HNHacker News
TopNewBestAskShowJobs

mmsc

3,253 karma · joined May 22, 2021

https://joshua.hu/about

https://www.linkedin.com/in/joshua-alexander-rogers/

https://github.com/megamansec

Security, hacking, travel, lulz, vodka.

submissionscomments
mmsc··on macOS Golden Gate Is a Buggy Mess
It still isn't apparent to me why Apple decided to take their otherwise logical and fine UI, and create Liquid Glass. I guess somebody got a nice new title and bonus, though?

Did they fix the bug where the toolbar of applications would either get stuck open or disappear while in full screen mode, requiring them to be moved to the desktop before returned to fullscreen?

mmsc··on The Murky History of Soviet-Born Tetris
+1 for David Sheff's book. It's by far the best written history about video game distribution in the late 80s and early 90s.
mmsc··on OpenAI GPT–6 Astra breaks Enigma message that has resisted solution since 2005
Slopped up site https://mvueh-enigma-solved.carterl.chatgpt.site/ seems to indicate it's due to:

  The SS-Totenkopf Division was advancing east during the opening weeks of Operation Barbarossa, the German invasion of the Soviet Union. 10 July 1941, the division had just fought its way through the Soviet border defenses around Sebezh. It had moved through Lithuania and Latvia, crossed the Dvina area, and advanced through Dagda toward a place German records called "Rosenow." The division moved out of the Rosenow area around 6 July, fought around Sebezh on 8-9 July, and then continued east/northeast toward Opochka and eventually Porkhov.
mmsc··on OpenAI GPT–6 Astra breaks Enigma message that has resisted solution since 2005
For anybody interested, the actual encrypted message:

  BTTE UM ANGABE DES MARSQWEGES X BEFINDE MIQ IN X ROSENOW ROSENOW X SOFORT FUNKANTWORT X WASCHBBSCH
which, given misspellings, translates approximately to:

  Please specify the route of march. I am in Rosenow, Rosenow. Immediate reply by radio. Waschbusch.
mmsc··on Forgejo <=16.0.3 Critical RCE
Wonder how long it took from report to patch. IME codeberg has one of the rudest security teams in oss (fair enough or not, irrelevant). https://news.ycombinator.com/item?id=47941590 Is quite relevant
mmsc··on Adult Film Producer Unmasks Prolific 'John DOE' Torrent Pirate as Meta Executive
What is the moral difference between training on porn vs other genres of media?
mmsc··on Sort branches by last commit date
.gitconfig:

  ```
  [rebase]
      instructionFormat = %s%nexec GIT_COMMITTER_DATE=\"%cI\" GIT_COMMITTER_NAME=\"%cN\" GIT_COMMITTER_EMAIL=\"%cE\" git commit --amend --no-edit%n
      committerDateIsAuthorDate = true
  ```
mmsc··on Sort branches by last commit date
`git config --global branch.sort -committerdate`
mmsc··on Box of 300 Love Letters Showed Up, What Whimsical WWII Soldier Who Wrote Them?
This is the premise for the Taiwanese movie Cape Number 7: https://en.wikipedia.org/wiki/Cape_No._7
mmsc··on Two German airport workers die of malaria after 'mosquito arrives on plane'
Every plane is. https://www.agriculture.gov.au/biosecurity-trade/aircraft-ve...
mmsc··on Two German airport workers die of malaria after 'mosquito arrives on plane'
They still do this when you land in Australia
mmsc··on Air Conditioning Is Not a Luxury, It Is a Necessity
Thats what I tell to all the wildlife when they collapse, too.
mmsc··on uBlock Origin Is Giving Up the Fight to Keep Ads Off Facebook
There's a concern that the developer of FB-purity passed away: https://www.reddit.com/r/facebook/comments/1tw2sf9/real_conc...
mmsc··on Tail-call optimization in C is relatively recent (2025)
and TCO was added then removed from js! https://stackoverflow.com/a/54721813

This leads to fun stack-overflow bugs too in a lot of js code (one solution is to flatten: https://joshua.hu/javascript-infinite-tail-call-recursion-st...)

mmsc··on Ask HN: What are you working on? (August 2026)
I'm working on it: https://github.com/MegaManSec/magic-switch/issues/67
mmsc··on Ask HN: What are you working on? (August 2026)
I recently got a Magic Keyboard and Magic Trackpad and have been using them on two different Macbooks (work and non-work).

I couldn't find a good way switch them between different Macs, so I made https://github.com/MegaManSec/magic-switch. It's a small application which allows you to basically share the peripherals between Macs, and send them back-and-forth either manually or automatically.

mmsc··on Dubious research tied to Red Bull has shaped energy drink policy
Feeling miserable for three days seems ... unlikely after 800mg/day of caffeine. I say that to mean, it should be much longer (been there, done that, took many months) Caffeine use especially at that level massively grows the amount adenosine receptors your brain has, and they don't just disappear overnight.

A 500ml Diet Coke (assuming you don't mean the caffeine free version) also contains about 65 mg of caffeine, which is the same as an espresso. I'm not sure if you really quit. Caffeine is also in a surprisingly large amount of soft drinks you wouldn't expect.

mmsc··on Em dashes are fucking amazing
and here i thought "option -" was an em-dash, but no, it's an _en_-dash.
mmsc··on Introduction to Formal Verification with Lean Part 1
it's like proof by induction versus trying every number from 0 to infinity
mmsc··on Vulnerability reports are not special anymore
already exists: https://joshua.hu/comparing-redos-detection-tools. `recheck` and `redos-detector` are definitely the best. there's even an eslint plugin for the latter: https://github.com/tjenkinson/eslint-plugin-redos-detector
mmsc··on I found 10k GitHub repositories distributing Trojan malware
> Another month later, GitHub support sent me an email saying that they had removed these repositories.

I recently discovered a campaign where somebody was forking very small but useful codebases, and replacing the distributable with some malware, and making the repository have better SEO with changes to the README. My case was a simple macOS application that could be used to control some Phillips LED light strip.

I reported it to GitHub and it was removed within 24 hours.

I discovered another repository like this, and they still haven't replied since (one month).

No clue how their malware reports work. I'm surprised they don't partner with some antivirus company to at least scan "releases" for malware (not repositories themselves)

mmsc··on I Hate (Most) Keyboard 'Fn' Keys
A missed opportunity to say you 'Fn' hate the Fn key :)
mmsc··on Project Glasswing: An Initial Update
Aisle has hundreds of CVEs with publicly available models: https://aisle.com/wall-of-fame
mmsc··on Carrot Disclosure: Forgejo
https://codeberg.org/forgejo/governance/src/commit/5c07b3801...

> Failure to comply with these rules will be criticized publicly, and we reserve the right to no longer coordinate with you or your project in the future.

lol

mmsc··on GPT‑5.5 Bio Bug Bounty
How is that a scam? You don't get participation awards for solving half of a puzzle...
mmsc··on Kernel code removals driven by LLM-created security reports
Unmaintained code is a security issue in of itself, so this is of course a net benefit.
mmsc··on Installing every* Firefox extension
The website of this blog and their connections listed are a sight to behold. I miss that version of the internet.
mmsc··on Filing the corners off my MacBooks
As long as it's not hydrofluoric acid...
mmsc··on Top laptops to use with FreeBSD
> You say "works perfectly". I do not think it means what you think it means.

Copying some files from a different machine is not that burdensome. The point is, it works.

mmsc··on Top laptops to use with FreeBSD
FreeBSD works perfectly on intel MacBooks if you've got one laying around: https://joshua.hu/FreeBSD-on-MacbookPro-114-A1398
Page 1 of 13Next →