HNHacker News
TopNewBestAskShowJobs

k_roy

369 karma · joined September 23, 2014

submissionscomments
k_roy··on Google Has Removed MV2 Extensions from the Chrome Web Store, Including UBO
Okay, so first.

Using Mac is a no-go. For me, they became insufferably power-user hostile over the years.

Second,

God the safari rendering was so horrible for so many years. As a web developer, you have to target your greatest demographic, and Safari just broke everything more often than not.

Finally, even using Mac on enterprise, Chrome use is required because of the profile controls that can be exerted. And items #1/2 don’t help

k_roy··on Omarchy: Any User Process Can Escalate to Root
I am not disagreeing at all. Nor am I trying to claim this behavior is safe.

I’m just pointing out the level-set that I’m sure the first time someone installs docker and tries to use it, chances are they are just going to install themselves in the docker group without considering the impact and continue on their day.

k_roy··on Omarchy: Any User Process Can Escalate to Root
Default configuration or not, I also imagine the first thing people using docker do is to add themselves to the docker group via sudo.

If you are security-conscious, you shouldn’t be using docker anyway.

k_roy··on Taylor Farms: How One Company's Reach Became a National Risk
> The source was quickly identified, and it's trivial to avoid the tainted supplier.

The mixed messaging certainly didn’t help.

One day it’s Taylor Farms and the next the FDA was apologizing.

And even once it was found to be Taylor Farms, you can’t control every Taco Bell or anything else.

Mostly it just killed any consumer confidence in greens

k_roy··on I spent $266 and four AI models to own my tablet. GLM-5.3 finished it in a day
And here I think you are just making up numbers.

I’m not claiming it’s good/bad one way or the other, but it’s the reality in which we live.

I’m just saying it’s weird to call AI okay for some things, like finding the exploit, but using that same AI is somehow the line in the sand when it comes to the documentation

k_roy··on Malicious Rust crate Arrayref runs a build-time payload
That world can’t exist unfortunately, because the minute someone wants a feature that isn’t in your core libraries, you just create a new library and we’re back to now.
k_roy··on Raiders of the Lost Array: vibe-coding a macOS driver for my orphaned Drobo
You were specifically complaining about Opus’ nauseating style of prose, by calling out a sentence by the author you didn’t immediately comprehend?
k_roy··on Raiders of the Lost Array: vibe-coding a macOS driver for my orphaned Drobo
>> I also ruled out the back doors: one USB interface, one LUN, both claimed.

>What the fuck does this sentence even mean? Opus’ tone and style is nauseating.

Seems pretty clear to me.

Nothing exposed beyond the expected surface.

Whining about everything being AI, is worse than the AI itself. Especially when the blog post as a whole is clearly human written. OVERWHELMINGLY so

The actual AI stuff in the article is clearly called out and delineated.

k_roy··on A third world engineer responds to “RISC-V: They should have known better”
Compared to a banana?
k_roy··on Trump again tries to limit US birthright citizenship with new executive orders
> Stop pearl clutching. If we are going to start judging morality, we can start looking at the Clintons (good friends with Epstein), the Bidens (His daughter has some really interesting things about what happened when she was little and his son Hunter? I think we can safely say that there are no morals here and the media ran cover for him). Even Bill Gates was on the island, best friends with Epstein, and there was almost no mention of it in the tech community.

> We need to hold everyone accountable, not just when it's politically convenient.

You stop your pearl clutching first. We have someone who just ignores the rule of law when he doesn't like it. Including the Supreme Court.

Guess who hasn't been President for what... 30 years? Hillary was never President. Hunter Biden? Again, not President. Joe Biden? He quit before he showed a fraction of the mental incapacity of our current President.

Don't defend BS behavior just because YOU believe "the other side", who haven't been relevant in years, did it too.

At this point you are repeating conspiracy theories rather than presenting facts. Convicted felon? Nah, it's a conspiracy. Rapist? Only 28+ women have come out. But again, that is a conspiracy too.

Meanwhile, you can paste together Truth Social posts, live videos, and show EVERY DAY you are being told lies, and not even good ones, but you accept it blindly.

How's that Iran war going for you? It's Friday tomorrow, so clearly the US or Iran will attack and then next Monday when the markets are open, peace comes again and the 432nd war has been stopped.

Just stop. It's lacking any intellectual integrity

k_roy··on Sony deletes more movies from the accounts of people who ‘bought’ them
This is nothing new and the reason I went from being the biggest media collector to collecting nothing now.

To put it in perspective, I bought Get Him to the Greek on Prime video shortly after it came out.

A month later, the "exclusive broadcast rights" changed, and I was no longer able to access it.

k_roy··on Zero-Downtime Deployments with Docker Compose – No Kubernetes Required
The whole reasoning behind this is flawed.

“We don’t know how to scale Traefik so we went with haproxy”

Well doh. Haproxy is designed for this. You can make haproxy serve copious amount of traffic on a single arm core and a little bit of ram. Imagine what you can do with a few replicas on your large clusters.

This has nothing to do with the choice of CI/CD or docker versus kubernetes.

k_roy··on FPS.cob: A first person shooter in COBOL
> An engineer vibe-coding a project generates an end product, yes, but what is there to be interested in or to discuss? Chances are said engineer isn't even capable of discussing the project in any depth.

And this is reductive to the point of absurdity.

Everybody screaming about AI forgets the fact... you STILL need the domain knowledge. That's where the value in engineering is now.

Imagine a wanna-be game designer thinking they can fire up codex or claude and even with a few weeks and a few hundred dollars in credit, coming out the other side with a game anybody would want to play.

That's not how it works.

I tried with godot. I can tell you everything you want to know about programming/networking/DevOps, and daily use that knowledge. But was very very quickly overwhelmed with the things I DON'T know about game design and development when I tried to develop retro-DQ clone in space.

And yeah, it didn't work.

https://i.imgur.com/hyXQEyA.png

k_roy··on FPS.cob: A first person shooter in COBOL
Frankly at this point, it's just as insulting to claim it's shallow and worthless just because Claude did it.

If there is a cool project that comes out the other side, who cares? I am forced to use Claude for day job, and while it's annoying, I am running at a pace that can keep up with my brain, not just what I can shit out and get tested and inevitably miss things. Because you know what's great?

When you have actual controls in place like Jira ticket integration, CI/CD steps that can be considered, but the overall change is small, how many more of those small changes do you think I can get done in a day versus before it? But hey, localhoster says it's shallow and empty of content, so it must be true.

A passion project of mine has been to develop a full decompilation and a randomizer for Neutopia. I've been working on this multiple years. I had it at a point where I had chests randomized, item grants, etc, but that kind of turned into a lame game because of how the existing Neupotia game works.

It's been stuck at 40% for just as long. I pointed codex at it, and now I'm at the at least 85-90% and will have it done within a few weeks.

Given Neutopia is a much smaller target audience, but when this project is released, it will at least as capable as http://alttpr.com/en, and more capable in some ways as random dungeon and overworld layouts are already possible, not just reusing layouts and changing chests.

Codex generated a big chunk of it, so it's clearly a horrible idea and piece of crap not worthy of localhoster here.

k_roy··on Justice Dept. Is Said to Open Criminal Inquiry of E. Jean Carroll
Wow, I'm sorry you just don't see it.

All you've demonstrated is that the left holds people accountable. But I'm sorry that you can't see how:

* calling someone a "divisive figure" and "who is constantly sort of pushing this sort of hate speech aimed at certain groups. And I always go back to, hateful thoughts lead to hateful words which lead to hateful actions."'

Is not even close to the evil words you are trying to attribute it to. That is not celebrating Kirk's death or even trying to excuse it. But again, he was fired and held accountable.

Unlike the PRESIDENT who calls for genocide, people he doesn't like to be executed as traitors. ALMOST DAILY.

Do you not see the blatant irony of trying to claim that Jimmy Kimmell was wrong for trying to blame the murder on someone on the right? Like, for real????

Why does Charlie Kirk need honors on the national level? He was a mouthpiece for opinions and frankly before his murder, I knew nothing about him except he started a feud with Swifties.

Are you just as upset that Minnesota House Speaker Melissa Hortman and her husband, Mark were murdered by a verified right-wing nutjob? And instead of honors for a woman and her husband that were targeted because of her service to her State and this Country, the White House and everyone else on the right is still saying she somehow deserved it because of "reasons"

Even just look at January 6: https://www.whitehouse.gov/j6

It's either:

* Biden's FBI in the crowd inciting violence (Biden didn't have an FBI) * Antifa, which I still don't know who to report to for my badge * Peaceful patriots who were unfair targets and somehow deserve a piece of 1.776 billion.

It can't really be all three?

I'm done.

This was not about blame, but unsurprisingly that just where you took it.

When someone is so far buried within the proproganda that demonstrates brainwashing to any reasonable person, no amount of words will change them.

k_roy··on Justice Dept. Is Said to Open Criminal Inquiry of E. Jean Carroll
"As far as you can tell?"

Again, it's completely disingenous to compare random internet trolls on Reddit/Facebook/Youtube/etc to the office of the President.

I invite you to actually find a case of a politician, a news source, or someone else who isn't one of these folks on the left, that celebrated the assassination attempts, or the murders of Kirk of the UHC CEO. Mark Hammil? Okay? The dude from Tenacious D? Okay. Other than that, new sources, politicians, the decent left? All universally condemned it.

Compare that to the attack of on Paul Pelosi, the murders of the Minnosota representive, her husband, and their dog, murders of Alex Pretti and Renee Good.

EVERYBODY on the right.

From the previous people mentioned whose opinions should be ignored, to almost every Conservative news outlet, to many politicians including the office of the President. None of them condemned it, instead focused on why they "deserved it".

Multiple academic sources, using real and verified datasets, which I'm sure you just see and "owned by the liberals", like START (Study of Terrorism and Responses to Terrorism) at the University of Maryland, ADL, have demonstrated the right is overwhelming far more comfortable with violence and violent rhetoric.

Look at what you are doing and what EVERY response of yours is.

Saying "getting fascists in the door" is not rhetoric, when there are so many things happening in our government and country that in any other decade would be objectively fascist.

You again, turned this entirely into a US vs THEM. Ignoring the fact that what this link was about is wrong, and somehow continuing defending the rhetoric because in your mind "the other side is doing it too"

k_roy··on Justice Dept. Is Said to Open Criminal Inquiry of E. Jean Carroll
> If you wonder how people could ever vote for someone like Trump, I think it’s got something to do with that kind of rhetoric.

So the rhetoric is the problem here, and not the reasons the rhetoric exists?

The rhetoric is in response to the objectively bad actions of this administration. If nothing else, the rank and foul disregard for so much of the Constitution and flagrant disregard for basic human rights and dignity.

Remember the tan suit? The sleepy Joe Biden?

Frankly, it's completely disingenious to ignore the fact that the leader of this movement, gets on his social media and says the most foul things possible every day.. and then you try to indict both sides.

A rando on the internet saying garbage is not the same as the leader of the whole movement, because that just empowers the people who follow him.

Nobody that you should take seriously said anything bad about the murder of Charlie Kirk.

But when the President gets on social media and says he's glad people are dead, or that it's okay to wipe out a civilization, and his base cheers for him, that's not rhetoric and we should just ignore it?

Sorry. That's just completely intellectually dishonest

k_roy··on An OpenAI model has disproved a central conjecture in discrete geometry
And you just expressed the thoughts of every engineer that writes code for a living who is either left behind, or embracing the technology to hit KPIs and QVRs.
k_roy··on GNU IFUNC is the real culprit behind CVE-2024-3094
Is it actually audited?

This is 2026, not 2014 when heartbleed came out.

And it runs as PID1 on many distros and these are folks like RHEL, who have a huge interest in keeping it secure.

Pypi has an almost daily exploit announced in common and popular libraries, simply because the dependency graph is so huge. And this is in things that are almost certainly deliberately and by design exposed to insecure user input.

Again, it’s fun to hate on systemd, but in reality you are much more likely to be exploited by something else.

k_roy··on GNU IFUNC is the real culprit behind CVE-2024-3094
> Can you even imagine pypi or npm compromising ssh this way?

Is ssh somehow sacrosanct in a way that any other RCE or credential stealing attack is different?

I don’t even know the last time I exposed ssh to the open internet.

But the fact with npm or pypi you can be exploited just by running the software you’ve already installed because the dependencies are everywhere on your system?

k_roy··on GNU IFUNC is the real culprit behind CVE-2024-3094
> systemd is a monstrous codebase and there lies shitload of exploits in it. Either intentional or accidental.

And yet...

1. practically all hyperscalers use it

2. desktops

3. container images, that power everything from docker to kubernetes use it

It helps that it's actively maintained, battle-tested as hell, and widely audited.

Point being, it's fun to hate on systemd, and maybe even hipster-like, and systemd is hardly perfect... but you are probably more likely to be exploited by a pypi or npm supply-chain attack.

k_roy··on Babies Are Bleeding to Death as Parents Reject a Vitamin Shot Given at Birth
> but Israel's autism rate is 50% lower than the US

Did you just pull out of this out of the air?

Increased diagnosis and awareness, which is something Israel has caught up on recently, has brought the rate to effectively equal. Not 50% lower.

Pretending that it doesn't exist doesn't make it actually not exist.

k_roy··on Red Squares – GitHub outages as contributions
It's weekly for me. And that's just with PRs, not even builders. I can't imagine if I relied on their runners.
k_roy··on Kubereboot/Kured: Kubernetes Reboot Daemon
Okay, well you’ve still not highlighted was is the preferred method here, since even with a 42u rack and a cluster in GCP, you still wouldn’t run kubernetes
k_roy··on Kubereboot/Kured: Kubernetes Reboot Daemon
I'd love to hear about your HA solution for things like this.
k_roy··on Kubereboot/Kured: Kubernetes Reboot Daemon
I’ve never understood the gatekeeping people wrap around kubernetes.

Even with small 3 node cluster of of raspberry pis, you can run anything you can run in simple docker, and have it survive outages/reboots/etc.

At home, I have a few raspberry pis, orangepi RV (riscv nodes), and my main nodes are large high core and RAM VMs running on Proxmox.

Each one has different capabilities. Some have lots of fast storage attached for longhorn, some have 10Gb/25Gb networking, etc.

And the great part is if I wanted to collapse down to just the SBCs? I would just need to scale down some replicas of high men or high cpu stuff I’m testing.

Of course at job, I just pick the node shape and capabilities I need and don’t think about it.

Yeah, I’m probably the exception for running kubernetes at home, but I would argue if you are running more than a handful of docker containers, you should probably be using kubernetes anyway.

Especially if you care about things being up, or want to be able to seamlessly shuffle stuff around for maintenance. Not to mention my entire infrastructure is repeatable with just a small git repo of fluxcd stuff

k_roy··on Vulnerability research is cooked
Which still means a single person with Claude can clear a queue in a day versus a month with a traditional team.
k_roy··on The RISE RISC-V Runners: free, native RISC-V CI on GitHub
Same experience here.

At least for SBCs, I’ve bought a few orange pi rv2s and r2s to use as builder nodes, and in some cases they are slower than the same thing running in qemu w/buildx or just qemu

k_roy··on DOOM Over DNS
If anything, this would be more of a way to act as a command and control server
k_roy··on Why I love NixOS
There’s more to Docker Desktop than just “oh it’s just docker underneath”

1. Unified experience across Windows, Mac, Linux

2. The security posture is much stronger by default. Many people, who would probably be considered the “target audience” for Docker Desktop, don’t bother to make docker-ce rootless, or don’t use podman, so running it in a VM is better, though admittedly often annoying.

3. Not everybody is a CLI warrior. Docker Desktop gives a decent GUI, ways to monitor and control containers visually, and even deploy kubernetes with a single click.

Page 1 of 8Next →