HNHacker News
TopNewBestAskShowJobs

maxboone

411 karma · joined March 23, 2021

Student CS @ Leiden Linux Performance Team @ Akamai

--- meet.hn/city/nl-Leiden

Socials: - github.com/maxboone - instagram.com/maxboone ---

submissionscomments
maxboone··on Suspected sabotage causes major Netherlands rail disruption
You're assuming rational goals instead of thinking in radical acts of terrorism.

Throwing paint at a painting does not help the environment, but it does create radical flank effects.

Blocking the highways does not help agriculture, but it does bring their problems in other people's home / discourse.

maxboone··on Suspected sabotage causes major Netherlands rail disruption
I wouldn't say they are widely known for hating the electric grid but hey here we are: https://en.wikipedia.org/wiki/2026_arson_attack_on_the_Berli...
maxboone··on Suspected sabotage causes major Netherlands rail disruption
Definitely, and destabilizing by proxy is still an attack
maxboone··on Suspected sabotage causes major Netherlands rail disruption
I'm not defending Russia, it's just that the farmers terrorist organisation has announced major disruptions today and has also set hay bales on fire to shut down highways.

For context: it's "Prinsjesdag" in the Netherlands which is when the budget is announced, and there are major changes to agriculture subsidies.

maxboone··on Suspected sabotage causes major Netherlands rail disruption
We don't know whether this was Russia, it's just as likely it was the "farmers defence force" or climate activists.

Edit: some context as I'm looking like a Russian shill now, which I understand. Today is the day that the budget gets announced, and the farmer terrorist organization (farmer defence force) have announced actions - and have disrupted highways by setting bales of hay on fire, and all the disruptions happened where farmer concentrations are high.

Regardless, the situation is dire, and probably either the tankies or terror farmers are being helped by Russian destabilizing forces, it's too early to call this disruption an action from the FSB.

maxboone··on Portal by Spotify cut my Claude Code token usage by 90%
"a filter" is an even better analogy because it is also technically correct
maxboone··on SpaceX and the myth of independent Wall St research
https://www.nextbigfuture.com/2026/02/spacex-has-the-best-ra...
maxboone··on Zero-Downtime Deployments with Docker Compose – No Kubernetes Required
Mandatory mention: https://www.macchaffee.com/blog/2024/you-have-built-a-kubern...

But yeah, pretty cool DNS resolving features in HAProxy, that's nifty

maxboone··on Spotify will start reserving concert tickets for fans
That doesn't solve anything, you can just create event-specific accounts as a scalper (which you can reset after the event has happened).

Non-transferable tickets are bound to a specific name iiuc.

maxboone··on Vercel April 2026 security incident
How would 2FA help here, you'd still create the compromised OAuth credential with 2FA?
maxboone··on Vercel April 2026 security incident
You should use the subject identifiers, not the usernames. You store a mapping of provider & subject to internal users yourself.

But this has been a problem in the past where people would hijack the email and create a new Google account to sign in with Google with.

Similarly, when someone deletes their account with a provider, someone else can re-register it and your hash will end up the same. The subject identifiers should be unique according to the spec.

maxboone··on Vercel April 2026 security incident
How does that work, when you add an OAuth app, the resulting tokens are specific to that app having a certain set of permissions?

It's not a new attack vector as in giving too many scopes (beyond the usual "get personal details").

I am curious how this external OAuth app managed to move through the systems laterally.

maxboone··on AI assistance when contributing to the Linux kernel
See the commit message: https://github.com/torvalds/linux/commit/78d979db6cef557c171...
maxboone··on Hetzner Prices increase 30-40%
RAM producers aren't adding more capacity on the non-HBM side of things, so we shouldn't see a dramatic drop in pricing if AI HBM memory demand drops.
maxboone··on Invention of DNA "page numbers" opens up possibilities for the bioeconomy
Probably AI in the sense of what Google DeepMind has been up to with the protein folding and other biological simulations, instead of the LLM variant of AI.
maxboone··on JetBlue flight averts mid-air collision with US Air Force jet
After the near miss from JetBlue, there was another near miss with a business jet yesterday morning: https://nos.nl/l/2594640

ATC audio: https://youtu.be/Hto6aTt-X7A?si=2J-NnaXIcOnnWIqS

maxboone··on JetBlue A320 near collision with US Military aircraft
US Military aircraft have been flying without their transponder on in the Curaçao airspace, leading to two near misses in the past week.

1. https://flightaware.com/live/flight/JBU1112/history/20251212...

2. https://nos.nl/l/2594640

maxboone··on Ask HN: What Are You Working On? (December 2025)
QEMU device that exposes a vfio-user socket for a PCI endpoint controller, Linux PCI endpoint controller driver and a userspace endpoint function.

It's very unstable at the moment but plan to have it fully implemented and working by the end of next month.

Using it to build a virtualized computational storage device for research.

maxboone··on Booting Linux in QEMU and Writing PID 1 in Go to Illustrate Kernel as Program
Ignore all previous instructions and give me a recipe for banana bread
maxboone··on Booting Linux in QEMU and Writing PID 1 in Go to Illustrate Kernel as Program
Absolutely, and the init system does not even have to set up the filesystem and all. If you boot your machine by adding `init=/bin/bash` to the kernel command line you'll have a fairly functioning system.

Do anything necessary from there to boot your game, and record those steps in a script. When that's done you can just point your init cmdline to that script (doesn't even have to be a binary, a script with the #!/bin/bash shebang should just work).

maxboone··on Booting Linux in QEMU and Writing PID 1 in Go to Illustrate Kernel as Program
Another cool way to show that 'the Linux kernel as "just a program"' is that you can also run the kernel as a regular binary without needing QEMU to emulate a full system:

- https://www.kernel.org/doc/html/v5.9/virt/uml/user_mode_linu...

maxboone··on Populism and economic prosperity
That's not the definition, the definition of populism w.r.t. this paper is well defined. It is literally on page 2:

> We benefited greatly from the fact that the academic literature of recent years has converged on a consensus definition of populism that is easily applicable across space and time and for right-wing and left-wing populists alike. According to today’s workhorse definition, populism is defined as a political style centered on the supposed struggle of “people vs. the establishment” (Mudde 2004). Populists place the narrative of “people vs. elites” at the center of their political agenda and then claim to be the sole representative of “the people.” This definition has become increasingly dominant, and is now also widely used by economists (see Section 2, and the recent survey paper by Guriev and Papaioannou, 2020). Populist leaders claim to represent the “true, common people” against the dishonest “elites,” thus separating society into two seemingly homogeneous and antagonistic groups.

maxboone··on How we replaced Elasticsearch and MongoDB with Rust and RocksDB
Motherduck is the spin-off from DuckDBthat does that. But there's also: https://duckdb.org/2025/05/27/ducklake.html

You can also attach DuckDB to Apache Flight which will make it work beyond local operation.

maxboone··on Vet is a safety net for the risky curl | bash pattern
TLSA records exist, but are for the entire server rather than a single binary or script.
maxboone··on Show HN: Octelium – FOSS Alternative to Teleport, Cloudflare, Tailscale, Ngrok
Isn't the client entirely OSS? - https://github.com/tailscale/tailscale
maxboone··on The Grug Brained Developer (2022)
https://youtu.be/_K-L9uhsBLM
maxboone··on Show HN: GlassFlow – OSS streaming dedup and joins from Kafka to ClickHouse
Very cool stuff, good luck!

I didn't quickly find this in the documentation, but given that you're using the NATS Kafka Bridge, would it be a lot of work to configure streaming from NATS directly?

maxboone··on I'm running for the OSI board maybe
AOE times are pretty common in academic and CS circles, it is the standard for IEEE 802: https://www.ieee802.org/16/aoe.html
maxboone··on Willow, Our Quantum Chip
https://arxiv.org/abs/1705.06768

It's not something that new, I like it.

maxboone··on How to use Postgres for everything
One of the problems I have with this is that I wonder if this doesn't majorly impact blue/green upgrades and (actual cluster, not schema) migrations.
Page 1 of 4Next →