HNHacker News
TopNewBestAskShowJobs

rietta

2,695 karma · joined October 29, 2012

Building and breaking applications for 26+ years. MS in Cyber Security (formerly InfoSec, GaTech). Focused on practical security controls to prevent breaches. Lifetime OWASP.

Website: https://rietta.com/ Blog: https://rietta.com/blog/

[ my public key: https://keybase.io/rietta; my proof: https://keybase.io/rietta/sigs/uk2sEk4_TfZeNJ8ZwJN7VF1Ub-aLW_l8clAq-EbQ578 ]

submissionscomments
rietta··on LinkedIn Larpmaxxing
Congratulations!

Yeah, in part my issue is recruiters are completely unaligned with my interests. Anytime I have ever replied that I am available for a corp-to-corp consulting contract the contact dies. They are only about placing people in full time employment, which has been an anathema to me because to do that I would have to turn my back on all my current clients and leave them high and dry. Growing the business has always been the better path for me.

rietta··on LinkedIn Larpmaxxing
I have not run a controlled study, but I have shared topics here on this website that made it to the front page quickly and had a lively comment section and on LinkedIn the same was had very limited impression numbers. I did an experiment with an ATLRUG announcement where I did not include the URL and the numbers were slightly higher than one that did, but still not great. I have connections on the platform with relevant interests but its not showing it to them.

One thing that has always hurt me is I have never once in my career been on the traditional job market. I was self employed as a teenager and have always just kept growing and pivoting and growing. I have never sought or taken a job via the normal market. LinkedIn has always been a bit of a odd place for that mode of work.

rietta··on LinkedIn Larpmaxxing
Oh! Does that play on words bring back memories. Along with Pen Island!
rietta··on LinkedIn Larpmaxxing
Slightly off topic. I've had exactly one consulting engagement come from LinkedIn, back in 2013. Someone met with a VC, was told they needed a Ruby on Rails developer, found me, and it was off to the races. That was it. No lead since, in any format. I paid for Premium for a while and eventually stopped.

I have connections, and friends occasionally like a comment when I share something. I'm convinced LinkedIn demotes anything that links off-platform, even in the comments. That makes it really hard to share a good blog post.

Honestly, I get more engagement on Facebook. My mom and in-person friends find what I do slightly interesting, at least when the algorithm decides to show it. Same story there, though. Links to a blog get buried compared to native content.

rietta··on ASML says it sold 'absolutely nothing' in Europe in 2026
I had this exact conversation with a barber on the UPC campus in Barcelona in 2005 (if my memory is right). My reply to his assertion was to ask if he ever considered how large US states are compared to EU countries. People do travel within the USA alone and with their families all the time. Just this week mine crossed three states for a beach vacation and the returned home. International travel is not unheard of but not the same distance scale. If I recall he said something like he had not thought of it that way. I do not recall if we were talking in Spanish or English anymore after 21 years.
rietta··on Banks and Credit Unions to Team Up Against Apple Pay Fees
We used to call those checks!
rietta··on I don't like passkeys
I’m still terrified how normal people are going to navigate being locked out of their email account because their device that was their passkey is no longer accessible and there’s no backup solution to restore access.

I’ve similar issues even in a lower level with LastPass where it won’t even let you enter your two factor if it doesn’t recognize where you’re coming from but then you have to be connected to your email, but your email password is stored in LastPass. There is a real possibility of being locked out at all devices at the same time and not being able to get in to the first one.

rietta··on Microsoft exec called AI scraping 'the largest theft of labor in human history'
I remember when open source software, and Linux in particular, was the threat to the world according to Microsoft execs.
rietta··on Leaving Linux
That does seem strange. So he has been experimenting seeking something. I have kept the same LTS installations sometimes until the bitter end of the support cycle.
rietta··on Tell HN: Stop Saying "Gates"
What should we call them then? I certainly used the term code gate to refer to a code review process prior to the mainstream use of LLMs.
rietta··on Alternatives to MinIO for single-node local S3
Neat!

I had switched some projects to SeaweedFS's Docker image. It worked well. This is good to know there is a successor open source project that would require no code changes to use. Will evaluate.

rietta··on OpenAI bots knew about the RubyGems caching vulnerability
The site is safe. It has been a trademark of Aaron Patterson a core Ruby on Rails contributor for decades.
rietta··on RubyGems Open Source Supply Chain Security and OpenAI
Unrelated to the content of this post, I fixed the website header to be much smaller and unobtrusive while reading. Tested on my iPhone and in the Firefox responsive simulator as promised in the comments there.
rietta··on RubyGems Open Source Supply Chain Security and OpenAI
I had not even seen Aaron's post. Thank you for sharing that link.
rietta··on What algorithm did Windows XP use to choose your initial user picture?
Isn't that the truth! I remember it very, very well. Vividly even.
rietta··on Shopify moves back to Native from React Native
The promise of React Native was easing development burden from the web app to the native app. It makes sense if they are just using coding agents to cut out the framework and just go native.

That was my thought when I saw the headline and then reading the article confirms this is the inflection point per their own words. Very interesting.

rietta··on Government Rails Site Hit Hours After CVE Patch
I didn't go with the scroll up but did drastically shrink the header and make a hamburger menu. I still like having it sticky because many a time I have been on a page and forgot who I was reading. Hopefully what is up now is a good tradeoff and provides good experience for a future reader.

Appreciate you.

rietta··on Government Rails Site Hit Hours After CVE Patch
HN has moved on, but I wanted to come back again and say thank you to you and those who replied below. I just pushed an update to the website that makes the header much more mobile device friendly.
rietta··on What algorithm did Windows XP use to choose your initial user picture?
I love the understated "some time ago" linking to a 2004 blog post. Raymond has been at this a long time :-)
rietta··on Researchers Spot Fake Ancient Pottery Using the Earth's Magnetic Field
Fascinating! I wonder if cloth artifacts, such as the Shroud of Turin, would also exhibit similar signatures. Though I have read some extremely compelling multi-disciplinary evidence exist to its authenticity to 1st century Judea, not a forgery.
rietta··on Ask HN: 3.5 inch diskette read errors, would a period correct drive do better?
I have other disks, including personal files, that are not mass market. Including some very fun early "Rietta Solutions" programs by my learning days. I was very early mimicking the look and feel of commercial shareware at the time, including printing diskette labels with version numbers and copyright dates with an inkjet.
rietta··on Ask HN: 3.5 inch diskette read errors, would a period correct drive do better?
The disk appears visually in good shape. It has been stored all these years in the original box in an air conditioned basement. I am not seeing any white material or other obvious corrosion. However, I can confirm that my first attempt to read the imaged data failed. I did not record the output from ddrescue but it was something like 34% on the 1.4 MB. Got a corrupted screen when trying to run the installer in a Windows 98 SE QEMU vm. I have not dug into it very deeply.
rietta··on Government Rails Site Hit Hours After CVE Patch
I wanted to say I really, really appreciate your comment here John. libvips is a very useful tool set and maintaining it is certainly a bigger public challenge than I ever took on. I just wish the Ruby on Rails community had hardened their use of it sooner. Again, thank you.
rietta··on LibreOffice breaks download records after declaring it has no AI features
Normalize into flat xml that I could then parse in Nokogiri.

Edit for clarity: I am a Rubyist at heart so I reach for Ruby for almost all of my automation, ML, and even now AI stuff. Fro a very long time, I have been able to use CLI LibreOffice to do amazing things. It can read everything, even obscure formats by today's standards, going back into the 1990s. And then once in OpenOffice XML you have one target to parse in your scripting language of choice to do document analysis, data loss prevention detection, and more. All with a clean open source license with no server usage restrictions, unlike MS Office.

rietta··on LibreOffice breaks download records after declaring it has no AI features
This is awesome! I have used LibreOffice (and Open Office) extensively for decades now. It is my real office suite I use for real work and real business accounting tasks. Yes, I am very well aware that Calc is different than Excel but it can get nearly all the same tasks done as long as you are not tied deep into a corporate environment passing Excel-specific files around. I have also made great business uses of it in Docker too, generating perfect PDFS from templates, and normalizing document formats for analysis. I donate a modest $19/month personally to the foundation, much rather pay them than Microsoft!
rietta··on Ask HN: 3.5 inch diskette read errors, would a period correct drive do better?
Neat! Thank you for the info on that one. Bookmarked!

Before I spend well over $100 importing that device, I previously was thinking of brining up a 2001 era motherboard with a USB stack and can natively host the drives, but the 486 that has sat unused may be a solid option. I presumably can find a way to transfer data to a modern system over serial cable or something.

rietta··on M-DISC – DVD/Blu-ray compatible discs that may last up to 1000 years
I am working an a fictional world set 1800 years in the future. A whole subplot is the digital resurrection of 1990s Microsoft Encarta encylopedia which was the first time in a millennia they had a glimpse into this time beyond fragmentary evidence from printed materials. In the timeline of the novel, the disks had been discovered 300 years prior but no one knew how to read them and the general degradation of the substrates. Then 150 years before a graduate student figured out how to use imaging from multiple different disks and piece together to get an entire rendering of the bit pattern. But it took only at the time of the narration that the breakthrough was made on how to decode and render the data in part because of "digital Rossetta stone discovery" found at a dig in North America encrusted in volcanic obsidian glass. Anyway, the professor protagonist ends up traveling in a post oil world by sail to Argentina as an invited guest in a highly interest lecture scene reminiscent of the Dead Sea scrolls discovery.

There is a lot of work to do, but I am actually intellectually interested in realistically understanding how the far future can deal with interpreting the digital dark ages that we currently live in now which are completely forgotten because the administrators stopped copying data one day.

rietta··on Actively exploited sandbox RCE in all Chromium versions
Another type confusion vulnerability! Interesting.
rietta··on Government Rails Site Hit Hours After CVE Patch
Thank you. I will work on that.
rietta··on Government Rails Site Hit Hours After CVE Patch
Thanks for the heads up. The navigation header does not collapse as I never liked hamburger menus but it should be more than two lines. Works more than that on my iPhone 16. What size is yours? I will pull it up in the Firefox simulator next week and try to make it better.

We recently updated the design. This is a very old site so it has some quirks in the design for sure.

Page 1 of 24Next →