HNHacker News
TopNewBestAskShowJobs

dust-jacket

360 karma · joined October 28, 2025

submissionscomments
dust-jacket··on TS-2026-009: Insecure argument handling in Tailscale SSH permitted root access
But are there any good self-hosted wrappers?

I ditched wireguard for tailscale for the ease of managing it. I'd much rather run my own independently but CBA with the config editing hassle.

dust-jacket··on No Spanish reading crisis?
I don't think anyone's saying audiobooks aren't "valid" or worthwhile.

Just that if someone asks you if you were reading this morning, you should probably say "no" if you were listening to a podcast. It's not a value judgement, just a category.

dust-jacket··on OAuth for all
> I did not claim they do not improve their products.

Apologies that I didn't notice you weren't CommonGuy, who said "improving them in the future is not really their style". Consider my reply aimed at them. The two of you seem to be saying something quite different. I don't think I necessarily disagree with you

dust-jacket··on OAuth for all
Nah, you don't get to claim they don't work on improving their products, and then handwave away actual updates to it with "yeah but those aren't the improvements I wanted". That's just life and priorities.

Abandoning something, and not making the changes you want to see are entirely different things.

dust-jacket··on LastPass notifies users of yet another data breach
Some of its about sharing the pain.

e.g. when Crowdstrike takes down Windows across the worlds or AWS east coast falls over everybody hurts. At that point the story is easy, you point at the broken thing, mumble something about improving resilience, and everyone just moves on.

Roll your own system and have it taken down / breached specifically? There's noone to point at. It's hard to make the narrative anything except it being your fault.

dust-jacket··on We’re making Bunny DNS free
No, this is just a silly take.

AWS can make data export free, and no-one's going to shout at them that it's not free because it cost money to store the data there in the first place.

Bunny offers a number of services to paying customers. One of the services, that would previously have incurred a cost, now does not. It is free.

dust-jacket··on Never Give Them Your Face
Exactly. I stopped reading part way through. The first thought was ... this seems like quite a lot of words to say not an awful lot of contents. And then the sentences started jumping out.

> A verification regime does not need your approval — it needs your participation

Ugh

dust-jacket··on Pledging another $400k to the Zig software foundation
I'm not the commenter, but for me ghostty was good for being a Very Good terminal experience with almost no config required.

Just checked and the config file for my daily use terminal setup is 3 lines long. 3! That means I know I can chuck it on any system, any clean re-install, and it'll be Fine. That counts for a lot when you've grown tired of endless config tweaking.

dust-jacket··on Calvin and Hobbes and the price of integrity
Not the commenter, but yeah, I think I do.

Setting out to do something commercial (and succeeding), is different from setting out to do something firmly non-commercial and then commercialising it. The second one will almost always involve compromise that was never intended, which often undermines the original, non-commercial version.

dust-jacket··on Google Chrome update will close the door on ad blockers
Except it's nothing like that, because the numbers are so different.
dust-jacket··on Curl will not accept vulnerability reports during July 2026
> Not a workaholic, I don't think, but a 24/7 stress monkey when I think that I could be helping

I er... think you might be a workaholic.

But I'm glad for you that your current setup is helping :)

dust-jacket··on If you are asking for human attention, demonstrate human effort
You'll note I didn't actually say it was people who are prolific that were the problem.

I've worked with great prolific devs. They're often very humble, happy to explain their work, and recognise that simply adding to a pile of queued PRs isn't likely to achieve very much. They are part of a team. These are good people.

I've worked with people "who consider themselves prolific humans" - they're far less humble, far more likely to be flexing or showing off. I have less time for them.

dust-jacket··on If you are asking for human attention, demonstrate human effort
> Code review doesn't scale to prolific humans

I've worked with people who consider themselves 'prolific humans'. Someone always has to tidy upp later, and its never them

dust-jacket··on Port React Compiler to Rust
This feels like a bad take, IMO. Starting with something that gets you up and running quickly, then transferring to something else when things are more settled is a pretty standard practice.
dust-jacket··on Upcoming breaking changes for npm v12
https://www.theregister.com/software/2019/04/01/nice-people-...

Year before the MSFT takeover. No idea about their actual financials but they were definitely shedding headcount pre 2020, including kicking people for trying to unionise.

dust-jacket··on Anti-social: It's fads, not friends, which now dominate social media feeds
I said so above. I think originally they were "online spaces that augmented a real world community". Even twitter, you mostly started by following people you knew or had heard of.

I get that this isn't at all where we are any more. And y'know, everyone's gonna use terms to mean whatever they want. I'm fine with that. I guess I just think its pointless if "social media" means "anything online where people can write messages"

dust-jacket··on Anti-social: It's fads, not friends, which now dominate social media feeds
if you think social media just means any space online with multiple people in it, then I guess we just disagree on what social media is.

Is the linux kernel mailing list social media? was usenet?

dust-jacket··on Anti-social: It's fads, not friends, which now dominate social media feeds
see IMO it isn't. HN is an online community. Same as forums, and BBSs were. I don't think they were social media really - they're online spaces that form around a shared interest, where Facebook etc were originally online spaces that augmented a real world community.

But we're a long way from that now.

dust-jacket··on Technical Interviews Reject the Wrong Engineers
> Interviews are useful, but the ability to ship, maintain and improve real projects should probably carry more weight.

But how do you assess this? Maybe we should get them to write a document that details what they've done, and then invite them to a conversation to discuss it.

Oh wait...

dust-jacket··on Learn SQL Once, Use It for 30 Years
My advice is: don't write complicated SQL.

The best thing I learned about SQL is that it can do an awful lot of clever stuff but that the vast majority of the time you really don't need it. Learn the basics. Shrug the rest off.

dust-jacket··on Why Janet? (2023)
yeah but I can't post there because I don't know anyone with an account and frankly CBA traipsing around looking for someone who has an account.

does seem like more things will have to go this way though

dust-jacket··on Gemini, Gophers, and Fingers. Oh My Alternative Internets Beyond HTTPS
It's a good point, but I think the counter is that if the only people writing anything available via Gemini would have written nice simple HTML anyway, then not an awful lot is gained.
dust-jacket··on I'm Tired of Talking to AI
But as a good manager, you should throw it back: "what do you think?" "what have you tried so far?" etc.

Just giving them AI back is pointless. It means _your_ role is pointless.

dust-jacket··on What we lost when we stopped letting kids leave the front yard
You could defintiely argue abductions and crime have reduced because there are fewer opportunities (because we keep the kids safe). But that still doesn't mean you can conclude the world is MORE dangerous.
dust-jacket··on Ask HN: Is anyone working at least 4 hours daily on an Apple Vision Pro?
Software development is expensive. Like eye-wateringly expensive. A team of developers, product, designers, testers on a new app costs a big amount of money so its a gamble each time.

Without a large audience, spending money on porting to AVP is either money down the drain or a bet on a large audience coming along soon.

dust-jacket··on Use Boring Languages with LLMs
> Part of the reason, may be that I am a much better Swift programmer, than PHP programmer

Hard not to think that's a major part of it. IME you make loads more corrections in languages you're more opinionated about (and opinionated usually follows more experience & confidence).

I correct AI Python all the time. When it cranks out TypeScript I just check it works.

dust-jacket··on The user is visibly frustrated
Well yeah. And there's little more frustrating than someone telling you not be frustrated because "that's just how it works".

We get how it works. It's just irritating.

dust-jacket··on GitHub confirms breach of 3,800 repos via malicious VSCode extension
Yes and no.

The friction they should have probably had here is: did this employee need access to 3,800 internal repos?

I'm with the poster above in believing restricting what you can install makes a lot of things more difficult, but if you're going to take the risk you should be limiting the blast radius.

dust-jacket··on Google changes its search box
By scraping them, same as always.

The difference is where once they scraped, wrote a summary and invited users to go to the site, now they just provide the summary.

dust-jacket··on Anthropic acquires Stainless
Yeah at my last job we A/B tested hiring ads for the same role with developer/engineer alternatives.

It's just not the distinction some people believe it to be.

← PreviousPage 2 of 4Next →