Hacker News Reader

l2dyon Magnifica Humanitas

The Italian version of this https://www.vatican.va/content/leo-xiv/it/encyclicals/docume... uses en dashes instead. Could the em- or en- dashes be a side-effect of the translation?

l2dyon CVE-2026-40369 – Windows Kernel Elevation of Privilege Vulnerability

Public POC at https://github.com/orinimron123/CVE-2026-40369-EXPLOIT, allowing browser sandbox escape from render process sandbox.

l2dyon VS Code inserting 'Co-Authored-by Copilot' into commits regardless of usage

Author of that PR doesn't seem to be a Microsoft employee. Keep in mind that anyone on GitHub can create PRs against VSCode.

l2dyon Warp is now open-source

The AI features are not fully open, and there are some forking attempts to fix that. https://github.com/warpdotdev/warp/issues/9303

l2dyon Canonical Releases Ubuntu 26.04 LTS Resolute Raccoon

* What’s new in security for Ubuntu 26.04 LTS? https://ubuntu.com/blog/ubuntu-26-04-lts-security-updates

* From Jammy to Resolute: how Ubuntu’s toolchains have evolved https://ubuntu.com/blog/from-jammy-to-resolute-how-ubuntus-t...

l2dyon Google releases Gemma 4 open models

FYI, screenshot for the "Search and download Gemma 4" step on your guide is for qwen3.5, and when I searched for gemma-4 in Unsloth Studio it only shows Gemma 3 models.

l2dyon I decompiled the White House's new app

Clients are supposed to check. For example, Apple requires a varying number of SCTs in order for Safari to trust server certificates. https://support.apple.com/en-us/103214

And yes, it does break MITM use cases, for example on Chrome: https://httptoolkit.com/blog/chrome-android-certificate-tran...

l2dyon Open sourcing TernFS, a distributed filesystem

Discussed in https://news.ycombinator.com/item?id=45290245

l2dyon Docker Systems Status: Full Service Disruption

Recovering as of October 20, 2025 09:43 UTC

> [Monitoring] We are seeing error rates recovering across our SaaS services. We continue to monitor as we process our backlog.

l2dyon H1Bs will start costing $100k/yr

Similar discussion: https://news.ycombinator.com/item?id=45305845

l2dyon Code review can be better

Probably VS Code with https://github.com/kahole/edamagit

l2dyon Fray: A Controlled Concurrency Testing Framework for the JVM

l2dyon LLMs and Elixir: Windfall or deathblow?

GitHub Copilot's Sonnet 4 is not great in Elixir either, but I'm not sure if it's because of Copilot or Sonnet.

l2dyon It's Time to Switch to OpenTofu

I've been waiting for https://github.com/opentofu/registry/pull/824 ("Revert commit that removed Russian providers") to be resolved, but it seems to have stalled.

Open source does not work as I envisioned, I guess.

l2dyon WordPress Alternatives

For personal blog, I have found the following alternatives:

- Chyrp Lite: lightweight blogging engine, written in PHP. https://github.com/xenocrat/chyrp-lite

- Typecho: a PHP-based blog software. https://github.com/typecho/typecho

and file-based static content generator:

- Quartz: Publish an Obsidian vault as a static site. https://github.com/jackyzha0/quartz

- Logseq: Publish a Logseq graph as a static site. https://github.com/logseq/publish-spa

also Jekyll templates:

- https://github.com/maximevaillancourt/digital-garden-jekyll-...

l2dyon A bunch of programming advice I'd give to myself 15 years ago

> Keep doing the first sort of bug fix, and you end up with a mess.

To avoid the mess, design with the fail-fast principle in mind, which brings you closer to the spot where an error occurred.

l2dyon GitHub repo extensively mirrored by GitCode, platform launched by China's CSDN

As an example, AOSC OS project owners feel offended and made a public post about it on Telegram: https://t.me/aosc_os/523.

It could disrupt the community because for issues and pull requests created on GitCode, the original maintainers are likely not going to receive any notifications and they will just be ignored.

GitCode also did not make it clear that those repos are mirrored from GitHub in an obvious way, especially on the organization or user pages, e.g. https://archive.is/su9h5. IANAL, but this looks like impersonation to me.

A sibling comment also mentioned that CSDN is publishing machine-generated blog posts about cloned projects with a link to GitCode. I believe this is even more unethical.

l2dyon GitHub repo extensively mirrored by GitCode, platform launched by China's CSDN

Any repository without a LICENSE file or license grant in code or README, and I could create one in a few minutes.

GitHub and GitCode do not provide an easy way to search for these, so you will have to scrape the API and clone the repos to find out the ratio of FOSS/restrictive/no license.

l2dyon GitHub repo extensively mirrored by GitCode, platform launched by China's CSDN

https://docs.github.com/en/site-policy/github-terms/github-t...

> [...] and to reproduce Your Content solely on GitHub as permitted through GitHub's functionality

Use, display, and perform through the GitHub Service are permitted according to the GitHub ToS, but not reproduce except on GitHub, unless further rights are granted with a license.

l2dyon AeroSpace is an i3-like tiling window manager for macOS

yabai works fine without disabling SIP. I haven't tried Aerospace yet, so can't offer a feature comparison though.

l2dyon UniSuper's Google cloud deletion traced to "blank parameter" in setup

Any additional information compared to the official announcement? https://news.ycombinator.com/item?id=40466810

l2dyon Working Smarter, Not Harder

The title reminds me of the Work Smarter loop in "Nobody Ever Gets Credit for Fixing Problems that Never Happened", but that's more about management than organic growth of efficiency.

l2dyon Disaster Recovery with ZFS and Zrepl

> I don’t back up my drives, I replicate them.

Don't take this as a general advice. For important data, it's important to have multiple backups and validate their effectiveness routinely.

l2dyon TimesFM: Time Series Foundation Model for time-series forecasting

Blog link (Feb 2024): https://research.google/blog/a-decoder-only-foundation-model...

Previous discussion: https://news.ycombinator.com/item?id=39235983

l2dyon About alternative app marketplaces in the European Union

> Your device eligibility for alternative app marketplaces is determined using on-device processing with only an indicator of eligibility sent to Apple. To preserve your privacy, Apple does not collect your device's location.

> If you leave the European Union for short-term travel, you'll continue to have access to alternative app marketplaces for a grace period. If you're gone for too long, you'll lose access to some features, including installing new alternative app marketplaces. Apps you installed from alternative app marketplaces will continue to function, but they can't be updated by the marketplace you downloaded it from.

l2dyon The App Store, Spotify, and Europe's thriving digital music market

> If a developer sells physical goods, serves ads in their app, or just shares an app for free, they don’t pay Apple anything.

If so, don't ask me to pay $99 every year for installing my own app on a device I bought.

Apps signed with a free developer account are severely limited with a short validity period and Apple enforces a limit on the number of apps that could be installed this way on a device.

l2dyon Yabai – A tiling window manager for macOS

The name Yabai can also be used in a positive sense to mean "great", and is particularly common among young people. Source: https://web-japan.org/trends/buzz/bz0510.html

l2dyon Go modules and the domain expiry problem

> And the Go module proxy will probably keep the old versions available.

https://proxy.golang.org does not save all modules forever. See FAQ on the site.

l2dyon I rewrote my CV in Typst and I'll never look back

You may want to try https://github.com/tectonic-typesetting/tectonic, which downloads files from TeXLive on-demand.

l2dyon Obsidian 1.4.10 Desktop (Public)

Personally I appreciate the fix for "Reveal in Finder" hanging a system app (Finder). I also wanted to see how people think of the Properties feature, which has not been discussed yet on HN.