HNHacker News
TopNewBestAskShowJobs

alpb

7,136 karma · joined October 26, 2011

submissionscomments
alpb··on Dead.Letter (CVE-2026-45185) – How XBOW found an unauthenticated RCE on Exim
Never heard of Exim, I'm just realizing what it is:

> Exim is an open-source Mail Transfer Agent (MTA) designed for Unix-like systems to receive, route, and deliver email.

what's the significance of this? do people use this in production systems?

alpb··on NPR finds "no sign" of Polymarket at its Panama HQ address
this is a good explainer video that talks about why Polymarket maintains a Panama HQ instead of a US one and why it has two different sites (.us vs .com). https://www.youtube.com/watch?v=seNwZhK4UdA
alpb··on Days Without GitHub Incidents
it already is. re-read?
alpb··on Claude Design
This largely appears to be a HTML generator at its core, not necessarily what Figma does with layers/canvases etc. There's no collaborative nature to it either.

It feels like a lightly designed product that moves claude CLI to their backend, generates the HTMLs and renders them in browser on claude.ai website for you. Sure, it accepts your design system as an input from you or imports from your repo, but you could feed the same into claude CLI as well?

I'm curious what exactly it gives besides having claude CLI + prompting it well with your design system + skills.

alpb··on Claude Design
It's rolling out progressively throughout the day.
alpb··on Shall I implement it? No
I see on a daily basis that I prevent Claude Code from running a particular command using PreToolUse hooks, and it proceeds to work around it by writing a bash script with the forbidden command and chmod+x and running it. /facepalm
alpb··on Agent Safehouse – macOS-native sandboxing for local agents
As I understand it, the problem nowadays doesn't seem to be so much that the agent is going to rm -rf / my host, it's more like it's going to connect to a production system that I'm authorized to on my machine or a database tool, and then it's going to run a potentially destructive command. There is a ton of value of running agents against production systems to troubleshoot things, but there are not enough guardrails to prevent destructive actions from the get-go. The solution seems to be specific to each system, and filesystem is just one aspect out of many.
alpb··on Clean-room implementation of Half-Life 2 on the Quake 1 engine
How about the assets?
alpb··on OpenClaw is changing my life
I'm sorry dude but your last post was also hyping up R1 which was a total disaster. Do you mind actually sharing your experience with OpenClaw, such as how are you orchestrating a project? How much does it cost? How do you prompt it? What tasks do you get done? How much does it actually take to execute on those tasks? What is your interaction with the agent?
alpb··on Things Unix can do atomically (2010)
Nobody's saying you should deploy code with this, but symlinks are a very common filesystem locking method.
alpb··on Cloudflare CEO on the Italy fines

    censor from the Internet any sites a shadowy cabal
    of European media elites deemed against their interests
Has he recently gone full conspiracy theorist? (Also what's that cringy chatgpt picture supposed to tell us?) Who is the shadowy cabal of EU elites? If anything EU is purely politicians obedient to USA interests. I'm guessing this is what happens in tech when the tide starts to shift, because tech doesn't have morals, it's all just about money. Start praising the new administration no matter what they do, until they're not popular and start praising the next thing. Looking forward to his back-to-woke pivot in 2 years.
alpb··on A practical guide to converting YAML to JSON safely (with Kubernetes examples)
Is there an actual guide? It seems you've mainly pasted something along the lines of a ChatGPT output to a Github Pages html.
alpb··on A practical guide to converting YAML to JSON safely (with Kubernetes examples)
Have you tried:

    cat file.yaml | yq -ojson
alpb··on Show HN: Use Claude Code to Query 600 GB Indexes over Hacker News, ArXiv, etc.
It's literally the digital nomad heaven. What's dark about it?
alpb··on [dead]
The site says "No signup required!" but then requires signup to actually generate anything. ("Cost 1 credits 0 generations remaining today".) Probably not going to hand out my email for that.
alpb··on How I Left YouTube
Having been at G and also getting denied promo several times consecutively, it's almost always a manager's fault. They're either not bringing the committee feedback to you properly or not representing your work well in that room. Either way it's a sign that they're unable to do better, and you're better off not reporting to the long term.
alpb··on Azure hit by 15 Tbps DDoS attack using 500k IP addresses
Funny enough just got an error trying to reach to the blog

        Proxy Error
        The proxy server received an invalid response from an upstream server.
        The proxy server could not handle the request
        Reason: Error reading from remote server
alpb··on Today is when the Amazon brain drain sent AWS down the spout
Indeed. No disrespect to Justin (great person) or any of the engineers who were sacked but Corey's post here is basically "here's someone who was sacked, and here are several other layoff news". AWS is really big organization. Several orders of magnitude bigger than people who were remote/refused to RTO. Organizations like this survive these brain brains.
alpb··on Helium Browser
Agreed, and my concern is not a "NSA is monitoring my activity" but more along the lines of whether they have enough funding to staff security research and response for this browser.
alpb··on Be careful with Go struct embedding
It's my common code review comment to the beginners to not embed structs. There's rarely anything to be gained by doing so. The only use case I found to be useful is to embed something like:

    type MockHandlers struct {
        UnimplementedHandlers
    }

    func (m MockServer) LoginHandler{ /* ... */ }
where I get to override only a part of a bigger interface at a time and have the embedding take care of the rest by saying panic("unimplemented") to satisfy the interface.
alpb··on Irssi: IRC client in a Docker image
Maintainers had a project where they ran everything in containers. The project had helped docker itself and the ecosystem by allowing some interesting software to be containerized.
alpb··on Irssi: IRC client in a Docker image
I remember using this to collaborate with docker maintainers about 10 years ago now. Good old days.
alpb··on Io_uring, kTLS and Rust for zero syscall HTTPS server
Security reasons. https://news.ycombinator.com/item?id=44632240 There are also other edge cases around cgroups accounting that renders some isolation/throttling mechanisms not fully effective.
alpb··on Build durable workflows with Postgres
As far as I know, Azure Durable Functions doesn't have a server-side proprietary component and it's actually fully open source framework/clients as well. So it's actually not a cloud offering per-se. You can see the full implementations at:

* https://github.com/Azure/durabletask

* https://github.com/microsoft/durabletask-go

alpb··on Build durable workflows with Postgres
I've been following DBOS for a while and I think the model isn't too different than Azure Durable Functions (which uses Azure Queues/Tables under the covers to maintain state). https://learn.microsoft.com/en-us/azure/azure-functions/dura...

Perhaps the only difference is that Azure Durable Functions has more syntactic sugar in C# (instead of DBOS choice being Python) to preserve call results in the persistent storage? Where else do they differ? At the end, all of them seem to be doing what Temporal is doing (which has its own shortcomings and it's also possible to get it wrong if you call a function directly instead of invoking it via an Activity etc)?

alpb··on Google shifts goo.gl policy: Inactive links deactivated, active links preserved
This whole thing has 0 cost to Google to run. They could be nice citizens and continue to provide this service for free, but they chose to not to.
alpb··on Show HN: YUPE – AI-powered app that removes language barriers from restaurants
Have you considered adding realistic screenshots to your website? I'm talking about real pictures –none of that purple background/edited stuff.
alpb··on Ask HN: How did Soham Parekh get so many jobs?
this email? https://x.com/var_epsilon/status/1940492841232584745
alpb··on Gemini CLI
Are there any LLMs that offer ZSH plugins that integrate with command history, previous command outputs, system clipboard etc to assist writing the next command? Stuff like gemini/copilot CLI don't feel particularly useful to me. I'm not gonna type "?? print last 30 lines of this file"
alpb··on Harper – an open-source alternative to Grammarly
Similarly 0 grammatical errors flagged: "My name John. What your name? What day today?"
Page 1 of 34Next →