HNHacker News
TopNewBestAskShowJobs

xorcist

9,133 karma · joined July 3, 2014

submissionscomments
xorcist··on Source code of Swedish e-government services has been leaked
It's something akin to a service provider in SAML parlance, if we are to believe reporting. How can it be air-gapped?

And if we are to believe the hacked company, it is a development environment with test data in it. That remains to be seen, but is a risky thing to lie about. If there is production data in the leak, we will surely know about it.

xorcist··on The Road Not Taken: A World Where IPv4 Evolved
> The IPv4 32-bit address space should have been included in the IPv6 address space,

That's ... exactly how IPv6 works?

Look at the default prefix table at https://en.wikipedia.org/wiki/IPv6_address#Default_address_s... .

Or did you mean something else? You still need a dual stack configuration though, there's nothing getting around that when you change the address space. Hence "happy eyeballs" and all that.

xorcist··on The Road Not Taken: A World Where IPv4 Evolved
> everything in v4x that happens to have the last 96 bits unset

That's pretty much identical to 6in4 and similar proposals.

The Internet really needs a variant of the "So, you have an anti spam proposal" meme that used to be popular. Yes, it kill fresh ideas in the bud sometimes, but it also helps establish a cultural baseline for what is constructive discussion.

Nobody needs to hear about the same old ideas that were subsumed by IPv6 because they required a flag day, delayed address exhaustion only about six months, or exploded routing tables to impossible sizes.

If you have new ideas, let's hear them, but the discussion around v6 has been on constant repeat since before it was finalized and that's not useful to anyone.

xorcist··on Show HN: LogClaw – Open-source AI SRE that auto-creates tickets from logs
Deciphering ramifications from a log message alone is a pretty unusual way to approach a problem. You still have your 1990s Nagios-style application monitoring, right? So when you wake up to a message that the web monitor says it's not possible to add items to the shopping basket right now, the database monitor signals an unusually long response time, the application metrics tells you number of buys is at a fraction of what is normal for this time of day, then that WARN log message from the application telling you about a foreign index constraint is violated is pretty informative!
xorcist··on Swiss e-voting pilot can't count 2,048 ballots after decryption failure
That's perhaps not the best example of a stable democracy. Lots of people in Brazil mistrust the voting system, and they were pretty close to a coup d'etat after their last election, with polticians thrown in jail and so on.
xorcist··on The Gervais Principle, or the Office According to “The Office” (2009)
Beatings will continue until morale improves?

You can't make this up.

xorcist··on No leap second will be introduced at the end of June 2026
Unless you want to abolish timezones entirely, which would simplify clocks but complicate a whole lot else in society, you're going to need leap-something. Would leap minutes or hours really be much better? The idea that doing things less often causes more problems is a reasonable one.
xorcist··on Picking Up a Zillion Pieces of Litter
In what way could injecting noise into a conversation be helpful?
xorcist··on The Brand Age
> It's very subtly branded,

Except for the gigantic Apple logo plastered all over the lid?

Don't get me wrong, I like Apple design (and I adore early Braun), but subtly branded it is not. You're supposed to recognize it instantly at any distance. Apple knows their brand value.

xorcist··on The Eternal Promise: A History of Attempts to Eliminate Programmers
> They actually were better off, which illustrates how bad rural poverty was at that time.

Perhaps at the start of the industrial revolution, but not during most of it. Which is says a lot about how pricing shifts and finds equilibrium, not only for raw materials but also for human workers.

xorcist··on The Eternal Promise: A History of Attempts to Eliminate Programmers
> That was genuinely impossible for someone like me before AI assistance

Ummm... No? That was literally what people have done for decades? Is the implication that you feel you are too old to read a book at 45 and start programming?

Sure, you will make hundreds of unintended decisions along the way that a seasoned developer would scoff at (for good reason), but a functioning first application in half a year when learning on the job is exactly what people have done, always. Is it a good idea? Well, it is always better to have a professional at hand to help and do away with the beginner's problems from the beginning, but it's absolutely doable.

Programming is not a black art, but something anyone with a bit of logical thinking can pick up from a book. Hence the "Learn yourself Java in 48 hours" books the were so popular for a while.

xorcist··on The Eternal Promise: A History of Attempts to Eliminate Programmers
But the LLMs are quite the opposite: People should not bother with developing software, but ask the big LLM providers to do it for them instead.

In all aspects of the term, software is getting less democratized. But that is in line with a decades long trend, where computers used to ship with BASIC installed and now you need a specialized IDE tool which has a learning curve.

It used to be that you could dabble with HTML but now you need to learn a few javascript frameworks just to modify existing code. You used to start a piece of software by running it, modern server software is a fragile jigsaw that is delivered to production in the cloud. The list goes on. The future we are being promised is that you ask your paid-for development agent to make the necessary changes you require and deliver in to production in the cloud.

Which is fine, in a way, but it shifts power to the professionals. Just as Google, Apple or Microsoft owns your identity and your data, and you pay to use it, they can also decide to deny access for any reason. They are private companies, after all, and it is their data.

xorcist··on Tove Jansson's criticized illustrations of The Hobbit (2023)
Are you sure you haven't confused these books?

One of the books you mention is about an adventure involving a treasure. The other book is about catastrophic flooding in the first book and a comet that threatens the planet in the second, if I recall correctly. Which one did you think was about saving the world and which one was about whimsical non-issues again?

Of course, you don't have to like the books. They are both children's books. But of all the possible critique this one was particularly strange.

xorcist··on Iran's Ayatollah Ali Khamenei is killed in Israeli strike, ending 36-year rule
If that was true, it would be like that. But it isn't, so it's not. EU is wide, and does not always speak with one voice, but it has a clear history of doing their best to avoid funding the proto-democratic forces in the region. Any support of religious extremists is considered a failure and acted upon.
xorcist··on We Will Not Be Divided
No one can do everything but everyone can do something.

If you are in law enforcement, do not follow clearly unlawful orders. The president is not your boss. This is a functioning democracy.

If you are a librarian, do not hide otherwise lawful books that the current administration dislikes.

If you are in logistics, do not collect obviously unconstitutional taxes. Make sure to challenge them in courts first.

If you are in a university, stick to what is true and scientifically sound. Do not hide inconvenient truths.

If you are a baker, do not refuse to make a rainbow colored cake just because you are worried what the people wearing metaphorically brown shirts might say.

The list goes on and on and on. This has been well documented throughout history. Fascism needs a seed to thrive, and that seed is people complying in advance. Not with actual laws, but with the idea what direction the law will take, just because it's easier for them. People not helping other people because immigration is not in vogue right now and who knows what the neighbors might say.

xorcist··on What does " 2>&1 " mean?
> At least allow us to use names instead of numbers

Many people probably think in terms of "fd 0" and "fd 1" instead of "standard in" and "standard out", but should you wish to use names at least on modern Linux/BSD systems do:

  echo message >/dev/stdout
  echo error_message >/dev/stderr
xorcist··on Tell HN: MitID, Denmark's digital ID, was down
We do. There are centralized databases of passport serial number, for blacklisting (revocation) or just persons of interest.
xorcist··on Tell HN: MitID, Denmark's digital ID, was down
The big drawback of one time passwords is that it doesn't protect against man-in-the-middle attacks such as phishing, which is in practice one of the most common attacks on systems of this scale.

The logistics operation involved in distributing codes is also very expensive and inflexible. You may need to authenticate payments a dozen times in an hour one day, when you are on a farmers market which doesn't take card payments or you are out dining with friends, and another day not at all.

Given all this, a good old public key infrastructure makes sense. But that is unfortunately also usually the first step to a complexity explosion.

xorcist··on Tell HN: MitID, Denmark's digital ID, was down
PKI works offline until you realize you need to handle revocations.

For this and related reasons, such as enforcing protocol upgrades, most smartcard systems end up permanently online.

xorcist··on IDF killed Gaza aid workers at point blank range in 2025 massacre: Report
This is pure misinformation. I have personally never seen such large crows as the anti war demonstrations of 2002-2003. There 100k people marching several times for several weeks in the European capitals I know.

Some estimate that these were even bigger than the demonstrations against the war in Vietnam in the 1960s. These put the total number of people going out in demonstrations world wide at 30M+. This war was massively protested against, any which way you count.

xorcist··on How far back in time can you understand English?
> 1400 seems fine except for the one big hurdle being "Þ",

Someone here needs to brush up on their Icelandic!

xorcist··on Facebook is cooked
That trivial definition sees limited use in the real world. Few countries that are popularly considered democratic have direct democracy. Most weigh votes geographically or use some sort of representative model.

Most established definitions of democracy goes something like, heavily simplified:

1. Free media

2. Independent judicial system

3. Peaceful system for the transfer of power

The most popular model for implementing (3) is free and open elections, which has yielded pretty good results in the past century where it has been practiced.

Considering social media pretty much is media for most, it is a heavily concentrated power, and if there can any suspicions of being in cahoots with established political power and thus non-free, surely that is a threat to democracy almost by definition.

Let's be real here: It has been conclusively shown again and again that social media does influence elections. That much should be obvious without too much in the way of academic rigor.

xorcist··on Claws are now a new layer on top of LLM agents
Any writers for Black Mirror hanging around here?
xorcist··on Trump's global tariffs struck down by US Supreme Court
> it seems like the were fulfilling their legal obligation (at the time)

Rather, their illegal obligation (at the time)?

It was clear from the start these import tariffs are illegal. Only congress can set them. It says so in the constitution! Hand waving at some pretend emergency doesn't give you the right to ignore constitutional law.

The logistics companies should probably have fought these clearly illegal tariffs from the start. Instead they played along and collected the fees. There's probably some interesting legal precedence here to be made, should this argument hold in court.

xorcist··on Trump's global tariffs struck down by US Supreme Court
There are many reasonable ideas for import taxation. But what you describe was not what happened. China fought back with their own tariffs, and you may well have paid less import tax on your Temu knock-offs than you did for some widget made with both higher environmental and labor standards in some western European country.
xorcist··on Infrastructure decisions I endorse or regret after 4 years at a startup (2024)
Setting aside the turing completeness of them, in practice Ansible is a complete superset of Terraform. From experience, the only times you appreciate the state file is when you have uncontrolled changes, in which case you are in for a bad time anyway.

Ansible modules are trivial to write and more people should. Most are trivial in practice and just consists of a few underlying API calls. A dozen line snippet you fully understand is generally not a maintenance burden. A couple of thousand someone else wrote might be.

xorcist··on An AI Agent Published a Hit Piece on Me – The Operator Came Forward
Anything and everything is a social experiment.

I can go around punching people in the face and it's a social experiement.

xorcist··on An AI Agent Published a Hit Piece on Me – The Operator Came Forward
> It's like showing up at a community craft fair with a truckload of temu trinkets you bought wholesale

That may well be the best analogy for our age anyone has ever thought of.

xorcist··on Native FreeBSD Kerberos/LDAP with FreeIPA/IDM
It is a quite normal need. An always-on laptop that doesn't leave the corporate network is just a stationary computer in inconvenient packaging.
xorcist··on Infrastructure decisions I endorse or regret after 4 years at a startup (2024)
I never understood this. Why not use Ansible instead, especially if you already use it? Doubly so when you have Cisco config to manage. The experience is generally so much better it's not comparable, and it is much easier to infer running state.
← PreviousPage 9 of 34Next →