HNHacker News
TopNewBestAskShowJobs

LilBytes

2,233 karma · joined December 14, 2015

hn at jdtay dot com
submissionscomments
LilBytes··on A sunscreen scandal shocking Australia
This is what's strange to me, I've never, ever heard anyone here in QLD say "buy banana boat products", it's always said that it is shit though.

So, we, as a community knew to avoid them for an awful long time. I can't be specific about when I heard this first but I'm almost certain some one said this to me in the first 12 months I moved to Brisbane (from the UK) 17 years ago.

So, there's been an urban myth for almost, if not longer than 2 decades. And we're only finding out now that it's true? That's the most surprising part of this to me IMO.

Edit: sentence structure, words.

LilBytes··on A sunscreen scandal shocking Australia
Queenlander here too. Yep, absolutely.

And the "water proof" sunscrean is even worse. I know it states on the label that it doesn't last forever, but the average person assumes it'll just persist and relayering it isn't needed as often as you'd think.

Sunscrean does work, absolutely. But if you need to be in sun for an awful lot of time, follow the advice of lifeguards, cricket players. Which is exactly what you said.

Clothing + zinc. In that order. Sunscrean every 1-2 hours for anywhere zinc or clothing can't be used.

LilBytes··on A sunscreen scandal shocking Australia
I have absolutely zero knowledge about the science and/or biology of skin, I read your post expecting it to end with something stupid like "don't know, I made all of this up". I'm glad it didn't!

I love HN because, for every snarky comment that's made or said on a misunderstood, or incorrect basis of knowledge that would set off an alarm on QI, followed by a stern telling off by Stephen Fry.

There's some one like you, who has an endless pit of knowledge to aritculate or better inform with a whole lot of insight thrown in for good measure. Thank you, your post's awesome. :)

Small edit: I immediately thought "Your skin can't be that good as a barrier, nicotine and caffeine patches work through the skin?" when I saw the post you replied to, and loved that you made reference to it too.

LilBytes··on My Own DNS Server at Home – Part 1: IPv4
Not doing anything wrong, different flavours for different folks. I tried Adguard Home but, found myself liking PiHole a little more. They're both excellent, and both are open source. I'd suggest, anyone that says AdGuard Home or PiHole is betterm, is as objective as saying "starberry is the most superior flavour of ice cream". :)

That said! I haven't used AdGuard Home in a very long time, might be time for me to revisit.

LilBytes··on The GitHub website is slow on Safari
I don't think this would help, if a site or SPA performs terribly on a high end machine, the only conclusion I can draw is performance testing isn't tested or validated at all.
LilBytes··on Australia once the gold standard for gun safety: Experts say it's losing control
Unfortunately I find this article to be true.

Only just today two policemen were killed, and a third injured in the rural Victorian high country.

There's been a huge spike in cookers/sovereign citizens using violence through firearms.

https://www.abc.net.au/news/2025-08-26/victoria-police-incid...

This happened in Wieambilla Queensland in 2022. This story made international news. The policemen and women were executed. Similar story, police perform a welfare check, are shot on sight.

https://en.m.wikipedia.org/wiki/Wieambilla_shootings

The assumed suspects from todays shooting are well known to the local community, for all the wrong reasons. Notorious 'sovereign citizens'. More information in the Reddit post below.

https://www.reddit.com/r/melbourne/comments/1n09tef/victoria...

LilBytes··on The decline of high-tech manufacturing in the United States
Such a great series, highly recommend everyone here watch these.
LilBytes··on Bad Actors Are Grooming LLMs to Produce Falsehoods
The tragic part of fraud is it's not too different to operational health and safety.

The rules and standards we take for granted were built with blood, for fraud? It's built on the path of lost livelihoods and manipulated gold intent.

LilBytes··on OpenAI’s Windsurf deal is off, and Windsurf’s CEO is going to Google
Hopefully. The world is healing.
LilBytes··on Cinematography of "Andor"
Depends on your TV, watching it on an LED TV was difficult, darks bled into each other. On OLED (and I assume Micro-LED) though it was just _phenominal_.
LilBytes··on Ask HN: What projects do you donate to?
* Sonarr, Radarr, Lidarr * Jellyfin
LilBytes··on The Epochalypse Project
Heh, I've got five domains of a similar name too. Going to reach out to the owners of the website this post is referring to and see if they want them.
LilBytes··on AI Is Facing a Crisis
It's satire. The inverse is the truth.
LilBytes··on 'Exploding' Tunnock's teacakes cleared by tests to fly again
I moved to Australia and forgot they existed until I found them in the "Foriegn Food" aisle and my house has been stocked with them every day since.

They've been my favourite sweet for as long as I can remember.

LilBytes··on An open source, self-hosted implementation of the Tailscale control server
Yep and most of us are already using Subnet routers it's not technically much harder.

Finding a cloud or VPS provider with free or cheap bandwidth (egress and ingress) is likely the biggest issue.

LilBytes··on Firefox Is Finally (Re)Adding Support for Web Apps
Thank you x
LilBytes··on Firefox Is Finally (Re)Adding Support for Web Apps
Can I get an invite too please?
LilBytes··on Imagine telling 2010 devs that in 2025, collapsing a div would require $8/ month
The company in question:

https://jsfiddle.net/

LilBytes··on The Pain That Is GitHub Actions
ADO is painful, GitHub has its warts but it's got much more community support from services like depot.dev and others.
LilBytes··on The Pain That Is GitHub Actions
Yeah it's a difficult problem, templates help, then put the templates into another repo that is managed by a specific person and imported into others. Not sure how that work in a monorepo, I expect those controls wouldn't.

The problem is it's still possible to work around those controls unless you create some YAML monstrosity that stops people from making the mistake in the first place.

LilBytes··on Celebrating the timeless allure of Tintin's aesthetics
Aye! We went to Teeside College together. I think it's been renamed Teeside Uni now or it's something else.

Can't find it, this is going back 19 years ago now. I grew up in Hartlepool and went to college there.

LilBytes··on Celebrating the Timeless Allure of Tintin's Aesthetics
Some guys I grew up with dubbed TinTin with Northern English. It's exceptionally crude, but never ceases to make me laugh.

https://youtu.be/6iV5YrLYhCA

LilBytes··on My little sister's use of ChatGPT for homework is heartbreaking
Not OP but I'm 16 years senior my youngest sister, when she was a wee child I did exactly this.

Voices were like personas for me.

LilBytes··on New era of slop security reports for open source
This isn't anything new, not something to celebrate but it's certainly going to continue to increase.

Daniel (cURL) owner and maintainer went through something similar as LLMs just started, it's covered in his blog post here:

https://daniel.haxx.se/blog/2024/01/02/the-i-in-llm-stands-f...

Comically covered by The Primeagen here: https://www.youtube.com/watch?v=e2HzKY5imTE&t=1206s

Previous conversations: https://news.ycombinator.com/item?id=38845878, 121 comments

https://news.ycombinator.com/item?id=38840907, 8 comments

LilBytes··on Red Hat to contribute container tech (Podman, bootc, ComposeFS...) to CNCF
Zitadel is worth a look, we're replacing Keycloak with it currently.
LilBytes··on Snyk Acquires Developer-First DAST Provider Probely
BOSTON, November 12, 2024 – Snyk, a leader in developer security, today announced it has acquired Probely, a modern Dynamic Application Security Testing (DAST) provider based in Porto, Portugal, with coverage of API security testing and web applications. Probely also powers Security Headers, a popular free and easy to use tool designed to help users to quickly understand and benchmark the security of their web properties.

The inclusion of API security testing is increasingly mission critical due to the reliance on APIs for the Large Language Model (LLM) powered applications being created in today’s GenAI era. Notable among the competition, Snyk now offers a full range of development and application security solutions, with customers immediately benefiting from a broader range of testing techniques in a developer friendly manner.

“For global security leaders seeking to further accelerate trusted AI adoption, adding Probely’s technology and expertise further extends the breadth and depth of Snyk’s platform,” said Peter McKay, CEO, Snyk. “Together, we’re looking forward to pushing our market forward with our shared developer-first vision that effectively balances rapid innovation with security guardrails.”

By combining coverage for these critical assets with Snyk’s existing Developer Security Platform, global enterprises can take a strengthened defense-in-depth approach to application security (AppSec). Snyk and Probely share a developer-centric mindset, and this latest acquisition supports the real-world vulnerability insights of dynamic testing of APIs and applications in a way that allows developers to increase their productivity securely. To this end, Probely’s proven low false positive rate helps ensure developers don’t waste time on non-issues, while their easy-to-use testing interface reduces the cognitive load of security testing these critical assets.

“Like Snyk, from day one, Probely has been laser focused on empowering developers to build securely,” said Nuno Loureiro, CEO & Co-Founder, Probely. “With this shared ethos as a foundation, we’re humbled to be part of Snyk’s growing global team and increase our value to customers.”

Extending Automation from App Code to App Function

Probely’s Discovery and Scanning can identify what applications or APIs exist and if they contain exploitable vulnerabilities. This gives AppSec teams increased confidence that they have coverage of their application and API footprint while helping developers reduce time spent on lower priority risks. This will only become more crucial as modern applications – including advanced AI tools – continue to be increasingly built with APIs.

In addition to API and DAST, Snyk’s solutions portfolio also includes Static Application Security Testing (SAST), Software Composition Analysis (SCA), Container, Infrastructure as Code (IaC) and Application Security Posture Management (ASPM) offerings. As Probely’s native capabilities are integrated into the Snyk platform over time, customers will gain even more comprehensive security coverage that helps ensure vulnerabilities are automatically detected throughout the entire software development lifecycle (SDLC).

“We ensure the payment security of global organizations, including critical compliance needs like PCI-DSS, and as such welcome Snyk and Probely joining forces,” said Héctor Guillermo Martínez, President, GM Sectec. “Having worked closely with both of these talented teams, we’re excited for Probely’s security and compliance capabilities to be integrated into Snyk’s comprehensive platform as that will benefit our customers in both the near- and long-term.”

LilBytes··on Show HN: Proxmox VE Helper Scripts
Given enough appetite and love from me, I've got a pretty robust Ansible script for building a Proxmox host with $i++ LxC's.

It's not suitable for open sourcing yet (embedded secrets and the like), but if the community wants it, it's pretty solid.

Only issue I see is the Ansible script currently always expects to be building a cluster of Proxmox hosts. I'd need to make some change to customise it so it can build out just one node though.

I've been using it or ~3 years now for my Proxmox cluster home lab which predominantly hosts LLAMA, *Arr stack, deluge, Nginx, Tailscale and a few other services.

It's not quite a one click deployment, but it can build our an entire cluster in 30 minutes after an initial Proxmox install is completed.

LilBytes··on Ask HN: What Are You Working On? (October 2024)
Great idea, are you in Bangkok on holiday or using this idea to get a business visa?
LilBytes··on Simone Giertz talks about invention
This video covers the same topic, and it's a video from Simone. Much better and has a lot more content and substance:

"Was starting a product business a mistake?"

https://www.youtube.com/watch?v=iEAShZ8TJCs

LilBytes··on 1 bug, $50k in bounties, a Zendesk backdoor
Keycloak (Java) and Zitadel (Go) are my recommendations.
← PreviousPage 2 of 23Next →