HNHacker News
TopNewBestAskShowJobs

xenophonf

3,901 karma · joined November 24, 2010

Keeper of the Sacred Chao and Patron Saint of All Things Plastic fnord

To contact me via PinealWeb, think very hard at this spot right here. Alternatively, email me at xenophon+hackernews@irtnog.org.

submissionscomments
xenophonf··on April 2026 TLDR Setup for Ollama and Gemma 4 26B on a Mac mini
LM Studio isn't free/libre/open source software, which misses the point of using open weights and open source LLMs in the first place.
xenophonf··on Post-mortem of the EU Europa breach: A masterclass in IAM misconfiguration
This looks like an LLM's hallucinations. I don't see any evidence supporting the conclusions made, and some of the conclusions are overblown, like that bit about DKIM keymat leaks being the "most dangerous". The whole thing is written in this breathless, overwrought style that seems to be favored by bots fed a strict diet of ad copy and marketing white papers—"not X. Y!" (That's a thin gruel and probably ought to be treated by our future AI overlords as child abuse.)
xenophonf··on Axios compromised on NPM – Malicious versions drop remote access trojan
Where in the pnpm documentation does it say that it ignores scripts by default?

From https://pnpm.io/cli/install#--ignore-scripts:

> Default: *false*

xenophonf··on Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
PyPI enforces immutable releases.

https://pypi.org/help/#file-name-reuse

> PyPI does not allow for a filename to be reused, even once a project has been deleted and recreated...

> This ensures that a given distribution for a given release for a given project will always resolve to the same file, and cannot be surreptitiously changed one day by the projects maintainer or a malicious party (it can only be removed).

xenophonf··on Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
All engineering professions are like that. NCEES has been licensing Professional Engineers for over a hundred years. The only thing stopping CS/SE is an unwillingness to submit to anything resembling oversight.
xenophonf··on Why I love FreeBSD
I love FreeBSD for its documentation. To answer your question about Wayland specifically:

https://docs.freebsd.org/en/books/handbook/wayland/

If you want something with a graphical environment ready to run, check out GhostBSD, which is based on FreeBSD and features MATE:

https://www.ghostbsd.org/

xenophonf··on Don't post generated/AI-edited comments. HN is for conversation between humans
If someone can't explain something in their own words, then they don't _really_ understand it. The process of taking time to think through a topic and check one's understanding, even if only for oneself and the rubber duck, will reveal mistakes or points of confusion.
xenophonf··on Why can't you tune your guitar? (2019)
Here's the YouTube link without that tracking code for those of us on mobile:

https://youtu.be/EZC69A8TsJ8

(I wish Firefox on iOS had a "open clean link" option, but I'd wish Mozilla would fix other more important stuff first, like letting me search/open bookmarks from a private tab.)

xenophonf··on What if writing tests was a joyful experience? (2023)
TIL. That looks like a nice way to add tests to legacy code without having to re-create what TDD would have had the developers started that way.
xenophonf··on How to choose colors for your CLI applications (2023)
> narrow use case?

It's the robustness principle. "Be conservative in what you do, be liberal in what you accept from others." A CLI author shouldn't assume support for UTF-8.

xenophonf··on I was just laid off by The Washington Post in the middle of a warzone
https://xcancel.com/lizziejohnsonnn/status/20190832041336098...
xenophonf··on How to choose colors for your CLI applications (2023)
Emacs on a Link MC5, although something doesn't like how the terminal handles flow control. I'm not sure if it's the O/S, the UART, the cable, or the terminal, but I have issues with I/O corruption. Even something a simple as a directory listing will get messed up, and on both FreeBSD and Linux, so maybe that rules out the O/S. Oh well. I'll figure it out some day.
xenophonf··on How to choose colors for your CLI applications (2023)
Not with sed and awk they aren't.
xenophonf··on How to choose colors for your CLI applications (2023)
Emojis aren't 7-bit clean. They're hard to type. They don't mean things the same way words do. `foo | grep -i error` communicates intent better than `foo | grep :-/` or whatever goofy hieroglyph someone chose instead of, like, a word with clearly defined meaning.
xenophonf··on How to choose colors for your CLI applications (2023)
I really wish you wouldn't. All the rinky dink colors and animations screw with the CLI output when you don't correctly detect whether the user's running the app interactively.

Keep it plain text. Regular, old, boring output is good.

xenophonf··on Your brain on ChatGPT: Accumulation of cognitive debt when using an AI assistant
I'm very impressed. This isn't a paper so much as a monograph. And I'm very inclined to agree with the results of this study, which makes me suspicious. To what journal was this submitted? Where's the peer review? Has anyone gone through the paper (https://arxiv.org/pdf/2506.08872) and picked it apart?
xenophonf··on SmartOS
You can boot ProxMox VMs via PXE:

https://blog.kail.io/pxe-booting-on-proxmox.html

But why bother? A read-only disk image would be simpler.

xenophonf··on The Emacs Widget Library: A Critique and Case Study
https://emacs.stackexchange.com/questions/598/how-do-i-preve... has some answers (and solutions).
xenophonf··on It's hard to justify Tahoe icons
They also forced us to waste relatively valuable vertical screen space on the task bar, taking away our ability to move it to the left or right screen edges.
xenophonf··on Publish on your own site, syndicate elsewhere
Someone recommended Posse Party in a now deleted comment, but beware its (ambiguous and poorly written, if you ask me) noncommercial license:

https://github.com/searlsco/posse_party/blob/main/LICENSE.tx...

xenophonf··on The Garbage Collection Handbook
I wish there was a big, friendly "buy now" link that would get me the print book and EPUB file. The site promotes the book. I'm not sure why they don't make buying it stupid simple.
xenophonf··on Inside CECOT – 60 Minutes [video]
For those of us without Twitter accounts:

https://xcancel.com/grynbaum/status/2002943084322287815

https://xcancel.com/grynbaum/status/2003109023705387478

https://xcancel.com/grynbaum/status/2003209942057255073

xenophonf··on Engineers who dismiss AI
What you suggested here is trivial with existing tools—linters in the first case, search-and-replace functions in editors for the second.

I have yet to see any evidence of the third case. I'm close to banning AI for my junior devs. Their code quality is atrocious. I don't have time for all that cleanup. Write it good the first time around.

xenophonf··on Influential study on glyphosate safety retracted 25 years after publication
CGMthrowaway writes:

> Trust the science.

Science is a process, not a result. Retractions like this promote the integrity of scientific research and evidence-based medicine.

> When Dr. Oz in 2015 spoke out against glyphosate...

Oz also promoted MLM dietary supplements, antimalarial drugs as COVID treatments, gay conversion "therapy", colloidal silver, and vaccine skepticism. He has zero credibility and cannot be trusted.

xenophonf··on Python Data Science Handbook
I initially considered using Pandas to work with community collections of Elite: Dangerous game data, specifically those published first by EDDB (RIP) and now by Spansh. However, I quickly hit the maximum process memory limits because my naïve attempts at manipulating even the smallest of those collections resulted in Pandas loading GB-scale JSON data files into RAM. I'm intrigued by Polars stated support for data streaming. More professionally, I support the work of bioinformaticians, statisticians, and data scientists, so I like to stay informed.

I like how in Pandas (and in R), I can quickly load data sets up in a manner that lets me do relational queries using familiar syntax. For my Elite: Dangerous project, because I couldn't get Pandas to work for me (which the reader should chalk up to my ignorance and not any deficiency of Pandas itself), I ended up using the SQLAlchemy ORM with Marshmallow to load the data into SQLite or PostgreSQL. Looking back at the work, I probably ought to have thrown it into a JSON-aware data warehouse somehow, which I think is how the guy behind Spansh does it, but I'm not a big data guy (yet) and have a lot to learn about what's possible.

xenophonf··on Python Data Science Handbook
What's wrong with Pandas?
xenophonf··on CBP is monitoring US drivers and detaining those with suspicious travel patterns
That's easy to say when you aren't the one under pressure.
xenophonf··on Winamp clone in Swift for macOS
Thanks, Dang. You're the bestest.
xenophonf··on Winamp clone in Swift for macOS
Pretty misleading headline. This isn't actually Winamp. It's someone's attempt at a clone.
xenophonf··on Yt-dlp: External JavaScript runtime now required for full YouTube support
I had the same problem. Make sure you're running the latest version of uBlock Origin. By that I mean you should explicitly check for updates and install the latest version. That fixed it for me.
← PreviousPage 2 of 34Next →