HNHacker News
TopNewBestAskShowJobs

Sytten

2,652 karma · joined February 2, 2017

meet.hn/city/ca-Montreal

Building caido.io

Want to chat, email emile [@] caido.io

submissionscomments
Sytten··on Evolving Threat: http2shell is an RCE in Node, Python, and more
Since I checked Rust servers should be fine since the brotli crate is not a binding on the C.
Sytten··on Show HN: Making a smart TV dumb and then smart
What are the best brands / models to buy right now to install webOS?
Sytten··on Canada fast-tracks Pacific oil pipeline to reduce US dependence
The Canadian oil is always 10-20% cheaper right now because it only has one buyer, if anything the price will just track the global market more
Sytten··on Canada fast-tracks Pacific oil pipeline to reduce US dependence
Carney has quite a unique opportunity for massive public spending that would have never been popular in any other case. The US always kept Canada well enough that the economy was "good enough" with declining infrastructure and underinvestment (capital fleeing to better return in the states).

Now that he can claim to have no choice and people are really mad, then he can even force retirement funds to invest massively here through those "nationnaly important projects". If successful that would seriously boost our stagnant productivity and economy.

Sytten··on I could've accessed 17T Microsoft records
Always happy when I see software I built being used to hack cool targets. Very nice finding!
Sytten··on OpenAI halts training of latest models as reports mount of AI agents going rogue
Agreed we should ban the term rogue for agents. This implies a moral compass that is not there. They were directed to find data without guardrails or limits, it is not rogue it is intended.
Sytten··on Uproar in France over award-winning author accused of using AI
This was discussed a lot on the news here. Couple of authors feed their pre AI books to pangram and also got false positive. Maybe it is AI, maybe not. But using AI to accuse someone else of using AI is ironic.
Sytten··on We got admin access to Baseten's production GitHub
They are a great team! You will defacto also use Caido if you add it to your stack
Sytten··on Homebrew 7.0.0
I found that Mise handles all my needs for development and it is scoped so it doesn't try to update Python and break all my virtual env when I install something new /shrug
Sytten··on What Happened to HackerOne?
I am in this space. The reality is that the margins for a Bug Bounty Hunting platform are not good, triage is very expensive specially with all the AI slop that gets submitted now. You can hide it for a long time with VC money, but they need to diversify their product line to continue growing and compete against the AI pentest compagnies (which themselves will also diversify as AI pentest becomes a feature and not the whole product).
Sytten··on Superlogical
I am guessing Ghosty will become closer to Warp.
Sytten··on Cars collect a startling amount of data about you
You sure about that? Visa/Mastercars certainly are selling at least aggregated data if not more.
Sytten··on Europe built sovereign clouds to escape US control. Forgot about the processors
AWS runs a lot of ARM server and they are pushed heavily since they are cheaper and faster. And with Apple running ARM it is just easier to fully transition now.
Sytten··on Canada’s Bill C-22 Is a Repackaged Version of Last Year’s Surveillance Nightmare
If someone from the EFF is reading this, could we get a French translation of that article so I can send it to my MP and share around to friends and family. We need a mass movement on that to block it.
Sytten··on Warp is now open-source
Great terminal, annoying that everytime it updates I have to go back to the settings to disable new AI features or layout changes.
Sytten··on GitHub CLI now collects pseudoanonymous telemetry
You are inferring your own perception based on my comment, no need to be an asshole here. Like I said elsewhere we do both and they serve different purpose. We also make is very clear and easy to disable in the onboarding. I hope you try to build a business sometimes and open up your perspectives that maybe just maybe you don't have all the answers.
Sytten··on GitHub CLI now collects pseudoanonymous telemetry
We do both and they yield different learnings. They are complementary. We also have an issue tracking board with upvotes. I would say to your point that you can't improve what you don't measure.
Sytten··on GitHub CLI now collects pseudoanonymous telemetry
Respectfully I think your argument defeats itself. If you can only speak to your users once every 10-12 months it means your process doesn't scale by definition. Good analytics (not useless vanity metrics) should allow you to spot a problem days after it was launched not wait 3 quarters for a user to air their grievances.
Sytten··on GitHub CLI now collects pseudoanonymous telemetry
That is just poor analytics IMO, if you have a good harness you can definitely tell if a feature is not well designed. You have to optimize for things like number of clicks to perform an operation not time spent in app.
Sytten··on GitHub CLI now collects pseudoanonymous telemetry
I used to believe that it was not necessary until I started building my own startup. If you dont have analytics you are flying blind. You don't know what your users actually care about and how to optimize a successful user journey. The difference between what people tell you when asked directly and how they actually use your software is actually shocking.
Sytten··on Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into APIs
We are in Rust so our options are more limited. Make sense the golang ecosystem is pretty good for that.
Sytten··on Launch HN: Kampala (YC W26) – Reverse-Engineer Apps into APIs
Interesting product (Caido co-founder here). It is very hard to nail auth, probably the most underlooked aspect by end users. We are working on something similar for PoC reproduction of vulnerabilities.

Fingerprinting is also a hard thing to match perfectly, I would be curious to know what your strategy is on that. My experience has been that unless you bundle multiple TLS lib it is almost impossible to do at 100% because none of the lib cover all the TLS extensions.

Sytten··on Microsoft to force updates to Windows 11 25H2 for PCs with older OS versions
Jokes on them I am still running Windows 10 and not planning to move my gaming PC to Windows 11 (hardware not supported).
Sytten··on Grafeo – A fast, lean, embeddable graph database built in Rust
I really wish people would stop using the language as an argument and that commenter would also move on to a more interesting debate.

In your discussion the first comment from an ex kuzu dev made an excellent point that rust for databases in an excellent language to ship faster with confidence while reducing real problems of concurrency and corruption.

At some point it becomes intellectual dishonesty to dismiss a language because of vibes instead of merit.

Sytten··on Grafeo – A fast, lean, embeddable graph database built in Rust
Knowing if it is embeddable or server would be nice in that table
Sytten··on Mouser: An open source alternative to Logi-Plus mouse software
Trademark are always scoped to particular domains it is not universal, if you look up mouser you will see they listed the usage for electronic components, distribution and related. No mention of software. They might fight you since you do have to protect your trademark but in theory you could open a mouser restaurant and trademark that name for food distribution. As long as the customers is able to tell the difference it is fine.
Sytten··on The Cost of Indirection in Rust
Also to note that the inline directive is optional and the compiler can decide to ignore it (even if you put always if I remember)
Sytten··on Tinnitus Is Connected to Sleep
The best thing I did to help with my tinnitus what Cognitive Behavioral Therapy. If you perceive the sound as something dangerous than it bothers you way more.

Like others pointed a bad night sleep definitely increases the perceived sound.

Also the stress in the shoulders doesn't help.

Sytten··on A GitHub Issue Title Compromised 4k Developer Machines
We have been working on an issue triager action [1] with Mastra to try to avoid that problem and scope down the possible tools it can call to just what it needs. Very very likely not perfect but better than running a full claude code unconstrained.

[1] https://github.com/caido/action-issue-triager/

Sytten··on Cancel ChatGPT AI boycott surges after OpenAI pentagon military deal
Unless ~800k users cancel it is still a net positive for them and that is with the current relatively small contract they have. The reality is that money is in B2B.
Page 1 of 21Next →