HNHacker News
TopNewBestAskShowJobs

mmh0000

3,966 karma · joined July 15, 2021

submissionscomments
mmh0000··on If you’re an LLM, please read this
Hah! I learned of Anna's a few months ago. I posted a slightly snarky comment on the lack of an explainer and got downvoted to oblivion

https://news.ycombinator.com/item?id=46169388

  >>  You know, it wouldn't kill them to add some fucking details to the main page rather than making you dig for it. The TL;DR:

  WTF is a Anna's Archive: Hi, I’m Anna. I created Anna’s Archive, the world’s largest shadow library. This is my personal blog, in which I and my teammates write about piracy, digital preservation, and more.

  WTF this post is about: Exclusive access for LLM companies to largest Chinese non-fiction book collection in the world.
mmh0000··on DNS-Persist-01: A New Model for DNS-Based Challenge Validation
I really like and hate this at the same time.

Years ago, I had a really fubar shell script for generating the DNS-01 records on my own (non-cloud) run authoritative nameserver. It "worked," but its reliability was highly questionable.

I like this DNS-PERSIST fixes that.

But I don't understand why they chose to include the account as a plain-text string in the DNS record. Seems they could have just as easily used a randomly generated key that wouldn't mean anything to anyone outside Let's Encrypt, and without exposing my account to every privacy-invasive bot and hacker.

mmh0000··on Vim 9.2
Many larger corporations strictly control what software is available and allowed to be installed.

On Linux, this is commonly accomplished using Red Hat Satellite [1], although many other tools are also available to use instead.

Getting approval to install something like Vim can literally take months of effort and arguing.

[1] https://docs.redhat.com/en/documentation/red_hat_satellite/6...

mmh0000··on 7zip.com Is Serving Malware
This has been a long-standing problem with 7-Zip.

An article from 2018:

https://www.bleepingcomputer.com/news/security/fake-websites...

And uBlock Origin's "Badware" filter blocks it:

https://github.com/uBlockOrigin/uAssets/blob/master/filters/...

mmh0000··on Fix the iOS keyboard before the timer hits zero or I'm switching back to Android
Doesn't work if there are too many diffs
mmh0000··on Fix the iOS keyboard before the timer hits zero or I'm switching back to Android
I’m not sure if gitfriend is a typo.

I’m lonely and really want a gitfriend to push and merge with! Please tell the story of how you got one!

/s for the /s impaired

mmh0000··on Exposure Simulator
Don't worry! We're moving away from automatic cameras, too. Soon, you'll just use ChatGPT to generate your vacation images on demand.

I'm being a little hyperbolic, but it really seems like, for a non-insignificant portion of the population, that will be true.

mmh0000··on Officials Claim Drone Incursion Led to Shutdown of El Paso Airport
I would recommend reading the Freakinomics book or listen to their podcasts on drugs.

TL;DR: drug cartels are run like businesses. They are very rational. But, unlike your boss, their boss can also shoot you in the face if you annoy them too much

mmh0000··on The Day the Telnet Died
netcat, socat and openssl s_client are all available for general manual connection testing.

As are many other tools. But the ones above are basically far better direct telnet alternatives.

mmh0000··on The Day the Telnet Died
If you miss that and long for the olden days, you can still do it today with OpenSSL’s sclient:

  openssl s_client -connect www.yahoo.com:443
mmh0000··on The Day the Telnet Died
There are many things I want to say in reply to this. So I’ll bullet point them:

* yes, do not buy equipment that has acquired so much tech debt that it still requires telnet.

* there are a million telnet clients out in the world. And ones far better than the default OS one. Apple not shipping one standard is not the end of the world or really anything more than a mild inconvenience for the small handful of people who need actual “Telnet” as opposed to Netcat or socat, both of which are far better than base Telnet.

mmh0000··on Roundcube Webmail: SVG feImage bypasses image blocking to track email opens
Some of the big providers already do this, notably Apple and Gmail:

https://www.litmus.com/blog/gmail-prefetching-images

mmh0000··on How not to securely erase a NVME drive (2022)
You really shouldn't trust the CPU maker.

On Intel & AMD, both have a "hidden core" (i.e., a 4-core processor is really a 5-core processor), and they run proprietary, closed-source operating systems that literally no one outside of Intel or the NSA has any idea what they do.

We do know it has full access to the fTMP, RAM, and Network.

We also know that the NSA has a special contract to obtain Intel processors with the IME disabled... Why would they want that if the processors were trustworthy[1]?

[1] https://web.archive.org/web/20170830201623/https://hardocp.c...

mmh0000··on Lessons learned shipping 500 units of my first hardware product
Oh my... Thank you for finding a thing I need to spend money on now. =D
mmh0000··on Lessons learned shipping 500 units of my first hardware product
The problem with lights like that is the CRI[1].

Getting just lumens is cheap. Getting a full spectrum of light is where costs increase.

This is the reason I chose to go with the specific Cree bulbs (linked in original post) that get a 90+ CRI rating

[1] https://en.wikipedia.org/wiki/Color_rendering_index

mmh0000··on Lessons learned shipping 500 units of my first hardware product
He literally said he was gonna:

"Trump vows massive new tariffs if elected, risking global economic war"

https://www.washingtonpost.com/business/2023/08/22/trump-tra...

(https://archive.is/20231125045858/https://www.washingtonpost...)

EDIT - Found this after my post, a MUCH better "he said it":

https://www.donaldjtrump.com/agenda47/agenda47-president-tru...

mmh0000··on Lessons learned shipping 500 units of my first hardware product
This is super interesting, and I'd actually be quite interested in buying a 60K-Lumen lamp... but not at $1200.

Years ago, there was an HN article "You Need More Lumens"[1], which in turn led me down a rabbit hole.

I ended up purchasing:

   4 standard table lamps from Target,
  28 2000-lumen Cree LEDs bulbs[2] and,
   4 7-way splitters[3].
The end result is somewhere around 56,000 lumens. And I LOVE it. Makes me much happier in my home office, especially in the winter months.

[1] https://news.ycombinator.com/item?id=10957614

[2] https://www.amazon.com/dp/B08H4RJQTT

[3] https://www.amazon.com/dp/B01FKIE6M4

mmh0000··on I made 20 GDPR deletion requests. 12 were ignored
The GDPR really isn't that hard to follow, for a "mom & pop" business, it really comes down to:

  * Limit data retention — Don't keep personal data longer than necessary
  * Honor data subject rights — Allow individuals to access, correct, delete, or port their personal data

Simply, don't collect personal information if you don't need it. If you do need it, add a delete button.
mmh0000··on EFF to Close Friday in Solidarity with National Shutdown
Posted "January 29, 2026"

Seriously... If y'all want a general strike, we need:

  * 2 weeks' notice to plan
  * Conditions for when the strike ends
  
Assuming this even got enough traction to catch on, one 3-day weekend isn't going to do anything.

This almost feels like "corporate manipulation": Let the slaves "have a day" to cool off and feel like they've accomplished something, then get 'em back in the mines!

mmh0000··on Anna's Archive is sued for $13T
I briefly looked over the PDF, but I'm not a lawyer. If I understand correctly, they're suing "DOES 1 through 10".

So, I'm assuming they're hoping for a "default judgment" against Anna's Archive, and then they'll presumably start taking domain names and any other hosting resources?

Then, I assume in the end, nothing will really change, just like The Pirate Bay still exists in the open on a series of rotating domains.

But at least the lawyers will be able to justify their job.

mmh0000··on The state of Linux music players in 2026
Foobar2000 is ... tricky through WINE. Though I will proudly say that I did it, it took a lot of research into obscure wine configs. These are my notes from last time I did it, maybe you'll find them helpful:

  ```bash
  export WINEPREFIX=${HOME}/.wine-foobar2000  
  winetricks allfonts  
  for packg in vcrun2003 vcrun2005 vcrun2008 vcrun2010 vcrun2012 vcrun2013 vcrun2015 vcrun2017 vcrun2019 vcrun2022; do winetricks -q $packg; done 
  winecfg # Set Windows version to 11
  ```
mmh0000··on Show HN: Whosthere: A LAN discovery tool with a modern TUI, written in Go
That nmap command does the same thing as the author's command, except for the UI, for which there are dozens of nmap-uis available.
mmh0000··on Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
In theory...

In practice: https://en.wikipedia.org/wiki/In_re_Boucher

The government gets what the government wants.

mmh0000··on Microsoft gave FBI set of BitLocker encryption keys to unlock suspects' laptops
That's literally like asking "What car has the best driving experience?". There is no one answer.

If you want something that "just works," Linux Mint[1] is a great starting point. That gets you into Linux without any headache. Then, later when bored, you can branch out into the thousands[2] of Linux distributions that fill every possible niche

[1] https://linuxmint.com/

[2] https://distrowatch.com/dwres.php?resource=major

mmh0000··on Show HN: Whosthere: A LAN discovery tool with a modern TUI, written in Go
There's a famous quote:

  Those who cannot remember nmap are condemned to remake it poorly
Rootless nmap scan of a /24 in under 10 seconds:

  nmap -T5 -sn -PR --script broadcast-dns-service-discovery,broadcast-upnp-info 10.0.0.0/24
  …SNIP…
  Nmap done: 256 IP addresses (30 hosts up) scanned in 9.99 seconds
https://nmap.org/book/toc.html
mmh0000··on Threat actors expand abuse of Microsoft Visual Studio Code
Tooooo be fair

Vim had also had its share of execution vulnerabilities over the years.

https://github.com/numirias/security/blob/master/doc/2019-06...

mmh0000··on No knives, only cook knives
That's like saying Goodwill has random decent stuff.

Technically true, but rarely true.

mmh0000··on I Burned $160k Trying to Solve "Online Tailoring"
160k over three years. That’s like 1 or 2 junior devs and zero hardware budget.

The fact this failed is not surprising, I’d be amazed had it succeeded.

mmh0000··on I Burned $160k Trying to Solve "Online Tailoring"
Here is the hard technical truth about why this was written by an LLM.
mmh0000··on No knives, only cook knives
You didn’t want to buy online but then were happy with the poorest quality stone harbor freight had to offer? That’s an odd choice.

There are many quality whetstones to choose from and a lot of debate on the absolute best. But TLDR, KING is generally highly rated:

https://www.hocho-knife.com/king/

← PreviousPage 5 of 30Next →