HNHacker News
TopNewBestAskShowJobs

pamcake

398 karma · joined January 1, 2026

submissionscomments
pamcake··on Incident with Github.com
> GH shouldn't have promoted LLM usage the way they have

No qualifiers necessary. But try arguing with a lawnmower...

pamcake··on Incident with Github.com
Allowing and accepting? More like encouraging and instigating.
pamcake··on A spectre is haunting Unicode
> I was told that the Unified CJK thing adopted a different "philosophy" from the rest of Unicode

What would that philosophy be about? Sounds apocryphal. Unicode has never done "unification" like that for other languages/scripts?

i/ı/i, ö/ø/ø̈/oͤ: Same same, different codepoints.

Search and sorting is a mess everywhere. Depending on your locale, ö sorts either after o or after z. Sometimes it's semantically and phonetically equivalent to o wrt search but moreoften not. https://en.wikipedia.org/wiki/%C3%96

pamcake··on Alternative to Internet Archive
Bonus if also add a .torrent with the same as webseeds: Can make easier for visitor to grab in bulk and makes a way to keep sharing in further future. No strict need to run torrent client to act as webseed - just point at http url.
pamcake··on Google is making private AI practical with homomorphic encryption
Now have you met my friend Planck Length?
pamcake··on Open WireGuard Endpoints
Why stop there? Give use Wireguard certificate auth already!
pamcake··on France's top court blocks social media ban for under-15s
"The state apparatus" (or "the state" for short).

"State and government" section in https://en.wikipedia.org/wiki/State_(polity)

pamcake··on Google is making private AI practical with homomorphic encryption
Most likely from above in thread.

There is no reason to believe it should be lower than that - or even that low. Or do you have access to research claiming such achievements?

pamcake··on Google is making private AI practical with homomorphic encryption
I'm still a bit skeptic - 1000x sounds overly optimistic and only looking at encryption transformation without any operation is already at least 10000x with scheme mentioned in that quote.

Sibling comment estimates lower bounds of current research at minimun 10^6 overhead which sounds more realistic.

pamcake··on Google is making private AI practical with homomorphic encryption
Benchmarking code in repo: https://github.com/google/heir/tree/main/benchmark

Project intro talk from 2023: https://www.youtube.com/watch?v=kqDFdKUTNA4

pamcake··on Count Binface receives over a quarter of votes in Clacton by-election
No we haven't.
pamcake··on New Bedford police officer accused of using Flock cameras to track ex-partner
I would question why individual police officers would be able to plant pucks administered by the agency and track using (a combination of third-party and) agency infrastructure at will without oversight and properly reviewed papertrail.

Nobody's calling for outright banning of cameras. It's about the way these and their feeds are being deployed, integrated and utilized.

pamcake··on CFTC declares market emergency, orders Kalshi to continue to operate in New York
So the CFTC frames Kalshi as a financial derivatives exchange for the financial instrument category of event contracts, dismissing NYs characterization of it as a gambling/betting platform. Interesting.
pamcake··on GitHub repo hagezi/DNS-blocklists flagged
hagezi comment from linked thread:

The repo and the account were locked again, so I opened another ticket with GitHub. Their automatic fraud detection is “very frustrating.” No idea how long it will take. Last time, it was bots that reported the repository en masse. Let's see what the reason is this time...

This time, GitHub didn’t notify me about the lock; a user reported it to me.

The mirror on GitLab is online, and the CDN links from jsDelivr are still working.

https://gitlab.com/hagezi/mirror

pamcake··on Updated GPG Key for Signing Firefox and Thunderbird Releases
You are right that SSS requires temporarily rematerializing the raw key at the moment of signing. Even so it would be a huge improvement:

> Which makes the exact situation that occurred here possible.

Not so. The situation here was operator errror and someone mistakenly committing signing key in cleartext to repo. So this exact situation would not be possible. They could also have a process of signing on a dedicated instance (possibly with its own shard) which would remove key exposure completely from operator machines. This is all achivable with existing tooling and without changing implementations on verifier side.

The first link shows how an actual threshold signature scheme for PGP could be constructed.

pamcake··on As AI eats the web, the internet’s collective memory is disappearing
All of those are pretty specific to US national culture whereas GP is talking about something more global.
pamcake··on [dead]
> I'm actually too lazy to explain everything now that I'm typing.

This will not do. Try harder. I believe in you.

pamcake··on Updated GPG Key for Signing Firefox and Thunderbird Releases
Could be multiple individuals, each with a different key.

https://eprint.iacr.org/2020/540

https://en.wikipedia.org/wiki/Shamir%27s_Secret_Sharing

pamcake··on Everything you do is being recorded
False presumption. You are just making that up, right?
pamcake··on Docker Sandboxes – Disposable, isolated sandboxes for AI agents
> How do you solve the issues of private key sharings that are stored in cwd .env?

Stop putting sensitive stuff there.

pamcake··on Windows 11's built-in Weather app wastes more than 1 GB of RAM
https://github.com/pbatard/rufus/releases

or

https://unetbootin.github.io/#distros

pamcake··on How to Block Some of the Bots
Rejects me too. Not a bot and connecting directly with a "normal" old-fashioned up-to-date web browser. How will you evaluate how many humans vs bots you blocked?
pamcake··on Codeberg Bans Cryptocurrency Projects
Hey, this one wasnt a fit but i think there are still so many options to consider over doubling down on centralization. Maybe P2P is actually a better fit than federated for git and open source collaboration? nostr, radicle, reticulum?

Self-hosting classic forge is great but does require domain name and infra with uptime. These p2p solutions are more like bittorrent where you can clone as long as someone is seeding and git already has commit signature as building block for trust.

pamcake··on Codeberg Bans Cryptocurrency Projects
Will you eat your hat? It's not that far from many seemingly popular takes I see on fediverse regularly.
pamcake··on Codeberg Bans Cryptocurrency Projects
You misunderstand what Codeberg is.

Codeberg has 0 paying customers. It is a non-profit providing services for free and not a business.

Membership in the non-profit requires fee paid by EU bank transfer and gives voting rights on questions like this but is separate accounting from use of the free sevices.

All this is explained front-and center or codeberg.org.

pamcake··on Why developers are ditching GitHub for Codeberg and self-hosting alternatives
Anyone using or been trying out Radicle recently?

https://radicle.dev

EDIT: https://news.ycombinator.com/item?id=48147603

pamcake··on A way to exclude sensitive files issue still open for OpenAI Codex
Yes you should. It will come naturally if you go down the road of separating code from data and properly isolating dev and prod environments, applying principle of least privilege as you do.

.env files for creds are a convenience for dev and testing. They were never supposed to be used for security or carried around with sensitive stuff inside. None of this is new.

pamcake··on A way to exclude sensitive files issue still open for OpenAI Codex
The answer is the same: You give it either read-only or its own copy separate from the one you care about.

The requested feature wouldn't be a robust solution here either for the same reasons.

Besides, have you noticed the amount of other amateur-hour bugs anf jank in Codex going for weeks or months without proper resolution? Given that, why would you want and trust their solution here over alternatives, specifically?

pamcake··on A way to exclude sensitive files issue still open for OpenAI Codex
It's not their problem to solve. Don't give it access to sensitive files on the first place.
pamcake··on Seattle Shield, an intelligence-sharing network operated by the Seattle police
Are those things you are personally struggling with (if you are considering quitting open source contribitions wholesale: don't let this make you) or is this a showcase of rationalization?
← PreviousPage 2 of 8Next →