HNHacker News
TopNewBestAskShowJobs

arp242

21,123 karma · joined October 28, 2016

submissionscomments
arp242··on UC Berkeley gives personal information for 150 students and staff to government
Police can investigate. Judges can issue warrants. Trials can be held.

There are tools to deals with this sort of thing.

Separation of powers exists for a reason. It's basic civics that's being violated here. The details of the case are unimportant and a red herring.

arp242··on UC Berkeley gives personal information for 150 students and staff to government
You don't really. I think that's the big worry.

The way to fix it is to change the constitution (for example [1], although bigger changes are probably needed, IMHO anyway, but this is a good start) but the constitution is so hard to change that this is not really feasible in the short to medium term. And making it easier to change the constitution is a catch-22.

And while the Democratic party is obviously tons better than the Republican party, that's only because the Republican party is so awful. The Dems seem to have only tepid interest to fix this at best.

[1]: https://www.nytimes.com/2025/08/21/opinion/trump-constitutio...

arp242··on Murex – An intuitive and content aware shell for a modern command line

       -N, --literal
              print entry names without quoting
arp242··on Slack has raised our charges by $195k per year
Did you have a special deal with Slack? I don't understand how they can just increase the price with a few days notice?
arp242··on Tinycolor supply chain attack post-mortem
I'm feeling that maybe the entire concept of "publishing packages" is something that's not really needed? Instead, the VCS can be used as a "source of truth", with no extra publishing step required.

This is how Go works: you import by URL, e.g. "example.com/whatever/pkgname", which is presumed to be a VCS repo (git, mercurial, subversion, etc.) Versioning is done by VCS tags and branches. You "publish" by adding a tag.

While VCS repos can and have been compromised, this removes an entire attack surface from the equation. If you read every commit or a diff between two tags, then you've seen it all. No need to also diff the .tar.gz packages. I believe this would have prevented this entire incident, and I believe also the one from a few weeks ago (AFAIK that also only relied on compromised npm accounts, and not VCS?)

The main downside is that moving a repo is a bit harder, since the import path will change from "host1.com/pkgname" to "otherhost.com/pkgname", or "github.com/oneuser/repo" to "github.com/otheruser/repo". Arguably, this is a feature – opinions are divided.

Other than that, I can't really think of any advantages a "publish package"-step adds? Maybe I'm missing something? But to me it seems like a relic from the old "upload tar archive to FTP" days before VCS became ubiquitous (or nigh-ubiquitous anyway).

arp242··on Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised
You're overestimating the amount of auditing these distros do for the average package; in reality there is very little.

The reason these compromised packages typically don't make it in to e.g. Debian is because this all tends to be discovered quite quickly, before the package maintainer has a chance to update it.

arp242··on Man jailed for parole violations after refusing to decrypt his Tor node
He used encrypted services to commit a bunch of crimes. He was then released on the condition that he would no longer use the encrypted services that he used to commit the crimes with. He then lied and used those encrypted services anyway. It's really that simple.

I am absolutely NOT a fan of "tough on crime" type stuff. By and large I feel the US criminal justice system is an inhumane cruel monstrosity. But the conditions were not all that unreasonable (except the weed stuff) and all of this smells of bad faith on the part of this couple.

arp242··on Elon Musk calls for dissolution of parliament at far-right rally in London
Yeah, I don't really get that either, especially since Musk is still so involved in these companies.

But Musk is hardly a unique case, and his racism is just part of the "Make Racism Great Again" movement that has, especially over the last year or so, become exceedingly explicit. You can see this here on HN as well.

Or maybe it's more "Make 1820s Great Again" movement, because also from today: "Women’s suffrage is apparently up for debate again in America" https://www.theguardian.com/commentisfree/2025/sep/13/womens...

arp242··on Elon Musk calls for dissolution of parliament at far-right rally in London
Pretty much every atrocity in history that I know of has included a framing of "we must defend ourselves against $evil_group, we have no choice, it's them or us". A framing of victimhood – whether real or not – and need of defence is always a big part of the justification of denying the rights, or even killing, of $evil_group. Maybe there are exceptions, but I'm not aware of them.

The right-wing persecution complex is not a new phenomenon. Bill O'Reilly and the likes were constantly going on about it in the 90s, and Jerry Falwell's "Moral Majority" – which more or less created the Christian Right – already had elements of it in the 80s. But this really takes things to a new level, and is at least potentially laying the groundwork for something rather ugly.

arp242··on Wayland breaks the tools I use to make a living
Scribus doesn't "deliberately" break compatibility; it was completely unusable with Wayland and they added friendly message. It also doesn't really go out of its way to do so as you're suggesting – it just checks Application::platformName() == "wayland" and that's it.

Maybe it's better now with Wayland and that check can be removed. I don't know.

See: https://bugs.scribus.net/view.php?id=16998 and https://github.com/scribusproject/scribus/commit/74d8d7ef7

arp242··on Go for Bash Programmers – Part II: CLI Tools
No, there is no exception for the "main" package. It's just build tag trickery. You can do this with any package names (although it doesn't make much sense to do so).
arp242··on Go for Bash Programmers – Part II: CLI Tools
What people usually do is add a build tag to the file(s) with package main, so they're not compiled on a regular compile/test run. But you can't combine them as such (and you can do this with any package name – there's nothing special about the main package here).
arp242··on Pontevedra, Spain declares its entire urban area a "reduced traffic zone"
Yes, this sounds nice in principle. Also insanely expensive, difficult to build, and basically just completely unfeasible in reality.
arp242··on Tomorrow's emoji today: Unicode 17.0
The general view of the Unicode people is that this is a formatting issue, rather than a character encoding issue.

While I agree it can be annoying at times, I somewhat tend to agree as there is tons of useful formatting that one could want. And if we do Latin alphabet, then should we also do Greek? Cyrillic? Arabic? CJK?

arp242··on Firefox 32-bit Linux Support to End in 2026
> 32-bit Linux might see more use

Probably less, not more. Many distros either stopped supporting 32bit systems, or are planning to. As the announcement says, that's why they're stopping support now.

arp242··on EU Fines Google $3.5B; Must Divest Part of Ad-Tech Business
European Commission fines Google €2.95B over abusive ad tech practices - https://news.ycombinator.com/item?id=45140730 - Sep 2025 (351 comments)
arp242··on Postal traffic to US down by over 80% amid tariffs, UN says
The US spent several months threatening to annex Canada. It's still threatening to annex Greenland AFAIK. Get your house in order before getting all triggered over people being upset about that.
arp242··on I am giving up on Intel and have bought an AMD Ryzen 9950X3D
Do RISC architectures still exist? ARM has gained tons of stuff and isn't really "RISC" any more either.

Maybe RISC-V? It's right there in the name, but I haven't really looked at it. However, there are no RISC-V chips that have anywhere near the performance x86 or ARM has, so it remains to be seen if RISC-V can be competitive with x86 or ARM for these types of things.

RISC is one of those things that sounds nice and elegant in principle, but works out rather less well in practice.

arp242··on I am giving up on Intel and have bought an AMD Ryzen 9950X3D
285k: https://www.intel.com/content/www/us/en/products/sku/241060/...

Max Operating Temperature: 105 °C

14900k: https://www.intel.com/content/www/us/en/products/sku/236773/...

Max Operating Temperature: 100 °C

Different CPUs, different specs.

And any CPU from the last decade will just throttle down if it gets too hot. That's how the entire "Turbo" thing works: go as fast as we can until it gets too hot, after which it throttles down.

arp242··on Garmin beats Apple to market with satellite-connected smartwatch
Ugh, I lived in Dunedin for a year, and it's the worst place I've cycled by a considerable margin. Much worse than e.g. Ireland or England, which also isn't exactly bicycle-friendly. The infrastructure isn't even half-bad, but the behaviour of motorists was just the worst. Kiwis are like that old Goofy cartoon where he's all nice and friendly until he gets in his car, after which he becomes a raging maniac.

So yeah, with "New Zealand" as context a device like that makes more sense.

arp242··on Tech CEOs Take Turns Praising Trump at White House Dinner
"I avoided a possible lawsuit, and all I had to do was help plunge my country in to fascism!"
arp242··on Tech CEOs Take Turns Praising Trump at White House Dinner
> if you are a CEO in 2015 and you aren’t flattering this idiot to profit then you are violating your duties to your shareholders

Ah yes, because that's the only thing that matters. Nihilistic capitalism at its finest – there no morality beyond economics. Everything that makes economic sense is moral because it makes economic sense. Whether it actually does is rather dubious by the way, as all of this has the very real possibility of massively damage these businesses in the medium to long term – so also nihilistic short-termism at its finest.

arp242··on Hollow Knight: Silksong causes server chaos on Xbox, Steam, and Nintendo
I guess, but linux/arm64 specific bugs can and do happen. For my open source projects I offer builds for arm64 and others because, well, why not? I don't test it and I can't really test it (outside of qemu, I guess) and if it doesn't work then that's your problem to at least debug and probably fix too. But that attitude doesn't really work for a commercial game.
arp242··on Hollow Knight: Silksong causes server chaos on Xbox, Steam, and Nintendo
Sure: https://gist.github.com/arp242/3800893c531d185abfd06f82ed0c3...

Going over things, the dividing line between "good" and "superb" is somewhat arbitrary, so I included both, because well, why not? I did it like that to mimic the commonly used "5 star" rating, but maybe it should just be three: "bad", "okay", "good". Dunno.

Also note that I haven't played many games. I'm just now getting around to The Witcher 3, which is over ten years old. So...

"-" starts a new entry, followed by one or more titles, followed by "tag: value", followed by whatever I wanted to write (if anything) as Markdown. It lists "superb" first, alphabetically, then "good".

arp242··on 1TB Raspberry Pi SSD on sale now for $70
So buy the desktop kit if that's what you want: https://www.pishop.us/product/raspberry-pi-5-desktop-kit-us/...

Many people don't want/need all of it, and they can buy just the board without paying for stuff they don't need.

This is not a deception. Stop spreading misinformation.

arp242··on Hollow Knight: Silksong causes server chaos on Xbox, Steam, and Nintendo
I don't know any commercial game that offers that. People playing games on arm64 Linux is a niche within a niche.
arp242··on Hollow Knight: Silksong causes server chaos on Xbox, Steam, and Nintendo
I've been keeping reviews in the last few years. Just privately, for myself. I started doing this because I couldn't remember what I did and didn't play, and had a "wait, I think I tried this before and didn't like it" deja-vu a few times.

Right now the rankings are: bad (388), meh (191), okay (71), good (63), superb (12). Turns out I dislike a lot of games. This is also why I started to just pirate things first and then buy if I like it; I have 558 games in my GOG library and I barely played (or like) >80% of it.

I can recommend keeping reviews by the way; I've since started doing this for tons of stuff, from games to films to TV episodes to wine to coffee, and writing things down really helps narrow down what you like or dislike about things. By keeping it private you can write whatever you like and don't need to do a "full" review. For example my entire review for Ninja Gaiden: Ragebound (rated "meh") is "Too fast-paced for my liking. Also don't really like the controls." And for me, that's enough.

I can write a long essay on why I like or dislike games, but to be honest I'd rather be playing Silksong.

arp242··on Hollow Knight: Silksong causes server chaos on Xbox, Steam, and Nintendo
It's just three blokes and a bunch of contractors. According to Wikipedia Hollow Knight sold more than 15 million copies, at $15 that's $225M. Of course you have store fees, and discounts, and taxes, and whatnot, but all of that accounted for they still made at least dozens of millions – if not more.

It's unclear if they would make more money if it was much more expensive. I picked it up for €19.50 today; not sure I would have paid €80.

arp242··on Take something you don’t like and try to like it
Nah, that's not it. We're talking about a 20+ year of not listening to it here, and to be honest I barely remembered lots of it. Plus, there's plenty of other music that I've played to death over the years that I still like (not as exciting as when it was new of course).
arp242··on Tesco trials avocado ripeness scanners
These seem to be from a company OneThird: https://onethird.io/avocado-scanner

From their website on how it works:

"Every piece of fresh produce has a unique spectral fingerprint. We have collected a vast amount of spectral data for many different varieties and maturity levels. Our system combines this with other data sources and uses AI algorithms to analyze the data and determine what the expected shelf-life is."

So basically, it just looks at the colour. And "AI" because it's 2025.

← PreviousPage 5 of 34Next →