HNHacker News
TopNewBestAskShowJobs

baobun

2,504 karma · joined December 20, 2023

Thank you for interacting with my content.
submissionscomments
baobun··on Ask HN: How can we make our AI/MCP Security product reach audiences?
Who watches the watchmen?

This needs to be locally hostable and auditable to be interesting.

baobun··on TikTok Deal Is the Shittiest Possible Outcome, Making Everything Worse
You don't like war and propaganda but are "also 100% fine with China taking back Taiwan, that's only fair"? Not compatible.

Aside: This reminds me that pro-CCP astroturfing has been increasingly prevalent and visible on the fediverse recently...

baobun··on GotaTun – Mullvad's WireGuard Implementation in Rust
To clarify, this is refering to Mullvad multi-hop feature. Doing your own multihop setup doesn't have this issue, right?
baobun··on Firefox will have an option to disable all AI features
What was your methodology in checking? I got different results using a local mitmproxy on a clean install.

https://sizeof.cat/post/web-browser-telemetry-2025-edition/

baobun··on Firefox will have an option to disable all AI features
I think it's a good idea to mitm yourself and look at what exactly your browser is up to. We should be careful about just accepting and repeating hearsay when such claims are pretty easy to verify yourself.

https://sizeof.cat/post/web-browser-telemetry-2025-edition/

As for webapps breaking in Librewolf, IME those can be fixed by selectively unblocking canvas (or whatever) for the site in question.

baobun··on Skills for organizations, partners, the ecosystem
As groundbreaking as this is, it will never get traction without a LICENSE.md.
baobun··on Firefox will have an option to disable all AI features
The bookmarks feature doesn't silently connect to their servers in the background to function.

The supposed local-only features like translations will download at least model updates and configuration, which leaks metadata.

baobun··on Firefox will have an option to disable all AI features
Zen and Floorp are not obvious improvements from a privacy and control perspective.

Waterfox, Librewolf and Mullvad Browser are worth considering.

baobun··on Pricing Changes for GitHub Actions
> Microsoft just conned a bunch more people with the same classic tech lock-in strategy they've always pursued, people are right to be pissed

People would be better served by not expecting anything different from Microsoft. As you say yourself, this is how they roll.

> The only learning to take away is never ever use anything from the big tech companies

Do you even believe in this yourself? Not being dependent on them would be a good start.

baobun··on Mozilla appoints new CEO Anthony Enzor-Demeo
> But Mozilla is not KDE or Gnome

Exactly. Would be nicer if they did their own features somewhat right (including interfaces for configuration and disabling approachable for non-engineers) before they scope-creep the entire desktop.

baobun··on Show HN: 85% Cheaper Crypto Data
Please add crypto currency as payment option!
baobun··on SoundCloud confirms breach after member data stolen, VPN access disrupted
You are replying to submarine marketing.
baobun··on Problems with D-Bus on the Linux desktop
And the prevalance of D-Bus is part of it...? Spill the beans!
baobun··on Former CIA spy: agency's tools can takeover your phone, TV, and even your car
Does not strike me as outlandish for US covert operatives.

https://www.aljazeera.com/news/2025/9/6/us-navy-seals-killed...

baobun··on “Super secure” messaging app leaks everyone's phone number
> Yeah if you buy a number with Durov's TON shitcoin

Not even. If you actually try you will discover at the last step (after full KYC, signing some dubious agreements, and linking an existing TG account) that the Fragment "market" is actually fully centralized and has not been open for new buyers-users for a good while. No secondary markets out there (maybe not even possible on their network) afaik.

baobun··on Ask HN: Should the Only Christian Have to Work on Christmas Day
Did you apply for/announce leave in advance or were you just expecting to be off that day?

I'd personally prefer my employer to not track the religions of its employees and then feed that to whatever people and software they have doing scheduling. I'd be more surprised (not pleasantly) if they did that than if I got scheduled for work on solstice.

baobun··on Interview with Kent Overstreet (Bcachefs) [audio]
Just looking at that factor should be about as realistic as running ZFS (very).
baobun··on If AI replaces workers, should it also pay taxes?
The issue I have with your proposal is that it discloses too much metadata to tax authorities in order to enforce compliance. They'll have an almost perfect map of the legal compute in their jurisdiction. Access to compute should be free to all and not gated by taxes.

Tax on electricity is already a thing. That can be adjusted and even be made progressive. Extra for fossils and so on.

baobun··on Shai-Hulud compromised a dev machine and raided GitHub org access: a post-mortem
Yarn is unfortunately a dead-end security-wise under current maintainership.

If you are still on yarn v1 I suggest being consistent with '--ignore-scripts --frozen-lockfile' and run any necessary lifecycle scripts for dependencies yourself. There is @lavamoat/allow-scripts to manage this if your project warrants it.

If you are on newer yarn versions I strongly encourage to migrate off to either pnpm or npm.

baobun··on Sick of smart TVs? Here are your best options
I'm curious about that neighbor TV, do you have a model name or something if one would like to reproduce?
baobun··on Sick of smart TVs? Here are your best options
I think you got that backwards.
baobun··on Google de-indexed Bear Blog and I don't know why
I guess a workaround could be to tell googlebot to keep off /tag/?
baobun··on Using e-ink tablet as monitor for Linux
PineNote?
baobun··on Using e-ink tablet as monitor for Linux
I think PineNote qualifies by now?

https://pine64.org/devices/pinenote/

Also https://usetrmnl.com/

baobun··on Some surprising things about DuckDuckGo
I've noticed literal searches really went to crap for my DDG searches just the last month or two. Lots of gaps and sometimes empty results when there are relevant matches out there.
baobun··on Ask HN: How can I get better at using AI for programming?
What is the time of the longest-lived actively developed and deployed codebase where this approach has been successful so far and your co-maintainers aren't screaming bloody murder?
baobun··on Cryptids
Once we have scalable quantum computers, fusion power, time travel and an indestructable material, I figure we can bundle all that together with instructions to send a particle back after T+1 on termination. Some problems will stay unsolved as they go on to the heat-death of the universe but maybe one or a few comes back with a useful result!

Certainly with the right investments we'll get there within the next 5 years if you ask Musk and Altman. While a time machine might sound uncertain in that timefram, I'm sure AI will figure it out for us.

baobun··on Ask HN: What's your workflow for handling many Git repos locally?
Is this internal/personal code or is a significant part forks/mirrors where you have external upstreams to sync with? Are we talking dozens, hundreds, or thousands of repos?

Are we just concerning/limiting ourselves with local workflow on a single workstation?

baobun··on Apple locks account after redeeming gift card
Dupe: https://news.ycombinator.com/item?id=46252114
baobun··on Security issues with electronic invoices
> If one has a reproducible JSON serializer

Pretty significant catch if interoperability is a concern at all. Whitespace is easy enough to handle but how do dict keys get ordered? Are unquoted numbers with high precision output as-is or truncated to floats/JS Numbers? Is scientific notation ever used and if so when?

← PreviousPage 5 of 33Next →