HNHacker News
TopNewBestAskShowJobs

taneliv

484 karma · joined September 26, 2012

submissionscomments
taneliv··on The Tao of Backup
That depends on your threat model. If the attacker can swap the Blu-ray disc to a similar looking one, but with content they control, that absolute guarantee becomes moot.
taneliv··on Babylonian Lamb Stew with Beets (1750–1730 BCE)
Not exactly a Chinese dialect, but Vietnamese calls tomatoes "cà chua": https://en.wiktionary.org/wiki/c%C3%A0_chua .
taneliv··on Os8088.com: IBM XT OS now has a Browser, CP/M 2.2 with Z80 core and MS Word 1.1a
So the loop unrolling must have increased the resident code size quite considerably, on the order of two to three hundred kilobytes?
taneliv··on Turn your singing voice into printable notes (in the browser)
Try ~crappy~ regular headset microphone and/or whistling for some basic edge cases :D

It worked quite well to start with, but then after a few bars deteriorated to mostly outputting pauses, and a stream of short notes (without pauses) when singing legato. Could be due to the aforementioned microphone, or is there some internal state that does not get cleared up when one clears up the score? I tried twiddling some of the variables that seemed related, but no noticeable improvement.

taneliv··on Systemd-Bsod.service
The QR code it shows is quite fancy, better user experience than taking a photo and trying to OCR it ... especially if the beginning of the oops has already disappeared and no tty scrolling is available (any more).

Also gave me a good laughter, since I didn't know this existed and that it was even enabled on my system.

taneliv··on GitHub bans security researcher who posted zero-day Windows exploits
I should have known this exists, yet I didn't. Thanks for pointing it out.

This seems to be a direct link to a web form to report (in English): https://eservices.traficom.fi/ContactForms/form/haavoittuvuu...

In particular, note that all the fields asking for personal information disappear if you select "Yes" in "I am submitting an anonymous tip" field.

taneliv··on Leaving the Physical World
1992 and 1993 are argued in https://news.ycombinator.com/item?id=48136937.

Article mentions:

> That this approach works was demonstrated during last summer's coup in the Soviet Union.

I don't think it can mean anything else than the coup attempt in August 1991.

taneliv··on [dead]
Isn't it a hub for human trafficking, in particular for pornography and other exploitation/abuse? I have no data on this, only anecdotal evidence from people who have done social work there. If true, it's perhaps less surprising to see also related technology originating from there as well.
taneliv··on I am definitely missing the pre-AI writing era
No way, bro! I'm no longer an editor, though.
taneliv··on A retro terminal music player inspired by Winamp
Thanks for pointing this out, to me it seems quite a good response.

I wouldn't mind opt-in telemetry, but possibly the participation rate would be too low to make use of it.

taneliv··on Show HN: Pgit – A Git-like CLI backed by PostgreSQL
Ok, cheers! I occasionally need to investigate older releases and compare to out-of-tree things, and was thinking pgit might be of help there. I put up a reminder for myself to check pgit again next time I need to do that sort of stuff!
taneliv··on Show HN: Pgit – A Git-like CLI backed by PostgreSQL
Hey, I tried to import Linux kernel master branch from https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin... to pgit. My laptop is not the beefiest (some Ryzen 7 with 16G RAM and about 300G disk free), so that did not quite work. It died when trying to rebuild indexes (after bulk import), due to Postgres running out of disk space.

I guess this could have been expected, but it didn't quite occur to me since plain git has had no issues with that repository. Either way, the import process was quite slow: the failure happened after 3h30m. I'm not sure if it would be possible to speed it up, or estimate resource consumption ahead of time and warn the user? The laptop also had gone almost 2G into swap at some point, so there was quite a bit of memory pressure as well, but I don't quite know at which point this happened.

taneliv··on Jepsen: MariaDB Galera Cluster 12.1.2
While Jepsen (and this article) is focused on behavior under node failure and network partitions, this caught my eye:

> It also exhibits Stale Read, Lost Update, and other forms of G-single in healthy clusters

This looks like quite a fundamental issue.

taneliv··on Hyperlinks in terminal emulators
Disaster is perhaps an exaggeration, but it does seem like this would be another environment, where users need to be aware of a different set of safety and usability measures than in the browser. Surely we will see interesting attempts at exploiting it.

Overall, I think the idea is super interesting, especially the ability to encode in the future other context than URLs with it. Whether actually useful, or just gimmicky, remains to be seen.

taneliv··on Hyperlinks in terminal emulators
Trivially, `less` to see README.md of a malicious/compromised open source project. There are perhaps more plausible avenues of exploiting, but this one popped to mind immediately.
taneliv··on 36yo: Career at home vs. Simple life abroad?
Do your financial calculations take into account possible differences between Turkish and Portuguese practicalities? For example: is 1100 euro gross income or after taxes? What kind of unavoidable expenses you will have on top of rent: electricity, water, transportation, Internet/mobile, groceries, insurance and so on?

From my Nordic perspective, your budget will not leave much at all on the table at the end of the month. Groceries are probably more expensive here than in Portugal, but I still get a feeling that making the ends meet could be a real struggle. This kind of setup would be much more (financially) reasonable if you can live together with someone who is also working and then split the rent.

I suppose you took all of this into consideration already. Likewise, if you haven't already, it could be useful to search for some expat forums and ask people's opinions on anything that could be surprising in everyday life.

Either way you decide, iyi şanslar!

taneliv··on 36yo: Career at home vs. Simple life abroad?
Do you speak Portuguese? Are you interested in learning it? I don't know how big a role it plays in making connections and friends in Portugal, and how important those are to you. It may be also more difficult to find English (or Turkish!) speakers in smaller towns compared to big cities.

How stable is the remote role? Are you more likely to be laid off (or the company to cease operations) than turmoil in Turkey? Obviously this is also very subjective speculation, but since you don't mention it, how does it figure into your plans? How well will you be able to find other similar work in Portugal? (Or elsewhere, I would assume your relocation will offer freedom of employment across EU.)

taneliv··on Offpunk 3.0
As a long time Emacs user, I never even tried Gnus, or used it as a calendar (except for some time tracking in org-mode). How would calendar invites work there? How well does it support shared calendars to determine busy/free information of others?
taneliv··on France dumps Zoom and Teams as Europe seeks digital autonomy from the US
It's unfortunate that g.it isn't available.
taneliv··on Article by article, how Big Tech shaped the EU's roll-back of digital rights
Oh, I see. I'm in a similar position, but would rather not see things escalate at all. Even so, it is difficult to see how the relations between Europe and the US would return to what they have been for a long time. But a real conflict would be an entirely different scenario, with very unpredictable, yet possibly world changing consequences.

We know that appeasement has never worked. Hence we must be prepared. But to wish for this sort of escalation is a step too much for me. I hope that people in positions of power have cool heads. But also that they remember history.

(I see I was downvoted quite a bit, not sure why, though.)

taneliv··on Article by article, how Big Tech shaped the EU's roll-back of digital rights
I suppose you're not one of the conscripted (or even professional) soldiers that would be called to duty to protect the region in case of an armed conflict?
taneliv··on Canada slashes 100% tariffs on Chinese EVs to 6%
I feel like that is not specific to emerging economies.
taneliv··on Danish Armed Forces expand their presence and continue exercises in Greenland
Nice try, Mr. Spy!

If I were to guess, probably all of the months (four to twelve) in units that are in the Arctic, and (very close to) zero months in other units. I also don't know how well military experience from other Danish regions translates to the Arctic. Probably quite well, I'd imagine.

taneliv··on Danish Armed Forces expand their presence and continue exercises in Greenland
As a European (but not Danish), I feel like https://en.wikipedia.org/wiki/Conscription_in_Denmark is quite proactive.
taneliv··on Hacking a Casio F-91W digital watch (2023)
Yes, at least according to the information I have, the card issuer sets the limit. It's not clear to me if the chip actually has to be physically slotted in for reading it, though. Can the confirm-with-pin step be done without contact, using NFC feature?
taneliv··on Bluetooth Headphone Jacking: A Key to Your Phone [video]
From a security point of view music listening is quite marginal, I think. The vulnerable headsets make conversations trivial to eavesdrop.

Average communication input is in a noisy environment (colleagues, family, wind, equipment, car), and is compressed both in the dynamic range and bitrate sense before sending out. The transport medium then provides latency and packet loss. The fidelity of the audio equipment on the receiving side plays very little role. I imagine even audiophiles quite readily use even below mid-range wireless headsets for conversations, just because they are more convenient.

In other words, I don't take calls on my wired AKG headphones, even though my phone has a 3.5mm jack. I'm particularly fond of my €30 in-ear BT headset that provides good enough input and output even when I'm biking. I can't be bothered to check if the model is on the vulnerable devices list, the phone company / Meta / Alphabet / some governments and so on can surveil my communications anyway. Adding a random passer-by to the mix does not meaningfully increase the attack surface. Plus they might get to listen to awesome music, if I'm not on a call.

taneliv··on Getting bitten by Intel's poor naming schemes
Protip, if you have access to the computer: `lsb_release -a` should list both release and codename. This command is not specific to Ubuntu.

Finding the latest release and codename is indeed a research task. I use Wikipedia[1] for that, but I feel like this should be more readily available from the system itself. Perhaps it is, and I just don't know how?

[1] https://en.wikipedia.org/wiki/Ubuntu#Releases

taneliv··on The state of the kernel Rust experiment
> was it a security vulnerability? I'm pretty sure it was "just" a crash.

It's a race condition resulting in memory corruption.[1][2] That corruption is shown to result in a crash. I don't think the implication is that it can result only in crashes, but this is not mentioned in the CVE.

Whether it is a vulnerability that an attacker can crash a system depends on your security model, I guess. In general it is not expected to happen and it stops other software from running, and can be controlled by entities or software who should not have that level of control, so it's considered a vulnerability.

[1] https://www.cve.org/CVERecord/?id=CVE-2025-68260 [2] https://lore.kernel.org/linux-cve-announce/2025121614-CVE-20...

taneliv··on Thomas Piketty: 'The reality is the US is losing control of the world'
Hasn't this been the Russian agenda for decades? I don't think it's a secret, or a fringe theory. They have worked on it long term, and seemingly finding success now.

I don't think China is against this change, but their agenda seems to be more focused on international trade and internal growth, rather than specific strategy against the US.

The EU is definitely not benefiting from it in the short term. While some argue it needs this change in the long term, it is difficult to imagine that the EU wants it to happen so arbitrarily and quickly.

Those holding any meaningful power in the US are either benefiting from this change, at least in the short term or personally, or oblivious to it, possibly also due to influence from the agents of change.

It's an opportunity for other states to gain influence. And in particular for Russia to advance their geopolitical ambitions, since this is from their playbook.

It would be in the interests of the United States to alter the course, and regain the influence already lost. The leaders seem to have chosen to ignore her interests, though.

taneliv··on RAM is so expensive, Samsung won't even sell it to Samsung
I believe you, but your benchmark is not very useful. I get this on two 5400rpm 3T HDDs in a mirror:

    $ time du -sh .
    935G    .
                                                                                                                          
    real    0m1.154s
Simply because there's less than 20 directories and the files are large.
Page 1 of 11Next →