me some time to find where it's described, but "LibertOS" is yet another degoogled android: https://unplugged.com/blogs/news/the-unplugged-phone-inside-...

Doesn't say what it's based on (lineage or AOSP or something else)

3r7j6qzi9jvnve··on Securing Git Repositories with Gittuf
> how do we actually know that that pull request has gone through all the checks

gerrit flags all reviews and checks into git notes, which can be downloaded and displayed with a little bit of configuration: https://tylercipriani.com/blog/2022/11/19/git-notes-gits-coo...

This doesn't prevent an admin from cheating and editing the notes manually, but it's a good audit trail if you trust the "forge".