HNHacker News
TopNewBestAskShowJobs

wepple

3,232 karma · joined May 8, 2013

Security engineer. Strong opinions loosely held.
submissionscomments
wepple··on RCE Vulnerability in React and Next.js
Care to elaborate on what it is like, then?
wepple··on Cloudflare Global Network experiencing issues
There are usually very comprehensive post mortems for these events, and none have suggested that at all
wepple··on Coding with LLMs in the summer of 2025 – an update
Anyone can switch from Claude to llama?
wepple··on White House Prepares Executive Order Targeting 'Woke AI'
At some point (possibly already?), having no federal contracts will be a massive competitive advantage.
wepple··on Code execution through email: How I used Claude to hack itself
I’d argue that some company blogs which ultimately are ads, are better than this one.

If I read adobes blog about their new updated thing, I know what I’m in for.

This type of blog post poses as interesting insight, but it’s just clickbait for “… which is why we are building …” which is disingenuous

wepple··on Investors bought 27% of US homes in Q1, as traditional buyers struggle to afford
My understanding of rental properties is that you want to optimize for low costs and low maintenance, low taxes, and maximum rental yield. Those are absolutely not the things I look for in a permanent home. They might happen accidentally, but generally not.
wepple··on Investors bought 27% of US homes in Q1, as traditional buyers struggle to afford
That’s really interesting, thanks for the detailed response.

Honestly makes me wish I’d had better advice when we traded up. And I also ignored the “you’re keeping the old house right?” from a few relatively wise friends. Should’ve asked follow-up questions.

wepple··on Investors bought 27% of US homes in Q1, as traditional buyers struggle to afford
Damn. That makes a lot of sense. We sold our place that was on 2.75% and bought at 7. Ouch.
wepple··on Interview with Google's Android leader Sameer Samat
I never interpreted it as that; interesting way to look at it.

I think it did a good job of setting expectations. Most people would be (and, initially very much were) disappointed to find out the OS was basically just a web browser. At least the name helped make that clear.

wepple··on Investors bought 27% of US homes in Q1, as traditional buyers struggle to afford
> In my social circle, if you are going to buy a new house, you are doing everything you can to keep your current house while purchasing the second. It is the clearest path to retirement from traditional 40hr/week employment for the people around me.

That’s fascinating to me. Generally, the homes people buy to live in aren’t optimal investment properties. Why not sell and buy something optimized for return and growth?

wepple··on Ask HN: How do I give back to people helped me when I was young and had nothing?
I think folks are maybe saying that beyond a “thanks, what you did was really meaningful to me”, there’s often not much else. People who selflessly give are stoked to know you’ve amplified the giving and passed it on, more than any kind of paying it back.
wepple··on Marines being mobilized in response to LA protests
Sure, but this is HN. The level of critical thinking is far higher IMO.

I personally believe that especially on a forum such as this, it’s fine to expose the administrations claims to daylight and let them be examined and criticized and even mocked.

wepple··on Marines being mobilized in response to LA protests
As someone who knows absolutely nothing about what’s happening in LA, it is actually useful to hear what the govt is claiming as a justification, then the reader can judge how valid it is.
wepple··on Autonomous drone defeats human champions in racing first
> The spec DCL drone isn't very capable compared to the more open-specification drones in racing leagues like MultiGP

Yeah, I’m sure this is a great milestone but it isn’t notable until AI is beating MCK[1] who would be the “Lee Sodol of FPV”

[1] https://youtu.be/fmc1URVdyUs?si=jPPx5sHjU_ZDOghF

wepple··on The unreasonable effectiveness of an LLM agent loop with tool use
Ah, it’s Thorsten Ball!

I thoroughly enjoyed his “writing an interpreter”. I guess I’m going to build an agent now.

wepple··on Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
That’s a nice thought, but naive.

What about, for example, a higher-tier support person performing QA over someone else’s work? What about DFIR teams doing research on potential abuse? Etc etc.

wepple··on Coinbase says hackers bribed staff to steal customer data, demanding $20M ransom
> better training and more monitoring.

That’s very load-bearing. It won’t help.

The CS reps are based in a LCOL country so the opportunity for theft is simply incredibly lucrative.

What is really needed, is customer-in-the-loop for access to their data. The problem is, not all accesses would make sense. Doing analytics over the data of the top 1% of customers, for example, requires some level of access, but would freak out those customers if they had to approve it.

wepple··on GM's new turbo engine rewrites the rules of torque control-and locks out tuners
Maybe? I can see what you’re saying, but the real world can move as slow as sludge at times. These aren’t smartphones that are relatively easily produced, shipped, and purchased by users.

Second order effects like load on an aging power grid could easily cause speed bumps.

I hope you’re right, but I don’t know I could bet on it

wepple··on Show HN: Undetectag, track stolen items with AirTag
Problems: if the thief steals your item while the AirTag is on, they can find and disable it.

Have you experimented with a setup (more complicated to package) where you have two AirTags and alternately power one at a time? Could that bypass apples detection whilst also broadcasting location?

Edit: at sufficiently small time durations to run under apples detection radar, but for long enough to be picked up as a location

I don’t know how Apple detects the tracking; this would easily be solved by them.

wepple··on GM's new turbo engine rewrites the rules of torque control-and locks out tuners
I’m optimistic and hopeful about electrification, but gas cars are simply not going anywhere soon.

Increasing their efficiency might not be the ultimate endgame, but it sure is a positive increment.

wepple··on Flattening Rust’s learning curve
The concept of being able to reference a raw memory address and then access the data at that location directly feels pretty basic computer science.

Perhaps you do software engineering in a given language/framework?

A clutch is fundamental to automotive engineering even if you don’t use one daily.

wepple··on Starlink User Terminal Teardown
Step 1 is things like encrypted firmware, so I’d suspect SpaceX does nothing or is reactive - they had debug pins until someone published attacks utilizing them.
wepple··on Widespread power outage in Spain and Portugal
I can’t see an answer here: how does an air compressor start an engine?
wepple··on OpenAI wants to buy Chrome and make it an "AI-first" experience
I think you’ve proved your own point: yeah they could launch the next brave, but then they’d have brave and not chrome. 99.9999% of the world haven’t heard of brave.
wepple··on OpenAI wants to buy Chrome and make it an "AI-first" experience
I suspect this may be a play on words where checks = cheque, or money
wepple··on 15,000 lines of verified cryptography now in Python
Thanks! Looks hefty but I’ll try give it a crack
wepple··on 15,000 lines of verified cryptography now in Python
I’m not a verification expert - do we know or assume that the F* to C compiler preserves the verified code completely? And doesn’t introduce issues?
wepple··on Generate videos in Gemini and Whisk with Veo 2
LLMs were entirely text not that long ago.

Multi modality is new; you won’t have to wait too long until they can do what you’re describing.

wepple··on I just want to serve 5 terabytes [video]
I mostly agree, because most proof-of-concepts don’t make it very far, and LLM assisted dev is really strong for that kind of low-barriers experimentation.

The problem is that if you build quick n dirty, but then end up reaching success; you’re in for a bad time or a rewrite. This is where the above example of a single algorithm departs from a whole stack.

Further, one bad “hello world” on a google/apple/amazon domain can make the front page of the NYTimes

wepple··on 4o Image Generation
This specifically? No. We’ve been on this path a while now.

The general idea of indistinguishable real/fake images; yeah

← PreviousPage 2 of 34Next →