HNHacker News
TopNewBestAskShowJobs

matthews2

1,085 karma · joined March 4, 2022

submissionscomments
matthews2··on Privacy Pass Authentication for Kagi Search
Kagi's repository doesn't contain any of raphaelrobert's code directly. It's used as a library: https://github.com/kagisearch/privacypass-lib/blob/main/src/...
matthews2··on US to ban Russian, Chinese software and hardware in vehicles
Espressif are a Chinese company so I would imagine so. Although you shouldn't find an ESP32 on a car anyway, they are not automotive grade parts.
matthews2··on Show HN: Boulette - Protect you from yourself (even as root).
You still authenticate and kick off the Mosh session via SSH, so it shouldn't be any worse than plain SSH.

> Mosh doesn't listen on network ports or authenticate users. The mosh client logs in to the server via SSH, and users present the same credentials (e.g., password, public key) as before. Then Mosh runs the mosh-server remotely and connects to it over UDP.

matthews2··on H5N1: Much More Than You Wanted to Know
What is the link between car washing and spreading bird flu?
matthews2··on A Better Light Source for Scanning Color Negative Film
Dust (and scratches?) can be detected with an infrared scan. The IR scan is only used to detect defects, and then something like a spot removal tool is automatically applied to the defect areas.

https://www.hamrick.com/blog/digital-ice.html

matthews2··on Show HN: JSON-Threat-Protection Rust High-Performance Crate
> If serde_json is a parser and has a different feature set than json-threat-protection, does it make sense to compare performance?

If you were using serde_json just to validate a payload before passing it on to another service (like a WAF), then the comparison makes sense. If you had more complex validations or wanted to extract some of the data, then maybe not.

matthews2··on My Windows Computer Just Doesn't Feel Like Mine Anymore
The Debian Firefox package ships a config with most of that disabled by default: https://wiki.debian.org/Firefox#Disabling_automatic_connecti...
matthews2··on Raspberry Pi is now a public company
Retail trading starts on Friday morning.
matthews2··on Compilers are too smart
Oops, my bad. I was stuck in Intel land.

The option I linked is even listed under the x86-specific options...

matthews2··on Compilers are too smart
You can use -mno-popcnt for this.

Godbolt: https://godbolt.org/z/raszoEedr

Reference: https://clang.llvm.org/docs/ClangCommandLineReference.html#c...

matthews2··on Engineering for Slow Internet
HTTP/2 push is super dead: https://evertpot.com/http-2-push-is-dead/
matthews2··on WinDirStat – Windows Directory Statistics
More MFT goodness: the file search tool Everything (https://www.voidtools.com/)
matthews2··on Ask HN: Why is ChatGPT allowed to scrape other sites via prompts?
If GET requests increase my AWS bill, does that make them not idempotent any more?
matthews2··on Show HN: Is_ready – Wait for many services to become available – 0 Dependencies
Zero dependencies seems like a weird selling point, especially since it depends on Clap, Tokio, a Rust compiler...

A neat project, though. I think that this is best solved in the application itself (e.g. your server starts but returns HTTP errors while the database is unavailable), but being able to retrofit this behaviour into any existing application seems useful. Feels like something very similar should be built into tools like docker-compose.

matthews2··on Meta confirms that its Llama 3 open source LLM is coming in the next month
Maybe there isn’t a benefit to closed-source Llama either.
matthews2··on Command injection and backdoor account in D-Link NAS devices
You can drop root after binding, or you can use capabilities to allow a particular program to bind on privileged ports. php-fpm could listen on a UNIX socket instead of a TCP socket.
matthews2··on Backdoor in upstream xz/liblzma leading to SSH server compromise
> running around salsa.debian.org pushing for more updates in other projects as well

This is quite common in most (all?) distributions. People are going through lists of outdated packages, updating them, testing them, and pushing them.

matthews2··on Ravi is a dialect of Lua, with JIT and AOT compilers
MIR comes from the Rubyverse and isn't related to LLVM MLIR.

https://github.com/vnmakarov/mir?tab=readme-ov-file#mir

matthews2··on Experimenting with GC-less (heap-less) Java
I haven't had chance to use it properly yet, but I think JfrUnit[0][1] is a good option here to test non-functional behaviour like memory usage and garbage collection.

[0]: https://github.com/moditect/jfrunit [1]: https://www.morling.dev/blog/towards-continuous-performance-...

matthews2··on How I Backup
Thanks for sharing! I'm going to go and test my backups now...
matthews2··on Considering then abandoning JSX for structured YAML config
You don’t need to convert back to yaml. Your json is valid yaml.
matthews2··on Writing a scheduler for Linux in Rust that runs in user-space
In this example, the kernel is doing the task switching. They are "real" threads. The userspace component is informing the kernel which tasks should be run.

goroutines and Java virtual threads are a separate idea. The application saves its state and then yields back to a scheduler in the application.

matthews2··on Sudo for Windows
This smells like when PowerShell aliased curl and wget to a completely different command, with incompatible arguments.

https://github.com/PowerShell/PowerShell/pull/1901

matthews2··on Sourcehut network outage post-mortem
You don't need to agree with all of his opinions to use SourceHut :)

I'm not a big fan of some of his hot takes, but I still respect him and trust him with my data.

matthews2··on Lichee Console 4A – RISC-V mini laptop: Review, benchmarks and early issues
It uses U-Boot, but you can use U-Boot to launch an EFI executable.

https://docs.u-boot.org/en/latest/board/thead/lpi4a.html https://docs.u-boot.org/en/latest/usage/cmd/bootefi.html

matthews2··on ICO fines HelloFresh £140k for spam texts and emails
I receive a lot of physical mail from HelloFresh and there's no clear way to opt-out. I've never (willingly or knowingly) signed up to their service or any marketing bits.
matthews2··on Adventures of Linux Userspace at Meta [video]
CentOS Stream isn’t unstable in the way that something like Arch Linux or Debian Sid is.

They effectively only got rid of point releases. Instead of going from CentOS 7 to 7.1, you just regularly get updates. Since they’re a part of the same major release, they don’t contain breaking changes.

It’s no different from running Debian Stable with the -updates repository enabled.

matthews2··on The funny rules of SpamAssassin in 2023
Putting your outbound emails through SpamAssassin as part of a regression test sounds like a really good idea - would have never thought of doing that myself!
matthews2··on 12VHPWR is just Garbage and will Remain a Problem [video]
The mentioned article on 12v-2x6 connector: https://www.igorslab.de/en/rest-in-peace-12vhpwr-connector-w...
matthews2··on Social media platform X suffers global outages
> "even" the BBC that refuses to call Hamas terrorists?

This isn't specific to Israel/Hamas, the BBC avoid a lot of emotive and loaded language.

https://www.bbc.co.uk/news/world-middle-east-67083432

Page 1 of 7Next →