HNHacker News
TopNewBestAskShowJobs

ruuda

2,179 karma · joined August 15, 2018

https://ruuda.nl
submissionscomments
ruuda··on Cloudflare Quick Tunnels
"Traffic rides Cloudflare's network" Oh, hello Claude.
ruuda··on Actively exploited sandbox RCE in all Chromium versions
I think my subjective feeling is in that ballpark, yes. There are of course many sites that are more like web apps that require js, but those are relatively trusted, I added exceptions for them long ago. For sites that I visit for the first time, I think more than half still work to some extent. Maybe they are slightly broken, but at least I can read the page. I’d say around 20–30% of the web even gets _better_, because you don’t get ads or cookiewalls. But then there are also many sites that just remain a blank page, not even showing a message that js is required. (And as the sibling comment points out, recently Anubis is also becoming more common; maybe in recent months it’s closer to 40–50% unusable.) When I hit that, often I am reminded that I wasn’t that interested anyway, and I close the tab. So maybe it’s more than 30% that breaks, and a more accurate statement would be “of the sites where I ended up reading a page, I had to opt in to js about 30% of the time”.
ruuda··on Actively exploited sandbox RCE in all Chromium versions
Right, Anubis is a fair point, that has for sure been rising in recent months. Often when I get an Anubis page, I am reminded that I was doomscrolling and that I did not want to see the page that badly anyway, and I close the tab.
ruuda··on Statichost.eu – European static site hosting
Because it looks like they are trying to appeal to people interested in European digital autonomy, but ISRG, the organization behind Let's Encrypt, is based in the US and has to comply with US sanctions.
ruuda··on Statichost.eu – European static site hosting
Their certificate is issued by Let's Encrypt ...
ruuda··on Actively exploited sandbox RCE in all Chromium versions
In Chromium you can turn off V8's JIT compiler for this reason. You can even opt in again for sites you trust that need the additional performance.
ruuda··on Actively exploited sandbox RCE in all Chromium versions
> Type confusion in V8

Fortunately I disabled js by default. Unfortunately, it breaks about 30% of the web. Including nvd.nist.gov, which shows a completely blank page without js enabled, even though with js it’s just a simple page with only static content.

ruuda··on Show HN: The load-bearing vocabulary of Claude
"Load-bearing" is maybe not the best example, but Claude uses these anthropomorphized decorative synonyms everywhere. Claude's structs don't have fields, they _carry_ them. Its programs don't log, they _narrate_. Its arguments are not provided on the command line, they _ride_ it. Its modules don't depend on other modules, they _sit_ on them, etc.
ruuda··on AliExpress runs silent WebAudio fingerprinting that breaks Bluetooth multipoint
About half of the time, when a website doesn't work with js disabled, I realize that I didn't want to see the page that badly anyway, and I close the tab.
ruuda··on OpenLogi
What makes you think big SaaS is not vibecoded?
ruuda··on Airbus Takes Flight from AWS
It doesn’t have to be espionage, it can be just operational risk. There is the case of Trump ordering sanctions against the International Criminal Court, and Microsoft blocking their accounts to comply (https://en.wikipedia.org/wiki/Executive_Order_14203). Or more recently, Trump deciding who gets access to Anthropic’s latest models. You can’t build a business on a vendor who may be forced to block you at any moment.
ruuda··on GTA 6 will cost $80
https://www.metaculus.com/questions/40965/ gives it 71% probability.
ruuda··on Ask HN: Due to spam on GitHub, what platforms can I move my projects?
Codeberg
ruuda··on Satellite reveals immense scale of GPS signal tampering
It works fine if you don't enable javascript.
ruuda··on Googlebook
https://goomics.net/239
ruuda··on Slowly, Then Suddenly: How Products Fail (2022)
I find this article a useful framing for understanding what is happening to GitHub right now. The original is from 2022, but this 2023 repost includes a relevant preface.
ruuda··on High Performance Git
The text reads like an LLM was involved in this.
ruuda··on Bitwarden CLI compromised in ongoing Checkmarx supply chain campaign
https://github.com/doy/rbw is a Rust alternative to the Bitwarden CLI. Although the Rust ecosystem is moving in NPM's direction (very large and very deep dependency trees), you still need to trust far fewer authors in your dependency tree than what is common for Javascript.
ruuda··on IPv6 traffic crosses the 50% mark
Finally https://www.metaculus.com/questions/9558/50-of-users-access-... can resolve!
ruuda··on Hypothesis, Antithesis, synthesis
Property-based testing is nice, but making it coverage-driven is a game changer. It will explore code paths that naive random inputs will not trigger in a thousand years. In Rust this works very well with libFuzzer and the Arbitrary crate to derive the generators.
ruuda··on Keep Android Open
I contacted the EU DMA team about my concerns and got a real reply within 24 hours. Not just an automated message, it looked like a real human read my message and wrote a reply. I'd urge other EU citizens to do the same.
ruuda··on How to choose between Hindley-Milner and bidirectional typing
It's not complex, in the sense that the rules are simple, but simple rules can still lead to complicated emergent behavior that is difficult for humans to understand, even if each of the 153 steps that the typechecker took to arrive at the result were easy to understand individually.
ruuda··on Zed editor switching graphics lib from blade to wgpu
I tried Zed for some time. Then it had a regression which broke it completely on my laptop. (Zed can't start any more, logging a PlatformNotSupported error even though earlier versions worked fine.) I carefully bisected it, and it turned out to be due to an intentional change in Blade. The issue was acknowledged, and confirmed by several other users. Then it got converted into a "discussion" because there was nothing actionable to do according to the devs. Then the discussion got closed because they are "directing all support questions to Discord going forward". Then Discord announced mandatory age verification.
ruuda··on Ask HN: Where do all the web devs talk?
Mastodon
ruuda··on 4x faster network file sync with rclone (vs rsync) (2025)
We wrote https://github.com/chorusone/fastsync for fast ad-hoc transfers over multiple TCP streams.
ruuda··on FracturedJson
Give https://rcl-lang.org/#intuitive-json-queries a try! It can fill a similar role, but the syntax is very similar to Python/TypeScript/Rust, so you don’t need an LLM to write the query for you.
ruuda··on FracturedJson
RCL (https://github.com/ruuda/rcl) pretty-prints its output by default. Pipe to `rcl e` to pretty-print RCL (which has slightly lighter key-value syntax, good if you only want to inspect it), while `rcl je` produces json output.

It doesn’t align tables like FracturedJson, but it does format values on a single line where possible. The pretty printer is based on the classic A Prettier Printer by Philip Wadler; the algorithm is quite elegant. Any value will be formatted wide if it fits the target width, otherwise tall.

ruuda··on IPv6 just turned 30 and still hasn't taken over the world
Everything I know about IPv6 comes from this one blog post: https://apenwarr.ca/log/20170810. It’s from 2017, when IPv6 adoption was 17% according to https://www.google.com/intl/en/ipv6/statistics.html; today it’s close to 50%.
ruuda··on What's New in Python 3.15
It's a Linux thing too. It bit me in particular when running a script in a container that defaulted to ascii rather than utf-8 locale.
ruuda··on What's New in Python 3.15
> Python now uses UTF-8 as the default encoding, independent of the system’s environment.

Nice, not specifying the encoding is one of the most common issues I need to point out in code reviews.

Page 1 of 13Next →