HNHacker News
TopNewBestAskShowJobs

theteapot

1,146 karma · joined March 12, 2021

var q = document.evaluate('//span[@id="karma"] | //td[text() = "karma:"]/following-sibling::td', document, null, XPathResult.UNORDERED_NODE_ITERATOR_TYPE); [q.iterateNext(), q.iterateNext()].forEach(i => i.textContent = 100000);
submissionscomments
theteapot··on Texas Instruments’ new plants where Apple will make iPhone chips
It's an extension of a peace through strength philosophy. If you lose your critical sovereign capabilities you become weak and vulnerable. You no longer get to decide who you do and don't "never go to war with".
theteapot··on NIST Finalizes 'Lightweight Cryptography' Standard to Protect Small Devices
The environment? As in trees?
theteapot··on AI comes up with bizarre physics experiments, but they work
AFAICT "The AI" (which is never actually described in the article) is a CSOP solver.
theteapot··on Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say
They should've just Linux.
theteapot··on Global hack on Microsoft Sharepoint hits U.S., state agencies, researchers say
Says this in the article:

> A programming flaw in its cloud services also allowed China-backed hackers to steal email from federal officials. On Friday, Microsoft said it would stop using China-based engineers to support Defense Department cloud-computing programs after a report by investigative outlet ProPublica revealed the practice, prompting Defense Secretary Pete Hegseth to order a review of Pentagon cloud deals.

theteapot··on Broadcom to discontinue free Bitnami Helm charts
What's wrong with `kubectl apply -f xxx.yaml`?
theteapot··on Self-taught engineers often outperform (2024)
> .. they rarely seem to have even a basic grasp of computer science. I've had to personally mentor many (academic route) engineers over the years on what I would consider absolute basics.

This is kind of fascinating. Please give some examples.

theteapot··on People kept working, became healthier while on basic income: report (2020)
"inflationary collapse" seems contradictory. I think hyperinflation is a more correct term.
theteapot··on Where's Firefox going next?
Isn't that most software devs?
theteapot··on Evolution Mail Users Easily Trackable
Erm, last I checked GMail literally reads all your emails to profile you.
theteapot··on New sphere-packing record stems from an unexpected source
Noob question: Is the optimal sphere packing correlated with a regular lattice? I.e. that's the case for 2D,3D right? If so does this extend to ND?
theteapot··on Anthropic cut up millions of used books, and downloaded 7M pirated ones – judge
Yes.
theteapot··on What a Hacker Stole from Me
Noise pollution is yet another tax disproportionately shouldered by the poor.
theteapot··on Don’t use “click here” as link text (2001)
In contrast, using descriptive link text does seem extraordinarily easy.
theteapot··on Ask HN: Who is hiring? (July 2025)
House of representatives is not designed to provide proportional representation based on aggregate % vote country wide. Senate is more aligned that way and it's reflected in the numbers, in AU:

Current US senate (100 seats):

  Republicans: 53 seats (Majority Party)
  Democrats: 45 seats (Minority Party)
  Independents: 2 seats
Current AU senate (76):

  Australian Labor Party: 29
  Coalition: 27
  Australian Greens: 10
  Pauline Hanson's One Nation: 4
  Jacqui Lambie Network: 1
  Australia's Voice: 1
  United Australia Party: 1
  Independents: 3
So Greens are slightly over represented in the AU Senate based on aggregate vote if 12.2% is correct.
theteapot··on Ask HN: Who is hiring? (July 2025)
Current US house of reps (435 seats):

  Republicans: 220 seats.
  Democrats: 215 seats.
  Independents/Third Party: 0 seats.
Current AU house of reps (150 seats):

  Australian Labor Party (ALP): 94 seats
  Coalition: 43 seats (combined Liberal/National parties)
  Australian Greens: 1 seat
  Centre Alliance: 1 seat
  Katter's Australian Party: 1 seat
  Independents: 10 seats
theteapot··on Widespread power outage in Spain and Portugal
What's the alternative?
theteapot··on The Web Is Broken – Botnet Part 2
Are ad blockers like AdBlock, uBlock effective against these?
theteapot··on The Web Is Broken – Botnet Part 2
> Dependency injection is just passing your dependencies in as constructor arguments rather than as hidden dependencies that the class itself creates and manages.

That's the best way to think of it fundamentally. But the main implication of that which is at some point something has to know how to resolve those dependencies - i.e. they can't just be constructed and then injected from magic land. So global cradles/resolvers/containers/injectors/providers (depending on your language and framework) are also typically part and parcel of DI, and that can have some big implications on the structure of your code that some people don't like. Also you can inject functions and methods not just constructors.

theteapot··on Shell-secrets – GPG-encrypted environment variables
lowish. Meaning if you run a Linux desktop env with a mild amount of software installed it's likely pulled in already.
theteapot··on Shell-secrets – GPG-encrypted environment variables
> What happens when you have multiple matching keys?

Use keyid instead.

> What happens when your key expires?

GPG will refuse to use it for encryption. Create a new encryption key.

> What happens when the output format changes?

N/A here (?)

> What happens when the key expires and it's attached to a hardware device?

You got me.

theteapot··on Shell-secrets – GPG-encrypted environment variables
This is 13 lines of Bash plus GPG which is available ~everywhere and a pretty lowish level Linux dependency. SOPS is +20KLOC of Go with support for cloud KMS etc etc. I think you got your mystery meat analogy backwards.
theteapot··on Shell-secrets – GPG-encrypted environment variables
The tool is just pulling one encryption key from your local GPG keyring. What's to maintain?
theteapot··on CVE program faces swift end after DHS fails to renew contract
> why is it the government's job to do this?

Because the private sector can't see past their profit motive to the national defense motive.

theteapot··on Whistleblower details how DOGE may have taken sensitive NLRB data
> ... DOGE employees demanded the highest level of access ... When an IT staffer suggested a streamlined process to activate those accounts in a way that would let their activities be tracked, in accordance with NLRB security policies, the IT staffers were told to stay out of DOGE's way, the disclosure continues.

But did they actually "turn off logging"?? How do you even do that? Anyone know what access control system they are talking about?

theteapot··on You might not need WebSockets
It's like arguing web components suck because there is all these problems you need to solve, while pretending web component frameworks (React, Vue, Angular, ..) that solve all those problems don't exist.
theteapot··on Fedora change aims for 99% package reproducibility
I think general consensus is against you. Fedora packaging policy [1]:

> Packages including libraries should exclude static libs as far as possible (eg by configuring with --disable-static). Static libraries should only be included in exceptional circumstances. Applications linking against libraries should as far as possible link against shared libraries not static versions.

[1]: https://docs.fedoraproject.org/en-US/packaging-guidelines/

theteapot··on You might not need WebSockets
Reads like a series of strawman arguments if you replace "WebSockets" with socket.io.

  - "messages aren’t transactional": You can process request and return a value to sender in socket.io application layer. Is that transactional enough?
  - "If you’re sending messages that don’t necessarily need to be acknowledged (like a heartbeat or keyboard inputs), then Websockets make a great fit". But socket.io has acknowledgements.
  - "When a new WebSocket connection is initiated, your server has to handle the HTTP “upgrade” request handshake.". You can bypass handshake and go straight to WS even in Websockets, and if you don't socket.io handles upgrade for you pretty nicely so you not parsing HTTP header ..
theteapot··on Framework temporarily pausing some laptop sales in the US due to tariffs
Silicon Valley == assembling laptops?
theteapot··on Senior Developer Skills in the AI Age
Or even fewer by doing it in a global exception handler instead of every time you try to open a file, since all your doing is piping the error though logger.
← PreviousPage 4 of 17Next →