HNHacker News
TopNewBestAskShowJobs

kbart

4,576 karma · joined April 19, 2013

You can contact me via email: kbart.misc@gmail.com
submissionscomments
kbart··on Google's Beyond Zero: Enterprise Security for the AI Era
That's a survirvorship bias - we normally only hear of the attacks that succeed, not the ones that have been successfully prevented.
kbart··on Over 150k Flights: Airlines Just Flew the Busiest Day in Recorded History
Modern aviation is an amazing engineering feat (all the environmental issues aside). With such numbers it means that "one in a million" failure occurs roughly evey week, but the fact that we have so little major incidents demonstrates how well aicrafts are engineered.
kbart··on Codex starts encrypting sub-agent prompts
That's not bullet proof. https://en.wikipedia.org/wiki/Underhanded_C_Contest
kbart··on Bonsai 27B: A 27B-Class model that runs on a phone
Excuse my likely stupid question, but has anybody had some success using Claude Code with frontier agents (or Junie or anything else) to invoke local LLMs for specific sub-tasks or wrapped as skills? In other words, is there a way to use expensive, frontier models as orchestrators that manage local models to do the specialised coding tasks?
kbart··on Codex starts encrypting sub-agent prompts
How do you know that they don't train their models or append your prompts to add backdoors, or compromise your supply chain by including evil dependencies? This seems hugely irresponsible.
kbart··on Serverless Horrors
AWS skills are in quite strong demand, so it totally pays off to know the platform and have some hands-on experience if you work in the related area.
kbart··on Mystery monk makes billions with 5-hour energy (2012)
That's a nice theory, but it doesn't work like that in most EU countries where banks are reluctant to give you a loan even for the 2nd property, let alone for tens of it unless you have collaterals to cover the cost.
kbart··on Ask HN: Anyone Use Firefox in 2023?
Of course. Both desktop and mobile version as well with uBlock Origin. Don't have any issues so far except Google Meet not being able to blur the background on the video calls, but I can live with that.
kbart··on NPM package compromised by author: erases files on RU / BY computers on install
I don't advocate or support such malware instalation. Just saying that "Russian citizens have nothing to do with this war" is false. There are better ways to express your support for Ukraine, for example, make malware targeting only military or govermental institutions that are directly involved.
kbart··on NPM package compromised by author: erases files on RU / BY computers on install
Majority of average Russian citizens support their goverment actions against Ukraine. So in my book, they are also responsible.
kbart··on Japan has declared today that the southern Kurils is their sovereign territory
It was proven over and over again, that the more you give to Russia, the more they will take next time. We have to stop them now or never. War is already on going between Russia and the west (Putin himself and his chief of spies already said, that they deem sanctions akin declaration of war), hiding from this fact won't help.
kbart··on Ukraine Call for Hackers
Why Telegram? I see Ukrainians use it a lot in this conflict,but I would really not trust it to be secure against such powerful adversary as Russia. Signal is much better bet under these circumstances.
kbart··on Documenting equipment losses during the 2022 Russian invasion of Ukraine
I wonder, what happens with all that captured equipment? I see a lot of videos of seemingly undamaged anti-air systems, artillery, tanks.. can Ukrainians readily use them or there are some locks etc. that prohibits it?
kbart··on Russian forces invade Ukraine after Putin orders attack
I work at the big fintech with a large footprint in Eastern Europe. We have been ramping up our cyberdefence capabilities intensively for over a week now based on various public and non-public advisories. As far as I see from my extended network, we are definetly not alone doing that.
kbart··on Russian forces invade Ukraine after Putin orders attack
Propaganda aside - yes.
kbart··on Ukraine Conflict Live Map
Many countries in Europe do not have geographical barriers, so do you say they don't have a right to exist?
kbart··on Germany shelves Nord Stream 2 pipeline
No. All ex-Soviet countries that joined NATO did that willingly as a way to protect their independence (looking at the examples of ex-Soviet countries that did not, it's clear that was the right decision). The "threat" of NATO invading Russia is bullshit and whataboutism.
kbart··on Wall Street was the real winner of the GameStop saga
What tools do you use for that? I tried similiar strategy just by looking at the publicly available tools (e.g. MartketWatch), but it seemed I'm always too late, so I resorted to mid-long term investments to the companies I believe.
kbart··on Career advice nobody gave me: Never ignore a recruiter
I haven't received any robocall, cold sales attempt or spam SMS in years. I'm also EU based, maybe it's another side effect of non-existant privacy laws in US?
kbart··on Ask HN: Joined FAANG, immediately stopped getting recruiter messages?
This. I've never worked at FAANG, but recruiter spam stops for some time whenever I change companies.
kbart··on GPS
Cool, so now we are back to 1996 with Internet as curated lists.
kbart··on Entropy isn't sufficient to measure password strength
It's vulnerable to the dictionary-based attacks that are very common.
kbart··on High beef prices and the destruction of independent cattle ranching
Wasn't the claim that nitrites help against botulism denied few years ago? According to Guardian: "A bombshell internal report written for the British meat industry reveals nitrites do not protect against botulism"[0]

0. https://www.theguardian.com/food/2019/mar/23/nitrites-ham-ba...

kbart··on The purpose of DRM is not to prevent copyright violations (2013)
There are usually several copies of a varied quality to choose from based on ones needs on a decent tracker. Of course you can't expect stellar quality 2h movie fit into <1 GB, look for reasonable file sizes 5+ GB) to avoid ultracompressed versions with garbage sound. Making conclusions on a single sample is not very wise.
kbart··on Heroes of Might and Magic
Cool, HoMM3 is by far my most favourite game for >20years now and we keep playing with my wife from time to time. It's like chess with some RNG, thus strategical and tactical depths are unlimited. Art and soundtrack is also charming in some strange way, as it feels more like tabletop than PC game (highlighted in the article as well).
kbart··on Log4Shell update: second Log4j vulnerability published
While in theory you can, I'm yet to see a proper defense in depth implementation despite having >10 years in the industry. In my book, if you get shell access to pod, it's game over, as these secrets in program's memory are probably also available as environmental variables, accessible in k8s Secrets etc., not to mention other ways to compromise an underlying node and the whole cluster.. But yes, this is already too far from the original topic.
kbart··on Log4Shell update: second Log4j vulnerability published
Fair enough, but that's more of how you package things - you can either have a separate class in Java inside your jar or you can have a standalone agent application (often also yet another Java application), but the attack surface doesn't change much. If log4j would be a standalone agent running on the same application server with this RCE vulnerability, the end result would be exactly the same.
kbart··on Log4jmemes.com: for those of us that need a laugh
Who are still on a call. There, I fixed it.
kbart··on Log4Shell update: second Log4j vulnerability published
That's not how logging works in real world. It might be sufficient for a pet project running on a single machine, but not when you have hundreds of instances running in parallel, when you to send logs to a central system for parsing/analysis in near realtime, when you need an ability to configure logging levels and formats in flight etc. and do all that with minimal impact on the performance. I don't advocate JNDI-like functionality enabled by default (as any sane person), but there's a middleground somewhere in between.
kbart··on Astronomers push for global debate on giant satellite swarms
"These swarms aren't going to affect the average amateur astronomer very much."

Not true. Most of amateur astronomers are also astrophotographers that is affected by Starlink's light pollution. Just look up any astrophotography group, I see posts of ruined shots by satellites every day.

Page 1 of 34Next →