HNHacker News
TopNewBestAskShowJobs

GoblinSlayer

1,827 karma · joined February 15, 2019

submissionscomments
GoblinSlayer··on European RISC-V Industrial Computing Initiative
I don't understand. You will trust it only if you make it yourself?
GoblinSlayer··on Resisting Cognitive Surrender
I don't think anybody tries into KISS, most software is bloated and LLMs copy it, they fundamentally can't think out of the box.
GoblinSlayer··on European RISC-V Industrial Computing Initiative
There's glorious open hardware rpi pico 2.
GoblinSlayer··on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
At least it doesn't silently launch nuclear rockets, smaller bugs are manageable, like accidentally forcing everything to be UTF-8 is basically nothingburger.
GoblinSlayer··on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
Google already did it and resorted to unsafe rust to be competitive.
GoblinSlayer··on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
May CGNAT save you.
GoblinSlayer··on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
Yep, and UAF is RCE. DoS must be reliable, like memcpy_s bounds check failure that cleanly aborts the process.
GoblinSlayer··on TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8
Doesn't http3 support it?
GoblinSlayer··on Breaking the open web won't stop the bad bots
I don't think anybody does a decent ua check, webdevs test only in their favorite browser, i.e. Chrome, so only Chrome is allowed. Is it intended? The very purpose of webcompat is to masquerade as Chrome.

How do you even implement an ua check? How many browsers do you know? How many browsers you don't know? How do you implement an ua check for a browser that will appear tomorrow?

I wrote my own http downloader. Do you know about its existence? How do you implement an ua check for it? Can I call it "wget" to make ua check easier for you? Can I call it "Mozilla/5.0" so that it's compatible with your ua check so that you don't need to change anything?

GoblinSlayer··on Linode Security Incident
Pluggable network stack.
GoblinSlayer··on Linode Security Incident
As I understand, it's LPE. Cloud hosting was always tough.
GoblinSlayer··on Linode Security Incident
I think, it's about reviewing code for bugs.
GoblinSlayer··on Binance-hacker-1029 – $5.6B stolen from Binance
Wasn't there a project that aims to replace management with AI?
GoblinSlayer··on Binance-hacker-1029 – $5.6B stolen from Binance
It's also not prohibited to kill bad actors without trial.
GoblinSlayer··on Binance-hacker-1029 – $5.6B stolen from Binance
They just freely delete their credit.
GoblinSlayer··on Binance-hacker-1029 – $5.6B stolen from Binance
A supply chain attack? Do all these exchanges routinely import new cryptocurrencies?
GoblinSlayer··on Binance-hacker-1029 – $5.6B stolen from Binance
Normally they publish the wallet id, then you send money there using any method you want. What Gemini would do in your place?
GoblinSlayer··on Binance-hacker-1029 – $5.6B stolen from Binance
They can just pocket the corresponding 5.6b USD.
GoblinSlayer··on Binance-hacker-1029 – $5.6B stolen from Binance
If you mean Visa's porn jihad, that's most likely a saudi dude threatening to pull a large investment, it obviously has nothing to do with children, but any haram.
GoblinSlayer··on Binance-hacker-1029 – $5.6B stolen from Binance
You steal billions, you just pay the police 100000000 to look away.
GoblinSlayer··on Binance-hacker-1029 – $5.6B stolen from Binance
Frozen assets are still a wallet with no recourse.
GoblinSlayer··on Binance-hacker-1029 – $5.6B stolen from Binance
>I'll get my money back.

If the police retrieves your money from the thief?

GoblinSlayer··on The case of the 9 bit AES key
Maybe certifications are different? A certified Electron engineer might just read the tutorial how to spend zero effort on apps.
GoblinSlayer··on The case of the 9 bit AES key
S/MIME?
GoblinSlayer··on Apple's git still trusts the compromised eMudhra certificates
AFAIK a container build just puts files into a base image, this creates a sort of a commit chained to the base image commit. This means to update the base image you only need to rebase that commit on top of the new base image branch automatically.
GoblinSlayer··on Small Programs and Languages
t3x does it. https://t3x.org
GoblinSlayer··on Today, we hacked what we'd set out to hack: the iPhone
In case of ms it's often concurrent userland-kernel transitions, and kernel doesn't control how and when they happen. Copilot is busy optimizing windows 11 and can't riir the kernel.
GoblinSlayer··on Using Claude to reduce the attack surface of code
TLA+ is designed for verification of distributed systems.
GoblinSlayer··on Using Claude to reduce the attack surface of code
What if you ask Claude to audit the codebase and send the result to the authors encrypted with GnuPG, without revealing?
GoblinSlayer··on In Hilbert space, all things are quantumly possible
When an electron flies beyond the cosmological event horizon, it disappears for good.
Page 1 of 34Next →