HNHacker News
TopNewBestAskShowJobs

heinrich5991

2,000 karma · joined January 11, 2014

submissionscomments
heinrich5991··on Ubuntu 26.10 completes transition to Rust-based coreutils
But you should be able to use a GPL test suite on an MIT-licensed program (or even a proprietary one, without the program needing to be under the GPL.
heinrich5991··on Twenty One Zero-Days in FFmpeg
Rust enables overflow checking in debug mode, you can (and I do) enable it in release mode as well.

Rust's default integer overflow in release mode is defined as well, it'll just wrap around. This makes it less likely to result in a vulnerability (unless you start writing unsafe Rust).

heinrich5991··on Stop MitM on the first SSH connection, on any VPS or cloud provider
Example of a nation state attacker that risked discovery and got discovered: https://notes.valdikss.org.ru/jabber.ru-mitm/.
heinrich5991··on France moves to break encrypted messaging
This article incorrectly implies that Telegram is end-to-end encrypted, by putting it in the same line as WhatsApp and Signal.

Telegram doesn't even try to be end-to-end-encrypted by default. WhatsApp claims to be end-to-end-encrypted, but it's not open-source, Signal is end-to-end-encrypted.

heinrich5991··on Migrating to the EU
I've used https://migadu.com/ before. Not EU, but EEA (Switzerland).
heinrich5991··on US plans online portal to bypass content bans in Europe and elsewhere
Works for me.
heinrich5991··on SocketAddrV6 is not roundtrip serializable
Doesn't work on my Arch Linux. Neither does pinging ::ffff:127.0.0.1. Pinging 127.0.0.1 and ::1 works.
heinrich5991··on The International Criminal Court wants to become independent of USA technology
https://archive.today/8BuB9
heinrich5991··on Matrix Conference 2025 Highlights
The good thing is that verifying the other contact is invisible to the server in Signal. This means that it's stochastically sufficient that a few people do check their contacts in order to see whether there is any widespread MITMing going on.
heinrich5991··on Matrix Conference 2025 Highlights
Telegram isn't end-to-end encrypted btw, so when law enforcement asks for data, Telegram actually has it.
heinrich5991··on Matrix Conference 2025 Highlights
It's less encrypted. E.g. you'd think that emoji reactions are end-to-end-encrypted (as they are in Signal). But they aren't[1]. I expect similar implementation issues wrt. the encryption in Matrix.

[1]: https://github.com/matrix-org/matrix-spec/issues/660

heinrich5991··on Most users cannot identify AI bias, even in training data
Can you give me an example? Works for me on https://chatgpt.com/.
heinrich5991··on DDoS Botnet Aisuru Blankets US ISPs in Record DDoS
Same happens to our online game: https://news.ycombinator.com/item?id=28675094. Not sure what it is about online games that attracts DDoSes.
heinrich5991··on A macOS terminal command that tells you if your USB-C cable is bad
Not what OP meant, but there's a project doing what you ask for: https://justine.lol/cosmopolitan/. It's quite interesting. :)
heinrich5991··on How the AI bubble ate Y Combinator
https://archive.is/lMpbi
heinrich5991··on F-Droid and Google’s developer registration decree
No, your private non-commercial web page doesn't need an Impressum AFAIK. Once you add ads to generate (small) income, it becomes commercial, though.
heinrich5991··on Mirror Ball Emoji Proposal (2018) [pdf]
U+1FAA9
heinrich5991··on Consider using Zstandard and/or LZ4 instead of Deflate
Most of the comments on that issue are from this year.
heinrich5991··on Rsync's defaults are not always enough
Working link: https://github.com/openzfs/zfs/issues/14536.
heinrich5991··on A thought on JavaScript "proof of work" anti-scraper systems
> I'm a bit confused. Is anyone's website currently being DDOS'd by scrapers for LLMs or is this a hypothetical?

Yes, there are sites being DDoSed by scrapers for LLMs.

> If you can't handle the traffic of one request per page per week or month, I think there are bigger problems to solve.

This isn't about one request per week or per month. There were reports from many sites that they're being hit by scrapers that request from many different IP addresses, one request each.

heinrich5991··on White House fires head of Copyright Office amid Library of Congress shakeup
https://archive.is/x6cn9
heinrich5991··on Fedora change aims for 99% package reproducibility
System rustc is also good on Arch Linux. I think system rustc-web is also fine on Debian.
heinrich5991··on KOReader: Open-Source eBook Reader
Very snappy on my Pixel 4a. Not sure what's causing the performance problems on your phone.
heinrich5991··on Zero-knowledge proofs, encoding Sudoku and Mario speedruns without semantic leak
They can ask whether the pre-filled fields have the correct equal/unequal relationship by testing two of them at a time.
heinrich5991··on Show HN: One year of bewCloud (a simpler Nextcloud alternative)
The images load very slowly. Perhaps you could downsize them a little? The first one I clicked on was 3283x2015 pixels, way too large for something that occupies maybe a quarter of my screen.
heinrich5991··on How (not) to sign a JSON object (2019)
Usually, this is not a problem for signing.
heinrich5991··on Mixxx: GPL DJ Software
Seems to be posted to the wrong article. Which article did you mean to post to?
heinrich5991··on Nokia's internal presentation after iPhone was launched (2007) [pdf]
https://web.archive.org/web/20250115192305/https://repo.aalt...

but doesn't seem to have the actual content. :(

heinrich5991··on Visualizing All ISBNs
> Possession or distribution of his books is still not allowed in Germany.

AFAIK this has never been true in Germany (for the book Mein Kampf at least). AFAIK the German state of Bavaria inherited Hitler's copyright on the book, and did not republish it. This means that no one was allowed to print it for copyright reasons, but you could still own or trade existing copies of the book. After 2015, 70 years after Hitler's death, the book entered the public domain. Looking into Wikipedia, uncommented reprints have been forbidden: https://en.wikipedia.org/w/index.php?title=Mein_Kampf&oldid=..., which I didn't know before.

heinrich5991··on Double-keyed caching: Browser cache partitioning
This also dramatically increases your fingerprintability, I think. Fingerprinters probably aren't using it yet though, because it's such a small target audience. But if it were to be implemented into a major browser, I'm sure they'd start using it.
Page 1 of 18Next →