HNHacker News
TopNewBestAskShowJobs

SXX

9,348 karma · joined July 28, 2014

I'm Software Engineer with extremely wide knowlege across Java, web stack, C++, PHP and other technologies. I know how to bring project from idea to lauch and I always looking for something new to work on.

Currently I work full-time as CTO making games at Hack The Publisher.

Centum is released on PC, Xbox, Playstation an Switch:

https://store.steampowered.com/app/2625550/Centum/

https://store.playstation.com/en-us/concept/10012850

https://www.xbox.com/en-US/games/store/centum/9N2GQKWLC0QM/0017

https://www.nintendo.com/us/store/products/centum-switch/

Our other games:

https://store.steampowered.com/app/2287560/Vengeance_of_Mr_Peppermint/

https://store.steampowered.com/app/1076120/Dwarven_Skykeep/

- Maintainer of free and open source engine for Heroes of Might and Magic III:

https://github.com/vcmi/vcmi

...

https://arseniyshestakov.com/

Feel free to contact me:

me (at) arseniyshestakov (dot) com

https://www.linkedin.com/in/arseniyshestakov

submissionscomments
SXX··on Asahi Linux Progress Linux 7.3
DigitalOcean obviously cut their OSS support because they gave it as credits for a year and it required constant human review and interaction.

At the same time it was mostly to small OSS projects that dont have formal non-profits so no tax exemption benefits to DigitalOcean.

SXX··on Asahi Linux Progress Linux 7.3
That'a weird how you placed copyleft next to source available side of spectrum.

That's opposite because copyleft is ultimately about user freedom not developers freedom.

GPL wont help Asahi team for a bit.

SXX··on 'It's just vape, nail, charity shops': Can anything save UK high street?
Thats funny how journalists ignore elphant in the room; UK non-domicile (non-dom) tax regime was officially abolished on April 6, 2025.

So a lot of high-earners would now have to pay UK taxes on worldwide income. So they left the country or only stay there mininal amount of days to not be considered resident.

Many high street businesses were working for these people with tons of disposable income.

Also criminal situation was little better when these high-profile people were roaming London streets. No one wanted something happen to them.

SXX··on Ask HN: What your experience with the monthly "who wants to be hired" thread?
Been posting there every once in a while for last few years.

Few times got a freelance projects from there because people who contacted me been very specificly interested about my game development experience.

I'm generalist without cool looking CV and I honestly tell that last 6 years been mostly gamedev so it can be much less useful for me. No idea.

After last few times it's started to be 10s of AI spam messages and dumb "hire me" ai spam because mailbox is hire@name.com.

Surprisingly out of AI spam there been like 2 actual founders reaching out via AI messages, but unless I manage to find people on Linkedin I just ignore it as potential scam.

PS: If you use AI for initial reach please make it short and to the point. I dont want your fucking AI agent cite experience from my own post.

SXX··on AI isn't replacing SREs, it's deskilling them
Obviius fix:

AI Isn't Replacing SREs. It's Destilling Them.

SXX··on Binance-hacker-1029 – $5.6B stolen from Binance
That's classic, but whole point with Monero is that no one cant really tell who sent money and who get them.

It doesnt exactly solve on-ramp / off-ramp, but it hides very well how much you actually have in total.

With nornal crypto you create direct track from a CEX to every place where you spend the money.

SXX··on Binance-hacker-1029 – $5.6B stolen from Binance
Cryptocurrencies that are transparent to government tracking are also transparent to whatever criminals want to beat you up and take everything from you.

Your usual non-crypto millinare likely have less money to steal on them than average grandma. Fiat millionare likely have two credit cards and $100 in a pocket. Or useless iPhone with Apple pay. So there is zero profit in trying to rob fiat millionare or billionare and tons of downsides.

And moving any amounts of transparent crypto over $100,000 just paints huge "rob me" target on your person.

SXX··on Binance-hacker-1029 – $5.6B stolen from Binance
It work exactly same way as debt collection agencies work: banks sell them bad debt for cents on dollar. Then they try to get more money out of debtors.

Imagine someone offered you to buy $1,000,000 of that dirty money for $100,000? $10,000? $1,000?

At some point there will be people who would buy it and deal with money laundering.

SXX··on Ten days later, Git on macOS still trusts the compromised eMudhra certificates
You dont interact with anyone. You just set your own hotspot and people will connect to it.
SXX··on New 14‑inch MacBook Pro with M6
Quite messy and wonky as in Linus Tech Tips testing. Require plugging displays in right order to get desired resolution / refresh rate.
SXX··on Genie 4
Surprising how Tencent's HY-World 2.0 open weights world model didn't get as much attention:

https://github.com/Tencent-Hunyuan/HY-World-2.0

SXX··on Kimi K3.1 Pro and K3.1 Pro Highspeed
It's not like US companies spend trillions on training itself.

Mostly it's datacenter build out and circular financing magic when the same dollars being commited multiple times by multiple companies passing hot potato to each other. They basically commit capacities 2-3 years ahead.

SXX··on Woman charged with computer fraud due to scam CashApp account being in her name
Not a country, but it's free in Belgrade, Serbia for last two years.

Due to weird goverbnment statistics and unaccounted expats officially it's 1.1M to 1.6M of people, but actually there likely well over 2M people living there.

Public transport is pretty good there and it cost their budget $300M-$400M a year.

SXX··on There isn't an easy exploit for this PHP vulnerability
That's not what CGI is. CGI is just mode of operation where full php process being spawned on each request and then killed. It's kind a less prone to security actually because no memory or state is reused ever.

But yeah since it's inefficient I doubt it used much after 2010 when php-fpm matured and nginx got popular.

SXX··on There isn't an easy exploit for this PHP vulnerability
IDK why someone flagged your reply, but basically your list shows that since 2015 there been practically no security issues that can really be exploited in default configuration.

10 years like thid seem pretty stellar for me considering half of internet runs on PHP.

SXX··on There isn't an easy exploit for this PHP vulnerability
> The difference is that PHP has a long history of vulnerabilities while platforms like Java don't.

Some software written in PHP has a long history like that.

PHP itself mostly dont. Tbh runtime itself has fairly stellar track record on security considering it written in C.

SXX··on DeepSeek banned from U.S. federal civilian agencies under new DHS order
CCP is shit and bans tons of stuff, but this is not how it happened:

> Or when Xi told Trump, “no thanks” to buying NVidia cards

US banned sales of high-end compute tech to China for years. Now when they actually catching up on production of their own SSDs, DRAM and compute silicon they no longer need US offers.

SXX··on France's supermarket fridges were vulnerable online for months
The S in loT Stands for Security
SXX··on Show HN: WhatsApp MCP running free on Cloudflare
WhatsApp obviously more encrypted than Telegram since later have no proper E2EE whatsorver by default and also sync all history from server.

Its still preferable to use Signal since now it actually supports numberless registration. Hopefully they will actually fee payable not via credit card at some point.

SXX··on Porn showing choking or incest to be banned in UK from early November
Reddit already hides 18+ content for UK IPs unless you show them your passport.
SXX··on Porn showing choking or incest to be banned in UK from early November
Finally after decades of struggle and hot potatoing between parties UK government found a way to fix the country. /s

I guess they should next ban depiction of hanging government officials on a trees and lamp stands. Otherwise population might get some wrong ideas.

Robin Hood movies shall all be banned for sure.

SXX··on Major ICQ security hole (1998)
CVE-2012-2122: A Tragically Comedic Security Flaw in MySQL

https://www.rapid7.com/blog/post/2012/06/11/cve-2012-2122-a-...

> ... Since the authentication protocol generates a different hash each time this comparison is done, there is a 1 in 256 chance that ANY password would be accepted for authentication. ...

SXX··on Steam Client is now faster than Epic's new vibe coded launcher
I wouldnt mind Epic if their platform wasn't so intentionally anti-consumer. I dont have any issues with Epic other products - I dont play Fortnite, but Unreal was net positive for gamedev and Epic also sponsored a lot of open sourcr software including Godot which is nice of them.

Unfortunately literally everything is wrong with EGS specifically.

Their stance on intentionally not having user reviews because consumers shouldn't have power to react to publisher or developers decisions.

Their giving away games for free and then revoking licenses then removing them from accounts even though it was purely their own fault. They were most successful company ever back then and could certainly eat that loss.

Their shitty account system that certainly got hacked multiple times because it's the only gaming platform where someone constantly trying to access my accounts even though I'm Linux and cybersecurity nerd with random 32-char passwords. They also dont have straightforward way to change account region without trying to deal with their shitty support.

Tim Sweeney decided to make a platform to fuck over gamers and we gamers returned favour.

SXX··on Steam Client is now faster than Epic's new vibe coded launcher
Valve have my trust just by being privately held company that can actually plan for decades ahead instead of try to appease major shareholders or black rock.

It took them 10 years to make Linux a competetive gaming platform.

They invested in VR early and still do a lot for this niche market.

They brought back hanfheld PC from being niche chinese devices to being mainstrean and maintain support for Steam Deck for 5 years.

As game developer I do find 30% cut abysmal, but it's not any worse than consoles and I dont like Epic as a gamer for being awfully anti-consumer. I certainly dont want PC game market to be controlled by chinese Tencent subsidiaries.

SXX··on Gemini 4 Argon
Now when another uninteresting frotier model been released Google can finally start doing what we actually waiting for:

Start preparing Gemma 5 release.

SXX··on GLM-Legal
There are a lot of bad things you can say about China that gonna be true, but it's not well known for running scam call centers - quite opposite.

Authoritorian state with highly controlled internet and financial system isnt exactly a good place for running criminal enterprises.

There just 1.4 billions people in a country and many of them well educated and tech-savvy, so it obvious there just more scammers in total. But I doubt higher percent of population doing scams than average in the world.

SXX··on GLM-Legal
Once chinese models will stop being open we can all stop using them. There is no moat and switching models take 10 seconds.
SXX··on Making big downloads resumable in Firefox
That website reminds me of US Robotics Courier 56K :-)
SXX··on Yandex bot traffic down 99% after data center attack
> hosting in Russia is actually a lot cheaper.

I'd say you never checked Yandex.Cloud pricing. That's just not true - it's not cheaper.

SXX··on Ledger confirms hidden chip in crypto wallet amid $92M theft claims
All the countries have rules about it. Except if your credentials been compromised it can take weeks before you find out that money gone from your account.
Page 1 of 34Next →