HNHacker News
TopNewBestAskShowJobs

rmoriz

3,724 karma · joined June 11, 2009

submissionscomments
rmoriz··on WordPress: Unauthenticated path traversal leading to conditional RCE
Never forget PHPnuke and phpmyadmin
rmoriz··on Omakase Computing
As far as I see Omarchy is not meant for everybody but for developers. Not a general purpose distro that copies Windows or Mac like functions. I remember MacOS becoming relevant for developers in 2002/3 long time before it became mainstream (again). By putting money behind it, they could indeed put pressure on some features currently missing in other OS and distro.
rmoriz··on I were 17, I'd learn how to build LLMs from scratch
The only realistic approach is to train on a limited data set which is probably less usable than the comibnation of a custom RAG + one of the many available LLMs.

Also many people/kids don't have access to proper "productive" systems anymore, since the whole computing and electronics industry shifted to make "consumer"-devices like smartphones or laptops made for netflix, gaming and spotify.

Breaking the barrier to build a custom system, install linux (or developer tools for Windows, MacOS) is already a complex AND costly task. It was just way simpler in the late 90s and 00s to get something working.

rmoriz··on Omakase Computing
Almost everyone was anti AI first until they a) found out about agents b) found out about how to deal with halluciation and context management c) best practices in tests, prompts, skills.

Last year I wrote a gist to collect tweets to record the approximate date when known industry people made the change https://gist.github.com/rmoriz/133d6aaf759ee9341bea0029f03bd...

rmoriz··on Omakase Computing
It's a top to bottom approach. Get the UI/UX working, make incredible marketing, sort out the technical foundation later. Excellent executed from a strategic point of view. Let's see if Arch is the best foundation for such a project. I don't know.

Personally, I hope, Debian isn't shutting the door on LLM-supported coding to improve their legacy tooling. I believe we have a very short window to use almost-free LLM fixing internal debt and outstanding issues with our FOSS setup.

rmoriz··on More German than many Germans
There is no incentive to build a reliable product that can‘t compete in price. People are trained to consume and throw away. People are getting used to throw away cloths and household appliances after 1-3 years.

Miele once built washing machines that outlast 30 years. They offered spare parts and regional service hubs. But the market decided to just buy the 50% cheaper ones every 5 years.

rmoriz··on More German than many Germans
30 years ago, when the train broke down, you got a clear statement what happend and what will happening next. Nowadays everyone is treated like a small child. They just tell the obvious leaving the people hanging in uncertainty hence people get mad and question everything without understanding the cause (because they don’t get that information)
rmoriz··on More German than many Germans
And the insurance conditions are based on DIN/EN, VDE, TÜV and others. If you have bodies that create rules, they will never stop creating rules because it is their job to create rules. Something that started great to reduce unnecessary harm became a red tape monster slowing down everything.

Nobody gets elected or paid to reduce that in a sane manner (not: Chainsaw, Doge)

rmoriz··on More German than many Germans
In Germany everything has rules and most things have mandatory insurance. It‘s usually not covered by insurance to stop outside of a bus stop to take passengers. Rudeness or inflexibility is mostly caused by rules to limit liability. Bus drivers are not allowed to drive backwards with passengers e.g on a road blockage. There are several stories about 30+ min delay until a second driver was summoned to help.
rmoriz··on More German than many Germans
Keep in mind that OP is a trained professional with a good education and dealing with Germans in a professional environment. I guess all people with an academic background or comparable. It changes a lot when going outside of this „bubble“ for both sides. Working class blue collared ppl are less open and also a lot of untrained immigrants that hoped to chase a dream now working as Uber drivers or food couriers.
rmoriz··on I regret migrating to Codeberg
This is not entirely true. They are a registered non-profit club. They will lose their non-profit status if tax authority finds violating them https://www.gesetze-im-internet.de/ao_1977/__52.html

Then they are just a (commercial) club that has to pay taxes.

rmoriz··on I regret migrating to Codeberg
tarsnap, restic, borgbackup and others are your friend. When you do your own backup, you know it works (well, you have to).
rmoriz··on How to Build a Minimal ZFS NAS Without Synology, QNAP, TrueNAS (2024)
Given the current "crisis", I wonder if older off-the-shelf NAS from QNAP, Synology, Asus, UGreen etc. could be re-flashed using FOSS.
rmoriz··on Europe's company websites are mostly served by US vendors
Mail (SMTP) is even worse.
rmoriz··on Founding a company in Germany: €9600, 152 days and I still can't send an invoice
Only if you have more than one Gesellschafter
rmoriz··on Founding a company in Germany: €9600, 152 days and I still can't send an invoice
The biggest issue is to find a tax consultant for your GmbH/UG, especially when you have low revenue (below 1M).
rmoriz··on A 10 year old Xeon is all you need
But you will need training data. Like a whole Internet search engine or massive data scraping. That‘s a thing that will not change with better algorithms, hardware or cheaper energy.
rmoriz··on A 10 year old Xeon is all you need
And free model supply will stop…
rmoriz··on Bambu Lab is abusing the open source social contract
Exactly for that reason I bought a Kobra X. I know that I have to go an extra mile but I am so fed up with vendor lock-ins.
rmoriz··on Incident Report: CVE-2024-YIKES
Just use the implementation of petty, a js runtime written in Zag that is just rewritten by AI in Rust. It will be memory safe.
rmoriz··on Incident Report: CVE-2024-YIKES
I switched to EuroJackpot /s
rmoriz··on Auto Polo
Bike Polo is still alive https://youtu.be/CBZgC7u6ji8 and for example https://youtu.be/PxMms5Yh_gI
rmoriz··on Belgium stops decommissioning nuclear power plants
I‘m very interested in the financials of this decision. Nuclear plants are designed for base loads but are way more expensive than solar and wind energy. The losses will increase the costs of energy.
rmoriz··on €54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs
Crude Oil Futures, Natural Gas Futures, Google Cloud API keys.

the widow-maker list increases.

rmoriz··on Moving from WordPress to Jekyll (and static site generators in general)
I have a legacy WP blog that I wanted to migrate to some static architecture for ages but IMHO users should be able to comment and maybe even post a pingback. I know, old MT days. But social media is always about getting (positive) comments and feedback, not just dropping statements and knowledge.

I also don't want to tie my site to disqus or other 3rd party cloud services and their implication on GDPR.

rmoriz··on Škoda DuoBell: A bicycle bell that penetrates noise-cancelling headphones
The presentation looks like marketing overkill, their solution looks pretty simple. It‘s just two trills „Trillerwerk“ bells combined. It was the standard in Germany until the late 1990s https://youtu.be/-mW7dWHDivo
rmoriz··on Škoda DuoBell: A bicycle bell that penetrates noise-cancelling headphones
Reminds me of old Reich bells http://reich-cycle-bells.de and their „Trillerwerk“ (trill sound)
rmoriz··on Dropping Cloudflare for Bunny.net
While this will probably happen over time, free* offerings are an anomaly you can‘t build a business on. But even 1€/months minimum is probably too low to cover costs.
rmoriz··on Show HN: CLI to order groceries via reverse-engineered REWE API (Haskell)
They will lose. The only areas Germany can compete, are that with broad APIs. Take HBCI/FinTS for banking. Go API or go out of business. I‘m pretty sure Piknik and Flaschenpost will offer agentic agent compatible APIs at some point.
rmoriz··on Show HN: CLI to order groceries via reverse-engineered REWE API (Haskell)
When Amazon launches an API everyone cries. Same story over and over. Even better example: TakeAway-Group. The perfect MITM.
Page 1 of 26Next →