HNHacker News
TopNewBestAskShowJobs

alright2565

1,657 karma · joined January 9, 2021

submissionscomments
alright2565··on <input type="password" maxlength="20"> prevents me from logging into Vanguard
Well, in the USA as it is, they are already accountable under Reg E for any fraud losses due to a failure of an "access device" aka password. I'm not sure what else you would want.
alright2565··on GPT 6.1 Sol: Near-Astra intelligence for a fifth of the price
They do, when I was on the $20 plan, I got shown a Luna Reserve model which had its own dedicated quota.
alright2565··on Romanian Crime Rings Are Draining U.S. Welfare Accounts
> Reliance by states on antiquated magnetic-stripe technology makes it easier.

This is the crux of the issue. It's really unfortunate how botched the rollout of chip and contactless payments in the US has been, magstripes should have been completely eliminated a decade ago.

alright2565··on AI-generated posters don’t have to be horrible
I suspect if we were small business owners then we would be inundated with facebook ads for whoever makes those horrible signs.
alright2565··on Show HN: Microsoft Office running with Wine on Linux with no virtualization
I've done something similar with a CAD app, where I've used AI tools to package it as a Nix flake. It's a really good format for wine packaging since it makes it so easy to patch wine in ways that would never be accepted upstream, and it makes launching it just one command vs needing to deal with other people's potentially broken wine prefixes.
alright2565··on There are only twelve 4x4 sudokus (and a cool trick for finding minimal subsets)
Or, for the unique solutions: https://oeis.org/A285180
alright2565··on Let's make quality the norm again
Boeing is a company worth billions of dollars. "UKCSR" is not, there is absolutely no consequence to them getting shut down due to unsafe products. They'll just come back tomorrow as "JUSGB."
alright2565··on Let's make quality the norm again
The CE mark is worthless, since it is a self-certificaton.

The UL mark is valuable, as are the other test lab marks. However, while an ethical storefront would require it, Amazon does not. I've bought plenty of things that are not listed, and if I want safe products I generally have to include "UL" or "ETL" in my search. Even that doesn't always work, I've seen products on there claiming a listing in the title but photo shopping the place where the UL logo ought to be off of their product images.

alright2565··on Everyone should slow down AI development except for me
I can tell you right now, excluding specific teams that focus on software security, that you have access to better models than the US Army.
alright2565··on Transfer files over an Ethernet patch cable
> just use machinename.local after plugging it.

If only :)

This should work, but glibc has a bug where it doesn't support communicating a link-local scope ID in its name resolution subsystem. So you will have to first manually resolve the name, and then use the IPv6 LL address with scope ID directly.

alright2565··on There's no such thing as a small software team anymore
Sure there is. For thousands of classes/functions, I can test the boundaries between them in nanoseconds each. Integration tests are the important part, because with the quality of AI coding these days, unit testing is a waste of time.

With micro services, that same function call is now a minimum of 200us. And now I have LOC for serialization/deserialization, retries, error handling, etc, bloating my code and making it harder to understand, plus now to do the same integration test I need to understand N different build systems for each component.

alright2565··on The Nixpkgs core team has disbanded
Or my personal favorite, just an s3 bucket. In your CI's nix.conf:

    post-build-hook = .../upload-to-cache.sh
upload-to-cache.sh:

    #!/usr/bin/env bash
    set -euo pipefail
    set -f
    export IFS=' '
    exec "${NIX_CACHE_NIX_BIN:-nix}" copy --extra-experimental-features nix-command \
      --to "s3://my-cache-bucket?region=us-east-1" $OUT_PATHS
Set up environment variables as necessary for auth.
alright2565··on Teardown: The BMW / Harman IDC23H Infotainment Unit (B423)
I haven't driven this particular car, but if it's anything like any other infotainment system I've seen, I'm really hoping they're able get a profiler running on there to determine the technique they use to get massive frame drops on hardware they fully control.
alright2565··on Most Americans say "not in my backyard" to AI data centers
I don't want a data center in my back yard because I do want housing in my back yard.

Once a data center shows up, that plot of land is locked out of more productive development for decades.

alright2565··on LAPD lets contract with surveillance giant Flock expire
The problem is following up. It's hard to understand the process, and what to do when the public body doesn't respond.

If nothing else, the Sunshine Request site is a good place to get form emails for these requests from.

alright2565··on No leap second will be introduced at the end of December 2026
> made CLOCK_MONOTONIC unclear in this regard

I don't understand what you mean. Doesn't smearing still mean the clock only goes forward? It's still steadily incrementing. The only difference is that a second is slightly longer/shorter than you expect, but you already have to account for that if you're doing the kind of physics experiment where it would matter.

alright2565··on Why developers are ditching GitHub for Codeberg and self-hosting alternatives
> only a second or two

If only we had research on the effect of a second or two's effect on user experience.

I wouldn't have a problem with it if it was on expensive endpoints like search or deep history dives, where it matters for server load. But it's every single page, out of some strange sense of righteousness.

alright2565··on California AB 2047 makes 3D printers off-limits to students, educators, business
Here's a series of models, which of these is a gun part? https://imgur.com/a/p3UtJqW

Money anti-counterfeiting is trivial, it's just 5 dots arranged in a specific pattern. Deciding what is a gun part is impossible, even for an expert human.

alright2565··on Ask HN: What was your "oh shit" moment with GenAI?
I've done a similar sort of thing with my camera lens' firmware updater just out of curiosity, and I didn't use any kind of MCP. It's able to write an automated script using the Ghirda API to decompile the program just fine, and then code exploration can be done by reading the code.

Claude needs good variable names a lot less than humans do, so renaming/typedefing doesn't seem to be as necessary.

alright2565··on The Last Technical Interview
This is what Triplebyte tried to do, but unfortunately they failed in the market. Maybe they were ahead of their time and a similar concept would work now.
alright2565··on Swap tables, flash-friendly swap, swap_ops, and more
I've been enjoying this renewed focus on memory efficiency. On my personal system, I've noticed that even with loads of memory, having a large swap partition really helps out when a big burst of memory demand comes up, like then running a large compile job. And that even hours or days after the memory demand is over, I still have gigabytes of memory sitting in the swap page—evidently the programs don't actually need to use that memory at all!
alright2565··on FBI director's Based Apparel site has been spotted hosting a 'ClickFix' attack
If you can't understand that command before pasting it in your terminal, then you probably shouldn't be editing the Arch Linux wiki.
alright2565··on 72% of the dollar's purchasing power was destroyed in just four episodes
This article over and over describes inflation as a tax or destruction, without backing those claims up. It would be a much stronger article if it focused on the main point rather than having it interspersed with the author's personal opinion of changes in the denominator of a fraction.
alright2565··on Our commitment to Windows quality
We're in the age of LLMs and this is exactly what they shine at. Just the other day I got tired of Libre office having some crappy custom file picker.

"Claude, change the libre office file picker to the system default"

"Beep boop it is done"

Linux has a big leg up over windows in this regard because all the GUIs are essentially wrappers around CLIs and text files that LLMs can deal with quite well.

alright2565··on Claude Tips for 3D Work
This is what the other person was trying to describe: https://imgur.com/a/J9lQBNK

I chose 1mm for my corner chamfer on the base, but you could make it any dimension including something imperceptible.

alright2565··on Unlocking Python's Cores:Energy Implications of Removing the GIL
I'm not sure of the exact relationship, but power consumption increases greater than linear with clock speed. If you have 4 cores running at the same time, there's more likely to be thermal throttling → lower clock speeds → lower energy consumption.

Greater power draw though; remember that energy is the integral of power over time.

alright2565··on MacBook Neo
I'd rather my ram go to my page cache, not have bloated apps hoarding it.
alright2565··on An Unbothered Jimmy Wales Calls Grokipedia a 'Cartoon Imitation' of Wikipedia
https://en.wikipedia.org/wiki/Wikipedia:Notability#General_n...

You are welcome to join the conversation and try and convince everyone maintaining Wikipedia that random peoples' tweets should be considered a reliable source. Both those other people you mention have been mentioned multiple times in various reliable articles (see the bibliography), while the only thing I can find online about Ray Peat is something that looks a whole lot like blogspam on usnews.com.

alright2565··on I found a vulnerability. they found a lawyer
What hash algorithm was required?
alright2565··on I found a vulnerability. they found a lawyer
If you are needing to version your password hashes, then you are likely doing them incorrectly and not using a proper computationally-hard hashing algorithm.

For example, with unsuitable algorithms like sha256, you get this, which doesn't have a version field:

    import hashlib; print(f"MD5:      {hashlib.md5(b'password').hexdigest()}")
    print(f"SHA-256:  {hashlib.sha256(b'password').hexdigest()}")


    MD5:      5f4dcc3b5aa765d61d8327deb882cf99
    SHA-256:  5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8
But if you use a proper password hash, then your hashing library will automatically take care of versioning your hash, and you can just treat it as an opaque blob:

    import argon2; print(f"Argon2:   {argon2.PasswordHasher().hash('password')}")
    import bcrypt; print(f"bcrypt:   {bcrypt.hashpw(b'password', bcrypt.gensalt()).decode()}")
    from passlib.hash import scrypt; print(f"scrypt:   {scrypt.hash('password')}")


    Argon2:   $argon2id$v=19$m=65536,t=3,p=4$LZ/H9PWV2UV3YTgF3Ixrig$aXEtfkmdCMXX46a0ZiE0XjKABfJSgCHA4HmtlJzautU
    bcrypt:   $2b$12$xqsibRw1wikgk9qhce0CGO9G7k7j2nfpxCmmasmUoGX4Rt0B5umuG
    scrypt:   $scrypt$ln=16,r=8,p=1$/V8rpRTCmDOGcA5hjPFeCw$6N1e9QmxuwqbPJb4NjpGib5FxxILGoXmUX90lCXKXD4
This isn't a new thing, and as far as I'm aware, it's derived from the old apache htpasswd format (although no one else uses the leading colon)

    $ htpasswd -bnBC 10 "" password
    :$2y$10$Bh67PQAd4rqAkbFraTKZ/egfHdN392tyQ3I1U6VnjZhLoQLD3YzRe
Page 1 of 10Next →