HNHacker News
TopNewBestAskShowJobs

fguerraz

849 karma · joined January 20, 2021

submissionscomments
fguerraz··on Why are AI agents lying, cheating and coordinating?
In the end, it’s the same answer as to why humans do it: incentives.

Why do we commit financial fraud and destroy the planet? Because there is only one goal that counts: making more money. It’s the only measure of success for powerful people, they are powerful because of it.

fguerraz··on Splash-free urinals (2025)
The previous design was piss-poor
fguerraz··on Actively exploited sandbox RCE in all Chromium versions
If it’s being exploited “in the wild”, it means someone has already found how to chain it, otherwise what would be the point?
fguerraz··on Please stop flooding our projects with AI slop to furnish your CV
I'm sure there are people in this category, but there's also the other category who just want their stuff to work, and now can as AI to do it, without having to follow stupid processes (try contributing to QT...) or arguing for months.
fguerraz··on Please stop flooding our projects with AI slop to furnish your CV
These maintainer who’ve held the sacred fire for years…
fguerraz··on Una GPS smart watch – Repairable, USB-C charging, developer-friendly
I mean, they're from Scotland, the watch would have to be pretty water resistant to survive more than one day...
fguerraz··on Your 'app' could have been a webpage (so I fixed it for you)
The strong language is fully appropriate given the circumstances.
fguerraz··on I admire Fabrice Bellard. He is almost certainly a better overall programmer
In 2006, in my first job after uni in France, I wrote a toy PaaS system called CASIMIR based on qemu. It was a lot of fun, I could via a web UI launch VMs, access them via VNC, etc..

I've always had a lot of admiration for Fabrice Bellard, I always wished I was as good an engineer as he is.

fguerraz··on Changing how we develop Ladybird
Moving to a closed development model => opensource is just a gimmick, especially with a BSD licence.
fguerraz··on Changing how we develop Ladybird
I feel like the project just died.
fguerraz··on Danish Pension Blacklists SpaceX over 'Catastrophic Governance'
It’s a good thing because it’s definitely an interesting company worth investing into long term. But not at this valuation. 10% seems reasonable given the profits perspective.
fguerraz··on How to convert between wealth and income tax
This is misleading and not the point of the wealth tax.

If you’re lucky enough that you don’t need to work for your income, you should be taxed. A lot. How much? Enough to make sure you don’t become so rich that your children don’t need to work.

Being rich is not fair, it’s very rarely deserved, and it needs to be taxed unfairly.

fguerraz··on The memory shortage is causing a repricing of consumer electronics
This is great news, maybe people are going to start caring about their electronic gadgets more and not treat them as disposable? Maybe longevity is going to become a criteria again?
fguerraz··on Goodbye Visa and Mastercard: 130M Europeans switching to sovereign payment
And then Apple pay and Google pay are not going to implement it, and nobody is going to use it.
fguerraz··on First public macOS kernel memory corruption exploit on Apple M5
This is incredibly light in details, no verifiable claim as far as I can tell.

(I’m sure they’re not lying, but we’re not learning anything here)

fguerraz··on Deterministic Fully-Static Whole-Binary Translation Without Heuristics
Does it mean I can finally run Slack on Asahi?
fguerraz··on EU Parliamentary Research Service calls VPNs "a loophole that needs closing"
They evolve and they don’t. People call things whatever they want. How is it going for X/Twitter?
fguerraz··on EU Parliamentary Research Service calls VPNs "a loophole that needs closing"
I have renamed the bird Türkiye . It was called Turkey in reference to the country, I think it’s fair to rename the bird too.
fguerraz··on What causes lightning? The answer keeps getting more interesting
Well, let's say I just don't understand the popularity of this magazine on HN.
fguerraz··on What causes lightning? The answer keeps getting more interesting
So, nothing new?

The cosmic ray hypothesis has been dominant for a few years now.

This magazine…

fguerraz··on CVE-2026-31431: Copy Fail vs. rootless containers
That’s… great. But who runs containerised 32 bit applications?
fguerraz··on CVE-2026-31431: Copy Fail vs. rootless containers
I just contributed this [1] which does what you want for seccomp. Well, not by default, but profiling is now effective against this attack.

Oh, an this [2] just happened

[1] https://github.com/containers/oci-seccomp-bpf-hook/pull/209 [2] https://github.com/moby/moby/pull/52501

fguerraz··on A more efficient implementation of Shor's algorithm
However, the author managed to squeeze the word "however" eleven times in this article, however.
fguerraz··on Dav2d
In cryptography, you want operations to run in constant time, even if it’s wasteful, otherwise an attacker could guess information about the key or plaintext by measuring execution times.

Modern compilers are extremely clever and will produce machine code that takes full advantage of modern CPU branch predictors, and reorder instructions to better take advantage of pipelining. This in itself will make the same code run at different speeds depending on the input data.

Then there is the whole issue of compiler version roulette. As a developer you have no idea which version of compilers your users and distros will use, and what new and wonderful optimisation they will bring.

fguerraz··on Dav2d
Cryptography and video codecs are notable exceptions, they put a lot of effort to making the code provably memory safe: no recursion, limited use of stack variables, no dynamic allocations, etc. As a result, memory safe languages bring nothing but trouble by making it non deterministic, that’s especially true for crypto where compiler “optimisations” guarantee you side channels attacks.
fguerraz··on For Linux kernel vulnerabilities, there is no heads-up to distributions
Distributions using outdated (sorry “stable”) kernels are stupid.

We are not 20 years ago, the world in which it made sense doesn’t exist anymore, but the industry is slow to move on. Just pick a long term release and update it regularly.

fguerraz··on Stealth signals are bypassing Iran’s internet blackout
Like this: https://archive.is/2026.03.03-070033/https://www.nytimes.com...
fguerraz··on Stealth signals are bypassing Iran’s internet blackout
You’re correct, the article doesn’t say anything about that, I’m using my own judgement given the facts that I have.

All I know is, if I was at war with the USA, I would definitely cut the internet in my country. Not doing it is like being at war with a big maritime power, and not protecting your coastline.

fguerraz··on Stealth signals are bypassing Iran’s internet blackout
There is no naivety on my part, the USA has publicly admitted that it orchestrated and even armed the protests [1]

[1]: https://www.aljazeera.com/news/2026/4/6/has-trump-confirmed-...

fguerraz··on Stealth signals are bypassing Iran’s internet blackout
Excepts the internet blackout has nothing to do with censorship at all. This is just Iran protecting itself from cyber attacks, if they had kept Internet running, they would have been completely pwned.
Page 1 of 8Next →