HNHacker News
TopNewBestAskShowJobs

wslh

36,847 karma · joined March 8, 2009

Bootstrapped <https://www.coinfabrik.com> in 2014 and https://www.nektra.com in 2003.

- CoinFabrik: Web3, R&D in decentralization, and security audits. Blockchain (Bitcoin, Ethereum, Solana, Algorand, etc) and language agnostic (Solidity, Rust, etc)

- Nektra: security, application virtualization, reverse engineering, Windows system internals

- BitVMX <https://bitvmx.org/>: BitVMX framework provides the foundations to run any CPU on Bitcoin, with a focus to run a fully-compliant RISC-V processor programmable using a standard compilation toolchain.

Blogging at https://blog.coinfabrik.com @coinfabrik, https://blog.nektra.com @nektra, and https://blog.databigbang.com @databigbang

meet.hn/city/ar-Buenos-Aires

submissionscomments
wslh··on Surprising links between autism, Alzheimer's could change how we treat both
https://archive.is/5Pnuo
wslh··on Ruckus: Racket for iOS
Wish: include a REPL, not only the editor.
wslh··on Artemis II commander enters tablet PIN on launch livestream
I suspect you should also know the WiFi key.
wslh··on Claude wrote a full FreeBSD remote kernel RCE with root shell
And you can check the list of bugs being discovered by Anthropic's Red Team: https://red.anthropic.com/
wslh··on Claude wrote a full FreeBSD remote kernel RCE with root shell
While it's great to clarify, LLMs are actually finding bugs and writing exploits [1][2]. There are more example though.

[1] https://news.ycombinator.com/item?id=47589227

[2] https://xbow.com/

wslh··on Vulnerability research is cooked
The problem is that you have all kind of "security spam" in the same way that social media is flooded by automatic, but on-topic, content. This doesn't mean that some very few reports are not correct.

One way to filter that out could be to receive the PoC of the exploit, and test it in some sandbox. I think what XBOW and others are doing is real.

wslh··on Ohm's Peg-to-WASM Compiler
You can also check rhe examples folder: https://github.com/ohmjs/ohm/tree/main/examples
wslh··on Ohm's Peg-to-WASM Compiler
What is great about the Ohm approach compared to typical lex/yacc/ANTLR parsers is that it avoids ambiguity by using ordered choice (the first matching rule wins), instead of requiring you to resolve conflicts explicitly. This makes working with Ohm/PEGs less painful in the initial phase of a project.

It's also important to highlight that this makes the parsing process slower.

wslh··on Full network of clitoral nerves mapped out for first time
I remember that Matteo Realdo Colombo (1515-1559) [1] described the clitoris. There is a novel about the story [2] which was the finalist on one of the top Spanish literary prizes [3].

[1] https://en.wikipedia.org/wiki/Realdo_Colombo

[2] https://www.amazon.com/Anatomist-Federico-Andahazi/dp/038549...

[3] https://en.wikipedia.org/wiki/Premio_Planeta_de_Novela

wslh··on Schedule tasks on the web
LinkedIn already employs anti-scraping measures, so I'd expect a lot of users to get flagged.

That's not unique to LinkedIn but what is somewhat unique is the strong linkage to real world identities, which raises the cost of Sybil attacks on personal networks with high trust.

wslh··on QRV Operating System: QNX on RISC-V
I checked out and BB revenue report [1] "driven by upbeat strength across its QNX division" (quote). I think this will make more difficult to obtain a QNX license if they don't see it strategic?

[1] https://finance.yahoo.com/news/blackberry-q3-earnings-revenu...

wslh··on The MIT Professor Tangled Up in a Tech CEO's 'Ponzi-Like' Scheme
https://archive.is/IHDqH
wslh··on A 6502 disassembler with a TUI: A modern take on Regenerator
Check https://retro.moe/ !
wslh··on VisiCalc Reconstructed
The idea of backward updating is fascinating but is not generally feasible or computable. What kind of problems can you solve backwardly?
wslh··on Open Gauss is a project-scoped Lean workflow orchestrator from Math Inc
Announcement in X [1]. """ Today, at the @DARPA expMath kickoff, we launched , an open source and state of the art autoformalization agent harness for developers and practitioners to accelerate progress at the frontier.

It is stronger, faster, and more cost-efficient than off-the-shelf alternatives. On FormalQualBench, running with a 4-hour timeout, it beats @HarmonicMath's Aristotle agent with no time limit.

Users of OpenGauss can interact with it as much or as little as they want, can easily manage many subagents working in parallel, and can extend / modify / introspect OpenGauss because it is permissively open-source. OpenGauss was developed in close collaboration with maintainers of leading open-source AI tooling for Lean. """

[1] https://x.com/mathematics_inc/status/2034700606498083025

wslh··on I'm OK being left behind, thanks
We've seen multiple ideas/products get quickly absorbed into frontier models, OSS, or well-funded startups. The cycle from "interesting idea" to "commoditized feature" is getting very short. Personally, there were three of these in the last year.

And even if your product is genuinely great, distribution is becoming the real bottleneck. Discovery via prompting or search is limited, and paid acquisition is increasingly expensive.

One alternative is to loop between build and kill, letting usage emerge organically rather than trying to force distribution.

wslh··on Show HN: Claude Code skills that build complete Godot games
Amazing! We have played with it to create an animation based on "The Three Little Pigs". Video available here [1].

[1] https://drive.google.com/file/d/1ozZmWcSwieZQG0muYjbj7Xjhhlz...

wslh··on Measuring progress toward AGI: A cognitive framework
AGI may be a prerequisite for true superintelligence, but we're already seeing superhuman performance in narrow domains. We probably need a broader evaluation framework that captures both.
wslh··on Get Shit Done: A meta-prompting, context engineering and spec-driven dev system
250K? Could you expand your experience with details about your project and the lessons and issues you found?
wslh··on E2E encrypted messaging on Instagram will no longer be supported after 8 May
I sometimes feel a bit weird about this. In the 90s it felt like "we" won the crypto wars: PGP, the fight over export controls, the Clipper Chip, etc. There was a strong sense that privacy and strong crypto had become settled questions.
wslh··on MyFirst Kids Watch Hacked. Access to Camera and Microphone
That is the low bar, there are millions spent in searching for Google Chrome exploits
wslh··on MyFirst Kids Watch Hacked. Access to Camera and Microphone
You are safe until you are a real target. The exploit someone have ready for your safe browser was not used yet in the wild.
wslh··on Nobody gets promoted for simplicity
I think you could start saying that there are multiple options. The simpler is sharing the sheets in Google (or Microsoft) Sheets. After this, Then, I would have asked if there are any security and/or compliance issue to doing so to analyze other alternatives.
wslh··on MacBook Neo
This is the first release. They test the market and optimize. BTW, I have an old M1 with 8gb and works well for some kind of [light?] development. Not using xcode but vscode.
wslh··on MacBook Pro with M5 Pro and M5 Max
Apple recently released open models. I wouldn’t be surprised if they start shipping increasingly capable models as part of their platform offering. That would fit perfectly with their hardware trajectory.
wslh··on MacBook Pro with M5 Pro and M5 Max
Full support now?
wslh··on The whole thing was a scam
I don't want to spoil Marty Supreme (2025), but there's a provocative line delivered by Kevin O’Leary (yes, the Shark Tank guy):

"I was born in 1601. I’m a vampire. I’ve been around forever."

wslh··on Tell HN: YC companies scrape GitHub activity, send spam emails to users
There are documented public disputes about Gecko Security’s conduct when it comes to claiming credit for vulnerability research. For example, FuzzingLabs publicly accused Gecko Security of copying PoCs and submitting CVE reports for vulnerabilities that FuzzingLabs had originally disclosed, and of misdating their posts to make it appear they found them first. Gecko publicly denied intentional wrongdoing, but later updated their attributions to credit the original researchers [1].

That's one example that's already reported online; I also have another related situation that isn't public yet and involves one of my companies.

[1] https://www.bleepingcomputer.com/news/security/security-firm...

wslh··on iPhone and iPad approved to handle classified NATO information
I understand that this is mainly about the Apple business where having an endorsement/certification is a barrier of entry for others, even if it's artificial.
wslh··on Tell HN: YC companies scrape GitHub activity, send spam emails to users
And, Gecko Security.
← PreviousPage 6 of 34Next →