HNHacker News
TopNewBestAskShowJobs

Ayesh

3,618 karma · joined March 16, 2017

Reach out at https://aye.sh :)
submissionscomments
Ayesh··on AWS in 2025: Stuff you think you know that's now wrong
CloudFront also has 1TB of free data transfer a month under the forever-free perks.
Ayesh··on Analysis of the GFW's Unconditional Port 443 Block on August 20, 2025
I live in a popular Digital Nomad friendly country, and myself included, work with Europe/American companies roughly matching their time zones.

Now, the people I work with know that I'm not really located in the same time zone, but I know people who don't bother to mention it. I rarely get phone calls, but I have a roaming connection active for banking/OTP/etc. Plenty of cheap cafes with great WiFi (500mbps+ almost everywhere), and several times cheaper too.

Ayesh··on ArchiveTeam has finished archiving all goo.gl short links
Recent update from Google: https://blog.google/technology/developers/googl-link-shorten...
Ayesh··on EU kills Android bootloader unlock starting August 1
https://www.riskinsight-wavestone.com/en/2025/07/radio-equip...

This page (cited by the article at the bottom) has a lot more context and somewhat detailed technical. Information.

Ayesh··on Visa and Mastercard: The global payment duopoly (2024)
About half of the world population has access to some sort of QR based payment system nowadays.

India has UPI, China has Ali and Wechat pay. Almost everyone in these two countries can go weeks without having to use cash.

In South East Asia, Vietnam is leading QR payments. I live in Ha Noi, and I only carry VND equivalent of $15-20 with me, and it sits in the wallet for ages. Everything from gas stations to restaurants to street vendors to even paying taxes, you do it from a QR code. There is no wallet, the money is directly debited from the account.

Thailand, Singapore, and Indonesia have similar systems. In Indonesia, a couple of "super apps" had their own wallets, but merged with QRIS a few years back, a lot of Indonesian people can now pay with QR codes, even across wallets and bank accounts.

South America and Asia has already started to replace card payments with the QR payments. Rightfully so.

Ayesh··on Jujutsu for busy devs
I use gitattributes quite a lot (lfs, various diff engines, and export-ignore). Thanks for the heads-up, jj looked very interesting but I'm not going to give up gitattrivutes.
Ayesh··on Valve confirms credit card companies pressured it to delist certain adult games
Is that not a similar or higher percentage for games with loot boxes or other sorts of gambling?
Ayesh··on Let me pay for Firefox
I could be wrong, but Firefox VPN is a relabeled Mullvard VPN, which probably has enough engineers to keep things going well. Plus, it's a VPN service, I imagine a small number of developers is all it takes to keep it up to date.
Ayesh··on Git Notes: Git's coolest, most unloved­ feature (2022)
Me too.

Most of the times, the commit message is 10+ lines while the change itself is -1/+1.

We use GitHub for repo hosting and a separate issue tracker to coordinate changes. It bothers me a lot that GitHub UI doesn't render markdown for commit messages. We all write really detailed and nicely formatted commit messages, and had to work out a commit message sync so the issue tracker can display related commit messages in full Markdown glory.

Ayesh··on Git Notes: Git's coolest, most unloved­ feature (2022)
TIL the `--trailer` CLI option. I used to edit the commit message in a text editor and manually add the trailers (which works for GitHub `Co-Authored-By`).

being able to use them with `git log` format is pretty cool.

Ayesh··on Show HN: Git-Add–Interactive with Enhancements
Congratulations on publishing this. I use `git add -p` quite a lot, and this project looks interesting!

I knew that you could place a `git-xyz` executable and you can call it as `git xyz`. I didn't know you could do it with flags !?!

A small video or some screenshots would help a lot. If you can record interactivity with ascii-cinema, that will be even better.

Ayesh··on Ask HN: What projects do you donate to?
- ISRG/LetsEncrypt: it's amazing how much if an impact they are having in HTTPS, and that's with a very small number of people and resources.

- PHP Foundation.

- Drupal Association - I started my career with Drupal. Although I rarely use Drupal anymore, it feels right.

I wish I could donate to uBlock Origin, but the developer doesn't seem to accept donations last time I checked.

I think the Open Street Map is also well worth donating, I'm going to pretty soon.

Ayesh··on Widespread power outage in Spain and Portugal
A monkey took out the whole grid in Sri Lanka this year

https://edition.cnn.com/2025/02/13/asia/sri-lanka-power-outa...

Ayesh··on Uncovering the mechanics of The Games: Winter Challenge
Jordan Mechner :) pretty nice explanation with his "motion capture" footage. https://youtu.be/6ozxnrs0BP4
Ayesh··on Uncovering the mechanics of The Games: Winter Challenge
Not a DOS game, but one of the early Prince of Persia (circa 2007) had an evil DRM trick: after a few hours into the game, there is a pressure pad activated door that does not work on cracked versions. So if you are in a cracked versions, and if the crack is not good enough, you will spend a lot of time frustrated unable to go past that door.

It is possible that the crack itself broke the game, but I want to believe it's some genius evil idea someone from Ubisoft came up with.

Ayesh··on Deep dive into how DOS games do copy protection by making themselves unwinnable
To the adult me, this sounds tedious and not really worth. But the teen myself, I'm sure I would totally do it even I have to solve some riddle.
Ayesh··on PHP Core Security Audit Results
Huge shout-out to the PHP Foundation for this.

Last year, it received close to 680K USD, and managed this security audit, sponsored 10 developers, and paid for various expenses. For a language that runs close to 75% of the web, it certainly deserves more funding.

Some of the recent initiatives from the Foundation (https://thephp.foundation/blog/2025/03/31/transparency-and-i...) :

- All PHP versions now receive a total of 4 years of security updates; 2 bug fixes + 2 security, up from 3.

- PIE: A replacement for PECL, to easily install PHP extensions (C, C++ compiled, not PHP packages).

- The security audit.

(I'm one of the PHP Core team and a volunteer at the foundation, happy to answer any questions, but almost all of the work is public)

Ayesh··on 7.7 magnitude earthquake hits Southeast Asia, affecting Myanmar and Thailand
https://en.wikipedia.org/wiki/2025_Sagaing_earthquake

I'm in Hanoi, also about 1,000km from the epicenter (similar to Bangkok). Some people apparently felt tremors and building fixtures shaking, but nothing as serious as the videos I saw in Bangkok.

Ayesh··on Launching RDAP; sunsetting WHOIS
If you `ping`, your recursive resolve (like Google DNS, or your ISP DNS servers) will do the recursive lookup for you.

WHOIS data are irrelavant to resolving the host IP address. The SOA will be used to find the primary name server (for an AXFR lookup perhaps), but generally, each NS entry will work in a round-robin fashion and SOA isn't queried.

Most resolves just ignore duplicate records, but I imagine some resolvers may change the "odds" to likely pick the duplicated NS entry.

Finally, most authorative resolvers do not want to spend resources on ANY queries and almost always don't return all records, or like you saw, do not de-duplicate answers.

Ayesh··on Show HN: Live-updating version of the 'What a week, huh?' meme
If only HTML had a locale-aware <time> element with custom date formatting :(
Ayesh··on A brief history of code signing at Mozilla
You can still run unsigned extensions on Firefox Developer Edition (FF beta with some developer tooling) with an about:config tweak.
Ayesh··on Ask HN: Why buy domains and 301 redirect them to me?
Lots of answers about why, and it could be one or many of them. Scammy reasons likely.

A somewhat innocent reason could be that someone sent a newsletter email or shared a link to your site, but mistyped the URL, so to save their users from getting NXDOMAIN errors l, or even worse, someone registering it with illintentions, they registered and 301 redirected to you.

Ayesh··on Ask HN: Why buy domains and 301 redirect them to me?
If I was running the sites 301 redirect from, I'd be setting a referrer policy to prevent the browser from sending the referrer header.
Ayesh··on The QUIC API OpenSSL will not provide (2021)
The same happened when TLS 1.3Bwasnarpundnthe corner. Several draft version with different implementations that browsers shipped before the RFC was finalized. OpenSSL wasn't as late as QUIC to implement TLS 1.3 though.

These are selective improvements, and where every millisecond counts, I don't think see anything negative about implementations want to get ahead of the game.

I think Caddy browser gained a significant market share because it supports HTTP/3 by default, while Apache (that uses OpenSSL) lags behind.

Ayesh··on Using eSIMs with devices that only have a physical SIM slot via a 9eSIM SIM car
I also bought an esim.me card a while ago before they started to jack up the prices. It worked one or two times, but stopped working after.

I ordered a 5ber yesterday, and waiting for it to arrive.

Ayesh··on Show HN: Interactive systemd – a better way to work with systemd units
Someone should create a set of systemd units that show something funny when entered, like how `sl` does for `ls`.
Ayesh··on Show HN: Interactive systemd – a better way to work with systemd units
All `--` strings should be "options". Starting/stopping a service is not an option, it's a command. I don't enjoy `pacman` for this very reason.
Ayesh··on Show HN: Interactive systemd – a better way to work with systemd units
I think the previous post mentions the `service` command, which has `service foo start` pattern.

I'm used to `service` command, so I have muscle memory which `systemd` breaks. The way `systemd` commands are laid out is better, it just messes with `service` command muscle memory.

Ayesh··on Why is Cloudflare Pages' bandwidth unlimited?
> made it worse.

I'd say this too. I'm giving LetsEncrypt 100% credit for making HTTPS so ubiquitous and free.

But CloudFlare certainly made things worse for "webmaster" era of the Internet, with everything centralized to CloudFlare. I live in Vietnam, and CloudFlare has made things super annoying with their captcha challenges everywhere.

Credit where it's due, CloudFlare pushed HTTP/2 and 3 adoption. More websites are available over IPv6, and their 1.1.1.1 DNS is actually quite nice.

Ayesh··on Making AWS News stupid fast with smart caching
I now wonder how the author didn't get a C&D and/or a UDPR take down because of the domain name.
← PreviousPage 2 of 32Next →