HNHacker News
TopNewBestAskShowJobs

papascrubs

131 karma · joined June 20, 2021

https://keybase.io/nathansubra

nate(at)natesubra.com @natesubra@infosec.exchange natesubra @ twitter

submissionscomments
papascrubs··on Firefox 157
Waterfox is Firefox with a good chunk of the kruft removed

https://www.waterfox.com/

papascrubs··on FTC chair suggests AI developers should be liable for conduct of agents
Yeah but did they account for capitalism when creating those rules?
papascrubs··on Steam Frame starts at $1059
Anecdotal, but on the last few flights that I've taken. I was told that you can use them, but you can't charge them on the flight. This was inside the US, American Airlines, and United. I can't speak to the other airlines.
papascrubs··on qm – Multiplayer agent harness for work
I understand you take. And I definitely agree that we could use a lot better ux tools than we have right now. Maybe one of these prototypes will lead to that though. I'll look at it more as creative engineering. Not everything is meant to be distributed or consumed. But that doesn't mean that it's not worthwhile to try and prototype different flows and options. I have seen hundreds of harnesses, I've only used a couple-- but they've inspired me to build something that fits me better and works for me. If somebody comes out with something that helps unify the UX experience and provides better building blocks for me to work with, I'll definitely switch to that and rebuild my experience on top of that. But for now this is what we have. Admittedly this reflects my level of experience and my expertise too. I don't have a lot of experience working with building UX frameworks, so I adapt what I can.
papascrubs··on qm
That's an option right? When I say roll your own-- it could be extending another platform. There's definitely different levels. Customization is in reach regardless of where you want to start and stop your stack.
papascrubs··on qm – Multiplayer agent harness for work
It is fascinating and I love to see it. Ultimately though, why not build your own? I think that in part is what we're beginning to see-- highly customized and personalized software. I take most of these as inspiration these days and just build my own. Nothing you can't hammer out with a few good Claude sessions.
papascrubs··on Meta reuses old RAM in new servers with custom bridge chip
I've got some RDRAM-- still waiting for the RAMBUS revolution, any day now
papascrubs··on OpenWrt One – Open Hardware Router
I virtualize mine with proxmox and pass the necessary NICs through to the VM. Snapshots make rollbacks a breeze. You can also run HA pairs if you want to do updates without downtime.
papascrubs··on US holds off blacklisting DeepSeek, more than 100 firms deemed security risks
I don't work for a nation state, but I work for a large financial that requires adversarial testing and it's absolutely increased the ability to operate and attack these environments. The floor is definitely easier to reach at a minimum. Vulns and 0days are far easier to exploit, time to exploitation from the release of vulns is nearing zero, largely aided by LLM reverse engineering -- why wouldn't this apply to nation state level adversaries?
papascrubs··on Anthropic's new Fable model has been jailbroken
https://xcancel.com/elder_plinius/status/2064776322979676227
papascrubs··on Running Claude Code Offline on an M3 Pro with Qwen3.6
Doing anything special to handle the syncing of .claude? Kind of a pain point for me jumping between Windows/Linux and having to deal with path differences.
papascrubs··on MAI-Code-1-Flash
Makes sense. Privacy is my only real hang up with DeepSeek. Both of the big SOTA providers have become extremely filtered. Things that I could do one version ago are now getting refusals. Anthropic is almost unusable. ChatGPT is slightly better. Even with a "cyber exception" in place and a vetted account. They are going to force me to take my business elsewhere.
papascrubs··on MAI-Code-1-Flash
Are you purchasing directly from DeepSeek? Any concerns as far as privacy or data protection?
papascrubs··on Creatine raises brain energy levels and slows cognitive decline: study
I get mine from bulksupplements. Gummies and many gym focused powders are extremely overpriced. Buying in bulk you should be able to get it for ~$.15 a day at 5g.
papascrubs··on Creatine raises brain energy levels and slows cognitive decline: study
It is definitely more than the standard dose. I was already taking 5g for weightlifting purposes. After some of the studies suggesting mental benefits I titrated my dose up to 30g (the high end of the studies). Just added an additional 5g per week until I hit 30. I add it in powder form to my daily protein shake-- usually in the morning. While it could be a placebo, I personally feel there's a noticeable difference. I buy in bulk so it ends up being less than $.90 a day to dose at this level. It's an extremely cheap supplement.
papascrubs··on Creatine raises brain energy levels and slows cognitive decline: study
Long term studies haven't shown any harm. I've taken 30g a day for well over a year now for both the physical performance and the cognitive benefits. I had brain fog following a bad COVID infection which this has helped with. My family also has a history of Alzheimer's and dementia (both sides), I figure it can't hurt.

The only side effects I've encountered have been mild GI discomfort, and that only rarely (mostly when restarting after a vacation etc-- I drop the routine when I travel). Roughly similar to having a morning coffee at its worst.

I've found I get much thirstier when on this high of a dose. If you're not already a big water drinker I'd definitely invest in a nice insulated bottle to drag around.

papascrubs··on Show HN: I Dedicated 4 Years to Mastering Offline Password Cracking
Uh, what?

I'd say that this is a bit relevant to the entire field of cyber security and a good chunk of development roles. If you're not concerned about how password hashing (which is a key component of understanding cracking) works as developer-- I'm not sure what to say. While not all of the in-depth research is probably needed. It's definitely relevant to many technical fields. I work in offensive security and we use tools like this daily in our industry. And no we are not cyber criminals.

papascrubs··on Anthropic is expanding to Colossus2. Will use GB200
Elon lost his lawsuit with openAI and knows xAI isn't on the same trajectory. Might as well try to win the bet and flip off Sam by supporting the best competition. Also they are getting a head start on AI as a commodity. I'm sure there's plenty of money to be made for those that can leverage their capital to essentially rent capacity right now. If he's not making enough off of grok, might as well cover their expenses.
papascrubs··on Scorched Earth 2000 – Web
Playing Omega (roguelike) on ATARI ST, there were food shops that you could buy stacks of fried lizard bites if I remember correctly? Anyways, I found out that if you bought the max amount 99999999, it would actually give you money. Baby's first buffer overflow. The only issue is that it would also put that amount in your inventory, so you were basically too slow to move and had to drop each stack so my towns were littered with stacks of lizard bites. I'm not sure where the bug was introduced and I never found it in the PC versions later on when I looked.
papascrubs··on Dirty Frag: Universal Linux LPE
Or a follow up prompt: "find similar classes of bugs". Once the actual case has been layed out finding like bugs isn't too hard. I hear you on the creativity bit. Like any tool, AI can put blinders on. Using it to augment without it fully taking over your workflow is tough.
papascrubs··on Should I Run Plain Docker Compose in Production in 2026?
firewalld supports docker and handles all of its routing/changes. I've standardized on using it in my environment.
papascrubs··on Running Faster to Go Nowhere: The AI Adoption Trap
No
papascrubs··on LittleSnitch for Linux
Two of the three components of LittleSnitch for Linux are open source. The eBPF (kernel portion) and UI are fully open source.
papascrubs··on Semaglutide improves knee osteoarthritis independant of weight loss
I like to call it the "gray" market because the substances themselves are gray, not because of their source. My weed dealer doesn't sell GLPs (yet, but I can see that coming). I haven't seen anyone arrested for having GLPs yet either-- although I have seen plenty of US based vendors have to close up shop due to legal pressure.

I do that believe that risk can be (mostly) mitigated, mainly by sticking with longstanding vendors and by trying to minimize risk with the actual substances (researching proper dosing protocol, batch testing, not assuming dosing, starting out on lower dosing with new kits etc). There is definitely risk associated, that said I'm often dabbling in non-FDA approved substances, so regardless I have zero recourse if something happens.

Are there any testing/safety protocols that you follow?

papascrubs··on Semaglutide improves knee osteoarthritis independant of weight loss
Depending on your appetite for risk, there's always the gray market. It's also a lot cheaper depending on what your insurance covers. I think I picked up a year's supply of semaglutide for under $200. I've been on some form of GLP for the last 2 years and for me there have been several tangible benefits related to ADHD.

https://gray.guide is a good starting point.

papascrubs··on I analyzed 180M jobs to see what jobs AI is replacing today
I'm sure some of these ransomware groups probably offer health insurance and 401k matching.
papascrubs··on LoRA Without Regret
Not just me then. It's always the first thing that springs to mind.
papascrubs··on Charlie Kirk killed at event in Utah
And yet when the two Minnesota politicians were assassinated, that subreddit was full of its own blend of insensitive comments. Complete drivel all around.
papascrubs··on The Universe Within 12.5 Light Years
I follow what you're saying, but many folks on this planet have far less opportunities than such a trip might provide. Guaranteed food, housing, access to cutting edge healthcare, a likely united community. I'm assuming these ships would be fairly big. It would definitely be different but-- would it be as bad as we think?
papascrubs··on My Own DNS Server at Home – Part 1: IPv4
Sure!

Technitium is a full fledged authoritative recursive DNS resolver with adblock, whereas pihole is more focused solely on the adblock experience. Technitium supports full zone management, DNSSEC, and all DNS record types. Pihole is limited to a handful of types and can't do custom zones and the management is somewhat clunky IMO. Technitium has full DNS logging, statistics, conditional forwarding, and a full rest API for management.

I think Pihole is a great project, but Technitium caters better to power users and people that want/need more complex control over their internal DNS infrastructure (while still remaining relatively simple from a management perspective).

Simply put, Pihole is adblock with some DNS sprinkled in, Technitium is a DNS server first with adblock support. I don't think you can go wrong either way, but if you're going to need more advanced DNS capabilities at home, roll Technitium to save yourself a migration down the line.

Page 1 of 3Next →